$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: Mn+kOasIvC3lTTcaakjASDReYQJf4S9uOuEi91S3GPU= Subject key identifier: 77:E6:25:21:F9:BB:57:14:16:FD:40:12:65:63:A2:B5:A3:28:5F:80 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 4E8625458EDB243D7B547E7C78672330C7A73469 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: E2 Signing time: Tue 21 Oct 2025 08:12:05 +0000 Manifest this update: Tue 21 Oct 2025 08:07:05 +0000 Manifest next update: Fri 24 Oct 2025 19:36:05 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 2: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: z4LlhOuXTRCHwIhWvUr2Tfo2+DLrqw8powx2x+JAhhk=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Oct 2025 19:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:86:25:45:8e:db:24:3d:7b:54:7e:7c:78:67:23:30:c7:a7:34:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Oct 21 08:07:05 2025 GMT Not After : Oct 24 19:36:05 2025 GMT Subject: CN=77E62521F9BB571416FD40126563A2B5A3285F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:42:7c:78:c0:4c:07:7a:10:17:ee:af:c4:26: c8:7e:2b:31:50:d3:ce:a9:47:5b:88:3b:8c:89:03: d5:5b:18:51:6a:4a:e1:c2:8b:07:5d:c5:4f:ac:79: 86:5a:3d:fe:f6:4d:58:ec:a5:af:2b:78:d5:83:d9: 8c:18:2e:07:e3:08:8e:30:ad:37:da:0a:23:25:87: d3:36:10:e9:7d:76:83:01:a4:5d:e2:d4:28:1e:c5: 36:0d:be:a1:19:3c:c0:a1:de:9e:79:b9:af:a9:c8: 2b:e0:ff:e9:37:f3:d0:47:24:5a:ef:d9:3b:b5:cc: ca:9d:bf:b4:ed:02:3a:62:0d:1c:91:51:88:94:f9: 70:d5:e9:91:23:b6:fd:7b:49:eb:3f:f0:bb:9f:86: 93:78:9d:df:05:ed:b9:af:84:7c:33:80:88:22:6a: 25:5d:ed:87:fe:f5:8b:29:70:6a:be:3d:bb:55:47: 79:d5:9b:54:7d:ac:62:c8:58:47:89:6c:7b:ee:59: fb:dc:1f:4c:b8:79:91:8e:33:82:6e:21:70:b8:72: 79:07:6e:28:e6:2b:f0:45:b2:83:84:5e:d1:3e:6d: 0b:09:a6:5c:40:83:64:df:c7:3d:41:cc:a7:73:a4: 83:17:c9:de:4c:c2:a7:7b:aa:85:5d:61:a8:cf:1a: c3:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:E6:25:21:F9:BB:57:14:16:FD:40:12:65:63:A2:B5:A3:28:5F:80 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:94:f5:0a:9b:52:f1:6d:bf:64:c5:11:c5:66:9f:44:a8:2e: 72:5e:f9:bc:82:ca:b0:17:24:f8:f4:83:03:8d:d2:8b:12:8b: c8:56:8c:75:b9:b2:b9:97:09:ee:55:5b:56:57:c5:b9:0a:ed: 71:4a:a1:7d:fc:02:b3:cc:23:ab:3b:0f:a1:00:4d:e3:f9:c9: bc:fa:2e:42:c4:e0:42:4d:c7:72:7d:6e:88:ff:7a:d5:ba:6c: 3f:e9:7b:ec:ca:dd:85:29:9c:86:d6:8f:af:57:10:dd:31:8d: d3:91:4b:99:d7:33:0c:67:db:a2:98:99:cd:51:a6:6d:88:fc: ff:04:4a:79:90:fd:ae:7d:90:27:d5:88:23:7d:e2:84:88:d1: ad:fb:fb:0c:d6:8b:67:54:da:21:d0:8a:4c:cd:0a:2d:37:80: 14:7a:38:d2:94:1c:6b:9e:c2:44:71:d9:24:9d:f1:6b:69:ca: 94:3d:57:a7:ac:0b:f1:8b:54:64:32:33:c9:53:15:ee:86:52: 4d:62:b3:33:65:2b:84:fe:56:81:63:50:7c:9c:e4:ae:63:46: 47:2b:05:ee:f1:fe:e1:d3:38:ce:10:2e:76:2f:7e:0e:94:b5: c6:3a:f4:29:2f:25:c5:7f:52:3c:1b:e5:3b:8e:38:bb:c5:64: d7:34:3e:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUToYlRY7bJD17VH58eGcjMMenNGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTEwMjEwODA3MDVaFw0yNTEwMjQxOTM2MDVaMDMxMTAvBgNV BAMTKDc3RTYyNTIxRjlCQjU3MTQxNkZENDAxMjY1NjNBMkI1QTMyODVGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfQnx4wEwHehAX7q/EJsh+KzFQ 086pR1uIO4yJA9VbGFFqSuHCiwddxU+seYZaPf72TVjspa8reNWD2YwYLgfjCI4w rTfaCiMlh9M2EOl9doMBpF3i1CgexTYNvqEZPMCh3p55ua+pyCvg/+k389BHJFrv 2Tu1zMqdv7TtAjpiDRyRUYiU+XDV6ZEjtv17Ses/8LufhpN4nd8F7bmvhHwzgIgi aiVd7Yf+9YspcGq+PbtVR3nVm1R9rGLIWEeJbHvuWfvcH0y4eZGOM4JuIXC4cnkH bijmK/BFsoOEXtE+bQsJplxAg2Tfxz1BzKdzpIMXyd5Mwqd7qoVdYajPGsPbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd+YlIfm7VxQW/UASZWOitaMoX4AwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmU9QqbUvFtv2TFEcVmn0SoLnJe+byCyrAX JPj0gwON0osSi8hWjHW5srmXCe5VW1ZXxbkK7XFKoX38ArPMI6s7D6EATeP5ybz6 LkLE4EJNx3J9boj/etW6bD/pe+zK3YUpnIbWj69XEN0xjdORS5nXMwxn26KYmc1R pm2I/P8ESnmQ/a59kCfViCN94oSI0a37+wzWi2dU2iHQikzNCi03gBR6ONKUHGue wkRx2SSd8WtpypQ9V6esC/GLVGQyM8lTFe6GUk1iszNlK4T+VoFjUHyc5K5jRkcr Be7x/uHTOM4QLnYvfg6UtcY69CkvJcV/Ujwb5TuOOLvFZNc0PvU= -----END CERTIFICATE-----Generated at Wed Oct 22 00:51:45 2025 by rpki-client