$ rpki-client -vvf rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft File: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft (raw, json) Hash identifier: UlP+1xoIpU0+eCAhG8H0koime7RJvZa5XM7WKuJPGqA= Subject key identifier: FA:85:F0:3D:9C:62:E3:87:A3:B4:FB:52:41:22:2F:16:E6:89:AB:06 Authority key identifier: BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 Certificate issuer: /CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Certificate serial: 52F5172966A407E2B1AB23A66BBE81A0E76AA9ED Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft Manifest number: 7C Signing time: Sun 02 Aug 2026 14:55:28 +0000 Manifest this update: Sun 02 Aug 2026 14:50:28 +0000 Manifest next update: Mon 03 Aug 2026 18:13:28 +0000 Files and hashes: 1: BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl (hash: 5dFEv5n7yHgtr0mcdLHJfeHQhn/1c2fQb8RftQSSpnA=) 2: 3135372e32302e3137382e302f32342d3234203d3e20313532343138.roa (hash: OpScNhGSGHF9cfh0SvlMC4D5SddDMF64JzbjkAw/z6U=) 3: 3135372e32302e3137382e302f32332d3233203d3e20313532343138.roa (hash: Ci+C8lgdBuoIRcX6sBTuz002jYwNdox6i5sko8xMKfo=) 4: 3135372e32302e3137392e302f32342d3234203d3e20313532343138.roa (hash: OONf1oH6b7/Al0k4fu2OIqf+coPCbCkVYT8Alt0EfK4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f5:17:29:66:a4:07:e2:b1:ab:23:a6:6b:be:81:a0:e7:6a:a9:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1 Validity Not Before: Aug 2 14:50:28 2026 GMT Not After : Aug 3 18:13:28 2026 GMT Subject: CN=FA85F03D9C62E387A3B4FB5241222F16E689AB06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:10:91:31:04:3b:96:e6:b3:97:ff:70:fc:5f: 9c:55:b8:f4:e0:67:a3:47:8f:6e:d9:91:fa:91:43: e9:ca:2d:83:50:d9:e7:4d:32:22:89:3b:79:f7:04: 7d:89:0a:c5:23:be:e6:6e:65:69:70:63:c9:88:fd: d9:1b:72:da:ba:3b:d0:e3:7f:d4:84:41:ff:59:f8: 05:84:db:f1:7c:71:04:5f:04:82:f7:56:1f:b4:2a: e2:eb:d4:1c:e0:2c:e6:25:e0:2b:90:7d:72:bb:7c: d5:a1:b7:4d:9f:e9:36:6d:51:d8:8f:4a:1d:00:f4: b4:24:ea:c7:1f:0e:11:07:f9:c7:b0:d5:78:9c:a0: c3:0e:c5:88:72:8c:e0:d5:13:21:76:b9:1f:b5:09: 91:7b:7f:c1:2b:d2:89:e0:0c:b8:8a:5e:52:7f:e7: 94:cf:b6:aa:db:cc:32:c8:86:aa:b6:57:b4:55:f5: ce:04:95:c4:0b:09:ca:52:b8:34:5e:38:cf:ea:8a: a2:a2:3c:b4:08:cb:05:00:ce:51:93:61:e3:12:6c: 71:31:1e:f7:bf:0a:1b:14:ed:91:94:80:18:76:63: 35:cf:a1:a0:eb:0a:fc:ed:30:30:7d:ca:68:83:4f: d8:73:01:e7:b9:24:4e:10:ab:f2:7b:f4:a8:b4:65: 2a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:85:F0:3D:9C:62:E3:87:A3:B4:FB:52:41:22:2F:16:E6:89:AB:06 X509v3 Authority Key Identifier: