$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: jayE+Uz6MpVl8x76IaIVKbderccM5qPhoIaeJqwmZII= Subject key identifier: F9:DD:10:C4:76:A6:EB:54:A7:22:E7:EC:C0:C0:C9:86:60:82:19:CC Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 42451256C87FC6362AD8256F8BC0672A3AA62AEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0322 Signing time: Fri 22 Aug 2025 13:51:36 +0000 Manifest this update: Fri 22 Aug 2025 13:46:36 +0000 Manifest next update: Mon 25 Aug 2025 22:57:36 +0000 Files and hashes: 1: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: YrpKBm6TP5ST9YVdFztYcN6k/i4qHBVOPeTtk1X+lmw=) 2: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 3: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 4: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 5: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:45:12:56:c8:7f:c6:36:2a:d8:25:6f:8b:c0:67:2a:3a:a6:2a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Aug 22 13:46:36 2025 GMT Not After : Aug 25 22:57:36 2025 GMT Subject: CN=F9DD10C476A6EB54A722E7ECC0C0C986608219CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ec:a6:90:16:69:ef:a8:c9:f9:a3:b8:2f:3c: 80:05:7e:0c:a9:57:10:eb:d3:3a:ca:30:6f:e7:21: 71:35:c1:c1:a6:76:2b:da:34:12:48:d8:97:3c:d6: c4:30:35:36:02:8d:7f:25:ca:f8:e3:39:00:64:51: 4f:ef:6b:74:70:52:c4:46:63:b9:5b:43:4b:df:d3: 07:99:c8:fa:ad:c8:21:e6:2f:91:2b:8f:2d:6f:79: e1:80:df:f2:33:07:7a:78:61:de:95:01:5c:8d:7c: f6:4c:0f:11:3a:e7:4b:f0:a0:16:02:a7:a1:10:33: b4:1c:77:54:dc:d2:78:9e:20:bf:75:c9:c2:e2:2e: a6:59:73:77:f6:2d:7d:12:9a:a2:26:b8:36:a9:c5: c5:96:48:22:de:4f:3d:79:22:7e:5a:02:8e:1b:5d: 01:e7:f0:f5:61:d5:50:4e:95:a9:18:e0:d4:54:db: 09:46:f0:ef:6d:06:71:98:58:25:fd:ba:fe:05:ce: f6:9c:55:14:f0:39:33:6d:f1:87:cc:a9:6e:dc:ac: e4:8d:54:a9:30:9e:b5:3e:25:99:cf:63:fa:9e:20: a1:4d:4f:e7:2f:64:00:bd:c1:07:16:66:51:d1:97: 4e:a8:18:45:0b:16:f8:e9:cd:b7:4e:45:36:49:b7: bf:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:DD:10:C4:76:A6:EB:54:A7:22:E7:EC:C0:C0:C9:86:60:82:19:CC X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:ca:db:f0:36:ad:1b:00:98:50:06:79:19:8f:f1:93:c2:eb: 4e:7c:a3:32:50:a2:9e:5c:a6:d1:31:5f:bc:f7:6c:4a:1f:13: 24:aa:be:83:0f:ab:79:1c:16:f0:85:ce:07:96:da:62:dc:9a: d6:57:b3:61:d1:70:a6:cb:f0:9a:80:f1:23:39:49:52:59:bc: 0d:ab:57:7e:ce:38:b3:f0:ad:f3:3f:cd:8c:08:b9:1f:ff:1c: 6e:07:ba:ad:42:4f:4a:c4:d3:87:7f:2b:42:e2:09:62:50:83: de:4e:e2:be:12:1b:b2:3e:cf:12:79:7a:fe:9c:69:7e:d0:ab: 70:ab:7e:4a:d7:a5:01:7e:07:f2:a9:bd:41:8b:64:94:e7:f2: d4:35:a9:40:0d:b7:61:44:73:c4:38:7a:ed:a0:6b:71:e9:f7: af:90:d9:bb:a4:9f:3e:93:17:4b:82:79:89:a7:61:c5:9d:f1: 71:5e:5c:2b:be:86:95:d7:b0:6a:d6:b1:6e:59:fa:7e:8c:2e: 4b:4b:b4:37:a1:ac:20:cf:0f:61:b1:57:53:78:0a:93:b4:68: 96:1d:51:64:a9:91:ba:df:89:04:0e:e9:ff:33:d5:3f:84:45: 23:4f:7f:70:d9:92:06:84:eb:66:49:de:12:3b:32:71:5f:a4: 75:2d:69:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQkUSVsh/xjYq2CVvi8BnKjqmKu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA4MjIxMzQ2MzZaFw0yNTA4MjUyMjU3MzZaMDMxMTAvBgNV BAMTKEY5REQxMEM0NzZBNkVCNTRBNzIyRTdFQ0MwQzBDOTg2NjA4MjE5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP7KaQFmnvqMn5o7gvPIAFfgyp VxDr0zrKMG/nIXE1wcGmdivaNBJI2Jc81sQwNTYCjX8lyvjjOQBkUU/va3RwUsRG Y7lbQ0vf0weZyPqtyCHmL5Erjy1veeGA3/IzB3p4Yd6VAVyNfPZMDxE650vwoBYC p6EQM7Qcd1Tc0nieIL91ycLiLqZZc3f2LX0SmqImuDapxcWWSCLeTz15In5aAo4b XQHn8PVh1VBOlakY4NRU2wlG8O9tBnGYWCX9uv4FzvacVRTwOTNt8YfMqW7crOSN VKkwnrU+JZnPY/qeIKFNT+cvZAC9wQcWZlHRl06oGEULFvjpzbdORTZJt78fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+d0QxHam61SnIufswMDJhmCCGcwwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMrK2/A2rRsAmFAGeRmP8ZPC6058ozJQop5c ptExX7z3bEofEySqvoMPq3kcFvCFzgeW2mLcmtZXs2HRcKbL8JqA8SM5SVJZvA2r V37OOLPwrfM/zYwIuR//HG4Huq1CT0rE04d/K0LiCWJQg95O4r4SG7I+zxJ5ev6c aX7Qq3CrfkrXpQF+B/KpvUGLZJTn8tQ1qUANt2FEc8Q4eu2ga3Hp96+Q2buknz6T F0uCeYmnYcWd8XFeXCu+hpXXsGrWsW5Z+n6MLktLtDehrCDPD2GxV1N4CpO0aJYd UWSpkbrfiQQO6f8z1T+ERSNPf3DZkgaE62ZJ3hI7MnFfpHUtaVo= -----END CERTIFICATE-----Generated at Sat Aug 23 10:30:56 2025 by rpki-client