$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: CoKL5jalhXy948FJ511NNZ4eAQTjwWbkokGrUv9pfBo= Subject key identifier: 24:5E:5A:73:3D:C1:39:19:D2:B9:56:AA:99:82:F1:8F:FB:09:84:2A Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 11E150C5292E61A5929E5BE9BC1483CAC719183A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 22:51:49 +0000 Manifest this update: Tue 16 Jun 2026 22:46:49 +0000 Manifest next update: Thu 18 Jun 2026 01:50:49 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 3: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 4: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: aNlHPbN3ru2r4b/kRX4DxHuC5PPNMiKgFhR0o7dARI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:50:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e1:50:c5:29:2e:61:a5:92:9e:5b:e9:bc:14:83:ca:c7:19:18:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Jun 16 22:46:49 2026 GMT Not After : Jun 18 01:50:49 2026 GMT Subject: CN=245E5A733DC13919D2B956AA9982F18FFB09842A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:4c:03:c2:cb:fe:91:27:8f:eb:de:2b:7a:bf: 94:ec:40:e8:d4:44:ef:92:c6:fb:ec:27:88:29:a2: 99:8b:bf:46:86:d3:a5:93:5f:55:b2:a3:de:73:b3: e9:e0:3c:fb:74:01:ef:40:db:a3:f9:32:aa:47:27: ea:bc:9d:8b:1d:e9:ac:a0:bb:d4:4a:ce:30:f7:4c: c3:09:32:e8:a5:b6:2d:59:ea:c5:6f:99:22:69:a7: 07:6a:2b:cd:9e:05:c1:04:3a:3f:ba:3c:6f:ba:93: 2c:58:22:d2:1d:e1:6f:3a:cb:dc:a5:bf:53:5f:0a: 6f:e6:75:09:87:2a:e8:8f:83:2a:c1:6f:97:64:61: 9f:7a:cc:ef:32:5e:12:53:44:9c:8b:95:0d:f1:ec: 31:7f:1c:43:da:ec:2b:9c:e9:83:57:9f:4f:f4:59: e0:ae:9c:cf:e2:92:61:65:82:18:3d:c0:7b:bf:d0: 2a:e2:9e:5b:52:e4:22:eb:a3:1d:74:35:67:94:b0: 59:3f:a5:67:47:e6:f2:f8:0e:09:67:b8:58:41:73: 7b:c3:8e:5e:05:58:e0:23:dd:79:ad:f1:ea:96:3a: 6c:74:28:5a:de:ad:a6:3e:34:21:41:c2:ee:08:97: f9:69:7c:44:3c:21:79:ba:9b:0d:47:f6:9d:c6:76: 6b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:5E:5A:73:3D:C1:39:19:D2:B9:56:AA:99:82:F1:8F:FB:09:84:2A X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:6a:05:1f:0a:75:12:69:42:9d:e5:72:be:f0:e2:93:3c:4a: 2e:80:e6:90:c9:49:3b:f5:fe:68:54:57:69:41:8d:7e:d9:88: cb:8e:19:e2:c4:c3:b0:b3:2d:9b:cf:be:3b:dc:a3:79:31:97: 17:b9:f3:29:42:56:b0:f0:d6:6c:cb:cb:22:10:c8:17:ff:ce: 75:e4:b8:27:0a:3b:00:9d:e9:29:4e:7b:8b:e1:4d:bc:8e:46: 02:06:37:29:87:a4:1e:f2:9e:9e:2f:e0:7b:77:9e:65:bc:68: 71:5c:dc:ca:da:e3:98:09:dc:73:f9:29:4f:e4:f9:e9:67:3a: 02:da:71:3f:56:2d:57:80:c7:ce:ef:e9:86:10:f1:27:2b:d4: ed:fc:aa:65:10:85:d7:74:02:81:d0:72:46:f2:eb:a6:ca:b9: 88:7d:ec:3a:ce:b4:27:2e:c9:21:ce:c2:38:f4:25:53:01:d9: 5e:0e:c3:bd:d2:8b:0d:62:02:fe:2f:ed:0c:82:5a:75:d0:ec: 70:ea:16:5b:18:c7:ab:4d:b1:50:08:de:8c:6f:16:b5:c5:7c: 31:e5:cf:db:f5:2b:c8:2b:9b:ba:66:e7:1f:95:ae:cb:80:31: c9:4b:23:49:b0:51:45:ca:04:c1:26:74:8f:82:66:94:01:a9: d0:ff:d7:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEeFQxSkuYaWSnlvpvBSDyscZGDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA2MTYyMjQ2NDlaFw0yNjA2MTgwMTUwNDlaMDMxMTAvBgNV BAMTKDI0NUU1QTczM0RDMTM5MTlEMkI5NTZBQTk5ODJGMThGRkIwOTg0MkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TAPCy/6RJ4/r3it6v5TsQOjU RO+SxvvsJ4gpopmLv0aG06WTX1Wyo95zs+ngPPt0Ae9A26P5MqpHJ+q8nYsd6ayg u9RKzjD3TMMJMuilti1Z6sVvmSJppwdqK82eBcEEOj+6PG+6kyxYItId4W86y9yl v1NfCm/mdQmHKuiPgyrBb5dkYZ96zO8yXhJTRJyLlQ3x7DF/HEPa7Cuc6YNXn0/0 WeCunM/ikmFlghg9wHu/0CrinltS5CLrox10NWeUsFk/pWdH5vL4DglnuFhBc3vD jl4FWOAj3Xmt8eqWOmx0KFreraY+NCFBwu4Il/lpfEQ8IXm6mw1H9p3GdmsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJF5acz3BORnSuVaqmYLxj/sJhCowHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1qBR8KdRJpQp3lcr7w4pM8Si6A5pDJSTv1 /mhUV2lBjX7ZiMuOGeLEw7CzLZvPvjvco3kxlxe58ylCVrDw1mzLyyIQyBf/znXk uCcKOwCd6SlOe4vhTbyORgIGNymHpB7ynp4v4Ht3nmW8aHFc3Mra45gJ3HP5KU/k +elnOgLacT9WLVeAx87v6YYQ8Scr1O38qmUQhdd0AoHQckby66bKuYh97DrOtCcu ySHOwjj0JVMB2V4Ow73Siw1iAv4v7QyCWnXQ7HDqFlsYx6tNsVAI3oxvFrXFfDHl z9v1K8grm7pm5x+VrsuAMclLI0mwUUXKBMEmdI+CZpQBqdD/1x4= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:07 2026 by rpki-client