$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: ng7Hkw9e+d9DKVjrBkMAULa2xryLTOhgaKZzi2FJJLM= Subject key identifier: BA:7A:2F:87:F0:E9:43:60:1B:16:E6:6A:36:4B:23:6B:C0:E8:98:AF Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 12A33730087CC80EA63EE88A1E1AAF0D209AEDA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: C4 Signing time: Thu 24 Sep 2026 18:28:28 +0000 Manifest this update: Thu 24 Sep 2026 18:23:28 +0000 Manifest next update: Fri 25 Sep 2026 20:51:28 +0000 Files and hashes: 1: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: uICotegBIqT8KxYqQFfpN+jBlax1ZlWhEnFT3uhhttg=) 2: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 3: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 20:51:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:a3:37:30:08:7c:c8:0e:a6:3e:e8:8a:1e:1a:af:0d:20:9a:ed:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Sep 24 18:23:28 2026 GMT Not After : Sep 25 20:51:28 2026 GMT Subject: CN=BA7A2F87F0E943601B16E66A364B236BC0E898AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:f2:d1:ea:ea:f9:f5:15:6b:71:2a:5d:67: 45:c8:99:e5:9b:5d:f1:49:a5:01:8e:d6:e3:0c:39: 17:7b:f3:96:09:54:08:d9:f9:a5:db:b4:a3:bc:a4: 5b:b3:27:db:d8:80:b4:0c:36:30:2b:ba:6e:0c:d1: 8a:dd:c1:43:65:dc:ac:57:ea:17:54:3a:f5:b7:ff: 72:d0:bc:7a:87:82:05:90:8c:cf:d6:be:c2:d5:da: 90:20:a6:f2:fe:a3:55:41:cd:68:69:d3:32:71:1b: 44:a5:61:d9:c2:e0:9f:95:70:8e:24:fd:01:d7:d1: 07:0e:24:5b:28:03:6c:ee:8e:3f:f3:7b:e5:61:11: 7a:46:47:ba:ea:94:df:1b:5c:8e:92:e4:72:39:74: 8a:02:e7:06:12:7d:9b:76:58:62:1f:b9:e1:f8:24: 85:9f:22:8f:cc:eb:21:9b:98:32:34:db:16:a0:99: 43:2d:0d:09:90:af:ea:08:e5:a4:70:64:7e:99:db: 56:0a:15:c2:29:5d:e2:e5:6d:c0:65:52:a0:47:0c: 52:82:54:1b:eb:0d:23:68:bf:18:d6:66:a0:43:77: 21:bd:23:5f:4c:9f:f2:6b:89:da:a0:09:93:89:f8: e5:63:56:ca:a4:10:98:25:3b:6f:fa:1b:93:6c:d0: 8d:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:7A:2F:87:F0:E9:43:60:1B:16:E6:6A:36:4B:23:6B:C0:E8:98:AF X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:b4:de:0d:10:7d:1b:42:27:ab:f9:c9:72:7d:44:cb:52:86: ed:ed:95:7f:b7:93:5b:ff:69:b8:3a:82:9a:ae:92:aa:ff:dd: 1a:7f:a5:6a:16:64:32:a5:6d:c2:ed:3d:99:9b:ec:cd:3c:4c: 28:9e:ab:26:25:57:dd:b7:fe:e0:e2:1e:5d:96:e6:c6:e8:2e: b5:47:8d:fc:48:fc:3c:9a:2e:08:41:49:57:1d:9c:6f:5e:be: 12:dd:70:f0:dc:52:ec:6a:0c:9e:56:30:a6:07:fd:f7:23:17: 5f:6e:8b:31:78:60:10:19:e8:17:79:0c:da:85:7d:7e:d0:83: 48:51:4f:c3:4d:8e:21:b7:ab:6d:8e:e6:02:ae:1e:80:28:7a: 2f:4c:1f:8f:7f:90:a8:3e:88:83:34:75:ab:d9:1b:bf:19:a7: 32:af:a7:11:a3:12:0e:be:40:26:09:e3:68:fb:c6:5c:97:e8: d7:82:f2:a6:4e:00:3b:30:33:a5:cf:d9:68:72:69:e0:75:96: 64:0e:de:ec:32:36:b1:75:ef:58:2f:d0:92:56:2d:35:3c:38: 75:bd:31:7a:db:bf:24:73:6f:37:5c:4f:5f:58:a3:e3:36:ac: eb:bc:6f:7d:2f:5e:d5:cc:3b:f7:25:18:0f:9a:67:3a:9c:63: 72:eb:81:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEqM3MAh8yA6mPuiKHhqvDSCa7agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA5MjQxODIzMjhaFw0yNjA5MjUyMDUxMjhaMDMxMTAvBgNV BAMTKEJBN0EyRjg3RjBFOTQzNjAxQjE2RTY2QTM2NEIyMzZCQzBFODk4QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecvLR6ur59RVrcSpdZ0XImeWb XfFJpQGO1uMMORd785YJVAjZ+aXbtKO8pFuzJ9vYgLQMNjArum4M0YrdwUNl3KxX 6hdUOvW3/3LQvHqHggWQjM/WvsLV2pAgpvL+o1VBzWhp0zJxG0SlYdnC4J+VcI4k /QHX0QcOJFsoA2zujj/ze+VhEXpGR7rqlN8bXI6S5HI5dIoC5wYSfZt2WGIfueH4 JIWfIo/M6yGbmDI02xagmUMtDQmQr+oI5aRwZH6Z21YKFcIpXeLlbcBlUqBHDFKC VBvrDSNovxjWZqBDdyG9I19Mn/JridqgCZOJ+OVjVsqkEJglO2/6G5Ns0I0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUunovh/DpQ2AbFuZqNksja8DomK8wHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJi03g0QfRtCJ6v5yXJ9RMtShu3tlX+3k1v/ abg6gpqukqr/3Rp/pWoWZDKlbcLtPZmb7M08TCieqyYlV923/uDiHl2W5sboLrVH jfxI/DyaLghBSVcdnG9evhLdcPDcUuxqDJ5WMKYH/fcjF19uizF4YBAZ6Bd5DNqF fX7Qg0hRT8NNjiG3q22O5gKuHoAoei9MH49/kKg+iIM0davZG78ZpzKvpxGjEg6+ QCYJ42j7xlyX6NeC8qZOADswM6XP2WhyaeB1lmQO3uwyNrF171gv0JJWLTU8OHW9 MXrbvyRzbzdcT19Yo+M2rOu8b30vXtXMO/clGA+aZzqcY3LrgSo= -----END CERTIFICATE-----Generated at Fri Sep 25 11:04:42 2026 by rpki-client