$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft (raw, json) Hash identifier: 585BPype8i4ODFQ7Xl3CQuWpslIUSB1CXkRORDYBZMU= Subject key identifier: 8B:CD:09:0E:B0:04:EC:3E:50:1F:A9:80:CC:DA:B4:58:17:7E:85:6F Authority key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 Certificate issuer: /CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Certificate serial: 10276FD53EFB72D54382F47176E32602C66317D5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 14:19:10 +0000 Manifest this update: Thu 18 Jun 2026 14:14:10 +0000 Manifest next update: Fri 19 Jun 2026 17:01:10 +0000 Files and hashes: 1: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl (hash: O3IzSdRN+qD5fJwKorSQ/ZvN4aOKTn0wi0p5SnZ25/s=) 2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: Ss8Z74NcLd0rpIK/JHzU1301o8kGJWxsqzL+GJXa3z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:27:6f:d5:3e:fb:72:d5:43:82:f4:71:76:e3:26:02:c6:63:17:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Validity Not Before: Jun 18 14:14:10 2026 GMT Not After : Jun 19 17:01:10 2026 GMT Subject: CN=8BCD090EB004EC3E501FA980CCDAB458177E856F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:4c:10:a4:dd:41:cb:5f:ef:8e:b3:98:4f:39: 21:18:76:8b:2b:35:6f:c7:7e:ff:4b:db:91:92:b8: 7f:ef:d3:72:4e:5e:a9:7d:09:af:b0:e6:3c:e6:57: d6:87:e5:b4:36:44:62:67:54:4f:d9:6c:35:e9:96: 3c:9a:f1:b5:46:19:08:68:a5:75:79:c6:4b:13:bb: dc:27:03:d0:57:16:87:35:e2:eb:b0:c3:8f:1c:58: 21:15:24:6b:c2:ad:9d:f2:fe:87:75:4b:9e:a3:79: 06:59:cb:da:2a:17:9b:81:16:3c:cc:80:65:ff:91: 1b:28:b4:af:5c:07:3f:a1:8f:3b:dc:c9:f6:ba:9f: 0c:21:52:40:60:37:7d:08:ff:fc:d9:ae:6e:fe:bb: b9:f7:dc:c0:d9:1d:98:d3:c6:ae:8a:8a:41:af:d0: 80:b2:bd:b3:96:3b:a0:bf:eb:ac:13:72:2e:ca:67: 60:bd:ff:79:09:f4:fe:b5:80:2f:cf:1f:7d:b3:98: fd:a3:9c:98:ba:71:3a:59:d1:06:bd:52:21:0e:a0: 71:6b:02:a9:14:e6:bb:fc:e2:4d:8f:48:86:67:27: e3:70:a3:22:46:57:99:3d:b8:b6:a2:62:e1:98:bb: 4b:40:5a:2f:9e:99:83:d0:b2:15:77:ba:8b:24:58: 84:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:CD:09:0E:B0:04:EC:3E:50:1F:A9:80:CC:DA:B4:58:17:7E:85:6F X509v3 Authority Key Identifier: keyid:BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cc:af:97:48:cf:fe:fb:9c:5d:8b:01:9b:ac:26:00:98:49: 3f:a9:3c:27:c9:31:ac:13:76:1f:24:02:27:d8:cd:88:c4:2c: 79:43:68:e9:cc:0c:a6:0c:43:c5:71:9d:d5:21:b2:c0:83:d9: 4d:0e:35:1a:f2:ff:ad:c6:f5:58:ed:ed:9b:9a:e2:59:5e:a5: a2:80:ef:f5:a0:56:21:d9:76:65:e8:9b:7e:77:40:e2:b3:10: 11:b7:e4:80:cb:cc:e9:46:1b:22:f7:aa:f9:fb:2a:48:6b:ea: 18:38:a6:8b:ba:f6:d3:7c:8a:90:f1:05:28:42:10:f7:19:63: c6:93:0f:2e:a2:0d:94:b7:bb:96:30:5b:2f:27:1c:6f:fc:9a: 56:c6:6c:03:90:2c:94:29:7f:09:d9:81:e3:72:57:bb:23:a5: 10:15:f1:ff:e5:07:8a:3c:38:e8:97:08:61:08:c7:45:21:75: 4e:b7:43:79:10:fd:aa:34:8c:03:0b:dc:d0:15:38:5b:76:0e: 2a:6b:86:44:bd:af:b4:65:22:62:89:2a:4d:64:f1:37:ce:9a: c1:3d:c0:bc:49:1b:8a:88:47:41:ba:7c:ca:d0:e5:e2:cc:43: 45:af:f5:6d:ae:a2:34:db:9a:76:de:42:5f:eb:b4:d1:de:bb: cb:ed:a2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUECdv1T77ctVDgvRxduMmAsZjF9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFC NERGMDc0NTAeFw0yNjA2MTgxNDE0MTBaFw0yNjA2MTkxNzAxMTBaMDMxMTAvBgNV BAMTKDhCQ0QwOTBFQjAwNEVDM0U1MDFGQTk4MENDREFCNDU4MTc3RTg1NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqTBCk3UHLX++Os5hPOSEYdosr NW/Hfv9L25GSuH/v03JOXql9Ca+w5jzmV9aH5bQ2RGJnVE/ZbDXpljya8bVGGQho pXV5xksTu9wnA9BXFoc14uuww48cWCEVJGvCrZ3y/od1S56jeQZZy9oqF5uBFjzM gGX/kRsotK9cBz+hjzvcyfa6nwwhUkBgN30I//zZrm7+u7n33MDZHZjTxq6KikGv 0ICyvbOWO6C/66wTci7KZ2C9/3kJ9P61gC/PH32zmP2jnJi6cTpZ0Qa9UiEOoHFr AqkU5rv84k2PSIZnJ+NwoyJGV5k9uLaiYuGYu0tAWi+emYPQshV3uoskWIS1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi80JDrAE7D5QH6mAzNq0WBd+hW8wHwYDVR0j BBgwFoAUvrYdsc5HENKRwbMgxOXx6rTfB0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTI4MTliYTktNWY0NC00MTI1LThiOGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFD RTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFCNERGMDc0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUI2MURCMUNFNDcxMEQyOTFDMUIzMjBDNEU1RjFFQUI0REYw NzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYx RUFCNERGMDc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjMr5dIz/77nF2LAZusJgCYST+pPCfJMawT dh8kAifYzYjELHlDaOnMDKYMQ8VxndUhssCD2U0ONRry/63G9Vjt7Zua4llepaKA 7/WgViHZdmXom353QOKzEBG35IDLzOlGGyL3qvn7Kkhr6hg4pou69tN8ipDxBShC EPcZY8aTDy6iDZS3u5YwWy8nHG/8mlbGbAOQLJQpfwnZgeNyV7sjpRAV8f/lB4o8 OOiXCGEIx0UhdU63Q3kQ/ao0jAML3NAVOFt2DiprhkS9r7RlImKJKk1k8TfOmsE9 wLxJG4qIR0G6fMrQ5eLMQ0Wv9W2uojTbmnbeQl/rtNHeu8vtojc= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:58 2026 by rpki-client