$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft (raw, json) Hash identifier: FJypRutJndvI761IBGllwjuhgr+UJytms1sDCjqC+wY= Subject key identifier: DA:42:13:A7:43:D9:EA:F4:8D:BF:A5:BF:42:BF:BF:9C:50:00:68:BA Authority key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 Certificate issuer: /CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Certificate serial: 5DED030A6394F602BDB1E6DA39D76CF12550E4E9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft Manifest number: F5 Signing time: Tue 03 Nov 2026 07:01:51 +0000 Manifest this update: Tue 03 Nov 2026 06:56:51 +0000 Manifest next update: Wed 04 Nov 2026 10:15:51 +0000 Files and hashes: 1: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: Ss8Z74NcLd0rpIK/JHzU1301o8kGJWxsqzL+GJXa3z0=) 2: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl (hash: IYFJ2GVB41IrepP2uWIXhgJKhxF1aDlIl/uqYaBsXsg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:15:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ed:03:0a:63:94:f6:02:bd:b1:e6:da:39:d7:6c:f1:25:50:e4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Validity Not Before: Nov 3 06:56:51 2026 GMT Not After : Nov 4 10:15:51 2026 GMT Subject: CN=DA4213A743D9EAF48DBFA5BF42BFBF9C500068BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:5a:6c:6b:c4:ac:fe:25:b3:94:ee:83:60:bd: b9:4c:b9:dd:b4:7c:d3:04:44:8c:46:45:55:ea:b4: 35:7c:a6:60:a8:e9:ff:1b:9f:34:d3:c1:5f:84:63: 80:d2:a4:8b:f1:b9:8a:57:e6:e3:e2:33:ba:e7:c5: 84:c3:d7:4e:a9:dc:eb:a4:88:9b:b9:cb:e8:ba:ae: 6c:e5:3c:c6:bf:c6:4c:86:f4:0a:54:2c:02:b0:db: c9:9b:79:0f:d1:e3:36:6d:ba:6e:c9:da:99:fc:24: 85:a4:74:22:d1:6d:5c:b4:03:ee:ae:fb:6f:bf:44: 38:8f:19:2f:b7:81:dd:40:d8:f3:49:a3:f1:38:f0: 22:be:d7:33:1c:08:2d:28:12:e8:e5:1b:29:cc:cc: 11:b3:f9:21:a6:1f:95:d3:e7:df:0b:76:60:dc:78: 63:9b:31:2f:b2:ed:5a:12:19:d4:c5:f2:1d:a0:1b: 93:48:34:3c:5a:82:4a:c5:56:f2:09:b1:f9:91:b7: b1:e9:00:19:aa:1f:fc:93:f3:8a:b7:d9:f2:c2:86: 33:47:e5:d8:91:2f:43:86:68:4a:46:c6:7a:73:35: 6e:d8:07:42:bf:4b:43:22:78:b2:1e:b2:3b:c0:ce: 33:74:d2:33:e0:47:4d:2b:4b:57:69:38:ab:28:5d: 1a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:42:13:A7:43:D9:EA:F4:8D:BF:A5:BF:42:BF:BF:9C:50:00:68:BA X509v3 Authority Key Identifier: keyid:BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:4a:c1:82:ad:29:95:2a:f2:5b:44:9a:fd:73:eb:10:9b:7c: 79:e8:90:e3:b4:e9:d6:df:36:63:ea:ae:4e:0a:f9:fd:f6:fa: bf:6e:26:5f:2e:6a:d4:be:30:e9:ee:72:ef:9f:a5:a5:00:f6: c6:10:0c:a0:ea:8b:b5:da:b4:d0:b5:3e:f4:4a:69:a8:87:e3: 49:59:0c:8c:ac:9e:90:72:ce:2f:dd:d7:e7:b4:61:ef:35:3a: 29:3b:a1:02:a0:ce:dc:0e:a0:d8:1b:10:fe:0d:fc:4b:5d:1c: 7a:dc:af:0e:8a:27:5d:60:fb:f3:ac:0d:33:20:a4:a5:dc:4d: 9e:67:5d:7c:8c:b8:ce:a0:82:26:22:6e:61:f0:75:b7:f9:e3: 1e:5f:4d:ca:fa:66:c1:7f:d6:8e:6e:88:2d:a5:9d:93:c0:30: 95:ea:d7:f2:3d:6f:65:54:d1:1b:f7:a0:c4:e7:64:09:dd:1e: 7f:7d:06:6f:61:46:7a:ef:a9:02:43:f3:ec:7f:36:82:ee:2d: 59:1a:62:fc:8f:a6:56:5b:4d:2e:a0:a3:11:11:77:da:e7:b6: 20:91:e8:55:98:2e:38:d8:0d:e1:bb:c0:d9:17:f7:bd:73:0d: 52:26:48:37:3b:0b:2b:f0:2c:7d:44:55:25:1d:64:1a:93:66: a8:9a:72:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXe0DCmOU9gK9sebaOdds8SVQ5OkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFC NERGMDc0NTAeFw0yNjExMDMwNjU2NTFaFw0yNjExMDQxMDE1NTFaMDMxMTAvBgNV BAMTKERBNDIxM0E3NDNEOUVBRjQ4REJGQTVCRjQyQkZCRjlDNTAwMDY4QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYWmxrxKz+JbOU7oNgvblMud20 fNMERIxGRVXqtDV8pmCo6f8bnzTTwV+EY4DSpIvxuYpX5uPiM7rnxYTD106p3Ouk iJu5y+i6rmzlPMa/xkyG9ApULAKw28mbeQ/R4zZtum7J2pn8JIWkdCLRbVy0A+6u +2+/RDiPGS+3gd1A2PNJo/E48CK+1zMcCC0oEujlGynMzBGz+SGmH5XT598LdmDc eGObMS+y7VoSGdTF8h2gG5NINDxagkrFVvIJsfmRt7HpABmqH/yT84q32fLChjNH 5diRL0OGaEpGxnpzNW7YB0K/S0MieLIesjvAzjN00jPgR00rS1dpOKsoXRrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2kITp0PZ6vSNv6W/Qr+/nFAAaLowHwYDVR0j BBgwFoAUvrYdsc5HENKRwbMgxOXx6rTfB0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTI4MTliYTktNWY0NC00MTI1LThiOGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFD RTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFCNERGMDc0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUI2MURCMUNFNDcxMEQyOTFDMUIzMjBDNEU1RjFFQUI0REYw NzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYx RUFCNERGMDc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtKwYKtKZUq8ltEmv1z6xCbfHnokOO06dbf NmPqrk4K+f32+r9uJl8uatS+MOnucu+fpaUA9sYQDKDqi7XatNC1PvRKaaiH40lZ DIysnpByzi/d1+e0Ye81Oik7oQKgztwOoNgbEP4N/EtdHHrcrw6KJ11g+/OsDTMg pKXcTZ5nXXyMuM6ggiYibmHwdbf54x5fTcr6ZsF/1o5uiC2lnZPAMJXq1/I9b2VU 0Rv3oMTnZAndHn99Bm9hRnrvqQJD8+x/NoLuLVkaYvyPplZbTS6goxERd9rntiCR 6FWYLjjYDeG7wNkX971zDVImSDc7CyvwLH1EVSUdZBqTZqiachQ= -----END CERTIFICATE-----Generated at Tue Nov 3 19:44:15 2026 by rpki-client