$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: gZHIAc5GnhnWU25t/LxUCd80dID4cl2PZV8Rg5rntSU= Subject key identifier: F0:E3:93:46:86:6D:02:A6:AB:36:E3:82:D6:D3:15:7A:79:ED:F2:E3 Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 677BC3CAEF9BA62483FCDAAAB69463823BD68229 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: BF Signing time: Sun 20 Sep 2026 23:46:12 +0000 Manifest this update: Sun 20 Sep 2026 23:41:12 +0000 Manifest next update: Tue 22 Sep 2026 02:49:12 +0000 Files and hashes: 1: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: va7YHrDPhmJ7xQu8IZuGrDgQwAxiYzsR7z2einSidUA=) 2: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 4: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7b:c3:ca:ef:9b:a6:24:83:fc:da:aa:b6:94:63:82:3b:d6:82:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Sep 20 23:41:12 2026 GMT Not After : Sep 22 02:49:12 2026 GMT Subject: CN=F0E39346866D02A6AB36E382D6D3157A79EDF2E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a5:d6:8e:56:bf:19:af:e1:f9:cc:91:f7:fc: d0:61:55:e5:e6:e8:32:bb:a0:3b:87:05:b3:6e:d1: 10:98:59:c5:f1:ef:a1:c6:b8:b2:4c:ff:1d:a0:ee: cc:71:31:db:56:51:7b:ce:19:d4:e4:60:89:37:7a: 9f:52:ab:58:43:7e:44:af:ac:95:71:95:5d:55:03: 15:14:97:4d:34:8a:4f:71:96:da:69:23:dc:41:aa: 68:54:cd:b7:e7:b6:b8:c0:28:39:41:0a:e6:13:31: fc:5d:33:e9:f3:7f:07:d2:ad:0a:2b:70:e1:95:8f: 03:47:6b:a2:e0:b9:d7:be:a8:6f:13:72:77:c8:57: 5e:f2:08:dd:7a:d1:0a:c9:3a:f0:50:9c:4e:50:ea: c1:f3:ed:04:42:c6:da:8a:86:8a:06:ad:66:de:00: da:e3:7b:21:36:fd:b6:4e:ca:3b:58:bc:7c:91:71: ef:c5:05:ac:65:07:59:5f:f4:2e:66:e3:e0:bd:b9: 01:f7:0d:16:24:57:77:4b:42:ca:fc:aa:0e:86:48: 81:0d:2b:15:a2:d3:eb:2e:61:01:52:42:52:6a:70: 07:7a:ee:c5:6f:be:c0:2d:d4:e1:d9:8a:f2:6f:a3: 24:fb:f6:e6:34:f6:a0:93:4d:93:05:8f:50:fe:c6: 58:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:E3:93:46:86:6D:02:A6:AB:36:E3:82:D6:D3:15:7A:79:ED:F2:E3 X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:05:3a:d9:46:9e:8b:51:7d:ad:67:ff:9c:2c:09:3c:4c:31: a2:12:4c:90:88:b8:30:22:81:0d:6b:d5:d6:f9:7f:10:75:dc: ff:95:9d:01:ca:f9:86:2e:ea:08:19:45:b6:e1:03:55:4e:ef: 57:d8:dc:c2:13:34:1d:21:c8:62:a9:d5:af:6d:65:38:ba:1d: b0:07:e9:84:ab:92:85:a9:8c:00:6d:8d:36:67:42:92:72:d3: 69:f6:33:12:8e:49:8f:61:2a:29:4e:85:73:cc:cc:ac:fe:bc: d2:e2:b0:fd:8a:ab:2a:24:39:86:d8:d1:9d:5f:67:d3:d3:22: 38:44:0f:48:a4:e9:6c:42:4d:80:6e:a4:de:98:f3:46:07:26: 24:59:04:de:84:34:19:f2:fc:f3:ba:14:d8:95:60:8a:58:1a: b2:b0:af:e5:d5:ac:15:bd:c1:f6:da:7f:a3:5d:fc:e2:7e:97: d1:c0:3d:8f:f0:db:ca:cd:6d:04:52:2d:c6:3a:22:7e:34:df: fd:a6:00:7f:61:53:2a:dc:c4:59:5a:45:de:79:6b:74:94:45: 0f:e0:28:24:58:10:d6:90:59:cd:dc:93:82:92:ae:0c:7d:66: 65:89:40:c1:a9:b7:98:10:e5:db:f5:60:6c:bf:2e:cb:0f:40: b5:cf:c9:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3vDyu+bpiSD/NqqtpRjgjvWgikwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA5MjAyMzQxMTJaFw0yNjA5MjIwMjQ5MTJaMDMxMTAvBgNV BAMTKEYwRTM5MzQ2ODY2RDAyQTZBQjM2RTM4MkQ2RDMxNTdBNzlFREYyRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7pdaOVr8Zr+H5zJH3/NBhVeXm 6DK7oDuHBbNu0RCYWcXx76HGuLJM/x2g7sxxMdtWUXvOGdTkYIk3ep9Sq1hDfkSv rJVxlV1VAxUUl000ik9xltppI9xBqmhUzbfntrjAKDlBCuYTMfxdM+nzfwfSrQor cOGVjwNHa6Lgude+qG8TcnfIV17yCN160QrJOvBQnE5Q6sHz7QRCxtqKhooGrWbe ANrjeyE2/bZOyjtYvHyRce/FBaxlB1lf9C5m4+C9uQH3DRYkV3dLQsr8qg6GSIEN KxWi0+suYQFSQlJqcAd67sVvvsAt1OHZivJvoyT79uY09qCTTZMFj1D+xlgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8OOTRoZtAqarNuOC1tMVennt8uMwHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMFOtlGnotRfa1n/5wsCTxMMaISTJCIuDAi gQ1r1db5fxB13P+VnQHK+YYu6ggZRbbhA1VO71fY3MITNB0hyGKp1a9tZTi6HbAH 6YSrkoWpjABtjTZnQpJy02n2MxKOSY9hKilOhXPMzKz+vNLisP2KqyokOYbY0Z1f Z9PTIjhED0ik6WxCTYBupN6Y80YHJiRZBN6ENBny/PO6FNiVYIpYGrKwr+XVrBW9 wfbaf6Nd/OJ+l9HAPY/w28rNbQRSLcY6In403/2mAH9hUyrcxFlaRd55a3SURQ/g KCRYENaQWc3ck4KSrgx9ZmWJQMGpt5gQ5dv1YGy/LssPQLXPyRY= -----END CERTIFICATE-----Generated at Mon Sep 21 13:48:55 2026 by rpki-client