$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: hRdpJf7YorxqpOskswkltOzIL2mGYVzWgWdcLy/rRGk= Subject key identifier: 69:C1:B4:D7:76:BA:37:5C:7E:56:9C:BB:16:5C:ED:DC:5F:72:F6:96 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 5E489060A6C2B42CB614EDC14588FD5F425DB329 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0516 Signing time: Sun 19 Oct 2025 20:11:10 +0000 Manifest this update: Sun 19 Oct 2025 20:06:10 +0000 Manifest next update: Thu 23 Oct 2025 02:07:10 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: Jwp0LUcujYKXzSwO6x8Iir9DGJxUkXnYH0VBSGOrzt0=) 3: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:07:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:48:90:60:a6:c2:b4:2c:b6:14:ed:c1:45:88:fd:5f:42:5d:b3:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Oct 19 20:06:10 2025 GMT Not After : Oct 23 02:07:10 2025 GMT Subject: CN=69C1B4D776BA375C7E569CBB165CEDDC5F72F696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:4e:32:f4:66:42:ff:4e:77:b5:9e:95:1b:d2: 8f:4a:57:b8:be:62:41:49:5c:93:f1:91:ec:f8:f7: 87:3a:ac:d0:12:9a:8d:bb:a9:f4:5d:81:5d:1d:33: 3a:95:55:3d:1b:bc:fa:17:78:b1:4f:25:67:cd:98: e0:88:fe:d8:28:f6:46:3a:75:18:ce:12:71:34:63: 01:66:f6:dc:e7:39:c4:af:bc:dc:be:7f:5a:81:4f: d3:2a:9e:8f:44:e7:f8:ed:a5:a8:4f:54:04:01:a3: 97:3d:5d:52:47:e1:83:ad:00:8c:18:57:19:99:db: 42:05:dd:a9:78:19:92:34:2d:cc:da:ad:ed:f0:1f: 58:e7:32:8d:42:30:8e:96:9e:f9:75:a3:d1:88:c0: 76:c6:e5:77:1e:00:78:f5:2d:d0:f6:9c:48:e9:ad: 84:d3:c8:71:8f:80:3c:8f:72:ea:2b:c3:57:0a:a1: 87:c4:9e:5b:64:18:f5:28:ba:d9:5e:87:12:4a:07: ee:33:e4:7f:18:4e:17:96:55:31:ab:08:4d:08:fb: 36:fc:9e:bb:f7:6f:87:2f:6c:18:6f:53:97:bd:9e: 02:60:d5:5c:e5:e3:18:66:1e:98:50:56:cf:46:08: cf:fb:55:6f:1e:be:1f:45:fd:18:25:f6:65:6c:fa: 5f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C1:B4:D7:76:BA:37:5C:7E:56:9C:BB:16:5C:ED:DC:5F:72:F6:96 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:42:9f:7e:dd:a7:8b:f1:84:8e:11:35:e3:b8:e4:6e:b2:8a: 16:52:ae:52:c3:29:38:80:16:e9:e3:4c:2e:6e:2b:de:25:e7: 8e:e5:ee:75:b6:d0:61:fe:cf:cc:97:e2:e8:47:8d:49:59:44: d6:cd:8b:d5:0c:17:97:b9:3c:0f:ac:f9:11:a8:c0:85:fa:16: fb:4d:a0:57:20:83:19:5c:7c:57:c3:be:3d:39:74:b6:eb:c0: 25:f8:e2:90:0c:25:57:a8:ef:81:91:95:13:e4:19:27:fb:40: c0:e0:ea:a7:b8:73:ce:11:37:d7:59:1c:b9:8f:9a:6a:20:3f: 50:cc:d5:44:86:8e:fc:7d:99:0d:e4:5f:48:51:32:71:fc:70: 0b:84:ee:cc:63:5b:6a:6f:6f:40:b2:66:fa:ef:40:9c:e4:0c: b8:36:51:37:8e:b3:6f:bc:8d:0e:8a:c1:89:a4:d5:94:5e:b3: 66:7b:7e:4f:23:aa:c6:b9:db:4f:75:be:e1:94:3f:f7:7f:6d: 35:b2:72:b4:d9:38:20:7c:58:9d:53:35:31:cf:b2:9d:40:07: 91:6b:03:5b:ff:bf:0e:5c:1b:08:21:5e:bd:e4:82:72:43:58: 2e:21:48:9f:5f:ae:cf:a4:6a:d2:fc:65:1d:77:79:05:f5:f1: 07:c6:a3:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkiQYKbCtCy2FO3BRYj9X0JdsykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTEwMTkyMDA2MTBaFw0yNTEwMjMwMjA3MTBaMDMxMTAvBgNV BAMTKDY5QzFCNEQ3NzZCQTM3NUM3RTU2OUNCQjE2NUNFRERDNUY3MkY2OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzTjL0ZkL/Tne1npUb0o9KV7i+ YkFJXJPxkez494c6rNASmo27qfRdgV0dMzqVVT0bvPoXeLFPJWfNmOCI/tgo9kY6 dRjOEnE0YwFm9tznOcSvvNy+f1qBT9Mqno9E5/jtpahPVAQBo5c9XVJH4YOtAIwY VxmZ20IF3al4GZI0Lczare3wH1jnMo1CMI6Wnvl1o9GIwHbG5XceAHj1LdD2nEjp rYTTyHGPgDyPcuorw1cKoYfEnltkGPUoutlehxJKB+4z5H8YTheWVTGrCE0I+zb8 nrv3b4cvbBhvU5e9ngJg1Vzl4xhmHphQVs9GCM/7VW8evh9F/Rgl9mVs+l9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUacG013a6N1x+Vpy7Flzt3F9y9pYwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1Cn37dp4vxhI4RNeO45G6yihZSrlLDKTiA FunjTC5uK94l547l7nW20GH+z8yX4uhHjUlZRNbNi9UMF5e5PA+s+RGowIX6FvtN oFcggxlcfFfDvj05dLbrwCX44pAMJVeo74GRlRPkGSf7QMDg6qe4c84RN9dZHLmP mmogP1DM1USGjvx9mQ3kX0hRMnH8cAuE7sxjW2pvb0CyZvrvQJzkDLg2UTeOs2+8 jQ6KwYmk1ZRes2Z7fk8jqsa52091vuGUP/d/bTWycrTZOCB8WJ1TNTHPsp1AB5Fr A1v/vw5cGwghXr3kgnJDWC4hSJ9frs+katL8ZR13eQX18QfGo5s= -----END CERTIFICATE-----Generated at Mon Oct 20 13:55:38 2025 by rpki-client