$ rpki-client -vvf rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft File: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft (raw, json) Hash identifier: sFR/4ieUW3y8G+zaxI2ETJ+gVtENhhu3NwugKArZDeE= Subject key identifier: DC:D3:94:A9:46:5A:A2:24:09:B0:93:95:8C:47:F0:B7:76:DD:E2:EB Authority key identifier: BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C Certificate issuer: /CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Certificate serial: 5628FA777E5EDAF324B24592E6FB80AB4372F294 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:31:34 +0000 Manifest this update: Sat 20 Jun 2026 01:26:34 +0000 Manifest next update: Sun 21 Jun 2026 04:05:34 +0000 Files and hashes: 1: 3130332e38382e39302e302f32342d3234203d3e20313530323232.roa (hash: 2hu9TbwcEH4AjlvyaPr4Ry2Ru2UGxbtLk++XVGzAN/o=) 2: 3130332e38382e39312e302f32342d3234203d3e20313530323232.roa (hash: DVLyArOtPiaQciv4qd9x+xIQHifmztdQEhm0W8hcAZs=) 3: 3130332e38382e39302e302f32332d3234203d3e20313530323232.roa (hash: 5G6XAET+caX5D5iq/eeLuuKJnzS42MWuIS/Pcw9kNp0=) 4: BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl (hash: 0V3o58U3Vc1eRLSb1VoGJjBypaIYIGxhOweZ3KaRxlE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:05:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:28:fa:77:7e:5e:da:f3:24:b2:45:92:e6:fb:80:ab:43:72:f2:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BED90BE7E43F70BEA2E6886B13E046FB39736D7C Validity Not Before: Jun 20 01:26:34 2026 GMT Not After : Jun 21 04:05:34 2026 GMT Subject: CN=DCD394A9465AA22409B093958C47F0B776DDE2EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:25:f1:d3:b3:eb:27:f5:5b:05:d8:10:48:15: ba:1e:2e:65:b2:52:8c:d4:bd:65:2c:3e:5b:3b:ad: 96:32:ad:32:ed:3c:ee:7b:a4:c6:9c:92:d8:26:46: 2f:9a:c1:5d:dc:ab:d6:ab:a4:53:79:fc:85:97:9e: 96:54:3c:e6:f7:56:dc:e5:16:45:79:fb:c6:79:85: db:bc:6b:48:99:31:b5:70:fd:68:0e:10:9e:cb:a6: 9e:74:97:68:f3:c4:b5:d8:fd:af:c5:ae:a4:be:f5: 62:46:06:77:c4:25:e3:18:7e:00:68:3d:81:b9:21: 2e:c7:b3:8d:b3:e7:64:60:d8:cc:1f:02:9c:2a:b6: f9:60:de:f6:c9:cd:34:71:3c:25:d1:93:0b:87:2b: 97:8b:d5:a9:d6:8d:cb:74:cc:7d:ba:ba:c6:46:c6: c9:e1:9f:a4:9d:2b:43:55:57:ea:f6:77:bb:b5:b0: 07:12:8c:58:74:34:2c:b5:a2:0b:50:0c:d2:0f:28: f8:9a:e3:3d:40:51:25:c2:8a:5f:bc:95:28:35:3a: 51:05:b8:81:24:98:a0:8e:3d:68:ff:04:9d:b4:42: c5:f4:91:2c:f1:4e:24:e3:be:92:a4:4a:16:d0:f8: 20:32:dd:04:ee:67:89:5d:4a:44:41:85:ef:c0:0f: ec:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:D3:94:A9:46:5A:A2:24:09:B0:93:95:8C:47:F0:B7:76:DD:E2:EB X509v3 Authority Key Identifier: