$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft (raw, json) Hash identifier: 86B9/UgFvBWrexUjGC8U6y1zZvY+Eht7Vx+ZbSBrxNk= Subject key identifier: 9E:56:6C:EA:45:10:14:65:35:24:9E:45:43:E6:ED:19:7F:B3:49:87 Authority key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 Certificate issuer: /CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Certificate serial: 3E9847FAE368B8512B1B391B3B8E47F437006A2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 00:43:51 +0000 Manifest this update: Wed 17 Jun 2026 00:38:51 +0000 Manifest next update: Thu 18 Jun 2026 02:23:51 +0000 Files and hashes: 1: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl (hash: Zpt1JOlTLft+qH8fpi5001PiFqcQgjdDA31/XtQNzDs=) 2: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: Ss8Z74NcLd0rpIK/JHzU1301o8kGJWxsqzL+GJXa3z0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 02:23:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:98:47:fa:e3:68:b8:51:2b:1b:39:1b:3b:8e:47:f4:37:00:6a:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Validity Not Before: Jun 17 00:38:51 2026 GMT Not After : Jun 18 02:23:51 2026 GMT Subject: CN=9E566CEA4510146535249E4543E6ED197FB34987 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:b0:f1:f6:f2:46:67:0f:83:b0:e1:24:1c:37: c2:e5:a8:b8:ed:f7:37:83:a0:37:47:6d:fb:c3:d8: f1:f8:a6:d8:63:61:e1:59:98:83:16:40:b7:09:ef: 74:db:46:cc:ea:35:18:b5:85:11:28:f1:5b:b9:36: e9:61:3e:af:0d:bb:c2:84:82:ca:1c:b1:89:14:1d: 5d:d2:fa:9e:76:05:52:5a:2c:60:8b:e9:fe:24:e2: 0f:ec:98:a7:86:3a:af:89:f7:ce:17:52:11:db:fd: 05:ff:45:56:2a:ae:4e:1b:7d:b7:2c:99:e8:5c:9a: 84:4e:af:0a:80:01:d5:b5:66:8f:e3:79:fa:03:48: e3:64:92:6a:2c:47:8d:4e:65:ae:e8:86:00:4b:23: a8:28:14:7d:bb:73:11:62:4d:58:c3:c4:a3:73:69: 85:0b:3c:12:00:9d:c8:c6:eb:0d:54:c6:09:f0:d3: 76:3a:c5:3c:31:6d:49:62:b7:c3:e5:f5:4a:7c:32: a3:cd:52:43:ec:fe:5c:05:ec:a3:56:32:7f:a2:56: c6:c4:b9:f4:31:d6:de:c6:30:99:86:f4:55:54:09: ca:f9:4f:95:bb:c2:6b:ff:c7:fe:02:e7:ff:d0:1e: d1:41:35:41:b4:cb:51:76:52:f3:82:e5:87:bb:77: be:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:56:6C:EA:45:10:14:65:35:24:9E:45:43:E6:ED:19:7F:B3:49:87 X509v3 Authority Key Identifier: keyid:BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:d9:fc:1f:ca:cf:3d:69:b3:e3:df:c4:14:5d:6b:7b:79:d4: 65:90:53:d1:5f:87:95:d4:07:03:96:be:16:c6:4e:58:22:09: 97:75:e5:e8:de:d0:fe:a0:91:f0:92:85:37:1e:1c:09:34:1e: 59:cf:ca:2e:1f:e3:09:a6:96:f3:bd:f7:b8:11:aa:39:6a:66: 86:00:a4:a8:f0:f9:f5:62:f0:99:58:1d:e3:34:9a:10:ec:ea: 45:a7:cd:0c:5c:df:1e:eb:04:1a:8f:f0:59:9f:2d:f0:c5:f2: 60:35:9a:14:87:e0:ca:2f:ae:3a:a1:df:36:da:16:9c:0f:b1: c2:a0:c2:2d:dc:e6:36:78:bd:b8:ce:8c:55:92:29:8d:46:56: 08:eb:a4:43:d4:5f:c5:b5:c2:21:23:54:0d:1e:91:3f:3b:f7: cd:9b:14:92:3c:c5:12:9f:8f:19:8b:ed:5b:0e:f8:6d:18:71: b6:93:09:1c:a6:cb:ac:f6:1c:ff:3a:41:f5:86:24:bf:1e:b1: c9:b4:ae:4d:a3:ce:cd:5a:53:d3:7f:ba:33:68:f8:42:c3:db: e3:65:de:50:eb:fd:2c:a4:30:48:72:c5:b9:a2:7c:cf:e1:8c: f3:2e:dc:02:9f:33:7a:df:a1:57:e3:c4:31:17:93:ec:27:61: ad:01:44:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPphH+uNouFErGzkbO45H9DcAai8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFC NERGMDc0NTAeFw0yNjA2MTcwMDM4NTFaFw0yNjA2MTgwMjIzNTFaMDMxMTAvBgNV BAMTKDlFNTY2Q0VBNDUxMDE0NjUzNTI0OUU0NTQzRTZFRDE5N0ZCMzQ5ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdsPH28kZnD4Ow4SQcN8LlqLjt 9zeDoDdHbfvD2PH4pthjYeFZmIMWQLcJ73TbRszqNRi1hREo8Vu5NulhPq8Nu8KE gsocsYkUHV3S+p52BVJaLGCL6f4k4g/smKeGOq+J984XUhHb/QX/RVYqrk4bfbcs mehcmoROrwqAAdW1Zo/jefoDSONkkmosR41OZa7ohgBLI6goFH27cxFiTVjDxKNz aYULPBIAncjG6w1Uxgnw03Y6xTwxbUlit8Pl9Up8MqPNUkPs/lwF7KNWMn+iVsbE ufQx1t7GMJmG9FVUCcr5T5W7wmv/x/4C5//QHtFBNUG0y1F2UvOC5Ye7d74hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnlZs6kUQFGU1JJ5FQ+btGX+zSYcwHwYDVR0j BBgwFoAUvrYdsc5HENKRwbMgxOXx6rTfB0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTI4MTliYTktNWY0NC00MTI1LThiOGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFD RTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFCNERGMDc0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUI2MURCMUNFNDcxMEQyOTFDMUIzMjBDNEU1RjFFQUI0REYw NzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYx RUFCNERGMDc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrZ/B/Kzz1ps+PfxBRda3t51GWQU9Ffh5XU BwOWvhbGTlgiCZd15eje0P6gkfCShTceHAk0HlnPyi4f4wmmlvO997gRqjlqZoYA pKjw+fVi8JlYHeM0mhDs6kWnzQxc3x7rBBqP8FmfLfDF8mA1mhSH4Movrjqh3zba FpwPscKgwi3c5jZ4vbjOjFWSKY1GVgjrpEPUX8W1wiEjVA0ekT87982bFJI8xRKf jxmL7VsO+G0YcbaTCRymy6z2HP86QfWGJL8escm0rk2jzs1aU9N/ujNo+ELD2+Nl 3lDr/SykMEhyxbmifM/hjPMu3AKfM3rfoVfjxDEXk+wnYa0BRAU= -----END CERTIFICATE-----Generated at Wed Jun 17 10:54:44 2026 by rpki-client