$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: L6kDiKWdaZnMrQXQWVQalhMOsHH1amzW9+lPmU9LJv0= Subject key identifier: 83:10:1A:7D:2E:69:D6:2D:22:A1:DE:D0:04:5D:DD:EE:89:AF:45:78 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 7BA2BB8DB6C10DF905E16C0D36BD0D473255A0BF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: FE Signing time: Tue 10 Nov 2026 04:05:47 +0000 Manifest this update: Tue 10 Nov 2026 04:00:47 +0000 Manifest next update: Wed 11 Nov 2026 07:44:47 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: nPqDJGPIPYIA3ZqviOaPYkJB6lQBlcW1PCEuV3dJsA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 07:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a2:bb:8d:b6:c1:0d:f9:05:e1:6c:0d:36:bd:0d:47:32:55:a0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Nov 10 04:00:47 2026 GMT Not After : Nov 11 07:44:47 2026 GMT Subject: CN=83101A7D2E69D62D22A1DED0045DDDEE89AF4578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8b:2f:e8:db:f8:a8:56:2a:a2:46:ef:b4:70: b5:a1:5d:12:68:e8:1b:bc:3c:b5:06:65:77:57:ff: 9c:f3:d9:99:43:9b:87:de:0f:3f:94:44:07:66:57: 37:a1:3d:b7:29:d9:28:17:63:e0:19:84:01:0b:69: 3f:26:73:0f:ac:cc:fd:3b:8c:f0:77:65:21:5e:f3: 02:d1:06:53:bb:2d:fd:62:f9:b0:06:fb:60:1d:1c: d0:45:1a:1b:61:ea:04:65:8a:4b:49:c2:13:f8:46: 2f:43:42:4a:6c:75:f4:98:30:b4:b6:6c:2c:a1:27: f3:a7:4d:6a:48:c5:96:a4:31:f1:7a:fe:25:20:5a: 46:b9:61:b8:6a:59:a9:51:02:4a:db:e0:ac:15:44: 3e:c3:9e:3e:f8:48:e9:9c:29:79:a1:8e:e5:fa:eb: e2:80:37:fc:bc:51:1c:2a:42:cc:95:7c:07:4f:67: d2:fc:27:c3:9c:cb:16:ae:d7:9b:15:3d:14:5a:56: eb:bb:96:fe:4d:c2:38:32:86:df:40:f9:78:25:2d: 77:11:c8:07:6d:2d:3b:a5:3b:21:3d:dd:76:43:16: 78:01:56:c0:c1:a9:ec:be:41:a4:47:5f:6e:ea:8a: 2e:4f:25:08:22:51:92:8c:00:ed:c1:fd:90:75:cc: 22:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:10:1A:7D:2E:69:D6:2D:22:A1:DE:D0:04:5D:DD:EE:89:AF:45:78 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:74:1a:89:84:e5:88:61:53:fb:af:71:2f:da:c5:18:3f:a8: 76:79:a9:db:be:0e:d9:1c:c2:c9:07:87:b0:c2:c5:81:92:ba: 56:5d:0b:48:18:0d:b6:3d:ea:64:75:ca:60:30:e3:d4:17:d7: e6:66:b3:1b:16:c7:4f:04:75:e9:19:48:6c:03:55:dd:37:9d: 16:0e:8f:ae:25:7e:c1:20:f3:25:45:e2:17:73:14:3a:38:fb: 86:44:7c:ff:d1:89:25:81:06:6a:aa:d2:d3:7b:81:77:61:c8: 85:f8:d6:b9:9a:c5:02:91:a2:2b:6c:c7:05:52:c7:92:59:72: 56:0a:50:5e:f6:15:18:f4:06:7f:5b:66:15:23:a2:94:28:db: d1:b3:48:01:bb:f5:c0:04:4f:b6:42:c5:51:c6:1b:a8:31:4d: 1a:7f:05:d9:91:9a:4f:59:00:f0:57:aa:63:ef:02:3f:d4:2e: 73:08:30:74:c0:45:fe:57:07:d5:d5:34:ac:83:b3:89:df:e3: a4:96:b8:b8:a7:4f:21:41:13:e7:d6:5e:d0:a3:6b:21:5a:09: 64:69:1e:6b:80:df:64:06:67:ad:4e:05:3b:f3:5e:51:ad:d1: 9b:a3:99:a5:98:93:42:b9:cb:4b:76:1c:d5:d7:5e:db:94:71: 28:45:09:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6K7jbbBDfkF4WwNNr0NRzJVoL8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjExMTAwNDAwNDdaFw0yNjExMTEwNzQ0NDdaMDMxMTAvBgNV BAMTKDgzMTAxQTdEMkU2OUQ2MkQyMkExREVEMDA0NUREREVFODlBRjQ1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDniy/o2/ioViqiRu+0cLWhXRJo 6Bu8PLUGZXdX/5zz2ZlDm4feDz+URAdmVzehPbcp2SgXY+AZhAELaT8mcw+szP07 jPB3ZSFe8wLRBlO7Lf1i+bAG+2AdHNBFGhth6gRliktJwhP4Ri9DQkpsdfSYMLS2 bCyhJ/OnTWpIxZakMfF6/iUgWka5YbhqWalRAkrb4KwVRD7Dnj74SOmcKXmhjuX6 6+KAN/y8URwqQsyVfAdPZ9L8J8Ocyxau15sVPRRaVuu7lv5Nwjgyht9A+XglLXcR yAdtLTulOyE93XZDFngBVsDBqey+QaRHX27qii5PJQgiUZKMAO3B/ZB1zCLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgxAafS5p1i0iod7QBF3d7omvRXgwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEl0GomE5YhhU/uvcS/axRg/qHZ5qdu+Dtkc wskHh7DCxYGSulZdC0gYDbY96mR1ymAw49QX1+ZmsxsWx08EdekZSGwDVd03nRYO j64lfsEg8yVF4hdzFDo4+4ZEfP/RiSWBBmqq0tN7gXdhyIX41rmaxQKRoitsxwVS x5JZclYKUF72FRj0Bn9bZhUjopQo29GzSAG79cAET7ZCxVHGG6gxTRp/BdmRmk9Z APBXqmPvAj/ULnMIMHTARf5XB9XVNKyDs4nf46SWuLinTyFBE+fWXtCjayFaCWRp HmuA32QGZ61OBTvzXlGt0ZujmaWYk0K5y0t2HNXXXtuUcShFCU0= -----END CERTIFICATE-----Generated at Tue Nov 10 18:01:13 2026 by rpki-client