$ rpki-client -vvf rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft File: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft (raw, json) Hash identifier: JAQR6Zs+JPDDNImwH5xVYXfB3kDvA4QsriSmQrLirmE= Subject key identifier: 1C:CB:92:6E:36:68:49:51:40:7C:28:0A:C7:1D:0A:2E:DE:3F:30:9F Authority key identifier: BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 Certificate issuer: /CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Certificate serial: 459225AC6A2ABE597360B3886B72CB3C504FB946 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 10:17:38 +0000 Manifest this update: Thu 23 Jul 2026 10:12:38 +0000 Manifest next update: Fri 24 Jul 2026 11:16:38 +0000 Files and hashes: 1: 3136302e32322e39312e302f32342d3234203d3e20313533303635.roa (hash: Ss8Z74NcLd0rpIK/JHzU1301o8kGJWxsqzL+GJXa3z0=) 2: BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl (hash: hk40loXziWeUQNkmhrF0Cnoe2QzfCH0SojH20YfEClc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 11:16:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:92:25:ac:6a:2a:be:59:73:60:b3:88:6b:72:cb:3c:50:4f:b9:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745 Validity Not Before: Jul 23 10:12:38 2026 GMT Not After : Jul 24 11:16:38 2026 GMT Subject: CN=1CCB926E36684951407C280AC71D0A2EDE3F309F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:71:f7:b1:22:01:bc:79:70:d6:ad:51:0d:29: 3d:0f:fa:0a:a2:d5:02:b4:7e:b7:ee:be:7f:df:8f: 28:36:e6:34:24:82:7b:1a:d1:6d:c3:eb:0a:0f:44: e0:dd:81:c2:da:e3:a1:38:3e:f3:c8:23:24:27:34: 65:55:af:35:1a:5c:25:06:38:d2:fd:24:c7:01:b7: fe:4a:60:4b:0c:1e:70:18:0a:6b:bf:6e:ac:02:45: 2a:ea:12:23:7e:ec:b2:37:8c:29:55:cc:f6:7e:70: 3e:7e:88:2f:dd:b9:65:4f:db:8b:4e:34:4e:c5:a2: b5:e7:f3:12:29:c0:c0:b1:41:f9:01:bb:8b:f7:57: 3b:50:ae:0c:64:a0:c4:aa:fd:18:56:15:a2:cb:c1: b4:cc:e8:6c:62:15:7a:03:38:b6:67:eb:99:3d:da: de:bd:59:ee:be:a4:32:d8:ff:4e:a5:0d:7e:2a:66: e3:39:98:3a:9c:fb:84:0b:0b:b4:f4:28:12:15:c6: 4f:df:98:4e:a7:5b:91:b7:a8:f1:82:e9:96:21:d8: 60:bc:cb:b8:c5:de:c1:a8:26:69:06:06:2f:25:21: 13:dd:4f:81:e2:04:f4:86:42:72:1b:d5:3b:ff:8a: 6e:a4:aa:91:a8:8b:b5:c4:9f:53:a3:61:d3:1c:65: 1c:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:CB:92:6E:36:68:49:51:40:7C:28:0A:C7:1D:0A:2E:DE:3F:30:9F X509v3 Authority Key Identifier: keyid:BE:B6:1D:B1:CE:47:10:D2:91:C1:B3:20:C4:E5:F1:EA:B4:DF:07:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e2819ba9-5f44-4125-8b8c-fc164b54d73a/0/BEB61DB1CE4710D291C1B320C4E5F1EAB4DF0745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:bf:41:bb:0e:d9:4a:19:17:50:06:0a:58:d0:ce:ee:6c:aa: 