$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: tKWiN0+w7udTU0hti8k5zSRAFlPLWcV5jJ/rJRaf86Q= Subject key identifier: FB:2D:64:80:9A:E1:B6:B9:B7:7C:EB:D1:3B:63:5D:C4:C9:79:D2:74 Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 1577698796F53D6550AF5A3A01B80D7310E7A0D9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:17:03 +0000 Manifest this update: Tue 12 May 2026 17:12:03 +0000 Manifest next update: Wed 13 May 2026 18:14:03 +0000 Files and hashes: 1: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 3: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 4: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: vRndeWyCu/LwH0ZlN3azAaT5RSKjFqeir+KZ9k6324A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:77:69:87:96:f5:3d:65:50:af:5a:3a:01:b8:0d:73:10:e7:a0:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: May 12 17:12:03 2026 GMT Not After : May 13 18:14:03 2026 GMT Subject: CN=FB2D64809AE1B6B9B77CEBD13B635DC4C979D274 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6f:80:33:cc:09:22:58:89:0f:cd:7c:26:9a: 4b:98:c8:07:5d:b9:4c:14:6d:7f:f3:79:f8:b0:c9: cb:a7:ec:79:73:93:01:3c:be:00:39:21:b2:6a:d5: c2:22:32:ba:44:73:58:1a:e8:f7:32:4b:1e:28:00: b1:ad:a0:b6:a8:af:e0:bb:18:86:26:c0:72:f2:3e: 62:e5:43:f4:33:c1:d6:07:3d:a9:9c:b1:96:95:92: ca:49:8b:e9:c0:c7:ea:0c:09:cb:99:9d:50:87:38: 6f:06:fd:20:b3:f3:61:2a:97:95:42:0a:d4:b7:87: da:b5:f6:ca:b4:81:71:d3:5a:d0:02:5b:bd:8c:9c: 3c:78:cb:dc:fd:dc:8f:d9:77:7f:5b:df:d7:ff:40: 87:a3:b1:73:9b:5a:7e:61:bc:8e:d0:6f:fe:b5:95: da:38:d0:be:a1:65:1e:36:65:bf:b6:de:22:b2:d6: c3:25:e2:35:ef:4e:40:a9:01:ad:f3:b5:a6:91:37: c5:3e:26:72:75:61:b6:76:3b:b0:39:c0:33:d6:ae: 0b:29:f2:72:05:b1:64:08:05:b5:fb:fe:b1:5b:e2: 9e:8c:eb:1e:7e:e5:51:3c:09:18:4f:37:12:e1:ff: 1e:c2:e3:13:24:25:83:76:f0:be:fc:cc:9a:b3:80: ad:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:2D:64:80:9A:E1:B6:B9:B7:7C:EB:D1:3B:63:5D:C4:C9:79:D2:74 X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:31:85:b0:0a:5c:ea:d7:14:a5:b7:16:b0:e2:e9:ae:3c:61: d2:a8:f3:6a:5d:e8:71:74:c1:06:9f:4d:ef:ae:25:ac:0e:8d: 2e:b3:d1:f8:23:34:73:df:ea:fb:ed:89:dd:3d:d2:2b:6a:6b: ac:d7:72:41:93:8c:fa:9b:e7:7b:09:ff:3a:b6:a0:46:98:3f: 8c:be:95:c1:cf:ce:65:1e:05:cf:20:7d:b6:38:e5:7f:1a:d8: f8:e1:91:cf:cb:4b:3f:61:5b:f1:ae:13:dd:6b:b3:83:84:59: 1a:cf:8c:ab:5f:6b:1a:3f:31:d0:73:9b:d0:3d:c7:63:f0:87: f4:a4:1f:70:06:c4:28:7d:31:1f:37:4a:4b:d9:a5:94:5c:35: f8:23:e7:41:a8:68:c5:16:e3:4b:c9:25:c5:b0:82:ad:c1:47: eb:69:79:96:63:7f:6f:fe:04:be:47:0e:b0:c6:65:1a:fa:2d: 62:c1:1c:a5:6d:2d:9c:66:43:b3:7f:d4:f3:a3:42:47:b7:d7: 07:4d:31:27:a7:29:b7:1b:89:1d:62:f1:a6:3e:83:72:8a:53: 23:93:0b:47:d4:bc:8e:06:55:96:d8:1d:0c:40:ae:2a:1a:29: 25:70:97:76:78:47:25:80:4a:2b:6f:9a:cd:81:53:d0:0b:2d: 66:90:f9:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFXdph5b1PWVQr1o6AbgNcxDnoNkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA1MTIxNzEyMDNaFw0yNjA1MTMxODE0MDNaMDMxMTAvBgNV BAMTKEZCMkQ2NDgwOUFFMUI2QjlCNzdDRUJEMTNCNjM1REM0Qzk3OUQyNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6b4AzzAkiWIkPzXwmmkuYyAdd uUwUbX/zefiwycun7HlzkwE8vgA5IbJq1cIiMrpEc1ga6PcySx4oALGtoLaor+C7 GIYmwHLyPmLlQ/QzwdYHPamcsZaVkspJi+nAx+oMCcuZnVCHOG8G/SCz82Eql5VC CtS3h9q19sq0gXHTWtACW72MnDx4y9z93I/Zd39b39f/QIejsXObWn5hvI7Qb/61 ldo40L6hZR42Zb+23iKy1sMl4jXvTkCpAa3ztaaRN8U+JnJ1YbZ2O7A5wDPWrgsp 8nIFsWQIBbX7/rFb4p6M6x5+5VE8CRhPNxLh/x7C4xMkJYN28L78zJqzgK1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+y1kgJrhtrm3fOvRO2NdxMl50nQwHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAxhbAKXOrXFKW3FrDi6a48YdKo82pd6HF0 wQafTe+uJawOjS6z0fgjNHPf6vvtid090itqa6zXckGTjPqb53sJ/zq2oEaYP4y+ lcHPzmUeBc8gfbY45X8a2Pjhkc/LSz9hW/GuE91rs4OEWRrPjKtfaxo/MdBzm9A9 x2Pwh/SkH3AGxCh9MR83SkvZpZRcNfgj50GoaMUW40vJJcWwgq3BR+tpeZZjf2/+ BL5HDrDGZRr6LWLBHKVtLZxmQ7N/1POjQke31wdNMSenKbcbiR1i8aY+g3KKUyOT C0fUvI4GVZbYHQxArioaKSVwl3Z4RyWASitvms2BU9ALLWaQ+T8= -----END CERTIFICATE-----Generated at Wed May 13 02:50:41 2026 by rpki-client