$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft File: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft (raw, json) Hash identifier: ZG0Saa1zfY58KnzLqbNsf97deRacJDQbiFc8X5JhNd0= Subject key identifier: 16:BA:02:30:C9:03:4D:3A:E5:78:52:C1:E2:9B:0C:94:C5:2A:55:39 Authority key identifier: BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 Certificate issuer: /CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Certificate serial: 5697B6440802C3CD813123C8B2AA672E4BEB77AE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft Manifest number: BC Signing time: Mon 21 Sep 2026 06:14:19 +0000 Manifest this update: Mon 21 Sep 2026 06:09:19 +0000 Manifest next update: Tue 22 Sep 2026 09:40:19 +0000 Files and hashes: 1: BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl (hash: 7TWfysnRwfejnWrurljfHrpMD83OeWAIKb5DyFvnJzs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 09:40:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:97:b6:44:08:02:c3:cd:81:31:23:c8:b2:aa:67:2e:4b:eb:77:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEBA082E375BCC2FE9EB7A46B265045E466AEF72 Validity Not Before: Sep 21 06:09:19 2026 GMT Not After : Sep 22 09:40:19 2026 GMT Subject: CN=16BA0230C9034D3AE57852C1E29B0C94C52A5539 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:fb:78:5d:4d:a5:82:12:4b:41:ad:8a:a5:36: ba:74:1e:a1:65:41:5d:23:6b:47:60:b1:80:60:26: 7b:11:df:c2:5e:44:52:7d:83:e1:ca:11:30:ac:70: 21:d0:bc:d9:59:73:8c:7d:9d:55:07:95:78:79:a4: 91:cb:2b:58:6b:dd:f9:0c:4f:4d:88:61:a1:38:bb: 81:3d:98:c6:b9:bb:bd:15:5e:17:63:7e:29:e1:61: cd:c6:94:bb:c6:4c:65:56:f3:5f:f8:23:59:7b:1e: ca:73:18:f6:f7:33:a5:ee:68:6c:64:0b:b6:b2:d9: e9:94:70:0f:ed:b5:e6:77:4f:33:9c:76:d9:13:e7: 97:ea:f1:bf:30:64:b5:37:8e:7f:ea:e1:d1:b7:47: a2:20:e2:28:42:32:b0:5f:c3:2d:c6:98:cb:20:ee: 36:da:1e:42:96:51:11:77:a9:9c:fa:5b:44:c4:20: 38:66:71:d0:fc:ee:6b:7f:29:a3:33:28:d3:8f:11: d2:87:8c:2b:ec:2f:ed:7e:1a:71:95:07:99:95:e9: ec:a6:b3:f5:87:99:85:fb:13:72:1a:9a:14:cc:ce: b8:31:19:d5:26:3c:8f:d6:fc:9b:26:cf:ae:ba:08: 08:c2:45:53:49:fb:e5:23:93:9e:0f:9d:24:d5:d6: fa:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:BA:02:30:C9:03:4D:3A:E5:78:52:C1:E2:9B:0C:94:C5:2A:55:39 X509v3 Authority Key Identifier: keyid:BE:BA:08:2E:37:5B:CC:2F:E9:EB:7A:46:B2:65:04:5E:46:6A:EF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9f7160dd-ff80-4efa-bcf1-bb75d6d4f08a/0/BEBA082E375BCC2FE9EB7A46B265045E466AEF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:3e:f2:a9:c4:14:94:1c:5d:0c:31:59:b1:cb:9d:d6:a3:e2: