$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: RoUspwjRlpDVoQgRxhZfmf2/t63OWp+95RTad2Td1HA= Subject key identifier: C8:AB:74:B2:C3:D5:1A:16:87:C1:9E:7A:4F:1F:82:D7:7F:D5:01:F8 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 7BF178CA0CCC462DE95812D436813B34B87FEAAC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: BF Signing time: Wed 23 Sep 2026 15:09:50 +0000 Manifest this update: Wed 23 Sep 2026 15:04:50 +0000 Manifest next update: Thu 24 Sep 2026 17:23:50 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: 1o2siseQIhFj7Ha+uwsb6Fcpawj1t+iD2t5PYq0DSp4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 17:23:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:f1:78:ca:0c:cc:46:2d:e9:58:12:d4:36:81:3b:34:b8:7f:ea:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Sep 23 15:04:50 2026 GMT Not After : Sep 24 17:23:50 2026 GMT Subject: CN=C8AB74B2C3D51A1687C19E7A4F1F82D77FD501F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:ed:0a:22:05:cb:94:02:8d:d5:2f:15:28: 77:c2:cb:04:2c:4b:6b:d6:63:87:07:ad:c6:f9:29: e2:e4:ae:75:fb:05:64:6f:28:e3:03:ee:f7:9b:47: 91:b2:6c:63:b8:29:f5:00:a0:de:fe:ed:5b:1b:09: 57:54:46:82:83:54:6f:cb:3e:09:84:5b:0d:58:17: dc:3c:a5:f2:9b:0e:c4:6c:d4:96:ea:a5:99:47:70: 7c:2c:ca:ff:3b:9d:0e:19:43:73:a4:1c:97:7d:9a: 8f:7f:19:06:f6:8c:b0:0b:ec:ee:38:af:3d:3b:dc: 80:04:22:c9:e0:d2:3a:87:6d:9a:88:26:7e:e7:f1: 08:7a:50:94:9d:3c:e0:42:91:dd:d9:1a:85:47:a5: 3d:1c:f6:a2:cf:54:99:b8:b4:81:07:f2:5e:26:5c: 7c:e0:9a:f8:03:7f:72:2e:ba:b4:2f:20:21:75:f2: 39:0d:13:c4:9d:1e:e4:31:87:5e:b0:7b:1e:3e:e7: 38:6b:92:f3:7b:df:1b:bb:40:11:c3:a3:ab:10:69: 88:78:30:28:57:93:96:f4:e5:b5:b2:a6:61:2a:5d: da:eb:41:5c:ce:7c:a3:dd:d7:e5:27:45:c2:84:ad: 48:04:b0:93:09:77:64:1d:e0:a2:59:de:46:f5:d4: 64:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:AB:74:B2:C3:D5:1A:16:87:C1:9E:7A:4F:1F:82:D7:7F:D5:01:F8 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:76:39:4e:a8:45:a3:1c:54:93:d4:5f:35:4c:80:c1:9a:15: d5:84:88:68:ab:f3:39:8f:8a:53:cc:a1:e6:84:a2:ee:69:44: 40:5a:7f:bf:a8:d8:8c:11:00:af:96:29:cb:b6:0c:97:bd:ef: 1b:94:3a:71:7f:6d:40:da:99:f6:e3:7f:12:6a:85:7d:9c:19: 1a:91:8b:b0:aa:16:d7:66:7a:41:1c:ca:9e:29:4e:c7:84:05: 77:a3:7e:4b:22:ff:73:70:d8:23:0e:1a:07:dc:a0:39:60:97: 52:de:3e:53:43:0a:3a:46:b1:57:65:7f:b4:89:e3:17:a4:77: bf:c9:d5:ea:87:8d:25:6e:d9:36:db:bd:bb:1e:79:67:0a:15: b0:68:41:e9:e0:96:b6:bd:b4:d6:11:af:0b:a0:d0:25:7d:ac: 6f:4f:c2:ba:a8:6a:0d:c1:ab:00:79:eb:1b:a6:50:e0:a4:81: 85:e4:92:90:1c:b9:36:3e:ce:8e:92:7c:c9:f4:ad:e9:82:7a: 25:11:5d:30:0b:cd:03:9e:e4:93:7c:8b:a8:57:83:b2:ff:5c: cd:23:80:b2:a5:fc:75:c0:96:e1:b7:51:b3:51:31:66:8e:85: 43:ba:fa:32:86:35:4b:be:b7:17:22:f1:45:64:9d:47:39:6f: 15:74:b3:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe/F4ygzMRi3pWBLUNoE7NLh/6qwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA5MjMxNTA0NTBaFw0yNjA5MjQxNzIzNTBaMDMxMTAvBgNV BAMTKEM4QUI3NEIyQzNENTFBMTY4N0MxOUU3QTRGMUY4MkQ3N0ZENTAxRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDARO0KIgXLlAKN1S8VKHfCywQs S2vWY4cHrcb5KeLkrnX7BWRvKOMD7vebR5GybGO4KfUAoN7+7VsbCVdURoKDVG/L PgmEWw1YF9w8pfKbDsRs1JbqpZlHcHwsyv87nQ4ZQ3OkHJd9mo9/GQb2jLAL7O44 rz073IAEIsng0jqHbZqIJn7n8Qh6UJSdPOBCkd3ZGoVHpT0c9qLPVJm4tIEH8l4m XHzgmvgDf3IuurQvICF18jkNE8SdHuQxh16wex4+5zhrkvN73xu7QBHDo6sQaYh4 MChXk5b05bWypmEqXdrrQVzOfKPd1+UnRcKErUgEsJMJd2Qd4KJZ3kb11GRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyKt0ssPVGhaHwZ56Tx+C13/VAfgwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKh2OU6oRaMcVJPUXzVMgMGaFdWEiGir8zmP ilPMoeaEou5pREBaf7+o2IwRAK+WKcu2DJe97xuUOnF/bUDamfbjfxJqhX2cGRqR i7CqFtdmekEcyp4pTseEBXejfksi/3Nw2CMOGgfcoDlgl1LePlNDCjpGsVdlf7SJ 4xekd7/J1eqHjSVu2TbbvbseeWcKFbBoQenglra9tNYRrwug0CV9rG9Pwrqoag3B qwB56xumUOCkgYXkkpAcuTY+zo6SfMn0remCeiURXTALzQOe5JN8i6hXg7L/XM0j gLKl/HXAluG3UbNRMWaOhUO6+jKGNUu+txci8UVknUc5bxV0szM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:33:56 2026 by rpki-client