keyid:BE:D9:0B:E7:E4:3F:70:BE:A2:E6:88:6B:13:E0:46:FB:39:73:6D:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7e91809e-dd49-4c52-b11f-2a518c3aa856/0/BED90BE7E43F70BEA2E6886B13E046FB39736D7C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:9f:8f:4a:77:43:55:15:85:ad:72:25:a0:43:3e:7e:78:30: a0:c2:07:9f:0a:01:da:dd:82:3b:c4:fa:4c:fd:75:91:6f:a8: d7:b0:b2:2b:8c:09:06:1b:7c:18:9a:18:04:e9:8f:58:bf:21: 0f:4d:43:7e:e9:b4:4c:9d:6b:fc:ba:9e:f9:85:d5:49:18:25: a6:9b:cb:24:3c:b3:96:5e:da:df:17:8c:d3:91:7a:a6:56:4f: 81:fc:ad:2b:84:c1:15:b9:30:f0:0a:43:ba:9f:9b:42:3f:c9: e8:c2:01:c9:b9:19:99:bd:1f:1e:e7:bc:88:57:be:1e:0c:81: 19:61:03:55:e7:0a:6c:81:58:47:2a:12:70:9b:16:4a:f1:26: fe:c5:92:e3:97:e5:a4:88:52:28:54:db:9b:80:aa:07:28:4a: bf:d6:27:88:ae:fc:cd:3d:c4:32:5d:a4:49:e7:41:9e:df:91: cb:9b:c2:12:c0:4f:0c:98:9f:e3:e7:b7:23:90:e9:75:9e:94: dd:f9:bf:a4:fc:bc:a4:65:2c:cf:2c:27:75:8e:68:22:e0:3b: 76:52:46:99:36:40:b6:7a:fb:3c:74:53:48:1a:87:c3:fa:c1: 39:d0:22:59:d8:b9:4c:92:e8:22:7a:9f:4e:63:55:6a:da:e3: 31:94:8e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVij6d35e2vMkskWS5vuAq0Ny8pQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIz OTczNkQ3QzAeFw0yNjA2MjAwMTI2MzRaFw0yNjA2MjEwNDA1MzRaMDMxMTAvBgNV BAMTKERDRDM5NEE5NDY1QUEyMjQwOUIwOTM5NThDNDdGMEI3NzZEREUyRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtJfHTs+sn9VsF2BBIFboeLmWy UozUvWUsPls7rZYyrTLtPO57pMacktgmRi+awV3cq9arpFN5/IWXnpZUPOb3Vtzl FkV5+8Z5hdu8a0iZMbVw/WgOEJ7Lpp50l2jzxLXY/a/FrqS+9WJGBnfEJeMYfgBo PYG5IS7Hs42z52Rg2MwfApwqtvlg3vbJzTRxPCXRkwuHK5eL1anWjct0zH26usZG xsnhn6SdK0NVV+r2d7u1sAcSjFh0NCy1ogtQDNIPKPia4z1AUSXCil+8lSg1OlEF uIEkmKCOPWj/BJ20QsX0kSzxTiTjvpKkShbQ+CAy3QTuZ4ldSkRBhe/AD+zbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NOUqUZaoiQJsJOVjEfwt3bd4uswHwYDVR0j BBgwFoAUvtkL5+Q/cL6i5ohrE+BG+zlzbXwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v N2U5MTgwOWUtZGQ0OS00YzUyLWIxMWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdF NDNGNzBCRUEyRTY4ODZCMTNFMDQ2RkIzOTczNkQ3Qy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CRUQ5MEJFN0U0M0Y3MEJFQTJFNjg4NkIxM0UwNDZGQjM5NzM2 RDdDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vN2U5MTgwOWUtZGQ0OS00YzUyLWIx MWYtMmE1MThjM2FhODU2LzAvQkVEOTBCRTdFNDNGNzBCRUEyRTY4ODZCMTNFMDQ2 RkIzOTczNkQ3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqfj0p3Q1UVha1yJaBDPn54MKDCB58KAdrd gjvE+kz9dZFvqNewsiuMCQYbfBiaGATpj1i/IQ9NQ37ptEyda/y6nvmF1UkYJaab yyQ8s5Ze2t8XjNOReqZWT4H8rSuEwRW5MPAKQ7qfm0I/yejCAcm5GZm9Hx7nvIhX vh4MgRlhA1XnCmyBWEcqEnCbFkrxJv7FkuOX5aSIUihU25uAqgcoSr/WJ4iu/M09 xDJdpEnnQZ7fkcubwhLATwyYn+PntyOQ6XWelN35v6T8vKRlLM8sJ3WOaCLgO3ZS Rpk2QLZ6+zx0U0gah8P6wTnQIlnYuUyS6CJ6n05jVWra4zGUjrg= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:16 2026 by rpki-client