$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: LeI/z828nTPO31bd80o4/7GX4EJMuW37jUq4R0s35DE= Subject key identifier: 8D:1D:FC:C5:46:4E:0C:A8:FB:3B:7E:49:01:D2:D5:E7:5D:05:12:E2 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 696D6A4143C6DAAF597D8D496F3509194D67F737 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0566 Signing time: Sat 18 Apr 2026 11:31:18 +0000 Manifest this update: Sat 18 Apr 2026 11:26:18 +0000 Manifest next update: Tue 21 Apr 2026 20:49:18 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 2: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 3: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 4: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: 3SXAucPFdarbEJE4Bpl00wwtFuSE1FN/25h0EgLxqi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:49:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6d:6a:41:43:c6:da:af:59:7d:8d:49:6f:35:09:19:4d:67:f7:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Apr 18 11:26:18 2026 GMT Not After : Apr 21 20:49:18 2026 GMT Subject: CN=8D1DFCC5464E0CA8FB3B7E4901D2D5E75D0512E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5d:fa:b4:b0:c5:cf:f1:70:a0:62:6a:8a:66: 20:03:02:84:61:2f:5e:ac:f0:4b:2e:80:bf:0a:a1: de:ff:66:75:e0:90:a0:7b:01:5e:71:1d:c3:a3:ef: ce:fd:45:42:a7:b3:f1:55:70:d4:d8:01:a5:da:03: 8d:67:25:a8:33:0c:48:a8:8f:c7:09:f5:c6:1c:c9: 7b:37:f1:3e:01:48:9e:2c:ec:cf:47:3c:c1:9a:c1: b3:76:91:f1:17:dc:b6:df:e4:ca:cf:10:36:14:5c: f6:25:cc:fe:35:67:77:72:51:8e:81:a4:21:8b:07: 19:be:c3:a5:75:09:27:fc:e6:2d:63:77:0d:2c:15: fb:de:7f:c7:0d:d8:73:7d:30:58:7b:25:37:af:4c: b5:43:36:0d:6f:d8:a6:e4:59:25:35:99:1b:66:2c: bd:3b:f3:3c:7d:7c:1f:f8:a1:78:ab:66:a9:0e:fa: 3c:5a:3d:54:85:47:f2:11:3a:fc:31:6f:1d:12:41: d8:5e:17:e1:14:d7:63:62:42:4b:55:ef:e2:69:0c: 85:c1:7a:41:47:52:ba:72:fd:07:5b:b1:9b:8a:0a: 81:43:22:fa:5c:a2:ee:66:f3:5d:53:0d:a9:7b:16: 2a:35:0f:9b:30:3e:4e:fd:86:46:1c:6f:db:c3:ce: 3d:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1D:FC:C5:46:4E:0C:A8:FB:3B:7E:49:01:D2:D5:E7:5D:05:12:E2 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:cd:67:61:90:3b:4b:c2:d6:2f:02:74:5e:78:a7:91:e8:b2: 15:29:7a:30:03:2c:db:45:77:62:e5:dc:ed:66:ff:b0:42:c3: 40:ad:cb:bd:64:04:a5:e0:3c:a4:f6:cb:38:b1:76:9b:08:68: 43:a7:a6:c0:d2:cf:fb:d8:fc:dd:6e:67:80:08:de:e6:e6:e4: 3b:68:b0:34:05:c1:70:1e:8b:ed:71:61:38:77:66:59:39:df: 62:32:87:16:8b:75:cb:37:dd:3c:c9:c0:ae:ce:36:7e:2f:c9: 75:11:79:3d:83:ac:79:eb:10:a1:e6:c4:42:1f:c3:ad:98:38: c1:f4:f3:a5:e9:06:b6:0e:8d:8d:23:a3:78:1c:07:a7:40:e8: df:59:e8:95:f7:66:25:2d:98:f7:cf:89:0d:9f:a7:82:df:fe: f6:14:1a:a8:53:8c:64:d6:2c:7d:c5:aa:89:91:92:be:36:e0: c5:33:3a:00:b5:ec:40:2e:df:6b:26:e2:53:99:53:06:4d:c7: 7b:63:f0:e3:ca:0d:55:0b:12:0b:c5:82:ca:c1:3c:5f:12:eb: 33:fe:3f:d4:a7:e9:cc:52:92:c7:27:40:33:17:e1:cc:fb:72: ed:b0:2f:99:c8:26:22:dc:8b:69:48:fc:7a:43:2b:64:e7:96: 42:d1:d1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaW1qQUPG2q9ZfY1JbzUJGU1n9zcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNjA0MTgxMTI2MThaFw0yNjA0MjEyMDQ5MThaMDMxMTAvBgNV BAMTKDhEMURGQ0M1NDY0RTBDQThGQjNCN0U0OTAxRDJENUU3NUQwNTEyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXfq0sMXP8XCgYmqKZiADAoRh L16s8EsugL8Kod7/ZnXgkKB7AV5xHcOj7879RUKns/FVcNTYAaXaA41nJagzDEio j8cJ9cYcyXs38T4BSJ4s7M9HPMGawbN2kfEX3Lbf5MrPEDYUXPYlzP41Z3dyUY6B pCGLBxm+w6V1CSf85i1jdw0sFfvef8cN2HN9MFh7JTevTLVDNg1v2KbkWSU1mRtm LL078zx9fB/4oXirZqkO+jxaPVSFR/IROvwxbx0SQdheF+EU12NiQktV7+JpDIXB ekFHUrpy/QdbsZuKCoFDIvpcou5m811TDal7Fio1D5swPk79hkYcb9vDzj3lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjR38xUZODKj7O35JAdLV510FEuIwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN3NZ2GQO0vC1i8CdF54p5HoshUpejADLNtF d2Ll3O1m/7BCw0Cty71kBKXgPKT2yzixdpsIaEOnpsDSz/vY/N1uZ4AI3ubm5Dto sDQFwXAei+1xYTh3Zlk532IyhxaLdcs33TzJwK7ONn4vyXUReT2DrHnrEKHmxEIf w62YOMH086XpBrYOjY0jo3gcB6dA6N9Z6JX3ZiUtmPfPiQ2fp4Lf/vYUGqhTjGTW LH3FqomRkr424MUzOgC17EAu32sm4lOZUwZNx3tj8OPKDVULEgvFgsrBPF8S6zP+ P9Sn6cxSkscnQDMX4cz7cu2wL5nIJiLci2lI/HpDK2TnlkLR0Zc= -----END CERTIFICATE-----Generated at Sun Apr 19 14:22:54 2026 by rpki-client