$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: SRC+87BoEr9dsE1kMno29ym+WH5erPr7PZmGckMjCc4= Subject key identifier: 0B:24:7D:D9:7F:E2:5C:02:4A:71:03:42:0D:75:9F:39:D4:D3:0A:AB Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 7F414B5F1AB1C2602628C0C9E476DEDB722CA0C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 055B Signing time: Tue 24 Mar 2026 04:41:18 +0000 Manifest this update: Tue 24 Mar 2026 04:36:18 +0000 Manifest next update: Fri 27 Mar 2026 15:30:18 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: u9KWZSqgHScITvvThuJuY02cNZRRdmbVqfBOe1f6nu0=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 4: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 15:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:41:4b:5f:1a:b1:c2:60:26:28:c0:c9:e4:76:de:db:72:2c:a0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Mar 24 04:36:18 2026 GMT Not After : Mar 27 15:30:18 2026 GMT Subject: CN=0B247DD97FE25C024A7103420D759F39D4D30AAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:c9:08:9b:9b:6b:08:36:6a:ed:4c:d5:a4:84: 96:7d:3d:bf:68:f6:cf:cc:17:60:96:13:75:51:1e: ca:38:c7:ea:9d:58:62:9f:c0:81:f1:6d:0a:e5:54: 45:9e:61:df:52:37:14:d9:f0:53:86:87:f0:df:a7: 66:74:73:4a:0d:27:ec:ef:31:d0:94:6d:4e:a5:e0: db:f3:29:04:b2:f8:d1:24:ec:82:dc:3b:ea:3f:dd: f3:80:7c:6b:13:7d:2d:a9:03:26:92:5b:53:25:e1: ef:72:8f:ca:32:f5:c6:22:ef:97:1c:33:63:d7:84: ea:a1:ce:ec:f3:1e:0b:86:27:eb:79:23:69:13:97: 7c:59:88:fe:32:52:29:e6:98:0c:96:09:82:db:a1: 0a:cd:17:7f:ef:d7:22:0d:a4:30:b2:ba:62:54:59: f8:a9:4a:c4:1b:f8:1a:b9:c1:ee:c9:7f:50:75:0e: 99:5f:24:88:b8:f8:71:7e:6f:a9:f4:73:e9:a4:90: 3b:ce:2d:88:77:07:1d:b7:36:f3:26:9f:5b:aa:fa: ca:e8:37:b7:d6:43:cc:ae:bc:68:ee:05:6d:4c:39: 00:69:86:52:b4:6c:0f:07:bd:4a:18:64:d2:cb:4e: 8f:01:e7:28:a8:b8:2c:8c:b1:8b:aa:e5:04:59:7f: 19:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:24:7D:D9:7F:E2:5C:02:4A:71:03:42:0D:75:9F:39:D4:D3:0A:AB X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:31:aa:0e:56:2d:f2:4b:31:dd:2f:c9:59:db:7b:b8:0c:98: 0d:9d:e1:62:e1:da:13:30:4e:1a:81:8f:1f:19:71:d8:09:b0: 35:bb:36:df:95:36:f3:f2:74:c8:3c:a0:d4:c6:d7:40:89:7a: 49:16:52:07:a2:d3:75:f3:3b:61:ee:27:78:71:96:d5:b0:f2: 93:45:9f:3a:83:f0:4b:da:92:ec:0a:9a:4c:df:54:68:73:ca: c7:8a:10:fe:4f:12:7b:e6:08:82:f5:86:14:e8:3e:72:50:7a: eb:02:99:24:03:57:d6:d9:31:cf:1e:a6:cb:82:1f:b6:3d:57: 87:3b:3e:25:0a:eb:af:fc:81:4b:81:7f:46:1b:46:27:69:7a: 47:b5:d6:d8:d6:23:b1:6d:c5:51:a9:35:ca:48:e9:b3:27:0d: c6:3b:97:d9:e6:0b:6a:ad:e9:5c:78:09:52:72:78:ad:55:97: 05:52:8c:52:6d:01:d4:fb:b4:30:36:e0:5d:06:c7:bc:e9:b8: af:f8:d8:ee:30:0d:07:65:bf:64:30:1e:c5:ae:15:11:87:ee: e1:a9:79:c8:98:c6:a6:46:49:40:29:18:25:20:53:bd:04:67: ab:a6:64:73:f1:ed:69:45:d4:d1:76:f8:4b:ff:2d:02:50:bb: 9d:3a:33:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf0FLXxqxwmAmKMDJ5Hbe23IsoMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNjAzMjQwNDM2MThaFw0yNjAzMjcxNTMwMThaMDMxMTAvBgNV BAMTKDBCMjQ3REQ5N0ZFMjVDMDI0QTcxMDM0MjBENzU5RjM5RDREMzBBQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkyQibm2sINmrtTNWkhJZ9Pb9o 9s/MF2CWE3VRHso4x+qdWGKfwIHxbQrlVEWeYd9SNxTZ8FOGh/Dfp2Z0c0oNJ+zv MdCUbU6l4NvzKQSy+NEk7ILcO+o/3fOAfGsTfS2pAyaSW1Ml4e9yj8oy9cYi75cc M2PXhOqhzuzzHguGJ+t5I2kTl3xZiP4yUinmmAyWCYLboQrNF3/v1yINpDCyumJU WfipSsQb+Bq5we7Jf1B1DplfJIi4+HF+b6n0c+mkkDvOLYh3Bx23NvMmn1uq+sro N7fWQ8yuvGjuBW1MOQBphlK0bA8HvUoYZNLLTo8B5yiouCyMsYuq5QRZfxlLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCyR92X/iXAJKcQNCDXWfOdTTCqswHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUxqg5WLfJLMd0vyVnbe7gMmA2d4WLh2hMw ThqBjx8ZcdgJsDW7Nt+VNvPydMg8oNTG10CJekkWUgei03XzO2HuJ3hxltWw8pNF nzqD8EvakuwKmkzfVGhzyseKEP5PEnvmCIL1hhToPnJQeusCmSQDV9bZMc8epsuC H7Y9V4c7PiUK66/8gUuBf0YbRidpeke11tjWI7FtxVGpNcpI6bMnDcY7l9nmC2qt 6Vx4CVJyeK1VlwVSjFJtAdT7tDA24F0Gx7zpuK/42O4wDQdlv2QwHsWuFRGH7uGp eciYxqZGSUApGCUgU70EZ6umZHPx7WlF1NF2+Ev/LQJQu506M9o= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:54 2026 by rpki-client