$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: 3J5eInKSYlNUhk9BueF4GTml2c6sDMfjPyK2twb945A= Subject key identifier: E7:F4:50:9A:14:1A:7D:FC:2E:D7:AA:4E:88:15:E4:CC:F4:60:A7:91 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 64448135C36D8569C097A6A0A31AF63753822EB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 019D Signing time: Mon 30 Jun 2025 02:01:37 +0000 Manifest this update: Mon 30 Jun 2025 01:56:37 +0000 Manifest next update: Thu 03 Jul 2025 06:41:37 +0000 Files and hashes: 1: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 2: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) 4: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: Pgj3AcgxP/y9OyaxrQrW0Tq+F6NlX++6C81PthFzzVA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:41:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:44:81:35:c3:6d:85:69:c0:97:a6:a0:a3:1a:f6:37:53:82:2e:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Jun 30 01:56:37 2025 GMT Not After : Jul 3 06:41:37 2025 GMT Subject: CN=E7F4509A141A7DFC2ED7AA4E8815E4CCF460A791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:4c:64:68:b1:70:88:40:13:f1:14:ca:69: 77:e6:f8:68:7d:77:86:e1:0f:25:f9:f3:18:23:7f: 89:01:b2:b2:02:86:35:61:96:1c:ee:5a:5d:10:7c: ca:6d:e8:30:ec:31:4e:3c:0e:19:a6:ca:b0:bd:da: a5:ab:70:3d:a0:84:21:4e:4a:00:44:c7:bf:6f:fc: 51:a7:d7:83:84:be:8e:2b:07:71:ba:4c:d7:04:c8: a3:6e:6c:74:29:8b:23:ae:d6:a6:41:35:15:fd:f5: 05:3e:f4:cd:e7:17:5d:9a:f1:fe:75:79:3d:5a:8b: b8:17:c0:22:81:5c:08:b0:f3:14:9c:4b:5e:2e:40: 90:92:27:77:5f:d4:1c:19:a4:1c:2b:66:56:33:46: cb:63:58:56:26:09:3b:4b:b6:09:af:44:f6:59:87: e7:8b:20:78:0d:ce:2a:5c:83:47:35:de:c1:15:f4: 10:d7:7f:47:f3:3b:19:29:9e:32:f9:2a:32:79:78: 82:40:fd:a0:22:57:24:10:4e:f4:2e:62:e1:99:c3: 01:0a:b5:e2:bf:3d:39:ec:a6:28:f8:9d:de:6a:75: b6:7d:c5:e5:90:c6:5b:03:6c:74:71:6d:9d:14:58: e3:ad:12:24:5c:77:e5:25:72:9c:7a:8a:78:16:ef: c4:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F4:50:9A:14:1A:7D:FC:2E:D7:AA:4E:88:15:E4:CC:F4:60:A7:91 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:9c:83:7d:7c:d3:d8:68:ae:82:c7:e2:e7:5f:d1:bc:93:e9: 32:a7:b8:00:a6:97:9b:2e:6c:ec:04:f9:b2:9e:fb:69:71:f4: 0b:f1:5f:d0:2f:f8:df:00:aa:9d:1c:32:95:68:2f:6e:b0:37: 0f:c1:fe:8b:ac:68:2b:f9:61:54:88:de:fa:63:90:d7:7b:4b: a8:6e:a5:9b:15:09:61:29:41:76:60:a7:a4:4f:68:7e:54:f5: 1b:a3:4d:25:93:03:12:f4:86:4c:66:e4:f2:5a:ef:4b:04:dc: 18:14:48:3b:66:a3:eb:7d:d0:e7:24:58:be:95:75:b1:12:f6: 66:f2:9d:a7:93:eb:e6:6c:39:6d:c7:f1:7c:d2:40:16:b2:0a: 6a:f9:e2:e5:63:c3:f2:77:61:3a:bb:9c:4d:6e:62:28:a5:1a: 8c:15:e2:59:4c:38:d8:be:82:11:69:97:ba:4a:22:7e:77:ba: 22:28:8d:74:34:f5:46:58:69:fd:d2:e1:62:0f:32:45:dd:f9: c7:b5:13:6f:58:f3:59:74:fe:1e:d6:9f:e5:a2:aa:90:bd:86: b0:8b:7a:98:43:33:b5:b4:fb:44:49:48:34:47:93:70:0b:c0: 7d:73:b1:e5:69:13:06:cc:9c:3f:a9:62:42:99:c4:af:2b:4e: b6:a8:22:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZESBNcNthWnAl6agoxr2N1OCLrEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTA2MzAwMTU2MzdaFw0yNTA3MDMwNjQxMzdaMDMxMTAvBgNV BAMTKEU3RjQ1MDlBMTQxQTdERkMyRUQ3QUE0RTg4MTVFNENDRjQ2MEE3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UUxkaLFwiEAT8RTKaXfm+Gh9 d4bhDyX58xgjf4kBsrIChjVhlhzuWl0QfMpt6DDsMU48DhmmyrC92qWrcD2ghCFO SgBEx79v/FGn14OEvo4rB3G6TNcEyKNubHQpiyOu1qZBNRX99QU+9M3nF12a8f51 eT1ai7gXwCKBXAiw8xScS14uQJCSJ3df1BwZpBwrZlYzRstjWFYmCTtLtgmvRPZZ h+eLIHgNzipcg0c13sEV9BDXf0fzOxkpnjL5KjJ5eIJA/aAiVyQQTvQuYuGZwwEK teK/PTnspij4nd5qdbZ9xeWQxlsDbHRxbZ0UWOOtEiRcd+Ulcpx6ingW78RdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5/RQmhQaffwu16pOiBXkzPRgp5EwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGScg31809horoLH4udf0byT6TKnuACml5su bOwE+bKe+2lx9AvxX9Av+N8Aqp0cMpVoL26wNw/B/ousaCv5YVSI3vpjkNd7S6hu pZsVCWEpQXZgp6RPaH5U9RujTSWTAxL0hkxm5PJa70sE3BgUSDtmo+t90OckWL6V dbES9mbynaeT6+ZsOW3H8XzSQBayCmr54uVjw/J3YTq7nE1uYiilGowV4llMONi+ ghFpl7pKIn53uiIojXQ09UZYaf3S4WIPMkXd+ce1E29Y81l0/h7Wn+WiqpC9hrCL ephDM7W0+0RJSDRHk3ALwH1zseVpEwbMnD+pYkKZxK8rTraoIsQ= -----END CERTIFICATE-----Generated at Mon Jun 30 05:48:48 2025 by rpki-client