49:37:11:47:67:17:ee:1e:46:d6:42:ff:da:70:2f:88:0e:8c: 5f:3b:79:9a:be:c1:82:95:87:a0:85:03:77:31:af:19:dd:a3: ee:d2:11:62:02:9c:af:38:ef:6a:d4:45:11:9f:20:76:f6:62: 87:0d:a2:68:71:11:df:09:70:43:1d:48:9a:2f:ae:42:bc:27: 2d:ca:13:f7:17:01:ec:18:c2:1a:ea:ed:ab:ee:0f:7b:3b:93: 26:8c:f9:8d:68:1f:66:85:56:d7:c1:b4:92:cf:6c:72:44:2c: c5:a9:4b:86:e8:0f:09:20:ea:60:da:fc:f7:d1:54:6f:0b:de: a0:cb:a4:bb:ab:bd:16:db:3d:42:50:38:8d:bd:7f:aa:82:42: 8f:94:20:20:5c:e4:e8:63:2e:74:a3:96:c6:1b:dc:18:a1:fd: 97:21:b6:06:dc:66:08:17:fe:01:52:67:1f:1a:63:1e:75:68: ea:37:c4:48:a3:66:9d:c3:d9:22:90:1f:a5:bf:df:e2:e0:2e: 57:b9:c6:ff:9e:b7:ac:21:ef:f3:f5:fc:4e:6d:d0:5c:64:38: d5:2b:cd:6a:3e:57:14:55:4f:a0:62:f3:dd:d6:86:9d:1a:db: c6:09:f9:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURZIlrGoqvllzYLOIa3LLPFBPuUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFC NERGMDc0NTAeFw0yNjA3MjMxMDEyMzhaFw0yNjA3MjQxMTE2MzhaMDMxMTAvBgNV BAMTKDFDQ0I5MjZFMzY2ODQ5NTE0MDdDMjgwQUM3MUQwQTJFREUzRjMwOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfcfexIgG8eXDWrVENKT0P+gqi 1QK0frfuvn/fjyg25jQkgnsa0W3D6woPRODdgcLa46E4PvPIIyQnNGVVrzUaXCUG ONL9JMcBt/5KYEsMHnAYCmu/bqwCRSrqEiN+7LI3jClVzPZ+cD5+iC/duWVP24tO NE7ForXn8xIpwMCxQfkBu4v3VztQrgxkoMSq/RhWFaLLwbTM6GxiFXoDOLZn65k9 2t69We6+pDLY/06lDX4qZuM5mDqc+4QLC7T0KBIVxk/fmE6nW5G3qPGC6ZYh2GC8 y7jF3sGoJmkGBi8lIRPdT4HiBPSGQnIb1Tv/im6kqpGoi7XEn1OjYdMcZRyFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHMuSbjZoSVFAfCgKxx0KLt4/MJ8wHwYDVR0j BBgwFoAUvrYdsc5HENKRwbMgxOXx6rTfB0UwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTI4MTliYTktNWY0NC00MTI1LThiOGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFD RTQ3MTBEMjkxQzFCMzIwQzRFNUYxRUFCNERGMDc0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CRUI2MURCMUNFNDcxMEQyOTFDMUIzMjBDNEU1RjFFQUI0REYw NzQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTI4MTliYTktNWY0NC00MTI1LThi OGMtZmMxNjRiNTRkNzNhLzAvQkVCNjFEQjFDRTQ3MTBEMjkxQzFCMzIwQzRFNUYx RUFCNERGMDc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABC/QbsO2UoZF1AGCljQzu5sqkk3EUdnF+4e RtZC/9pwL4gOjF87eZq+wYKVh6CFA3cxrxndo+7SEWICnK8472rURRGfIHb2YocN omhxEd8JcEMdSJovrkK8Jy3KE/cXAewYwhrq7avuD3s7kyaM+Y1oH2aFVtfBtJLP bHJELMWpS4boDwkg6mDa/PfRVG8L3qDLpLurvRbbPUJQOI29f6qCQo+UICBc5Ohj LnSjlsYb3Bih/ZchtgbcZggX/gFSZx8aYx51aOo3xEijZp3D2SKQH6W/3+LgLle5 xv+et6wh7/P1/E5t0FxkONUrzWo+VxRVT6Bi893Whp0a28YJ+S0= -----END CERTIFICATE-----Generated at Fri Jul 24 03:59:38 2026 by rpki-client