$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: Xv2NYDymv7/f3IUg9RyRmLCTsDVpT84cjz4SbiMsIF0= Subject key identifier: ED:1D:C3:77:86:9C:01:25:E5:49:20:F1:4B:2D:05:BE:6A:D6:F6:93 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 0A0980E646DBBBB9E39E2BAD55FB7404217564AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 047A Signing time: Tue 01 Jul 2025 16:01:07 +0000 Manifest this update: Tue 01 Jul 2025 15:56:07 +0000 Manifest next update: Sat 05 Jul 2025 03:52:07 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: IfhhVFH3PrLXhWjFzuTapS5Iq5sRD6WA4e1zrAIjak8=) 2: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: w5H4NA1ZDrPq6E63a19l+fyJ+v36xM1dpo0Jz1iHa5A=) 3: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: cJOBNoxIG+XdgkJa+RxEvdYzqEAiE0yonzEzhxIBb8I=) 4: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 5: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 03:52:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:09:80:e6:46:db:bb:b9:e3:9e:2b:ad:55:fb:74:04:21:75:64:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Jul 1 15:56:07 2025 GMT Not After : Jul 5 03:52:07 2025 GMT Subject: CN=ED1DC377869C0125E54920F14B2D05BE6AD6F693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:63:7b:b1:dc:3d:11:eb:b2:da:dc:e8:70:4b: eb:47:17:91:73:4c:5b:c0:47:6c:85:cd:c5:15:ab: 13:46:92:ea:b5:1b:3c:16:b4:af:b5:29:b5:78:3b: 7e:bc:0c:15:4a:43:9a:04:7c:8c:90:37:91:f5:6f: 82:3d:d9:42:87:67:d4:08:d5:53:d2:3e:e2:b0:21: 8d:7b:ec:cb:a0:09:c7:b9:84:e8:17:a5:a5:44:e8: a6:88:59:b6:3a:ce:01:c3:2f:6f:e8:8c:7f:56:64: 87:56:7a:be:4a:a5:5f:b2:3a:eb:f2:9c:29:10:91: 7b:00:0e:d9:19:72:a6:60:e7:85:1f:48:25:8c:39: 2e:4e:de:14:ad:96:13:c6:fd:bd:1d:09:9e:40:f0: 49:48:a3:0b:b1:9b:11:91:a4:a7:de:a5:93:c4:21: 57:23:6f:0c:c4:35:ca:09:da:f2:f4:a2:77:94:7a: bb:70:9c:df:b4:5e:97:d4:2e:ef:5f:11:f1:c8:ef: e2:b7:ab:39:1c:43:90:45:39:10:8b:e3:b0:4d:8d: aa:56:dd:f4:36:8e:6c:58:9e:95:97:12:05:df:87: fb:4f:56:78:04:25:18:ea:9f:22:ad:0e:88:32:d6: 61:40:b4:6b:67:1f:5c:a6:96:96:e8:a3:68:50:08: b6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:1D:C3:77:86:9C:01:25:E5:49:20:F1:4B:2D:05:BE:6A:D6:F6:93 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:62:0f:4f:a2:29:47:63:f7:7e:bb:26:1c:a5:c5:73:c6:5b: bf:d8:b4:48:89:78:bd:c2:6c:c4:e8:4b:9c:6a:ff:c1:d9:1d: ca:ce:3e:cb:02:c4:e1:98:af:f7:03:63:c6:fa:19:e5:94:9a: a5:ba:94:e9:5a:7f:75:73:68:6f:dd:a2:a0:74:72:e4:30:35: 6c:3a:37:2a:c8:52:14:a5:ae:ad:58:83:c1:fb:73:d7:35:a6: 7e:71:67:8f:ce:35:ad:04:2f:2f:58:88:db:f5:dc:0f:ff:c8: 46:51:ee:1d:13:11:00:d3:9e:d7:4c:25:63:31:79:03:99:43: 59:ec:af:90:11:26:2f:cf:33:16:79:9b:3e:37:63:38:e7:8d: 23:c7:67:e1:da:18:40:fe:4c:56:cd:2c:de:21:b8:cb:ab:21: 9c:d9:c0:83:36:27:94:d3:38:db:70:6d:f7:3a:a8:b7:2a:31: 53:29:fe:e9:f4:a8:7b:f3:6d:70:1a:88:b3:20:d8:b6:e3:2a: e3:2f:cf:ee:3c:96:d0:18:a3:ee:97:9c:13:bf:51:42:7e:6c: 70:2c:13:07:53:3e:11:74:de:3b:b4:c7:a0:86:88:96:bf:37: c8:00:36:38:f8:1e:55:1b:bf:0e:b0:c4:64:3e:f7:78:e1:f8: 41:cb:cb:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCgmA5kbbu7njniutVft0BCF1ZK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTA3MDExNTU2MDdaFw0yNTA3MDUwMzUyMDdaMDMxMTAvBgNV BAMTKEVEMURDMzc3ODY5QzAxMjVFNTQ5MjBGMTRCMkQwNUJFNkFENkY2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGY3ux3D0R67La3OhwS+tHF5Fz TFvAR2yFzcUVqxNGkuq1GzwWtK+1KbV4O368DBVKQ5oEfIyQN5H1b4I92UKHZ9QI 1VPSPuKwIY177MugCce5hOgXpaVE6KaIWbY6zgHDL2/ojH9WZIdWer5KpV+yOuvy nCkQkXsADtkZcqZg54UfSCWMOS5O3hStlhPG/b0dCZ5A8ElIowuxmxGRpKfepZPE IVcjbwzENcoJ2vL0oneUertwnN+0XpfULu9fEfHI7+K3qzkcQ5BFORCL47BNjapW 3fQ2jmxYnpWXEgXfh/tPVngEJRjqnyKtDogy1mFAtGtnH1ymlpboo2hQCLZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7R3Dd4acASXlSSDxSy0FvmrW9pMwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBiD0+iKUdj9367JhylxXPGW7/YtEiJeL3C bMToS5xq/8HZHcrOPssCxOGYr/cDY8b6GeWUmqW6lOlaf3VzaG/doqB0cuQwNWw6 NyrIUhSlrq1Yg8H7c9c1pn5xZ4/ONa0ELy9YiNv13A//yEZR7h0TEQDTntdMJWMx eQOZQ1nsr5ARJi/PMxZ5mz43YzjnjSPHZ+HaGED+TFbNLN4huMurIZzZwIM2J5TT ONtwbfc6qLcqMVMp/un0qHvzbXAaiLMg2LbjKuMvz+48ltAYo+6XnBO/UUJ+bHAs EwdTPhF03ju0x6CGiJa/N8gANjj4HlUbvw6wxGQ+93jh+EHLy9s= -----END CERTIFICATE-----Generated at Wed Jul 2 19:47:11 2025 by rpki-client