$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: fhWoYbrSvBfLIh4oe9Pxd2XNOsZPSlODsdkDcbnoWR0= Subject key identifier: 75:E4:3D:9C:47:5E:81:BB:6C:18:CD:BB:27:B6:9D:04:BA:2E:D0:65 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 768579CBF857831738E3EEE5A56D0E2DFF76A9A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01CE Signing time: Sat 18 Oct 2025 02:21:40 +0000 Manifest this update: Sat 18 Oct 2025 02:16:40 +0000 Manifest next update: Tue 21 Oct 2025 08:16:40 +0000 Files and hashes: 1: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) 2: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: 7bH+1Ot/VeAiOnsjLDqzTbtekyL3WxJSfuVWB9UOlOg=) 3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 08:16:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:85:79:cb:f8:57:83:17:38:e3:ee:e5:a5:6d:0e:2d:ff:76:a9:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Oct 18 02:16:40 2025 GMT Not After : Oct 21 08:16:40 2025 GMT Subject: CN=75E43D9C475E81BB6C18CDBB27B69D04BA2ED065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cb:47:ee:b2:4b:46:47:67:81:c9:13:56:9f: 56:88:1a:7b:d6:9a:04:ef:6d:c9:6a:5c:2c:16:2f: c8:e5:bb:08:75:db:d2:17:ce:df:95:33:ed:7e:85: e3:cf:c0:60:34:65:e8:0f:ab:58:01:be:cb:96:ee: 12:d6:7d:2a:29:14:86:d6:db:58:1f:c7:c0:6c:bc: bd:a0:2c:f7:39:84:c0:af:45:ca:c5:c2:45:7f:e4: 28:3d:fa:cd:fb:5c:52:dd:14:02:45:93:bf:f9:a8: 6a:5e:c2:76:5c:d1:22:8d:36:80:2d:ce:91:b4:69: 1a:54:12:c0:90:f8:70:fb:12:da:09:7f:a6:58:7c: b2:fe:0c:e5:17:ce:25:1c:e6:b9:f7:e2:b5:b7:68: 34:79:13:2d:6a:a4:da:96:18:47:40:25:e5:ef:bb: b0:13:f5:fb:64:c0:42:03:8d:d0:22:7f:b0:b8:0a: 7f:91:f1:12:89:e2:4b:9c:f4:6d:9a:3b:49:fb:2b: 81:ef:1f:ba:8a:2f:b5:0e:c5:45:9e:59:2c:b2:9d: 98:fd:3a:29:bb:ae:8c:99:e6:fe:18:78:99:8e:ba: d2:d1:90:37:12:da:33:c5:af:8b:69:5c:7c:13:b4: f1:67:38:49:a5:ff:05:5b:d6:be:cd:82:4c:70:2d: 3a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E4:3D:9C:47:5E:81:BB:6C:18:CD:BB:27:B6:9D:04:BA:2E:D0:65 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:c9:55:3c:f6:c0:3e:b7:9e:10:c3:b0:eb:7a:54:e2:b2:da: 6d:1e:03:8f:11:2c:fa:c1:e7:50:91:ad:36:ee:5b:2a:bb:9a: f7:f3:90:db:17:e6:fa:c5:46:5f:22:fa:65:2b:34:e1:af:25: 93:bc:d3:fa:c1:d9:91:13:2c:ed:d8:84:a7:ba:ad:e6:f5:00: df:8b:c5:6e:4c:f2:b9:9c:1c:93:9a:67:4f:2c:04:e1:da:5e: be:6e:d6:d8:be:15:8a:ca:44:b3:40:b5:69:ad:73:04:68:52: 7e:d7:e9:8e:74:44:a1:c3:44:c5:51:70:6e:df:32:1b:64:70: 8d:d3:23:18:8a:df:95:dc:db:95:a7:b3:61:ba:f4:76:f7:32: 37:f2:b9:b4:35:85:d5:14:4b:39:1c:c1:b5:a3:4a:99:fc:d7: 15:7d:f3:df:63:9d:1c:e3:2b:42:8f:0e:ff:f0:7c:72:11:20: 68:5c:02:58:cd:c7:c3:0e:ae:76:ec:0d:9f:e7:f9:e8:51:5b: 4c:96:d4:3f:0e:2c:32:1d:f6:5d:52:3c:2d:1d:6a:60:2e:81: 60:92:12:e4:1a:67:de:78:c9:58:78:e2:90:37:d8:df:5f:15: b8:54:c4:8f:cd:c0:7e:62:14:1f:64:7a:05:54:e1:ac:63:e7: ee:e3:4b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoV5y/hXgxc44+7lpW0OLf92qakwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTEwMTgwMjE2NDBaFw0yNTEwMjEwODE2NDBaMDMxMTAvBgNV BAMTKDc1RTQzRDlDNDc1RTgxQkI2QzE4Q0RCQjI3QjY5RDA0QkEyRUQwNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8y0fusktGR2eByRNWn1aIGnvW mgTvbclqXCwWL8jluwh129IXzt+VM+1+hePPwGA0ZegPq1gBvsuW7hLWfSopFIbW 21gfx8BsvL2gLPc5hMCvRcrFwkV/5Cg9+s37XFLdFAJFk7/5qGpewnZc0SKNNoAt zpG0aRpUEsCQ+HD7EtoJf6ZYfLL+DOUXziUc5rn34rW3aDR5Ey1qpNqWGEdAJeXv u7AT9ftkwEIDjdAif7C4Cn+R8RKJ4kuc9G2aO0n7K4HvH7qKL7UOxUWeWSyynZj9 Oim7royZ5v4YeJmOutLRkDcS2jPFr4tpXHwTtPFnOEml/wVb1r7NgkxwLToVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeQ9nEdegbtsGM27J7adBLou0GUwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMnJVTz2wD63nhDDsOt6VOKy2m0eA48RLPrB 51CRrTbuWyq7mvfzkNsX5vrFRl8i+mUrNOGvJZO80/rB2ZETLO3YhKe6reb1AN+L xW5M8rmcHJOaZ08sBOHaXr5u1ti+FYrKRLNAtWmtcwRoUn7X6Y50RKHDRMVRcG7f MhtkcI3TIxiK35Xc25Wns2G69Hb3MjfyubQ1hdUUSzkcwbWjSpn81xV9899jnRzj K0KPDv/wfHIRIGhcAljNx8MOrnbsDZ/n+ehRW0yW1D8OLDId9l1SPC0damAugWCS EuQaZ954yVh44pA32N9fFbhUxI/NwH5iFB9kegVU4axj5+7jS4Q= -----END CERTIFICATE-----Generated at Mon Oct 20 06:53:39 2025 by rpki-client