$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: O4uzq3oZfRF77VAMivoX5gp6MtBEII0lsFin7VRKuqQ= Subject key identifier: CB:6A:09:54:3A:EC:07:A0:8C:23:67:BD:F4:3F:61:E9:CB:9C:A1:18 Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 434BAD9B616DA8F34A6F742A5530761F29E68A28 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 08:50:41 +0000 Manifest this update: Thu 23 Jul 2026 08:45:41 +0000 Manifest next update: Fri 24 Jul 2026 09:28:41 +0000 Files and hashes: 1: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 4: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: 9sFkFgL3YcsbmTicU2qhplNHoF6SgR6V0QrPDPVXEIQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 09:28:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:4b:ad:9b:61:6d:a8:f3:4a:6f:74:2a:55:30:76:1f:29:e6:8a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Jul 23 08:45:41 2026 GMT Not After : Jul 24 09:28:41 2026 GMT Subject: CN=CB6A09543AEC07A08C2367BDF43F61E9CB9CA118 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:6a:6b:e2:3a:88:f4:20:1c:86:88:e6:20:6a: a4:1a:f1:2d:7c:48:d8:be:1a:57:95:7b:40:a1:5e: 9e:cd:24:d5:16:dd:8a:12:ea:2f:6d:40:72:b3:16: 8a:e2:2c:b0:da:4c:7b:0d:30:e8:f4:16:12:33:08: 87:9c:22:44:01:35:6c:8c:1e:93:4f:b6:24:b9:c9: ee:d7:f7:9c:62:51:b9:11:6a:2c:13:4e:a5:a8:66: cf:13:3f:09:c0:b2:62:10:f1:a8:52:6d:61:df:76: 69:10:01:96:e1:85:41:1b:26:9a:f1:76:8a:a1:22: 6c:36:96:34:e8:93:50:43:cf:54:96:57:3f:4f:82: 5b:08:7b:94:3a:a8:94:83:9a:ea:e9:5d:58:30:89: a0:05:91:06:95:6f:47:aa:96:31:43:03:fd:df:45: b8:36:de:4b:0b:14:b7:cb:88:56:e9:4f:6a:31:6f: db:81:d4:f2:b3:19:c8:ee:2d:83:9d:1c:e6:45:98: 43:15:ef:d1:02:e5:94:e9:41:6c:52:a4:2b:c6:d6: a2:70:08:37:a4:64:06:69:67:18:6c:4d:f7:ae:d8: bc:9d:02:ad:b1:7f:93:59:30:df:e3:f4:ee:19:7c: 13:f0:31:4d:e4:98:53:b0:f6:85:1a:a4:e1:4a:c2: 6d:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:6A:09:54:3A:EC:07:A0:8C:23:67:BD:F4:3F:61:E9:CB:9C:A1:18 X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:bc:b5:21:4b:44:a7:e4:65:fb:43:9f:55:5b:e5:e9:92:ff: 7d:0e:2c:b0:3e:a3:85:37:39:7f:11:30:ca:38:4e:ea:0a:05: 4c:0b:0b:21:07:61:a0:3f:c0:81:14:85:b7:60:ba:95:3c:fd: e5:b9:cd:13:44:c8:6a:a5:3d:21:ab:71:52:f4:a5:b2:e2:a7: 9b:56:92:03:3b:1a:81:f2:0d:63:fe:9d:81:bd:63:a3:23:58: 2e:08:4a:88:47:ce:3d:4a:36:4f:a2:b1:a4:e9:e2:18:00:19: c8:56:20:f0:0f:51:11:46:27:5f:44:05:e0:e1:ab:fc:c7:4b: 91:29:b7:a1:38:b0:33:4c:c7:0a:42:70:0e:98:75:7e:f4:07: 3d:ed:c4:1d:f4:07:da:d6:5e:06:d8:ca:63:22:8a:cd:30:76: e2:83:3a:30:97:d7:65:93:4c:74:a6:0e:27:75:d1:ca:4f:61: 04:59:6d:52:38:8e:92:03:34:91:b8:4c:de:de:83:08:14:a7: fa:b5:68:bc:75:11:50:d3:df:eb:d8:63:47:cb:85:ab:ec:a8: 8f:f6:db:12:2e:45:86:1a:40:96:99:e0:6f:e9:b6:93:7f:ee: 87:87:40:c3:1a:42:dc:d1:8b:3a:fa:7f:7b:d5:ab:44:ad:e2: 6f:46:42:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0utm2FtqPNKb3QqVTB2HynmiigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA3MjMwODQ1NDFaFw0yNjA3MjQwOTI4NDFaMDMxMTAvBgNV BAMTKENCNkEwOTU0M0FFQzA3QTA4QzIzNjdCREY0M0Y2MUU5Q0I5Q0ExMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhamviOoj0IByGiOYgaqQa8S18 SNi+GleVe0ChXp7NJNUW3YoS6i9tQHKzForiLLDaTHsNMOj0FhIzCIecIkQBNWyM HpNPtiS5ye7X95xiUbkRaiwTTqWoZs8TPwnAsmIQ8ahSbWHfdmkQAZbhhUEbJprx doqhImw2ljTok1BDz1SWVz9PglsIe5Q6qJSDmurpXVgwiaAFkQaVb0eqljFDA/3f Rbg23ksLFLfLiFbpT2oxb9uB1PKzGcjuLYOdHOZFmEMV79EC5ZTpQWxSpCvG1qJw CDekZAZpZxhsTfeu2LydAq2xf5NZMN/j9O4ZfBPwMU3kmFOw9oUapOFKwm05AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy2oJVDrsB6CMI2e99D9h6cucoRgwHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABK8tSFLRKfkZftDn1Vb5emS/30OLLA+o4U3 OX8RMMo4TuoKBUwLCyEHYaA/wIEUhbdgupU8/eW5zRNEyGqlPSGrcVL0pbLip5tW kgM7GoHyDWP+nYG9Y6MjWC4ISohHzj1KNk+isaTp4hgAGchWIPAPURFGJ19EBeDh q/zHS5Ept6E4sDNMxwpCcA6YdX70Bz3txB30B9rWXgbYymMiis0wduKDOjCX12WT THSmDid10cpPYQRZbVI4jpIDNJG4TN7egwgUp/q1aLx1EVDT3+vYY0fLhavsqI/2 2xIuRYYaQJaZ4G/ptpN/7oeHQMMaQtzRizr6f3vVq0St4m9GQkM= -----END CERTIFICATE-----Generated at Fri Jul 24 02:50:29 2026 by rpki-client