$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: QvK1OrM0r7D/pcVGB6gJpRj5BUIdUMAJiRRxRIBvRFo= Subject key identifier: 99:BD:A6:9B:97:8A:DE:4C:C4:D5:70:7B:EB:3A:20:A6:64:A5:D5:1E Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 48B76DCED24545A953CBC6C98220DD6E3E708DB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04E5 Signing time: Mon 30 Jun 2025 21:21:07 +0000 Manifest this update: Mon 30 Jun 2025 21:16:07 +0000 Manifest next update: Fri 04 Jul 2025 01:20:07 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: WCSXGmNUylPyUKxGf4qZ/ytQuycuKsxK0KC1NxEqxy4=) 3: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 4: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:b7:6d:ce:d2:45:45:a9:53:cb:c6:c9:82:20:dd:6e:3e:70:8d:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Jun 30 21:16:07 2025 GMT Not After : Jul 4 01:20:07 2025 GMT Subject: CN=99BDA69B978ADE4CC4D5707BEB3A20A664A5D51E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e7:88:f4:d2:10:02:04:b3:67:09:b6:6d:65: d6:0e:40:c4:51:7d:ea:2e:0e:be:32:38:1b:1f:2c: 1f:81:5c:da:8d:a0:ca:65:57:0a:53:5f:3a:cc:dd: 0d:51:9a:f5:2c:e8:11:00:76:ac:19:ec:2c:ba:0b: cc:b8:30:44:ae:60:2f:c8:29:37:d7:67:1d:f3:f3: aa:88:15:4e:23:2c:67:88:46:e2:d4:57:ba:d2:c7: 86:db:89:f1:40:a2:b1:ff:91:81:c5:13:da:93:ed: de:60:fe:e3:80:b6:91:0a:26:5b:a0:4b:0e:f5:c2: 38:ce:93:d1:33:3c:24:dc:19:7a:06:64:32:18:81: 5d:37:2c:28:c0:d8:cf:9e:6b:9f:24:75:b7:86:cd: 6b:e5:f9:a9:68:39:8f:b5:6a:3b:66:5c:35:1f:33: 60:db:74:ee:59:90:3c:23:a8:0d:b7:bb:56:54:c4: 31:62:25:26:9e:54:b9:a0:c5:b5:65:78:21:8a:34: ab:d9:fd:8e:64:43:16:f1:3f:27:12:ca:eb:b7:5e: 6f:d4:21:17:32:ca:da:2a:0b:76:1b:8e:0d:63:cc: 9c:3e:af:dd:b2:3d:93:e2:19:a3:b0:22:1f:21:7b: ef:e2:f5:b5:a8:c3:25:e2:92:4e:c2:c5:b5:29:66: 01:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:BD:A6:9B:97:8A:DE:4C:C4:D5:70:7B:EB:3A:20:A6:64:A5:D5:1E X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:cf:cb:33:14:1c:5d:29:4c:4f:4a:b4:2a:42:12:8f:e6:c6: 0e:0d:b9:44:6e:56:89:f6:52:b3:04:a1:6c:f5:20:7d:cb:56: 6c:26:8c:58:1c:22:64:7d:47:f5:93:85:92:ce:59:72:b5:99: 80:06:c3:b4:39:5b:ae:14:ec:d4:b6:ab:fe:bb:0e:ff:29:28: 21:17:ac:23:b3:4f:e6:23:a5:ed:28:78:0c:17:87:23:16:9d: 77:43:3b:da:d1:53:b7:e2:f8:60:d0:40:eb:da:b8:c6:c2:b7: 78:4e:70:f0:ce:47:ac:45:f8:d4:73:78:13:de:08:9d:84:74: 89:2e:e8:1c:0c:80:6b:68:01:76:0b:b4:c9:ad:0f:b0:69:87: fa:3a:80:18:aa:fa:6f:5e:10:ac:7e:cc:b0:7a:6d:f1:86:84: b3:c5:ff:0b:7d:a3:a7:4b:26:be:ca:b8:1c:bf:7d:e7:bb:ef: 55:64:1d:2e:3b:ea:a9:61:ef:c8:3b:94:99:89:d6:c6:42:be: 64:8f:88:40:5b:f2:69:1b:64:2d:49:be:ea:07:75:af:a0:42: 1d:a0:c9:40:ff:c4:6c:93:6b:21:11:40:5c:d2:5d:3a:fc:64: 4d:a9:3c:4b:d6:d1:ba:f2:6a:f9:f9:fa:f4:3e:2c:1d:09:54: 2a:da:d2:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSLdtztJFRalTy8bJgiDdbj5wjbQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA2MzAyMTE2MDdaFw0yNTA3MDQwMTIwMDdaMDMxMTAvBgNV BAMTKDk5QkRBNjlCOTc4QURFNENDNEQ1NzA3QkVCM0EyMEE2NjRBNUQ1MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC154j00hACBLNnCbZtZdYOQMRR feouDr4yOBsfLB+BXNqNoMplVwpTXzrM3Q1RmvUs6BEAdqwZ7Cy6C8y4MESuYC/I KTfXZx3z86qIFU4jLGeIRuLUV7rSx4bbifFAorH/kYHFE9qT7d5g/uOAtpEKJlug Sw71wjjOk9EzPCTcGXoGZDIYgV03LCjA2M+ea58kdbeGzWvl+aloOY+1ajtmXDUf M2DbdO5ZkDwjqA23u1ZUxDFiJSaeVLmgxbVleCGKNKvZ/Y5kQxbxPycSyuu3Xm/U IRcyytoqC3Ybjg1jzJw+r92yPZPiGaOwIh8he+/i9bWowyXikk7CxbUpZgFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmb2mm5eK3kzE1XB76zogpmSl1R4wHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABvPyzMUHF0pTE9KtCpCEo/mxg4NuURuVon2 UrMEoWz1IH3LVmwmjFgcImR9R/WThZLOWXK1mYAGw7Q5W64U7NS2q/67Dv8pKCEX rCOzT+Yjpe0oeAwXhyMWnXdDO9rRU7fi+GDQQOvauMbCt3hOcPDOR6xF+NRzeBPe CJ2EdIku6BwMgGtoAXYLtMmtD7Bph/o6gBiq+m9eEKx+zLB6bfGGhLPF/wt9o6dL Jr7KuBy/fee771VkHS476qlh78g7lJmJ1sZCvmSPiEBb8mkbZC1JvuoHda+gQh2g yUD/xGyTayERQFzSXTr8ZE2pPEvW0bryavn5+vQ+LB0JVCra0tY= -----END CERTIFICATE-----Generated at Tue Jul 1 15:42:34 2025 by rpki-client