keyid:BE:C8:2A:A3:BB:0D:1F:AD:AA:91:86:65:F5:DF:04:55:B7:61:D7:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b36066e8-8e19-4de7-947b-94ee3cd09f85/0/BEC82AA3BB0D1FADAA918665F5DF0455B761D7A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:01:47:e3:0b:60:08:89:ba:5b:3c:f3:47:2a:31:ad:cb:39: 1f:2d:77:79:2c:3e:76:4c:08:20:15:f4:87:01:84:53:6b:3f: 6d:24:7a:5c:1a:34:fc:8f:a7:94:18:6c:c2:81:d0:d3:ec:bc: c8:91:0c:52:c8:d5:9d:70:00:d3:b2:94:dd:a0:8a:9a:08:3b: df:31:f9:d2:ec:3e:6a:c7:91:17:b4:b6:56:b0:80:10:95:de: ea:d8:3d:40:8a:11:e3:e9:81:3c:1c:65:3f:0b:b6:ac:5d:b7: 1d:03:cc:75:6d:f3:3a:27:d3:61:19:77:84:87:ba:c2:25:f7: 52:f5:38:d8:41:bb:bb:c5:a6:84:cb:db:55:46:0a:52:5b:4d: 82:ab:3c:b6:c5:0f:b4:93:ae:4c:28:dd:d9:9d:cd:4d:a2:e2: 8f:2e:d4:0b:47:77:ee:f9:3f:91:66:b6:13:4a:dc:33:e6:ec: 3f:08:c6:55:e0:e2:68:d8:69:f7:ff:bd:29:1c:0d:7d:8b:4e: 30:03:3f:88:58:56:49:52:1f:b5:01:92:56:ab:41:ad:56:27: 5e:68:77:80:95:6d:32:da:91:d5:11:6c:38:e2:ec:1f:dc:1c: b6:79:15:97:c5:af:64:7f:23:dc:31:09:66:69:70:88:56:3c: 8a:0e:a1:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvUXKWakB+KxqyOma76BoOdqqe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0NTVC NzYxRDdBMTAeFw0yNjA4MDIxNDUwMjhaFw0yNjA4MDMxODEzMjhaMDMxMTAvBgNV BAMTKEZBODVGMDNEOUM2MkUzODdBM0I0RkI1MjQxMjIyRjE2RTY4OUFCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8EJExBDuW5rOX/3D8X5xVuPTg Z6NHj27ZkfqRQ+nKLYNQ2edNMiKJO3n3BH2JCsUjvuZuZWlwY8mI/dkbctq6O9Dj f9SEQf9Z+AWE2/F8cQRfBIL3Vh+0KuLr1BzgLOYl4CuQfXK7fNWht02f6TZtUdiP Sh0A9LQk6scfDhEH+cew1XicoMMOxYhyjODVEyF2uR+1CZF7f8Er0ongDLiKXlJ/ 55TPtqrbzDLIhqq2V7RV9c4ElcQLCcpSuDReOM/qiqKiPLQIywUAzlGTYeMSbHEx Hve/ChsU7ZGUgBh2YzXPoaDrCvztMDB9ymiDT9hzAee5JE4Qq/J79Ki0ZSrNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+oXwPZxi44ejtPtSQSIvFuaJqwYwHwYDVR0j BBgwFoAUvsgqo7sNH62qkYZl9d8EVbdh16EwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjM2MDY2ZTgtOGUxOS00ZGU3LTk0N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNC QjBEMUZBREFBOTE4NjY1RjVERjA0NTVCNzYxRDdBMS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUM4MkFBM0JCMEQxRkFEQUE5MTg2NjVGNURGMDQ1NUI3NjFE N0ExLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjM2MDY2ZTgtOGUxOS00ZGU3LTk0 N2ItOTRlZTNjZDA5Zjg1LzAvQkVDODJBQTNCQjBEMUZBREFBOTE4NjY1RjVERjA0 NTVCNzYxRDdBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcBR+MLYAiJuls880cqMa3LOR8td3ksPnZM CCAV9IcBhFNrP20kelwaNPyPp5QYbMKB0NPsvMiRDFLI1Z1wANOylN2gipoIO98x +dLsPmrHkRe0tlawgBCV3urYPUCKEePpgTwcZT8Ltqxdtx0DzHVt8zon02EZd4SH usIl91L1ONhBu7vFpoTL21VGClJbTYKrPLbFD7STrkwo3dmdzU2i4o8u1AtHd+75 P5FmthNK3DPm7D8IxlXg4mjYaff/vSkcDX2LTjADP4hYVklSH7UBklarQa1WJ15o d4CVbTLakdURbDji7B/cHLZ5FZfFr2R/I9wxCWZpcIhWPIoOoVs= -----END CERTIFICATE-----Generated at Sun Aug 2 20:33:44 2026 by rpki-client