$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: sksUWkAGcMwGFjxuPiXVTEW/xQlw4RV9qIWtTwOUYW0= Subject key identifier: 28:44:2E:4F:D3:C1:83:EC:E7:BC:84:05:EE:A2:9D:48:F3:34:5C:4E Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 483B9F3704FD2D3A62DEBA7082BDE32CD4223E9B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: C8 Signing time: Sat 23 Aug 2025 13:12:03 +0000 Manifest this update: Sat 23 Aug 2025 13:07:03 +0000 Manifest next update: Tue 26 Aug 2025 17:31:03 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: 1Sj3DwAzq5zYZWb9PQboX6XmMP4SvvufPLyqcwHU9So=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:3b:9f:37:04:fd:2d:3a:62:de:ba:70:82:bd:e3:2c:d4:22:3e:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Aug 23 13:07:03 2025 GMT Not After : Aug 26 17:31:03 2025 GMT Subject: CN=28442E4FD3C183ECE7BC8405EEA29D48F3345C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:27:36:f3:04:aa:5b:38:69:77:76:c4:b5:df: b5:10:6e:7d:44:11:33:fb:8c:cc:dd:12:e0:8f:d5: bc:46:97:63:89:3d:77:91:7a:b5:ac:9f:fa:f2:87: e2:2b:43:55:bd:2b:f9:16:7f:e6:a8:dd:26:c6:6e: 55:92:20:8b:83:8b:25:89:0e:48:fd:db:ee:f1:18: 44:98:0b:4f:e8:b1:17:3d:9a:b0:8d:56:29:7b:66: 52:a2:7b:37:34:65:7d:e8:58:de:2b:5a:31:58:38: 66:16:09:33:0f:6b:4a:c6:86:70:8d:d9:be:77:1b: 15:2c:2a:69:7f:0e:f0:64:15:98:c7:5b:11:bf:a8: d9:32:aa:9d:23:8f:73:5e:91:6f:76:96:67:d5:0b: 71:d5:fb:29:84:92:5c:dd:db:a5:59:d0:72:cf:47: 43:77:6f:70:1d:b8:54:bb:79:18:d6:d5:08:b2:ba: 08:90:85:14:cc:44:44:06:dd:61:20:7e:01:2f:60: 8d:33:5b:20:f7:51:21:18:de:16:60:45:5a:ce:cf: 91:22:72:a9:2b:13:ff:7f:1c:1d:66:93:f0:1a:51: 1a:38:ee:5e:0a:ff:cc:e6:a4:be:4e:77:1c:b2:ad: dd:45:95:a9:e1:78:cf:80:79:bb:1a:f3:cb:0a:fb: 51:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:44:2E:4F:D3:C1:83:EC:E7:BC:84:05:EE:A2:9D:48:F3:34:5C:4E X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:03:36:32:43:99:51:78:0e:26:3d:de:60:45:f7:07:1f:bb: e8:a8:f7:13:a2:d2:51:6a:76:25:85:69:99:f3:e7:33:4d:6d: ad:01:fa:fe:d7:6b:54:d4:6d:49:09:bd:f7:43:4a:5f:32:11: 46:d6:c6:17:2a:bb:7f:b1:bc:e1:68:cb:ef:3e:08:4f:66:2e: 72:4b:d7:1e:b1:26:06:c8:4c:9b:0d:d4:80:77:a1:c3:ef:18: 1c:9d:ea:b5:cb:16:9a:4b:0b:01:4c:b0:8f:64:f1:7a:33:58: 6a:b3:4d:c7:11:3d:11:13:df:b0:1c:01:a7:c0:65:20:5c:df: 75:72:43:96:ec:13:f5:da:e6:e3:0d:6b:bf:d7:73:8c:64:b0: 6d:60:99:dd:4f:b9:36:a6:c0:b0:76:fb:27:bf:18:b0:91:08: 26:89:99:6a:10:88:2b:ff:c9:93:58:60:27:86:6f:da:a8:91: 82:b4:5c:a5:70:ab:80:fe:70:cd:e2:db:e0:c6:34:0f:4f:d7: de:ef:2e:e9:06:15:fc:1d:a5:8f:8b:0c:c5:28:b0:25:75:28: 79:74:d2:8e:ef:ce:1d:52:86:d9:d0:64:6d:87:72:b3:a7:f9: 92:49:3e:60:6d:b5:f7:67:c4:b0:4d:e1:2c:32:56:31:ab:ed: 3e:67:70:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSDufNwT9LTpi3rpwgr3jLNQiPpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA4MjMxMzA3MDNaFw0yNTA4MjYxNzMxMDNaMDMxMTAvBgNV BAMTKDI4NDQyRTRGRDNDMTgzRUNFN0JDODQwNUVFQTI5RDQ4RjMzNDVDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIJzbzBKpbOGl3dsS137UQbn1E ETP7jMzdEuCP1bxGl2OJPXeRerWsn/ryh+IrQ1W9K/kWf+ao3SbGblWSIIuDiyWJ Dkj92+7xGESYC0/osRc9mrCNVil7ZlKiezc0ZX3oWN4rWjFYOGYWCTMPa0rGhnCN 2b53GxUsKml/DvBkFZjHWxG/qNkyqp0jj3NekW92lmfVC3HV+ymEklzd26VZ0HLP R0N3b3AduFS7eRjW1QiyugiQhRTMREQG3WEgfgEvYI0zWyD3USEY3hZgRVrOz5Ei cqkrE/9/HB1mk/AaURo47l4K/8zmpL5Odxyyrd1FlanheM+Aebsa88sK+1H7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKEQuT9PBg+znvIQF7qKdSPM0XE4wHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcDNjJDmVF4DiY93mBF9wcfu+io9xOi0lFq diWFaZnz5zNNba0B+v7Xa1TUbUkJvfdDSl8yEUbWxhcqu3+xvOFoy+8+CE9mLnJL 1x6xJgbITJsN1IB3ocPvGByd6rXLFppLCwFMsI9k8XozWGqzTccRPRET37AcAafA ZSBc33VyQ5bsE/Xa5uMNa7/Xc4xksG1gmd1PuTamwLB2+ye/GLCRCCaJmWoQiCv/ yZNYYCeGb9qokYK0XKVwq4D+cM3i2+DGNA9P197vLukGFfwdpY+LDMUosCV1KHl0 0o7vzh1ShtnQZG2HcrOn+ZJJPmBttfdnxLBN4SwyVjGr7T5ncCk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:51:14 2025 by rpki-client