$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: wpZl8Q8BzvNBfZaErqCHEbsKEc3119aJKwXJgDlhwCs= Subject key identifier: 85:0A:F7:22:B8:C8:26:3D:DF:69:37:40:E5:90:20:DE:BE:C0:0C:37 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 0F177E91E2270EBEF4935CF7F31A3156FB450655 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: B0 Signing time: Mon 30 Jun 2025 14:41:57 +0000 Manifest this update: Mon 30 Jun 2025 14:36:57 +0000 Manifest next update: Thu 03 Jul 2025 21:24:57 +0000 Files and hashes: 1: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: yOoSxdZqy6a2ql3O+v0i+0VJjubsMijOsF6IoBnLDBY=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 21:24:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:17:7e:91:e2:27:0e:be:f4:93:5c:f7:f3:1a:31:56:fb:45:06:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Jun 30 14:36:57 2025 GMT Not After : Jul 3 21:24:57 2025 GMT Subject: CN=850AF722B8C8263DDF693740E59020DEBEC00C37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8d:07:c8:1d:4a:e7:a0:6d:ca:f1:c1:55:4c: d3:5e:be:38:b0:a7:ca:df:da:fc:22:51:48:ac:84: f0:60:ee:3f:7d:6b:46:f2:67:35:1e:46:8c:47:69: 45:7d:4b:da:78:cb:f2:f6:8b:ec:03:b8:3b:7a:11: 93:7a:d5:e9:24:7e:e2:31:44:ca:e1:2d:c5:a7:16: 59:db:dd:89:b5:e1:bd:45:5a:e1:f7:eb:3a:d4:4b: 86:38:70:47:1d:48:92:a7:4e:d2:e1:0e:02:5e:6e: f2:d4:70:94:2d:b1:3c:76:e8:43:93:08:48:ec:15: 52:11:28:9f:30:65:61:8a:a7:26:4d:bb:fa:d7:3c: ea:15:5a:88:14:46:86:80:03:40:13:d2:4b:93:14: 2e:1d:2e:50:04:3a:e7:79:40:3a:35:b6:a5:ee:42: 09:2f:63:47:3a:4f:11:f1:d3:ab:0b:cb:92:a6:a4: e4:1f:fe:3e:8f:65:fc:c8:87:87:6b:3a:38:ac:fb: 92:56:74:65:be:7c:73:6a:5e:96:40:45:d5:d9:02: d9:8c:0e:c9:cb:19:06:4c:39:9b:49:ce:bf:b4:7c: 7a:6f:e5:a9:eb:6f:ce:44:1a:49:06:0a:43:bf:da: f9:6d:80:17:8d:01:8d:15:3b:e2:0c:fd:56:fa:c2: 75:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:0A:F7:22:B8:C8:26:3D:DF:69:37:40:E5:90:20:DE:BE:C0:0C:37 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:15:3a:8a:28:48:97:1b:f3:86:16:e2:13:e6:8b:cc:a1:71: 86:59:59:8f:0d:15:f2:56:8d:7f:8c:d2:33:43:fe:76:7f:90: 81:0a:9a:e8:b5:9c:77:c6:6f:dd:d8:98:e9:06:62:de:88:11: 9e:f4:0f:2f:2b:b6:c0:c6:d7:ca:32:5b:4e:0b:12:9f:a3:5a: 7e:5f:d8:b1:42:34:a5:52:63:38:1f:34:69:5f:44:0e:4d:f9: 8a:9e:30:52:dc:e3:5b:66:d7:df:89:c1:fc:c2:f3:81:0b:bd: 80:d1:6a:88:3d:0d:1d:51:9e:f1:8d:70:9a:dc:f8:66:14:dd: 9c:c4:6b:8a:57:c0:e6:12:32:2d:d4:bb:b4:27:c4:5d:e6:18: 1a:65:cf:54:ba:57:98:fd:26:22:9b:62:fd:7f:8e:61:6b:86: 8b:83:3e:18:c4:2f:90:04:85:a5:98:50:2d:54:6f:98:19:fb: 3f:b2:c5:8a:c3:4b:e0:84:5d:3f:c3:26:11:72:e9:f9:53:77: 27:ab:a6:2a:00:9b:3e:94:41:48:a4:9c:5d:20:d8:b5:f2:0c: 25:ae:d1:4b:c5:a5:63:25:ce:73:ec:77:33:d2:24:c2:95:67: d2:fb:f0:15:f6:04:38:5e:7e:13:2c:7d:ae:42:3d:13:d2:e4: de:fb:98:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxd+keInDr70k1z38xoxVvtFBlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA2MzAxNDM2NTdaFw0yNTA3MDMyMTI0NTdaMDMxMTAvBgNV BAMTKDg1MEFGNzIyQjhDODI2M0RERjY5Mzc0MEU1OTAyMERFQkVDMDBDMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1jQfIHUrnoG3K8cFVTNNevjiw p8rf2vwiUUishPBg7j99a0byZzUeRoxHaUV9S9p4y/L2i+wDuDt6EZN61ekkfuIx RMrhLcWnFlnb3Ym14b1FWuH36zrUS4Y4cEcdSJKnTtLhDgJebvLUcJQtsTx26EOT CEjsFVIRKJ8wZWGKpyZNu/rXPOoVWogURoaAA0AT0kuTFC4dLlAEOud5QDo1tqXu QgkvY0c6TxHx06sLy5KmpOQf/j6PZfzIh4drOjis+5JWdGW+fHNqXpZARdXZAtmM DsnLGQZMOZtJzr+0fHpv5anrb85EGkkGCkO/2vltgBeNAY0VO+IM/Vb6wnVVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhQr3IrjIJj3faTdA5ZAg3r7ADDcwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQVOoooSJcb84YW4hPmi8yhcYZZWY8NFfJW jX+M0jND/nZ/kIEKmui1nHfGb93YmOkGYt6IEZ70Dy8rtsDG18oyW04LEp+jWn5f 2LFCNKVSYzgfNGlfRA5N+YqeMFLc41tm19+JwfzC84ELvYDRaog9DR1RnvGNcJrc +GYU3ZzEa4pXwOYSMi3Uu7QnxF3mGBplz1S6V5j9JiKbYv1/jmFrhouDPhjEL5AE haWYUC1Ub5gZ+z+yxYrDS+CEXT/DJhFy6flTdyerpioAmz6UQUiknF0g2LXyDCWu 0UvFpWMlznPsdzPSJMKVZ9L78BX2BDhefhMsfa5CPRPS5N77mHQ= -----END CERTIFICATE-----Generated at Tue Jul 1 11:37:54 2025 by rpki-client