$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: WTPvLQz8Rh8AOYhXL0yDfhVSMuE7iXUlU50Q6u8YGH4= Subject key identifier: C2:52:AD:CC:AF:39:C5:E0:73:86:E8:F8:78:E6:02:AE:47:57:F5:78 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 356D9398F20DA22E94258A3732ACA9C74CE571B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 02F1 Signing time: Sun 11 May 2025 21:41:34 +0000 Manifest this update: Sun 11 May 2025 21:36:34 +0000 Manifest next update: Thu 15 May 2025 01:31:34 +0000 Files and hashes: 1: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: LsAYTUQr5As8qfFqTa+1DZCPoeyEavqXAP87UR2mlIE=) 2: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: PT71EwcCGdD9sEok1qJyykxYTSsjq/yTnU1EAjSDTC8=) 3: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: 9mvwB+Ook70fsomsL5rBOKlk077qIgjq42/zbahljiA=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: 6VJ/MYCO9xuGaO2E0r07+5Yt+FbEnGyN0t5eMGpo0s4=) 5: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: DevRUOBrBnLuFdFg+uPjOCH/cIZdiHwciBZvhhEle6Y=) 6: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 4nF39wRALqFShI2k467oN5qmtzcgwppZaMcdszyLsyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 01:31:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:6d:93:98:f2:0d:a2:2e:94:25:8a:37:32:ac:a9:c7:4c:e5:71:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: May 11 21:36:34 2025 GMT Not After : May 15 01:31:34 2025 GMT Subject: CN=C252ADCCAF39C5E07386E8F878E602AE4757F578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:ad:5c:ac:bd:3d:5f:25:26:7a:fc:ac:ab:23: c1:ca:5f:7c:20:50:a2:9a:21:3f:e8:67:14:bd:28: 64:58:c1:94:49:19:0b:bc:f5:28:0a:31:90:d0:79: 8e:4d:c2:1e:ce:7a:c9:66:08:67:c4:10:ab:9c:95: d2:8f:36:4e:87:8a:b0:b6:35:a5:20:3c:cb:81:72: 68:e2:3b:a9:aa:1a:1d:83:33:77:5d:88:59:be:ce: 3e:69:89:7a:d2:f9:06:1b:a8:c8:04:6a:11:33:d1: b0:ab:e6:fd:ab:0a:a3:0a:29:f3:57:c5:d5:76:91: 7a:37:13:c0:89:0c:5c:d4:f7:b4:71:22:4a:c2:e6: 52:12:1a:1c:83:67:3f:46:2f:f2:cc:12:f0:56:27: 90:f5:cf:4d:10:20:27:33:a2:dc:62:00:9c:c4:d0: d3:65:b2:90:51:e7:2b:99:1b:3e:8c:20:a2:41:94: 7b:2f:f1:c1:01:69:98:a5:28:25:3f:c5:07:d1:f5: 10:6a:82:cb:6d:25:e0:ca:4c:35:10:fd:34:aa:64: 08:5c:51:60:d9:23:45:b6:00:d1:d2:1d:e4:36:f9: 6f:bd:88:e9:2f:76:b0:d6:b0:56:0a:b2:86:3f:10: 7f:1d:b9:9a:79:44:87:6d:87:26:c9:75:d3:0e:9b: db:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:52:AD:CC:AF:39:C5:E0:73:86:E8:F8:78:E6:02:AE:47:57:F5:78 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:0d:21:99:ca:f3:f2:6d:7c:23:ae:6c:eb:44:e9:71:45:9a: 24:9a:46:78:e9:49:92:14:30:a1:cf:98:95:00:1b:08:3b:41: 06:6d:06:4f:f3:a7:45:f0:ba:35:c2:cf:c0:5d:c7:e1:1e:5d: 09:4f:e1:b8:fa:c3:c3:3f:ad:d6:5e:9f:f3:d4:3c:87:d7:1e: 16:1b:f5:25:c2:50:3b:c5:5d:5b:ee:b7:7e:e4:ec:87:79:c9: 31:ff:7d:09:8f:24:f9:70:22:7c:27:79:2b:7f:a6:d7:ea:ed: c0:bc:8e:a4:a5:92:f1:a8:9e:75:15:b4:05:6c:6e:d6:11:27: f3:07:4b:28:02:db:ff:ac:c0:5f:c8:2f:9d:0e:ee:c4:ea:e7: 5d:40:09:60:b3:3e:c5:75:6d:1e:c2:72:00:ca:c9:37:23:6e: 7e:28:31:d4:14:f0:1d:ce:a9:00:35:41:e2:48:f0:7f:3e:33: 22:25:22:e2:22:62:65:db:14:df:75:43:22:1e:0b:29:ad:3c: ba:d2:9e:bb:8d:a8:5e:8c:7c:f3:1c:3b:05:6e:24:72:8c:d8: 0a:8b:e1:24:4c:26:c1:36:8a:42:76:57:bd:36:31:e9:2a:97: bf:0a:01:1e:9b:a4:40:ab:be:53:90:3a:13:00:cb:8f:cf:fd: 39:b2:5b:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNW2TmPINoi6UJYo3Mqypx0zlcbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA1MTEyMTM2MzRaFw0yNTA1MTUwMTMxMzRaMDMxMTAvBgNV BAMTKEMyNTJBRENDQUYzOUM1RTA3Mzg2RThGODc4RTYwMkFFNDc1N0Y1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8rVysvT1fJSZ6/KyrI8HKX3wg UKKaIT/oZxS9KGRYwZRJGQu89SgKMZDQeY5Nwh7OeslmCGfEEKucldKPNk6HirC2 NaUgPMuBcmjiO6mqGh2DM3ddiFm+zj5piXrS+QYbqMgEahEz0bCr5v2rCqMKKfNX xdV2kXo3E8CJDFzU97RxIkrC5lISGhyDZz9GL/LMEvBWJ5D1z00QICczotxiAJzE 0NNlspBR5yuZGz6MIKJBlHsv8cEBaZilKCU/xQfR9RBqgsttJeDKTDUQ/TSqZAhc UWDZI0W2ANHSHeQ2+W+9iOkvdrDWsFYKsoY/EH8duZp5RIdthybJddMOm9s1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwlKtzK85xeBzhuj4eOYCrkdX9XgwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK8NIZnK8/JtfCOubOtE6XFFmiSaRnjpSZIU MKHPmJUAGwg7QQZtBk/zp0XwujXCz8Bdx+EeXQlP4bj6w8M/rdZen/PUPIfXHhYb 9SXCUDvFXVvut37k7Id5yTH/fQmPJPlwInwneSt/ptfq7cC8jqSlkvGonnUVtAVs btYRJ/MHSygC2/+swF/IL50O7sTq511ACWCzPsV1bR7CcgDKyTcjbn4oMdQU8B3O qQA1QeJI8H8+MyIlIuIiYmXbFN91QyIeCymtPLrSnruNqF6MfPMcOwVuJHKM2AqL 4SRMJsE2ikJ2V702Mekql78KAR6bpECrvlOQOhMAy4/P/TmyW4w= -----END CERTIFICATE-----Generated at Mon May 12 18:36:25 2025 by rpki-client