$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: kGuhIFC3vAi+4MHDhZgPLz00EDQNwkCq3fFzvr53WhM= Subject key identifier: BE:A7:88:D6:A0:40:AC:80:8F:C9:DB:59:72:16:23:E9:77:ED:54:3D Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 7544ADDF15A1E962B77F83349961AD79F846D82A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: EF Signing time: Mon 26 Oct 2026 21:42:29 +0000 Manifest this update: Mon 26 Oct 2026 21:37:29 +0000 Manifest next update: Tue 27 Oct 2026 22:39:29 +0000 Files and hashes: 1: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: DM3swhRZxFfva7KBVOn1Lw2bS0n4IdK/zWHLVffPFY4=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 4: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 27 Oct 2026 12:57:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:44:ad:df:15:a1:e9:62:b7:7f:83:34:99:61:ad:79:f8:46:d8:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Oct 26 21:37:29 2026 GMT Not After : Oct 27 22:39:29 2026 GMT Subject: CN=BEA788D6A040AC808FC9DB59721623E977ED543D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:72:43:d2:a8:bb:f6:58:f7:b0:bf:76:f3:a4: 9f:c5:85:54:55:e1:51:0b:eb:77:5e:20:33:d9:0e: 43:8d:cc:22:6a:bf:8e:d8:95:fa:e2:57:42:87:8a: 45:1a:ac:85:b6:cd:7e:e0:ed:a7:cd:04:23:a1:53: e1:34:5a:ff:38:c3:d6:66:59:5a:33:cb:54:30:cd: ab:d1:21:a3:f4:17:88:c5:5c:a6:a0:84:ff:69:af: 03:6f:8e:a7:24:ab:e5:14:6c:9c:e4:af:e9:38:0b: ee:17:4d:84:28:6d:ab:8d:1d:97:f1:7b:a7:60:b2: bd:83:38:68:04:c3:41:30:2f:5c:1b:b9:56:2f:4c: 67:0e:0c:33:f2:b8:25:47:42:d4:76:9e:91:c0:21: 1d:54:04:af:38:df:8f:ea:88:a2:14:e3:3c:55:cd: 43:44:65:29:ba:06:d5:97:f0:86:66:98:b9:07:ae: e3:08:94:33:0b:bf:cb:3b:06:8f:b1:82:67:9b:65: 8a:2a:da:4f:06:be:24:ab:7b:31:f9:38:79:50:55: db:85:9c:f7:4f:22:29:d9:09:6d:e0:bd:34:ab:b4: cf:6a:08:99:0d:26:09:ae:02:93:00:42:d8:a9:fb: 81:e1:30:66:59:05:56:a9:76:63:ff:b1:1b:60:a0: 2a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A7:88:D6:A0:40:AC:80:8F:C9:DB:59:72:16:23:E9:77:ED:54:3D X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:4b:40:6f:c9:d6:97:80:28:1a:ea:47:46:1b:38:70:38:b6: e5:17:b6:d4:f2:02:82:f5:e6:f3:80:20:2c:84:a9:bb:21:00: c5:4b:43:bb:fd:b6:f4:d1:b7:f0:55:ec:9e:20:dd:73:23:e8: 02:52:6e:4d:08:e6:03:90:d6:4a:01:c8:1a:9b:6e:2f:85:93: 03:4a:b7:6f:43:1b:1d:da:96:7f:8e:95:15:a5:cc:62:c9:41: f9:06:76:f3:9f:5f:e5:73:d0:f9:0a:25:a0:db:5f:85:eb:9f: 12:3c:ba:f3:ad:64:a8:15:66:0d:9f:49:92:17:05:f2:d8:6a: 5c:cd:d0:f9:5a:dc:39:48:5f:79:09:d1:3f:d0:e6:74:c7:d5: 2a:eb:95:ff:77:49:6e:90:58:ea:1f:38:cd:44:4e:cb:96:ef: 42:d0:d5:0c:a0:23:0b:d7:e3:0f:ba:07:67:4b:55:6e:32:dc: a7:e1:5d:0e:fa:f8:a3:b9:0b:2a:65:32:95:c9:ae:da:a9:09: 34:9f:ef:8b:26:fe:e6:93:2d:60:a3:f8:fe:71:ce:35:45:6e: 3e:77:9e:95:7f:9d:46:95:f8:9c:c4:56:dc:7d:98:1c:40:e5: ba:7d:ed:fb:ae:2c:d0:30:43:7d:c1:2f:c7:83:c2:f9:bc:40: ff:b0:88:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdUSt3xWh6WK3f4M0mWGtefhG2CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjEwMjYyMTM3MjlaFw0yNjEwMjcyMjM5MjlaMDMxMTAvBgNV BAMTKEJFQTc4OEQ2QTA0MEFDODA4RkM5REI1OTcyMTYyM0U5NzdFRDU0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDockPSqLv2WPewv3bzpJ/FhVRV 4VEL63deIDPZDkONzCJqv47YlfriV0KHikUarIW2zX7g7afNBCOhU+E0Wv84w9Zm WVozy1QwzavRIaP0F4jFXKaghP9prwNvjqckq+UUbJzkr+k4C+4XTYQobauNHZfx e6dgsr2DOGgEw0EwL1wbuVYvTGcODDPyuCVHQtR2npHAIR1UBK8434/qiKIU4zxV zUNEZSm6BtWX8IZmmLkHruMIlDMLv8s7Bo+xgmebZYoq2k8GviSrezH5OHlQVduF nPdPIinZCW3gvTSrtM9qCJkNJgmuApMAQtip+4HhMGZZBVapdmP/sRtgoCr9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvqeI1qBArICPydtZchYj6XftVD0wHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJLQG/J1peAKBrqR0YbOHA4tuUXttTyAoL1 5vOAICyEqbshAMVLQ7v9tvTRt/BV7J4g3XMj6AJSbk0I5gOQ1koByBqbbi+FkwNK t29DGx3aln+OlRWlzGLJQfkGdvOfX+Vz0PkKJaDbX4XrnxI8uvOtZKgVZg2fSZIX BfLYalzN0Pla3DlIX3kJ0T/Q5nTH1Srrlf93SW6QWOofOM1ETsuW70LQ1QygIwvX 4w+6B2dLVW4y3KfhXQ76+KO5CyplMpXJrtqpCTSf74sm/uaTLWCj+P5xzjVFbj53 npV/nUaV+JzEVtx9mBxA5bp97fuuLNAwQ33BL8eDwvm8QP+wiPE= -----END CERTIFICATE-----Generated at Tue Oct 27 06:57:47 2026 by rpki-client