$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: LUWpcugEQyLVJo6FCg71zhGjaxnJszlGurF+kmCtMlA= Subject key identifier: 03:7F:C0:58:21:18:08:58:30:40:34:13:2E:28:29:BB:55:7A:FA:F8 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 33F41B736B928BB1EED75885AD2D9EB9E21A9922 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:25:20 +0000 Manifest this update: Tue 12 May 2026 19:20:20 +0000 Manifest next update: Wed 13 May 2026 20:05:20 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: V9DNnkEA7lPL5VYtVQkjWzMsRGQa5S/pof1bhcCW0s8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:f4:1b:73:6b:92:8b:b1:ee:d7:58:85:ad:2d:9e:b9:e2:1a:99:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: May 12 19:20:20 2026 GMT Not After : May 13 20:05:20 2026 GMT Subject: CN=037FC05821180858304034132E2829BB557AFAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:eb:78:c4:23:f2:23:9a:97:8a:e5:d9:49:a1: 1d:99:3d:97:83:b9:03:1b:1d:33:da:b8:3e:84:04: dc:f1:dd:30:d3:7b:58:76:62:ac:89:4d:53:64:22: 9a:25:10:19:5b:6b:d9:17:1e:02:c1:4e:1d:7c:b4: f1:15:a4:06:51:47:88:a7:29:a4:da:aa:c1:d8:4d: 3b:b0:44:2b:d7:9a:16:fb:5a:5e:c7:dc:fd:f1:b2: 3f:29:e1:d5:78:5f:37:f1:35:bb:e6:51:ca:49:ec: f9:b0:5b:76:cb:3e:de:62:7d:72:07:2e:e6:92:0c: 2a:da:f0:11:89:9e:a2:1c:91:34:bd:6b:aa:f6:56: 4c:5a:fd:45:25:1f:ea:8c:92:b2:18:07:19:07:1c: 9a:12:2b:b7:f4:99:89:99:14:ca:cf:01:e7:5a:93: 7f:fa:65:84:6c:49:14:bc:3e:62:83:7d:27:06:96: 96:45:1b:75:f2:c9:6d:83:25:c2:cb:9b:f5:cd:94: be:d7:32:a6:46:61:6a:f8:7d:6b:4b:5a:5a:d1:80: 61:8c:76:dc:7a:81:8a:75:16:b1:32:6c:f2:4e:a1: 88:03:5d:0e:20:fb:c1:63:7c:08:0e:64:91:7d:1d: 4a:40:4a:09:14:d5:f8:de:f7:f3:2a:7b:18:89:00: fc:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:7F:C0:58:21:18:08:58:30:40:34:13:2E:28:29:BB:55:7A:FA:F8 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:4d:8c:64:ee:b2:5b:37:a9:67:7a:c4:e5:2a:d6:27:6d:9b: 44:f2:2e:9a:bd:96:7e:63:46:b2:d1:6b:7c:8b:f2:df:70:01: d2:5d:dc:2d:49:a2:86:99:2f:f7:80:3e:28:ca:c1:03:91:09: d7:96:7d:eb:17:ed:27:c7:df:06:84:7f:c9:50:c7:a6:57:a9: be:8c:34:16:a5:91:4b:70:9c:10:dd:38:a4:9d:f3:28:b1:fe: dd:c1:84:1d:4b:06:fb:be:83:40:54:d3:a8:92:a4:ea:c0:fd: 8f:3f:98:34:09:c4:56:a5:a8:08:09:9d:59:c6:58:de:c1:d1: 7c:64:ac:89:3c:de:24:52:83:8a:9c:b1:dd:bf:9e:d9:79:5b: 03:f8:d4:46:31:06:db:8d:97:9c:6e:0d:52:81:5f:06:b9:4f: 16:e4:80:7d:06:44:f3:24:f5:08:12:ab:db:f5:11:e9:8f:8c: b3:20:e7:c2:a3:52:9b:3c:69:65:1a:51:a9:60:a3:fd:37:7e: c4:84:70:1e:2f:5b:9a:cb:f3:06:7e:5e:b4:cc:f4:28:3a:5b: 4c:03:b6:7c:9f:c5:48:38:b4:a8:93:01:39:e4:9c:2f:03:13: 60:36:90:45:af:20:0f:48:8b:3e:b3:3f:7b:5c:73:03:0f:ff: d5:a2:66:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM/Qbc2uSi7Hu11iFrS2eueIamSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA1MTIxOTIwMjBaFw0yNjA1MTMyMDA1MjBaMDMxMTAvBgNV BAMTKDAzN0ZDMDU4MjExODA4NTgzMDQwMzQxMzJFMjgyOUJCNTU3QUZBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC963jEI/IjmpeK5dlJoR2ZPZeD uQMbHTPauD6EBNzx3TDTe1h2YqyJTVNkIpolEBlba9kXHgLBTh18tPEVpAZRR4in KaTaqsHYTTuwRCvXmhb7Wl7H3P3xsj8p4dV4XzfxNbvmUcpJ7PmwW3bLPt5ifXIH LuaSDCra8BGJnqIckTS9a6r2Vkxa/UUlH+qMkrIYBxkHHJoSK7f0mYmZFMrPAeda k3/6ZYRsSRS8PmKDfScGlpZFG3XyyW2DJcLLm/XNlL7XMqZGYWr4fWtLWlrRgGGM dtx6gYp1FrEybPJOoYgDXQ4g+8FjfAgOZJF9HUpASgkU1fje9/MqexiJAPzjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA3/AWCEYCFgwQDQTLigpu1V6+vgwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZNjGTusls3qWd6xOUq1idtm0TyLpq9ln5j RrLRa3yL8t9wAdJd3C1JooaZL/eAPijKwQORCdeWfesX7SfH3waEf8lQx6ZXqb6M NBalkUtwnBDdOKSd8yix/t3BhB1LBvu+g0BU06iSpOrA/Y8/mDQJxFalqAgJnVnG WN7B0XxkrIk83iRSg4qcsd2/ntl5WwP41EYxBtuNl5xuDVKBXwa5TxbkgH0GRPMk 9QgSq9v1EemPjLMg58KjUps8aWUaUalgo/03fsSEcB4vW5rL8wZ+XrTM9Cg6W0wD tnyfxUg4tKiTATnknC8DE2A2kEWvIA9Iiz6zP3tccwMP/9WiZjE= -----END CERTIFICATE-----Generated at Tue May 12 22:52:15 2026 by rpki-client