$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft File: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json) Hash identifier: GtMqjScwNPikoDzjau2WHE3xjvnt9Gz3nJs1aebcbYA= Subject key identifier: BF:75:D5:35:1C:2C:37:39:D9:C9:88:49:4E:8E:86:FC:2B:60:84:77 Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B Certificate issuer: /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Certificate serial: 46B87C2B99861534F221CB034485CF9ECB2FB014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft Manifest number: 01A5 Signing time: Sat 23 Aug 2025 13:21:17 +0000 Manifest this update: Sat 23 Aug 2025 13:16:17 +0000 Manifest next update: Tue 26 Aug 2025 18:04:17 +0000 Files and hashes: 1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: 7k9VB041/h48tvLV9+2dfEpOlnSTzjrAAE0UGdiG0sw=) 2: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: c7lip/XqrU44DiBvsqTPd1sr2KNINUG5fpwIcT0S/5k=) 3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: CydGhUn3p1u4xZfx9Zchiu6R6+AqYD6N5mTo135Iu7E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 18:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b8:7c:2b:99:86:15:34:f2:21:cb:03:44:85:cf:9e:cb:2f:b0:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Validity Not Before: Aug 23 13:16:17 2025 GMT Not After : Aug 26 18:04:17 2025 GMT Subject: CN=BF75D5351C2C3739D9C988494E8E86FC2B608477 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0f:6a:9f:ad:38:8d:3a:5e:be:12:12:ba:15: 12:73:b7:fa:8c:56:87:b8:09:25:1e:db:ba:e6:2d: 67:7f:c6:9d:6b:7a:f9:1b:56:ef:7d:2d:8e:64:da: c9:c8:d1:9d:4f:fe:cd:3a:81:d6:bc:d7:ba:8b:5f: 3c:37:be:64:09:2a:64:9a:ba:82:31:fb:1b:18:07: 40:c4:94:8a:d5:60:2a:b7:fe:d3:50:b3:a5:12:92: 5c:35:e2:00:98:c1:a0:dc:2a:28:b2:55:e4:c9:69: a1:78:57:b3:7c:43:91:04:d1:b2:36:86:2b:c1:84: a5:53:1a:55:55:dc:e2:58:2f:90:30:e3:93:4c:8e: 9e:4f:9d:c2:a5:47:84:f9:d5:df:ba:0a:60:bc:f7: 53:f2:bf:03:0e:5e:04:10:2a:5f:d2:40:ff:cb:30: ac:42:1a:5f:c8:a8:e4:2b:22:6b:b8:3d:b3:49:47: 81:43:19:bb:19:07:0a:12:af:3f:fa:69:e8:d7:24: a5:a6:33:e6:ee:59:be:c2:ca:6e:33:8a:c6:cb:7b: 32:00:48:2a:50:b4:42:6d:61:3b:24:fc:ef:5a:b8: f1:8d:b4:40:00:1f:2c:3e:c1:7c:16:bf:f5:5a:60: b4:b7:9b:6c:13:5f:6d:cf:53:b2:ea:a6:d2:1d:a0: 35:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:75:D5:35:1C:2C:37:39:D9:C9:88:49:4E:8E:86:FC:2B:60:84:77 X509v3 Authority Key Identifier: keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:31:83:db:89:d2:97:0e:ae:13:39:b8:2b:4c:c5:ff:8e:25: e3:3c:88:1a:07:d7:5f:e2:08:ff:04:73:4d:94:9f:e2:86:75: 66:3c:0f:12:ad:d9:8c:70:9d:dd:d0:19:7e:b4:02:30:09:ed: 73:5d:30:d7:18:77:32:d0:16:a9:6f:b2:c5:e2:95:b7:d1:2b: af:d3:1d:b9:86:60:8e:ae:e2:82:d8:de:d6:69:39:3f:12:a5: 73:26:40:7f:30:52:81:0e:91:c4:f6:7f:ff:a3:63:80:e1:4a: 1e:bc:8c:3b:5a:29:8d:95:50:ff:8e:1e:2d:ae:03:59:6d:bc: bb:71:5e:be:74:03:6d:70:93:56:6d:c9:53:d8:dd:0b:19:0e: e8:77:13:9f:1c:32:40:95:22:97:df:99:58:07:2d:a9:bc:d6: 40:ab:9d:f2:f3:c7:6b:4d:4a:38:c8:37:80:21:cf:75:af:f8: eb:22:73:da:10:2c:7a:d1:26:c5:fe:b2:39:07:a9:1f:7f:fb: 39:80:d9:e4:fe:b2:32:d3:1d:a0:e4:56:0a:8b:93:f4:14:d1: 26:55:62:05:0d:6c:b0:c4:56:26:fe:a3:1e:63:c7:ca:55:e1: f4:26:ea:e3:2e:75:be:78:a4:dd:28:04:b8:54:eb:88:07:1a: 55:2d:95:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrh8K5mGFTTyIcsDRIXPnssvsBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5 MTlCNEIzQjAeFw0yNTA4MjMxMzE2MTdaFw0yNTA4MjYxODA0MTdaMDMxMTAvBgNV BAMTKEJGNzVENTM1MUMyQzM3MzlEOUM5ODg0OTRFOEU4NkZDMkI2MDg0NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBD2qfrTiNOl6+EhK6FRJzt/qM Voe4CSUe27rmLWd/xp1revkbVu99LY5k2snI0Z1P/s06gda817qLXzw3vmQJKmSa uoIx+xsYB0DElIrVYCq3/tNQs6USklw14gCYwaDcKiiyVeTJaaF4V7N8Q5EE0bI2 hivBhKVTGlVV3OJYL5Aw45NMjp5PncKlR4T51d+6CmC891PyvwMOXgQQKl/SQP/L MKxCGl/IqOQrImu4PbNJR4FDGbsZBwoSrz/6aejXJKWmM+buWb7Cym4zisbLezIA SCpQtEJtYTsk/O9auPGNtEAAHyw+wXwWv/VaYLS3m2wTX23PU7LqptIdoDWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv3XVNRwsNznZyYhJTo6G/CtghHcwHwYDVR0j BBgwFoAUvndmP381kaDmTY1ayY8mNZGbSzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGI0ZmU5My03Mjk2LTQ4YjQtYWEwZC1jOGE1YTNkZmQ1OWEvMC9CRTc3NjYzRjdG MzU5MUEwRTY0RDhENUFDOThGMjYzNTkxOUI0QjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5MTlC NEIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2 MzU5MTlCNEIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4xg9uJ0pcOrhM5uCtMxf+OJeM8iBoH11/i CP8Ec02Un+KGdWY8DxKt2Yxwnd3QGX60AjAJ7XNdMNcYdzLQFqlvssXilbfRK6/T HbmGYI6u4oLY3tZpOT8SpXMmQH8wUoEOkcT2f/+jY4DhSh68jDtaKY2VUP+OHi2u A1ltvLtxXr50A21wk1ZtyVPY3QsZDuh3E58cMkCVIpffmVgHLam81kCrnfLzx2tN SjjIN4Ahz3Wv+Osic9oQLHrRJsX+sjkHqR9/+zmA2eT+sjLTHaDkVgqLk/QU0SZV YgUNbLDEVib+ox5jx8pV4fQm6uMudb54pN0oBLhU64gHGlUtlfs= -----END CERTIFICATE-----Generated at Sat Aug 23 16:18:58 2025 by rpki-client