$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: jdrdI79bi4eyD+g9Z858WqeNPpSheG6RGdnfcyvlpJk= Subject key identifier: DF:34:ED:A1:C8:41:31:1B:ED:7B:91:4F:52:BF:99:9F:11:91:E4:CE Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 0A3F3A8C0DE01EDD8CA6DE0B55405A799C3B2CFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01B5 Signing time: Fri 22 Aug 2025 15:01:37 +0000 Manifest this update: Fri 22 Aug 2025 14:56:37 +0000 Manifest next update: Mon 25 Aug 2025 16:51:37 +0000 Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: qX649MzxxHF9RuuaQh13B2mcfQTevWiavc+/9+0m8qk=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:51:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:3f:3a:8c:0d:e0:1e:dd:8c:a6:de:0b:55:40:5a:79:9c:3b:2c:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Aug 22 14:56:37 2025 GMT Not After : Aug 25 16:51:37 2025 GMT Subject: CN=DF34EDA1C841311BED7B914F52BF999F1191E4CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:38:4c:3d:db:d5:f0:b9:2d:d1:f3:d3:eb:0a: 0e:14:48:4a:ab:19:a9:00:7d:f7:78:72:e3:90:42: 31:ba:6c:11:c8:0b:92:70:ad:3f:c2:1a:87:fc:79: 23:b0:2f:c1:83:48:04:d8:ee:e0:88:6d:b7:3a:ac: a4:02:dc:89:97:3d:e2:43:17:25:d9:a1:16:b3:83: 3a:37:ec:5d:d3:89:35:53:66:63:59:df:e6:a4:da: f6:70:05:6e:c1:1a:3f:44:c1:76:4d:92:c9:b5:a3: 92:12:ca:5d:69:9b:f7:a0:04:1d:2d:14:60:2a:64: 9a:ea:ed:46:8b:e6:44:65:07:07:4b:09:96:e5:db: b7:27:bf:e8:b6:16:08:fa:93:93:04:37:a5:23:ca: 8f:4a:ee:05:d5:ae:cc:b3:08:92:c0:ec:e2:35:13: 1d:ec:65:2f:c6:bb:54:18:04:3b:fe:e1:3b:69:8e: 25:ef:68:5f:0a:3e:68:e7:1d:b6:a8:75:97:e2:18: c2:f0:a8:87:e1:b5:7e:bd:7f:f7:e0:c8:53:05:61: 2b:5b:2f:93:73:93:d3:fc:af:cd:c0:f3:8f:aa:95: 0f:a2:39:3a:39:03:da:1c:06:f8:28:9d:e9:1f:de: 50:39:6c:03:10:63:f9:81:f2:54:2c:62:e7:dc:1f: dd:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:34:ED:A1:C8:41:31:1B:ED:7B:91:4F:52:BF:99:9F:11:91:E4:CE X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:6d:01:f2:3d:d5:ac:5b:69:f7:42:00:dd:0e:27:79:ff:85: a2:05:d0:3b:98:af:e5:82:ca:57:b0:11:92:f9:30:e7:45:41: c2:5e:4c:b0:af:69:84:76:93:26:62:f4:d8:1c:bf:cd:2d:2b: 9c:b1:8b:7f:02:cb:5e:00:63:6d:17:19:04:6e:a4:20:14:f0: ac:c9:a4:fe:14:42:12:1c:68:ab:c9:88:7b:93:1f:d9:3c:63: 80:70:40:c9:b2:9a:ae:89:0d:b0:87:b2:95:5e:3b:af:1f:1e: 56:de:49:00:53:58:7d:38:74:e4:b4:b0:8d:c5:6b:ea:77:54: 06:b2:ef:3b:c1:03:c8:91:f0:ed:df:98:55:25:e6:47:d2:d7: 42:67:5b:e0:9b:28:59:f4:93:f8:9d:79:12:ac:88:82:8b:38: 14:b7:57:d2:9d:0c:07:3f:21:5b:fd:d1:c1:bb:bf:c7:bf:7b: 1d:83:fa:9f:ca:77:b0:68:b3:ef:fb:d5:c6:d8:f4:ac:93:c6: b1:57:fe:3d:a3:03:68:0c:69:c5:bb:bf:7c:2a:e5:10:c4:40: 87:8c:4d:2e:67:86:d1:ad:25:15:84:08:ed:8f:2d:3f:83:a0: c3:ab:f3:84:23:69:0f:8e:ae:45:d9:2d:b3:78:ec:5c:8d:99: d1:8a:13:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCj86jA3gHt2Mpt4LVUBaeZw7LP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTA4MjIxNDU2MzdaFw0yNTA4MjUxNjUxMzdaMDMxMTAvBgNV BAMTKERGMzRFREExQzg0MTMxMUJFRDdCOTE0RjUyQkY5OTlGMTE5MUU0Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsOEw929XwuS3R89PrCg4USEqr GakAffd4cuOQQjG6bBHIC5JwrT/CGof8eSOwL8GDSATY7uCIbbc6rKQC3ImXPeJD FyXZoRazgzo37F3TiTVTZmNZ3+ak2vZwBW7BGj9EwXZNksm1o5ISyl1pm/egBB0t FGAqZJrq7UaL5kRlBwdLCZbl27cnv+i2Fgj6k5MEN6Ujyo9K7gXVrsyzCJLA7OI1 Ex3sZS/Gu1QYBDv+4TtpjiXvaF8KPmjnHbaodZfiGMLwqIfhtX69f/fgyFMFYStb L5Nzk9P8r83A84+qlQ+iOTo5A9ocBvgonekf3lA5bAMQY/mB8lQsYufcH909AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zTtochBMRvte5FPUr+ZnxGR5M4wHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN1tAfI91axbafdCAN0OJ3n/haIF0DuYr+WC ylewEZL5MOdFQcJeTLCvaYR2kyZi9Ngcv80tK5yxi38Cy14AY20XGQRupCAU8KzJ pP4UQhIcaKvJiHuTH9k8Y4BwQMmymq6JDbCHspVeO68fHlbeSQBTWH04dOS0sI3F a+p3VAay7zvBA8iR8O3fmFUl5kfS10JnW+CbKFn0k/ideRKsiIKLOBS3V9KdDAc/ IVv90cG7v8e/ex2D+p/Kd7Bos+/71cbY9KyTxrFX/j2jA2gMacW7v3wq5RDEQIeM TS5nhtGtJRWECO2PLT+DoMOr84QjaQ+OrkXZLbN47FyNmdGKE5o= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:18 2025 by rpki-client