$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: 7yizDt1SRQW1yXsW65v4LAZpHJmVfJOkLt3dVzqQq68= Subject key identifier: 3A:28:3F:B0:12:AD:74:69:DE:1E:45:C8:F7:E4:BC:31:A6:E8:88:C3 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 17DAD17D228E4DFF08625B99DC54686175B62DC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04AC Signing time: Sun 19 Oct 2025 00:51:09 +0000 Manifest this update: Sun 19 Oct 2025 00:46:09 +0000 Manifest next update: Wed 22 Oct 2025 03:01:09 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) 2: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 4: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: 4qyb32jfBL6gW3rlY7gEpOO1yF/exhz2Xl4lJRffQg4=) 5: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:da:d1:7d:22:8e:4d:ff:08:62:5b:99:dc:54:68:61:75:b6:2d:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Oct 19 00:46:09 2025 GMT Not After : Oct 22 03:01:09 2025 GMT Subject: CN=3A283FB012AD7469DE1E45C8F7E4BC31A6E888C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:19:17:1d:a0:11:ab:51:a3:07:c8:3e:18:b4: 27:7f:56:93:d0:51:a2:0a:b6:6a:c4:4e:35:ec:11: 81:18:c8:e3:e1:f2:04:65:66:af:a0:99:c1:60:87: 96:23:4c:68:b7:90:d1:85:17:95:2e:27:ee:36:c4: 79:67:ef:47:6b:c2:35:20:13:d9:81:45:4a:e0:f2: f3:ff:4c:f0:d1:b5:ac:56:a6:af:84:f3:b3:48:ea: a9:d1:da:1e:f4:fc:bf:04:9f:91:85:35:4b:d4:39: fe:82:23:77:c8:6a:85:7d:da:cc:eb:f0:56:44:2a: 33:96:96:c6:9e:4d:a4:9e:77:23:38:a3:6d:67:25: 2f:35:36:35:47:70:db:d0:7d:76:38:e9:d6:da:88: 41:a5:78:23:93:12:01:ec:89:d2:ff:49:29:ad:43: df:ff:74:77:64:ac:ba:12:1f:f7:64:b9:ea:ca:e9: 58:51:8a:91:e1:02:3a:4d:2b:f2:70:1c:8b:1a:24: 97:be:dc:cf:c7:6b:f6:06:49:ed:38:cf:25:ba:13: 8c:f0:fd:f3:ec:90:be:03:c2:83:c0:e8:0e:4b:96: c5:b4:92:86:79:6a:33:89:77:69:00:73:bf:46:a4: 41:ad:47:b4:4c:5e:08:cc:77:64:ed:f1:22:fe:25: 7d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:28:3F:B0:12:AD:74:69:DE:1E:45:C8:F7:E4:BC:31:A6:E8:88:C3 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:03:8a:a7:56:5e:16:80:23:aa:bb:9b:58:d1:9b:b5:3f:b4: 01:e7:55:e3:ef:6c:a2:8c:6f:29:c5:8e:db:bf:bf:2e:92:36: 1d:72:72:5b:30:10:53:9f:9b:9c:4f:d7:f6:84:b1:fa:67:a6: 2d:c0:3e:8e:f1:a9:ca:7b:2c:ee:a0:5c:2b:56:3d:1f:74:18: 53:8a:ff:5e:50:56:71:75:c4:2a:37:31:da:e3:df:a4:d2:df: b4:50:12:f5:0a:57:26:1f:fe:1b:35:fc:16:1c:bb:3e:a5:81: eb:7f:71:d4:39:ed:83:27:20:26:09:79:21:ca:9a:8f:e2:18: d3:f5:de:82:2c:c8:16:8b:72:13:a4:77:de:f0:ef:77:b7:00: fe:3a:96:9c:89:2a:c5:ca:a3:8a:2d:cc:e8:7b:92:e1:cd:32: 15:5b:b4:ef:18:60:36:1c:16:e8:9f:5b:13:6c:a0:4a:56:f9: c1:0e:69:db:c8:db:29:af:3e:d3:72:52:80:5d:4d:82:c5:fc: c0:c5:d7:51:30:ed:80:d7:60:4e:b4:ac:c3:79:a1:8f:6a:2a: f0:a9:0b:d8:b0:a8:cf:e3:7c:5e:d2:a3:73:9c:1d:70:84:f7: 82:a0:63:79:eb:a4:8d:39:ed:b4:8a:ff:20:23:08:e9:89:74: 6e:00:5a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF9rRfSKOTf8IYluZ3FRoYXW2LckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTEwMTkwMDQ2MDlaFw0yNTEwMjIwMzAxMDlaMDMxMTAvBgNV BAMTKDNBMjgzRkIwMTJBRDc0NjlERTFFNDVDOEY3RTRCQzMxQTZFODg4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzGRcdoBGrUaMHyD4YtCd/VpPQ UaIKtmrETjXsEYEYyOPh8gRlZq+gmcFgh5YjTGi3kNGFF5UuJ+42xHln70drwjUg E9mBRUrg8vP/TPDRtaxWpq+E87NI6qnR2h70/L8En5GFNUvUOf6CI3fIaoV92szr 8FZEKjOWlsaeTaSedyM4o21nJS81NjVHcNvQfXY46dbaiEGleCOTEgHsidL/SSmt Q9//dHdkrLoSH/dkuerK6VhRipHhAjpNK/JwHIsaJJe+3M/Ha/YGSe04zyW6E4zw /fPskL4DwoPA6A5LlsW0koZ5ajOJd2kAc79GpEGtR7RMXgjMd2Tt8SL+JX2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOig/sBKtdGneHkXI9+S8MaboiMMwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFkDiqdWXhaAI6q7m1jRm7U/tAHnVePvbKKM bynFjtu/vy6SNh1yclswEFOfm5xP1/aEsfpnpi3APo7xqcp7LO6gXCtWPR90GFOK /15QVnF1xCo3Mdrj36TS37RQEvUKVyYf/hs1/BYcuz6lget/cdQ57YMnICYJeSHK mo/iGNP13oIsyBaLchOkd97w73e3AP46lpyJKsXKo4otzOh7kuHNMhVbtO8YYDYc FuifWxNsoEpW+cEOadvI2ymvPtNyUoBdTYLF/MDF11Ew7YDXYE60rMN5oY9qKvCp C9iwqM/jfF7So3OcHXCE94KgY3nrpI057bSK/yAjCOmJdG4AWv0= -----END CERTIFICATE-----Generated at Mon Oct 20 12:44:52 2025 by rpki-client