$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: rDbWgIkKHHSV9pSOPeomMyExEBCLjzOSJZUMgU1HFJI= Subject key identifier: 6F:80:44:F6:53:CE:95:6F:74:4E:85:76:F4:67:9D:61:24:66:C2:9A Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 6A88A498F6B7D330905AD2663D054E37B2E125DD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 02:10:40 +0000 Manifest this update: Thu 03 Sep 2026 02:05:40 +0000 Manifest next update: Fri 04 Sep 2026 03:05:40 +0000 Files and hashes: 1: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 2: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 4: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: gKIBEd8XiCqO97RTrh4Fj9uZPFoIQBokHNJMmC9I1Js=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 03:05:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:88:a4:98:f6:b7:d3:30:90:5a:d2:66:3d:05:4e:37:b2:e1:25:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Sep 3 02:05:40 2026 GMT Not After : Sep 4 03:05:40 2026 GMT Subject: CN=6F8044F653CE956F744E8576F4679D612466C29A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ec:12:94:c0:01:d9:7d:c3:e1:d4:33:08:2d: 7e:ba:2e:bf:50:aa:fc:d5:00:2a:7a:f1:d8:bb:9b: c1:0c:b0:1e:5b:2e:a4:e3:5f:a2:09:67:dd:43:aa: 00:7a:eb:7d:b1:15:71:e4:63:6f:b7:38:e2:3f:25: 0e:18:99:09:20:0f:ad:b5:a2:5b:31:dd:ac:6b:a0: 2b:c3:42:19:3a:8e:b5:f7:92:a2:de:11:51:58:73: e8:45:19:fa:d3:68:e9:4e:01:29:b4:50:7d:55:07: 34:ca:77:66:3e:05:a1:90:4a:21:ed:eb:3c:05:c1: 8f:5c:85:c4:d3:5e:e8:01:c0:5a:6a:47:c2:d5:c4: a5:52:e0:c3:38:d4:ae:5c:5d:d4:f2:10:60:3c:ef: e6:36:82:a1:f5:f6:c4:ba:c0:b9:63:36:bb:55:4f: b5:42:16:ff:63:27:e4:7f:c5:1e:be:75:de:99:e4: 9f:f3:1c:b6:f8:1b:ed:47:c6:8d:b0:fe:04:c4:cc: a0:36:36:50:b5:83:11:52:d9:e3:72:aa:bd:73:45: 00:f2:4c:8a:e0:85:f4:52:da:cb:f7:90:4d:c5:91: 52:84:a4:e0:df:b8:82:e5:fc:31:7e:a7:6b:40:15: ef:0f:d0:94:8e:11:d6:8c:ca:a4:fe:b7:b0:54:fc: cf:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:80:44:F6:53:CE:95:6F:74:4E:85:76:F4:67:9D:61:24:66:C2:9A X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:68:83:49:58:a7:27:0e:f6:64:30:68:7e:92:81:d7:d3:04: 3f:1a:f8:f2:09:87:3e:7d:9b:d1:0c:91:b0:ae:99:0f:f9:03: 02:48:79:ac:a3:b9:23:dc:e9:b4:7a:ed:39:e9:98:72:bd:d4: 64:60:f2:1b:e9:11:cc:c5:8f:57:d3:9c:fd:40:11:64:57:2e: 7f:6c:a3:17:cc:e1:f3:15:ae:bb:94:06:5a:cc:c4:66:89:e2: f3:ba:60:d6:76:0a:2d:c3:ce:91:6e:fa:65:1e:f5:97:b1:50: b5:a5:fa:ea:6a:23:b8:fc:1b:7f:f5:14:46:14:68:07:30:28: 63:da:27:b4:a8:82:9e:67:5d:3a:87:f7:8a:55:cf:94:61:4e: 48:52:7e:36:39:f8:08:b9:fc:27:b8:3d:66:ea:14:24:ad:03: e4:8f:93:93:52:8c:d4:b1:60:fa:f2:59:9a:21:40:3f:60:ae: 81:63:59:43:10:62:f3:5d:26:ce:0f:9a:3f:18:ca:3b:a2:ce: 2a:68:4c:b8:1e:49:b7:e8:6c:06:5e:49:07:3e:3b:08:d6:81: 02:4a:c6:67:84:ca:b2:e5:3a:67:f6:02:60:30:ad:71:c3:9b: 3e:8f:6b:90:27:61:9d:86:88:16:db:8b:59:42:43:84:a1:1b: 1c:63:e6:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoikmPa30zCQWtJmPQVON7LhJd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA5MDMwMjA1NDBaFw0yNjA5MDQwMzA1NDBaMDMxMTAvBgNV BAMTKDZGODA0NEY2NTNDRTk1NkY3NDRFODU3NkY0Njc5RDYxMjQ2NkMyOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC17BKUwAHZfcPh1DMILX66Lr9Q qvzVACp68di7m8EMsB5bLqTjX6IJZ91DqgB6632xFXHkY2+3OOI/JQ4YmQkgD621 olsx3axroCvDQhk6jrX3kqLeEVFYc+hFGfrTaOlOASm0UH1VBzTKd2Y+BaGQSiHt 6zwFwY9chcTTXugBwFpqR8LVxKVS4MM41K5cXdTyEGA87+Y2gqH19sS6wLljNrtV T7VCFv9jJ+R/xR6+dd6Z5J/zHLb4G+1Hxo2w/gTEzKA2NlC1gxFS2eNyqr1zRQDy TIrghfRS2sv3kE3FkVKEpODfuILl/DF+p2tAFe8P0JSOEdaMyqT+t7BU/M/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb4BE9lPOlW90ToV29GedYSRmwpowHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxog0lYpycO9mQwaH6SgdfTBD8a+PIJhz59 m9EMkbCumQ/5AwJIeayjuSPc6bR67TnpmHK91GRg8hvpEczFj1fTnP1AEWRXLn9s oxfM4fMVrruUBlrMxGaJ4vO6YNZ2Ci3DzpFu+mUe9ZexULWl+upqI7j8G3/1FEYU aAcwKGPaJ7Sogp5nXTqH94pVz5RhTkhSfjY5+Ai5/Ce4PWbqFCStA+SPk5NSjNSx YPryWZohQD9groFjWUMQYvNdJs4Pmj8YyjuizipoTLgeSbfobAZeSQc+OwjWgQJK xmeEyrLlOmf2AmAwrXHDmz6Pa5AnYZ2GiBbbi1lCQ4ShGxxj5rM= -----END CERTIFICATE-----Generated at Thu Sep 3 12:38:48 2026 by rpki-client