$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: Opr1WNe8yfEsXPaEFmEww5wLaUQ7uGxHR2FSuDDAN7U= Subject key identifier: 6A:30:FC:55:B7:16:22:F6:3D:4E:D8:00:AE:EC:8B:99:56:1E:AD:54 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 7C1DB392711C57E0A0EE94DCEBBF7DC5E47AC151 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 033B Signing time: Sat 18 Oct 2025 18:41:35 +0000 Manifest this update: Sat 18 Oct 2025 18:36:35 +0000 Manifest next update: Tue 21 Oct 2025 22:32:35 +0000 Files and hashes: 1: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: isxkoH3+MCU3ZeN9PRdDMEUw0tcBPQxkta2GbdqacIE=) 2: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 3: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 5: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:1d:b3:92:71:1c:57:e0:a0:ee:94:dc:eb:bf:7d:c5:e4:7a:c1:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Oct 18 18:36:35 2025 GMT Not After : Oct 21 22:32:35 2025 GMT Subject: CN=6A30FC55B71622F63D4ED800AEEC8B99561EAD54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f5:63:df:9d:0e:c2:4b:5f:72:5e:1e:a1:38: df:83:ca:ae:66:80:16:0d:6c:cf:94:78:3a:e5:de: b1:4d:c8:64:1f:5c:09:58:b5:bc:ac:05:ce:8b:87: 30:52:25:30:da:97:9f:ea:7c:2b:2c:a5:16:38:f6: 06:93:7e:64:d1:27:b6:c6:1a:0c:52:28:b7:58:c1: 9c:aa:ac:26:c8:e6:61:f5:d8:d2:35:90:4e:07:35: ee:c6:34:29:f0:24:47:22:11:00:5b:19:dc:90:a1: 32:f3:49:52:a6:21:9f:37:c8:27:87:57:dc:92:7b: 32:72:03:3b:5f:db:ec:57:b5:11:6b:51:2e:8c:c7: db:cd:b0:eb:9d:79:c8:35:11:56:6f:c6:e4:1f:dc: 7e:07:e8:68:2b:63:95:14:df:e4:db:65:ae:05:ce: 70:70:ff:8c:1e:ca:a4:9c:a2:b1:25:38:5f:15:30: c4:09:00:b1:d3:2a:56:ee:b7:5b:47:77:68:50:ce: 1d:3d:38:91:5f:09:c3:d9:f4:5b:1f:84:b2:fd:61: f6:e4:62:0e:f7:c0:15:6f:45:a4:81:df:14:b0:8e: c4:da:13:2c:e0:dc:d7:b1:c5:fe:18:72:d7:aa:57: 01:78:71:d2:6b:92:44:74:ff:4d:68:c4:d6:4d:b3: 79:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:30:FC:55:B7:16:22:F6:3D:4E:D8:00:AE:EC:8B:99:56:1E:AD:54 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:08:94:91:ed:63:ab:fd:26:6e:fc:a0:44:9b:7d:0d:3c:ed: 78:b1:93:9b:4b:fc:e0:40:55:02:4b:26:11:28:8b:db:d2:4c: 5c:c2:87:e8:67:8e:75:12:e5:9f:96:60:92:2f:ba:22:bc:2d: f0:12:be:2c:02:a7:b7:f1:09:b9:52:1d:0a:21:e0:94:e4:95: 6f:dc:3f:5e:fe:00:0d:bd:7e:f3:2e:f6:f2:e7:8e:f3:79:0c: 90:63:be:3c:fb:8c:b8:70:ac:f7:24:5d:e2:97:5a:1a:11:21: 50:a1:b4:59:4e:dd:68:08:c6:87:d9:40:33:a1:66:85:40:34: 6a:96:a5:8a:7f:06:21:52:e0:83:3e:dd:d3:3e:45:e3:8e:bb: 40:f2:d2:5f:b0:a8:22:b4:c6:dc:d4:43:bc:8d:62:35:ed:6e: 64:cb:b4:0e:80:54:64:d3:10:b3:60:12:ec:69:bc:f9:f9:d6: 59:99:63:89:00:3f:0a:dd:31:38:62:15:7e:2a:fa:0f:28:39: e9:a2:8c:77:cd:da:81:42:93:98:8c:63:bb:39:95:2a:c1:cc: 17:61:0a:42:da:24:02:53:9f:13:26:5e:c6:76:aa:ad:76:23: ce:bf:f7:3b:c3:9b:50:1e:dd:0b:c1:bf:19:f2:a9:3d:6a:ad: c0:8a:6d:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfB2zknEcV+Cg7pTc6799xeR6wVEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTEwMTgxODM2MzVaFw0yNTEwMjEyMjMyMzVaMDMxMTAvBgNV BAMTKDZBMzBGQzU1QjcxNjIyRjYzRDRFRDgwMEFFRUM4Qjk5NTYxRUFENTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39WPfnQ7CS19yXh6hON+Dyq5m gBYNbM+UeDrl3rFNyGQfXAlYtbysBc6LhzBSJTDal5/qfCsspRY49gaTfmTRJ7bG GgxSKLdYwZyqrCbI5mH12NI1kE4HNe7GNCnwJEciEQBbGdyQoTLzSVKmIZ83yCeH V9ySezJyAztf2+xXtRFrUS6Mx9vNsOudecg1EVZvxuQf3H4H6GgrY5UU3+TbZa4F znBw/4weyqScorElOF8VMMQJALHTKlbut1tHd2hQzh09OJFfCcPZ9FsfhLL9Yfbk Yg73wBVvRaSB3xSwjsTaEyzg3Nexxf4YcteqVwF4cdJrkkR0/01oxNZNs3nfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUajD8VbcWIvY9TtgAruyLmVYerVQwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8IlJHtY6v9Jm78oESbfQ087Xixk5tL/OBA VQJLJhEoi9vSTFzCh+hnjnUS5Z+WYJIvuiK8LfASviwCp7fxCblSHQoh4JTklW/c P17+AA29fvMu9vLnjvN5DJBjvjz7jLhwrPckXeKXWhoRIVChtFlO3WgIxofZQDOh ZoVANGqWpYp/BiFS4IM+3dM+ReOOu0Dy0l+wqCK0xtzUQ7yNYjXtbmTLtA6AVGTT ELNgEuxpvPn51lmZY4kAPwrdMThiFX4q+g8oOemijHfN2oFCk5iMY7s5lSrBzBdh CkLaJAJTnxMmXsZ2qq12I86/9zvDm1Ae3QvBvxnyqT1qrcCKbVQ= -----END CERTIFICATE-----Generated at Mon Oct 20 21:24:46 2025 by rpki-client