$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: D6rWs3RfsFga3u/mgnANPFuHFhheJJ7oqZae0bzY9RI= Subject key identifier: 06:A9:32:45:DA:B1:5E:C7:69:5F:0D:41:65:3B:14:76:0C:C4:8E:60 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 6B3E21F9697BD90A27166BF606B3482D2CDEF962 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 12:35:24 +0000 Manifest this update: Thu 23 Jul 2026 12:30:24 +0000 Manifest next update: Fri 24 Jul 2026 16:16:24 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: Ys3lBus/MTVGSLCxC1JeTI54r5qGfGVxVfZ4H2KIZq0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 16:16:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:3e:21:f9:69:7b:d9:0a:27:16:6b:f6:06:b3:48:2d:2c:de:f9:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Jul 23 12:30:24 2026 GMT Not After : Jul 24 16:16:24 2026 GMT Subject: CN=06A93245DAB15EC7695F0D41653B14760CC48E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ed:a5:32:46:c7:37:68:04:7a:8f:21:05:66: da:83:43:61:e5:6a:10:e0:4b:bf:54:aa:59:e9:d3: 99:5c:e3:e9:2a:d1:0a:80:24:30:14:31:23:33:47: 5c:a6:be:69:1d:99:68:00:22:ab:a9:a5:01:6b:cb: 53:17:77:3c:e7:24:63:c2:91:39:ce:aa:77:8c:f7: ce:47:b5:3b:de:ca:11:05:29:4f:b7:1a:de:e9:c9: 00:52:8d:90:46:5d:5b:8c:af:f3:27:42:53:ba:60: 34:fa:f0:a5:58:4c:37:b9:4b:9a:0e:a0:66:c5:29: 37:66:c6:33:7a:91:34:02:b0:b8:94:58:55:90:87: 3b:ec:cc:cb:d0:2d:12:17:c3:1a:c4:15:f9:9c:7e: b6:a7:7e:0d:bf:f3:a1:db:ed:41:b0:3c:86:6f:85: 63:df:be:9a:fc:9a:fa:d3:b6:2a:9a:e7:35:09:dd: 14:6b:56:1a:11:54:3f:50:50:46:be:bd:cf:9d:4d: c9:6a:dd:04:dc:37:2d:b7:aa:a3:df:e0:0e:3c:02: 75:0c:18:f8:2e:ca:57:5e:09:53:97:e7:e4:f4:3b: cd:f5:1b:3d:a6:d3:f7:5c:bf:d2:dc:ef:07:d7:90: f5:a1:cc:2c:a2:03:2c:80:5b:e5:4e:7c:14:3d:fb: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:A9:32:45:DA:B1:5E:C7:69:5F:0D:41:65:3B:14:76:0C:C4:8E:60 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fd:53:ab:ca:21:a8:52:28:73:67:13:82:5e:fd:23:df:73: ed:b2:76:d1:61:ea:3d:cc:f8:f8:fb:21:b5:41:e9:9b:a9:58: bf:d8:b9:9d:d2:89:ff:fc:5c:ec:df:6a:ad:c0:7f:4a:cc:69: eb:ad:e5:06:54:78:50:50:11:60:bf:fc:7e:60:e7:db:a5:c3: 97:a0:57:d3:bb:d5:db:6e:0d:45:dc:c3:42:c7:83:04:f5:c0: 4d:5f:21:74:a0:50:81:bd:7c:00:07:0a:98:1a:af:4b:9d:28: 32:e6:0e:9c:68:34:d3:f8:f9:43:6a:4f:05:94:0c:5f:09:c7: 1c:91:08:41:5c:e1:75:2f:0e:3d:df:b3:f9:25:13:06:30:b4: f7:43:92:c6:5e:6f:1e:09:47:cb:fc:75:f5:a1:c6:37:2f:06: 21:a0:0c:2f:3d:31:6b:b4:ab:0e:76:47:f8:fd:82:81:c6:38: f2:40:d9:fc:63:da:3a:ad:7f:7a:d3:cb:b8:cb:e2:09:35:0c: 6f:62:a2:5f:d3:69:0f:02:f2:6f:c1:59:19:29:0b:15:c9:ee: f2:9d:d0:88:01:d0:32:fd:a4:50:9a:e8:1f:8f:b8:53:19:69: 7c:fa:6f:32:65:73:b9:40:8e:40:3a:30:c3:6f:d1:e7:9e:24: 8d:f0:04:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaz4h+Wl72QonFmv2BrNILSze+WIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA3MjMxMjMwMjRaFw0yNjA3MjQxNjE2MjRaMDMxMTAvBgNV BAMTKDA2QTkzMjQ1REFCMTVFQzc2OTVGMEQ0MTY1M0IxNDc2MENDNDhFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW7aUyRsc3aAR6jyEFZtqDQ2Hl ahDgS79Uqlnp05lc4+kq0QqAJDAUMSMzR1ymvmkdmWgAIquppQFry1MXdzznJGPC kTnOqneM985HtTveyhEFKU+3Gt7pyQBSjZBGXVuMr/MnQlO6YDT68KVYTDe5S5oO oGbFKTdmxjN6kTQCsLiUWFWQhzvszMvQLRIXwxrEFfmcfranfg2/86Hb7UGwPIZv hWPfvpr8mvrTtiqa5zUJ3RRrVhoRVD9QUEa+vc+dTclq3QTcNy23qqPf4A48AnUM GPguyldeCVOX5+T0O831Gz2m0/dcv9Lc7wfXkPWhzCyiAyyAW+VOfBQ9+87lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBqkyRdqxXsdpXw1BZTsUdgzEjmAwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz9U6vKIahSKHNnE4Je/SPfc+2ydtFh6j3M +Pj7IbVB6ZupWL/YuZ3Sif/8XOzfaq3Af0rMaeut5QZUeFBQEWC//H5g59ulw5eg V9O71dtuDUXcw0LHgwT1wE1fIXSgUIG9fAAHCpgar0udKDLmDpxoNNP4+UNqTwWU DF8JxxyRCEFc4XUvDj3fs/klEwYwtPdDksZebx4JR8v8dfWhxjcvBiGgDC89MWu0 qw52R/j9goHGOPJA2fxj2jqtf3rTy7jL4gk1DG9iol/TaQ8C8m/BWRkpCxXJ7vKd 0IgB0DL9pFCa6B+PuFMZaXz6bzJlc7lAjkA6MMNv0eeeJI3wBNA= -----END CERTIFICATE-----Generated at Fri Jul 24 08:44:45 2026 by rpki-client