fa:70:c8:4e:f7:d6:70:b4:77:24:ba:46:7d:d2:f4:5c:a3:56: 86:ea:a4:9d:df:b1:80:54:89:54:36:85:11:35:fb:0b:54:df: f8:7d:2d:8d:6a:8e:77:57:9b:7c:10:34:7d:40:a6:ef:f3:be: f6:bc:94:f0:f5:ac:ef:49:9a:1e:ed:ef:d6:aa:2d:05:34:e0: fa:3f:60:23:5a:d4:05:06:a9:35:40:c8:c5:2d:30:41:55:10: f5:c9:1b:30:88:da:c6:52:44:f4:b9:b4:05:a2:56:fe:a0:93: 17:1d:5b:1b:49:f8:2a:d1:96:be:a4:ac:1c:f1:e5:1e:7e:63: b9:6d:8c:18:a4:b2:95:f3:16:ed:34:41:52:54:e3:ca:af:18: 6d:5b:99:61:08:a8:33:2a:54:9b:9d:72:fc:36:1d:a4:07:ab: 9d:3c:cf:c0:92:c5:90:c4:99:d0:ab:2e:36:de:c9:67:f5:20: 60:d8:72:48:98:fd:fc:95:0f:d6:69:7b:ea:4c:e6:d7:9a:b7: 5f:c9:fc:ee:58:7a:b3:47:4c:d3:93:ab:1b:e5:82:ea:41:a7: ff:7c:56:60:09:7f:5f:f7:e0:16:69:fe:bd:b5:99:6d:10:d3: 5e:b1:a1:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVpe2RAgCw82BMSPIsqpnLkvrd64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0 NjZBRUY3MjAeFw0yNjA5MjEwNjA5MTlaFw0yNjA5MjIwOTQwMTlaMDMxMTAvBgNV BAMTKDE2QkEwMjMwQzkwMzREM0FFNTc4NTJDMUUyOUIwQzk0QzUyQTU1MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/+3hdTaWCEktBrYqlNrp0HqFl QV0ja0dgsYBgJnsR38JeRFJ9g+HKETCscCHQvNlZc4x9nVUHlXh5pJHLK1hr3fkM T02IYaE4u4E9mMa5u70VXhdjfinhYc3GlLvGTGVW81/4I1l7HspzGPb3M6XuaGxk C7ay2emUcA/tteZ3TzOcdtkT55fq8b8wZLU3jn/q4dG3R6Ig4ihCMrBfwy3GmMsg 7jbaHkKWURF3qZz6W0TEIDhmcdD87mt/KaMzKNOPEdKHjCvsL+1+GnGVB5mV6eym s/WHmYX7E3IamhTMzrgxGdUmPI/W/Jsmz666CAjCRVNJ++Ujk54PnSTV1vpnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFroCMMkDTTrleFLB4psMlMUqVTkwHwYDVR0j BBgwFoAUvroILjdbzC/p63pGsmUEXkZq73IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWY3MTYwZGQtZmY4MC00ZWZhLWJjZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUz NzVCQ0MyRkU5RUI3QTQ2QjI2NTA0NUU0NjZBRUY3Mi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUJBMDgyRTM3NUJDQzJGRTlFQjdBNDZCMjY1MDQ1RTQ2NkFF RjcyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWY3MTYwZGQtZmY4MC00ZWZhLWJj ZjEtYmI3NWQ2ZDRmMDhhLzAvQkVCQTA4MkUzNzVCQ0MyRkU5RUI3QTQ2QjI2NTA0 NUU0NjZBRUY3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALo+8qnEFJQcXQwxWbHLndaj4vpwyE731nC0 dyS6Rn3S9FyjVobqpJ3fsYBUiVQ2hRE1+wtU3/h9LY1qjndXm3wQNH1Apu/zvva8 lPD1rO9Jmh7t79aqLQU04Po/YCNa1AUGqTVAyMUtMEFVEPXJGzCI2sZSRPS5tAWi Vv6gkxcdWxtJ+CrRlr6krBzx5R5+Y7ltjBikspXzFu00QVJU48qvGG1bmWEIqDMq VJudcvw2HaQHq508z8CSxZDEmdCrLjbeyWf1IGDYckiY/fyVD9Zpe+pM5teat1/J /O5YerNHTNOTqxvlgupBp/98VmAJf1/34BZp/r21mW0Q016xocI= -----END CERTIFICATE-----Generated at Tue Sep 22 00:02:16 2026 by rpki-client