$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: m8MR4H1uzAyYD2qGb+kiq/5qh9WpQcW5oYd0ag4q024= Subject key identifier: FD:0E:3D:4A:52:94:5A:95:D5:FA:3C:97:72:B1:D6:E5:AF:0B:6E:18 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 3BAA9649E594A1CDAEC59E756A49783D4FFB537C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 22:31:09 +0000 Manifest this update: Thu 21 Aug 2025 22:26:09 +0000 Manifest next update: Sun 24 Aug 2025 22:35:09 +0000 Files and hashes: 1: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 2: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 3: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: qdQYSzi5VV4R131dyu8HH6kS/er/1GlloXknYEuIK3A=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:35:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:aa:96:49:e5:94:a1:cd:ae:c5:9e:75:6a:49:78:3d:4f:fb:53:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Aug 21 22:26:09 2025 GMT Not After : Aug 24 22:35:09 2025 GMT Subject: CN=FD0E3D4A52945A95D5FA3C9772B1D6E5AF0B6E18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:35:41:a1:bd:a3:29:8a:8d:b3:ba:cb:dc:f1: 89:e3:07:8e:f4:7f:c1:b8:bf:c4:a6:ff:cb:5b:bf: fa:de:b2:fa:6f:6b:51:84:d8:4e:16:0b:c9:da:20: b4:1f:c3:d4:41:95:93:7c:35:3e:2e:e7:87:35:5d: b3:12:66:89:5f:ec:9a:c7:6a:68:a6:47:d2:b1:68: ff:e7:d8:fb:71:a5:07:e1:2a:8e:bc:69:f9:c2:29: c9:ab:1b:db:62:c8:26:b4:6a:2c:e3:cd:f4:f6:30: 2c:65:b5:41:8e:8a:db:13:d5:39:30:6f:b4:0b:af: c1:84:36:33:95:81:36:a0:52:fc:7e:1e:bd:71:0e: 17:81:88:7a:22:62:ff:22:f3:fd:5a:84:36:2f:65: 8a:54:47:b8:aa:32:01:58:ee:3e:42:d1:6c:ad:04: 4b:f3:8c:83:cf:66:4a:74:6d:34:dd:e3:5b:f4:c5: 1b:26:b9:fc:2f:4d:67:64:63:62:20:69:db:de:75: 88:99:2a:b4:38:88:c3:93:2f:7a:16:94:cc:6a:78: 40:ff:54:15:65:15:e3:70:1a:50:4a:98:34:12:f6: 54:72:48:0e:66:12:12:a4:d9:31:2c:94:81:0d:ad: 7c:cd:4c:c1:c2:0b:3a:67:ed:2e:da:72:cf:34:5d: fc:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:0E:3D:4A:52:94:5A:95:D5:FA:3C:97:72:B1:D6:E5:AF:0B:6E:18 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:92:c3:73:79:62:bd:a6:61:bf:5d:4c:48:7d:b9:fb:c0:f9: 2f:22:99:d3:91:1b:c9:a8:2d:43:aa:6b:d3:bc:8e:b3:89:ff: 51:14:9f:15:ff:24:dd:e3:53:54:ed:8c:d3:3e:ff:70:b8:9a: 3b:d3:d8:60:83:69:a8:03:af:5d:a0:c2:40:17:e1:2b:9d:1e: bf:7d:1f:80:33:f7:2c:ec:11:bc:bc:1c:4f:b8:8e:26:93:c9: 7c:db:b9:49:5f:5b:b2:c8:cb:a0:08:de:b4:30:1c:06:29:2f: 7e:a8:98:cc:da:e7:50:d1:ae:19:32:62:87:92:17:ed:3f:55: 13:e7:58:5c:1b:b4:3a:7c:1a:2e:80:5f:37:06:c0:38:bb:a6: 9b:45:2f:cb:29:37:5f:a7:59:12:9e:28:0b:97:5c:f4:c0:11: f7:82:75:be:0f:53:2f:e3:0f:76:38:09:1b:e1:f8:4b:0e:69: 12:3d:00:a9:27:fa:b9:e3:04:2b:0d:29:9a:ca:c1:2a:fc:ca: a3:26:f4:44:d2:85:ea:65:e7:43:17:ea:e0:59:ab:43:c3:a9: f4:d4:2b:1d:2e:f4:7d:5c:67:e6:59:d3:81:92:3b:16:e2:56: c1:2a:8e:3e:ad:65:08:f5:39:cd:53:4f:4c:32:58:93:b2:7e: d0:11:1b:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6qWSeWUoc2uxZ51akl4PU/7U3wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA4MjEyMjI2MDlaFw0yNTA4MjQyMjM1MDlaMDMxMTAvBgNV BAMTKEZEMEUzRDRBNTI5NDVBOTVENUZBM0M5NzcyQjFENkU1QUYwQjZFMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgNUGhvaMpio2zusvc8YnjB470 f8G4v8Sm/8tbv/resvpva1GE2E4WC8naILQfw9RBlZN8NT4u54c1XbMSZolf7JrH amimR9KxaP/n2PtxpQfhKo68afnCKcmrG9tiyCa0aizjzfT2MCxltUGOitsT1Tkw b7QLr8GENjOVgTagUvx+Hr1xDheBiHoiYv8i8/1ahDYvZYpUR7iqMgFY7j5C0Wyt BEvzjIPPZkp0bTTd41v0xRsmufwvTWdkY2IgadvedYiZKrQ4iMOTL3oWlMxqeED/ VBVlFeNwGlBKmDQS9lRySA5mEhKk2TEslIENrXzNTMHCCzpn7S7acs80XfwdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Q49SlKUWpXV+jyXcrHW5a8LbhgwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANKSw3N5Yr2mYb9dTEh9ufvA+S8imdORG8mo LUOqa9O8jrOJ/1EUnxX/JN3jU1TtjNM+/3C4mjvT2GCDaagDr12gwkAX4SudHr99 H4Az9yzsEby8HE+4jiaTyXzbuUlfW7LIy6AI3rQwHAYpL36omMza51DRrhkyYoeS F+0/VRPnWFwbtDp8Gi6AXzcGwDi7pptFL8spN1+nWRKeKAuXXPTAEfeCdb4PUy/j D3Y4CRvh+EsOaRI9AKkn+rnjBCsNKZrKwSr8yqMm9ETShepl50MX6uBZq0PDqfTU Kx0u9H1cZ+ZZ04GSOxbiVsEqjj6tZQj1Oc1TT0wyWJOyftARG/A= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:30 2025 by rpki-client