$ rpki-client -vvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: nn/Pj5Sr9BrMPNOLz+nBWiscyMoWJTYEpfzMu8LgZCM= Subject key identifier: 94:1C:D6:4A:9F:A5:72:B9:81:0A:0A:6B:2C:1C:04:D0:67:57:3E:D1 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 27DD1CC791245BBB306B0EC3B133FD549DC75B3C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 23:01:59 +0000 Manifest this update: Tue 16 Jun 2026 22:56:59 +0000 Manifest next update: Wed 17 Jun 2026 23:41:59 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: aPCcoIEMbWqIeTf/MOBgdD53qIg+H5BsRv8aP+AO2AU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 23:41:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:1c:c7:91:24:5b:bb:30:6b:0e:c3:b1:33:fd:54:9d:c7:5b:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Jun 16 22:56:59 2026 GMT Not After : Jun 17 23:41:59 2026 GMT Subject: CN=941CD64A9FA572B9810A0A6B2C1C04D067573ED1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:5f:13:0d:7f:14:bc:df:7a:5a:db:8f:4c:77: 3e:fc:a7:d8:54:24:d0:99:fe:67:88:f6:49:12:05: 2c:64:95:e2:9f:fd:2c:4d:17:12:5a:24:c6:ed:d5: 97:1a:11:02:39:81:60:84:16:d5:1f:c5:a5:b5:c1: 49:2e:e9:79:7a:39:b2:c6:58:46:e5:98:b5:25:a2: d6:8e:ca:d5:4f:3b:33:d6:de:2e:48:19:b0:79:65: 89:8a:0b:78:51:5c:ab:b7:47:f6:83:61:75:3e:25: cd:c3:27:2a:4c:14:ea:13:4d:e8:3d:fb:ab:a1:3e: 90:da:bc:ff:c0:ba:a2:c4:24:0f:1e:2f:1a:de:9b: 85:f1:c4:3e:e5:1b:de:11:2e:8b:51:e6:a2:0a:b1: 61:e0:c4:c3:df:40:28:49:31:cc:b1:eb:6b:56:15: d5:b7:e0:be:7c:82:61:28:6b:bf:60:0f:40:ee:4c: e4:6d:a6:41:a0:de:cc:29:f3:89:2d:cd:77:fa:52: 7e:38:e8:3c:88:87:bb:df:ac:6b:21:56:10:a4:bf: 3f:bf:c9:9a:4c:02:9f:d0:28:bc:81:1c:84:6f:0d: 02:e5:eb:93:c5:e6:69:8a:fa:4d:b3:d5:6e:de:82: c6:c4:47:f2:32:eb:d0:3b:25:e2:8b:75:3a:bc:21: ee:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:1C:D6:4A:9F:A5:72:B9:81:0A:0A:6B:2C:1C:04:D0:67:57:3E:D1 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:64:93:eb:e3:fc:e5:84:d7:86:17:a2:a0:1f:96:94:75:39: 5a:15:c4:82:de:57:7b:4b:57:bf:38:bd:a3:3d:2e:12:cd:4b: 66:a7:bc:f5:3d:83:88:a5:74:e8:4b:7f:1d:4c:60:0e:46:27: 5e:ec:a5:b9:a5:0e:74:90:4b:1d:e0:34:fd:04:94:cd:5e:06: 7f:8e:6b:da:7e:c3:49:12:f0:1e:7d:44:af:9b:69:69:8a:e4: 94:2d:fb:26:98:87:3f:6e:7f:db:10:0d:e5:8c:52:09:ab:c6: 8c:7b:71:fb:a4:1d:8e:bf:82:1d:a4:3f:d0:d6:7b:09:3f:61: 20:3a:20:a6:76:21:98:3e:98:7c:82:db:99:24:2b:a3:f3:52: 8d:2c:aa:21:cd:0a:00:96:b1:9f:fc:92:6c:e8:5a:de:18:05: 98:49:0d:f0:55:79:c2:70:69:9f:c4:01:87:48:c7:b5:af:2c: 30:d4:45:1e:e1:cf:74:95:93:0f:5f:b3:14:9c:8b:4c:ec:b1: 67:87:d5:4a:0d:b6:56:07:d6:1c:42:65:40:87:2b:11:53:a5: 0c:e4:12:24:14:ae:b1:dd:34:75:99:cd:43:42:51:d5:a8:15: 3f:c9:36:28:6c:63:6b:c9:a6:27:0a:e9:90:9e:40:b8:ff:fe: 18:9d:53:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ90cx5EkW7swaw7DsTP9VJ3HWzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA2MTYyMjU2NTlaFw0yNjA2MTcyMzQxNTlaMDMxMTAvBgNV BAMTKDk0MUNENjRBOUZBNTcyQjk4MTBBMEE2QjJDMUMwNEQwNjc1NzNFRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwXxMNfxS833pa249Mdz78p9hU JNCZ/meI9kkSBSxkleKf/SxNFxJaJMbt1ZcaEQI5gWCEFtUfxaW1wUku6Xl6ObLG WEblmLUlotaOytVPOzPW3i5IGbB5ZYmKC3hRXKu3R/aDYXU+Jc3DJypMFOoTTeg9 +6uhPpDavP/AuqLEJA8eLxrem4XxxD7lG94RLotR5qIKsWHgxMPfQChJMcyx62tW FdW34L58gmEoa79gD0DuTORtpkGg3swp84ktzXf6Un446DyIh7vfrGshVhCkvz+/ yZpMAp/QKLyBHIRvDQLl65PF5mmK+k2z1W7egsbER/Iy69A7JeKLdTq8Ie49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlBzWSp+lcrmBCgprLBwE0GdXPtEwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALNkk+vj/OWE14YXoqAflpR1OVoVxILeV3tL V784vaM9LhLNS2anvPU9g4ildOhLfx1MYA5GJ17spbmlDnSQSx3gNP0ElM1eBn+O a9p+w0kS8B59RK+baWmK5JQt+yaYhz9uf9sQDeWMUgmrxox7cfukHY6/gh2kP9DW ewk/YSA6IKZ2IZg+mHyC25kkK6PzUo0sqiHNCgCWsZ/8kmzoWt4YBZhJDfBVecJw aZ/EAYdIx7WvLDDURR7hz3SVkw9fsxSci0zssWeH1UoNtlYH1hxCZUCHKxFTpQzk EiQUrrHdNHWZzUNCUdWoFT/JNihsY2vJpicK6ZCeQLj//hidU2A= -----END CERTIFICATE-----Generated at Wed Jun 17 09:42:59 2026 by rpki-client