$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: toO9IL6+J1bp47ojYkVeWmtoMDdgJtIN3+hXuNtxP5o= Subject key identifier: AE:08:B5:49:0E:01:6C:7D:44:F9:0E:61:E2:89:86:F9:D2:D4:69:33 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 69A28F6C0ED7A4902D369EE4D614A80ACDC2C38C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 09:40:35 +0000 Manifest this update: Thu 17 Sep 2026 09:35:35 +0000 Manifest next update: Fri 18 Sep 2026 11:54:35 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: dHb9zZBPGbBwh/chqg97GU6INug2M8b4qB3y5OlCF6o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 09:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:a2:8f:6c:0e:d7:a4:90:2d:36:9e:e4:d6:14:a8:0a:cd:c2:c3:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Sep 17 09:35:35 2026 GMT Not After : Sep 18 11:54:35 2026 GMT Subject: CN=AE08B5490E016C7D44F90E61E28986F9D2D46933 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:f2:bf:03:2d:58:25:b1:03:06:b1:29:8a: c3:e9:ec:0e:5e:c1:8b:96:97:41:8b:17:3a:61:76: 23:11:fd:7f:84:3e:8d:2d:8d:70:0a:14:22:b3:21: ec:bf:60:ff:dc:96:1e:01:f8:7f:3b:01:30:1b:c6: a2:d5:df:df:a6:02:09:de:45:3c:04:01:1e:de:0b: ab:a0:16:b4:1d:03:d2:f8:31:d6:c8:29:24:a7:43: 1c:e5:61:30:3d:b0:ee:93:8c:30:ee:0f:56:eb:fb: 96:08:39:21:b7:f3:5f:c3:fb:78:6a:ca:d7:9e:36: 68:f5:61:58:9e:76:e8:85:33:19:ae:67:d3:7d:24: 8d:bf:97:c0:f9:5f:91:61:7c:a7:ff:c2:13:3f:ed: 76:19:c3:da:13:62:0a:93:4b:61:70:4d:21:4f:ed: 2a:a0:dd:84:aa:75:b9:ae:05:a2:3c:f3:69:78:88: 31:41:c9:3a:3f:a1:26:ba:0d:fa:30:2e:91:18:26: 8e:54:98:d6:ea:ab:59:79:ae:10:a5:a8:85:ca:1c: d3:d3:05:26:ea:77:e6:d2:37:0c:25:30:59:4a:b1: 82:12:ef:d3:76:0a:ca:67:1c:5f:cc:94:44:0d:b3: c0:79:0e:05:5f:d6:c9:b3:28:02:5d:27:6f:b0:50: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:08:B5:49:0E:01:6C:7D:44:F9:0E:61:E2:89:86:F9:D2:D4:69:33 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:88:22:6e:47:43:74:81:73:61:01:3d:d8:d4:69:94:bb:44: 20:2f:bd:96:b7:4e:24:21:66:84:57:e0:c4:4a:e9:4e:e8:bd: 6d:c5:14:36:46:25:c3:00:51:57:3c:22:25:8b:fe:d5:a7:8c: ec:ba:42:06:6e:fe:19:fd:0c:ff:f6:bf:44:d3:da:1c:95:fe: f0:10:e6:1d:8b:19:66:aa:0e:26:77:b5:49:53:d8:a6:71:48: 2c:79:33:39:8c:3d:6a:dd:ce:32:2c:d2:df:97:5c:12:81:8b: 79:2e:aa:db:5e:97:a0:0e:e3:e1:f1:16:d2:db:a4:4c:2a:c7: 74:8c:a0:28:1f:19:9e:63:a8:e1:ad:dc:31:a3:80:57:fc:52: f7:1d:71:d2:7b:96:dd:f1:86:5c:2d:09:9d:84:f8:26:26:19: 9d:e5:53:26:70:f6:b6:2f:e4:5e:a5:59:a3:1c:df:b7:a5:a1: cc:8e:0b:f3:19:d7:78:c0:6c:45:93:a2:a0:c5:fc:a5:4f:9e: 72:70:12:9f:f3:7e:05:13:80:68:fb:7f:7c:fd:85:7e:c0:1c: d4:fa:34:f1:8f:49:f5:7e:3c:d3:2c:f0:71:e2:dd:0d:11:e7: 9d:4b:04:59:db:79:cd:64:a7:39:33:9a:59:33:d6:9c:39:34: bc:ed:2a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaaKPbA7XpJAtNp7k1hSoCs3Cw4wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA5MTcwOTM1MzVaFw0yNjA5MTgxMTU0MzVaMDMxMTAvBgNV BAMTKEFFMDhCNTQ5MEUwMTZDN0Q0NEY5MEU2MUUyODk4NkY5RDJENDY5MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGffK/Ay1YJbEDBrEpisPp7A5e wYuWl0GLFzphdiMR/X+EPo0tjXAKFCKzIey/YP/clh4B+H87ATAbxqLV39+mAgne RTwEAR7eC6ugFrQdA9L4MdbIKSSnQxzlYTA9sO6TjDDuD1br+5YIOSG381/D+3hq yteeNmj1YVieduiFMxmuZ9N9JI2/l8D5X5FhfKf/whM/7XYZw9oTYgqTS2FwTSFP 7Sqg3YSqdbmuBaI882l4iDFByTo/oSa6DfowLpEYJo5UmNbqq1l5rhClqIXKHNPT BSbqd+bSNwwlMFlKsYIS79N2CspnHF/MlEQNs8B5DgVf1smzKAJdJ2+wUFADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrgi1SQ4BbH1E+Q5h4omG+dLUaTMwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGCIIm5HQ3SBc2EBPdjUaZS7RCAvvZa3TiQh ZoRX4MRK6U7ovW3FFDZGJcMAUVc8IiWL/tWnjOy6QgZu/hn9DP/2v0TT2hyV/vAQ 5h2LGWaqDiZ3tUlT2KZxSCx5MzmMPWrdzjIs0t+XXBKBi3kuqttel6AO4+HxFtLb pEwqx3SMoCgfGZ5jqOGt3DGjgFf8UvcdcdJ7lt3xhlwtCZ2E+CYmGZ3lUyZw9rYv 5F6lWaMc37elocyOC/MZ13jAbEWToqDF/KVPnnJwEp/zfgUTgGj7f3z9hX7AHNT6 NPGPSfV+PNMs8HHi3Q0R551LBFnbec1kpzkzmlkz1pw5NLztKmA= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:02 2026 by rpki-client