$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: EFlNA8Nh6JdlWrHmWZfvV1rfvJmvCofmrPXje9tPoYk= Subject key identifier: 0D:80:47:5D:79:7C:25:C0:CC:60:49:87:38:04:61:34:08:EF:A9:51 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 2D9A2A33EA3D5C3714863B926A363895DCBC76E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 01A1 Signing time: Sat 28 Jun 2025 10:21:39 +0000 Manifest this update: Sat 28 Jun 2025 10:16:39 +0000 Manifest next update: Tue 01 Jul 2025 11:51:39 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: r9++rl9+1eokc7lbV6eh3LD+3E3JoX+VgPx9VTEYG1A=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: pu6/UsxjccuW1i483s8+VcEVhXPDGUX2MOdonN1OKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:51:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:9a:2a:33:ea:3d:5c:37:14:86:3b:92:6a:36:38:95:dc:bc:76:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Jun 28 10:16:39 2025 GMT Not After : Jul 1 11:51:39 2025 GMT Subject: CN=0D80475D797C25C0CC6049873804613408EFA951 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:f1:24:80:6f:d0:12:d8:da:77:79:1f:fd:20: ef:c2:93:17:28:42:48:48:11:81:bb:4e:7a:25:f1: 0b:e7:70:82:78:62:7b:3a:a0:2d:26:31:34:96:db: 74:f8:84:b2:5b:3f:da:cf:4b:d1:93:b6:4e:db:4a: b7:8b:39:90:f4:fe:f9:ae:8f:47:ea:7b:e8:6a:0d: 96:87:af:73:79:cd:b5:fa:90:71:87:8d:d4:ce:33: 40:e2:f0:5e:01:42:c7:27:f0:ba:55:27:ef:f5:a0: 8c:b3:03:17:af:9d:00:e7:70:e9:37:d7:ed:27:e2: 23:31:f4:c4:d6:ed:1f:ce:d5:87:19:0d:39:9f:0c: 58:fd:22:ac:75:1d:34:28:f9:3c:c3:ed:3f:b7:cd: 65:03:21:1a:8e:81:af:8f:88:a3:eb:e8:7c:93:18: 63:ec:14:ac:a7:58:81:92:d1:c5:0b:ad:66:18:f9: 60:d3:40:a8:a2:46:3c:0b:83:dc:c7:80:52:9a:b2: c5:32:0b:dd:2a:67:15:19:95:a1:95:a5:e5:2a:86: 16:19:92:de:3c:9e:52:08:68:1e:c0:f1:e1:9b:75: 32:2b:4f:6b:86:30:34:17:55:8d:e4:a7:b2:a6:7e: 3e:2e:48:0d:96:43:4c:7f:87:2c:9f:e0:24:07:5b: b5:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:80:47:5D:79:7C:25:C0:CC:60:49:87:38:04:61:34:08:EF:A9:51 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:21:9e:59:36:a4:7d:f0:ea:26:61:95:79:88:0e:91:de:a0: 92:1f:60:4b:d0:28:c4:e0:b9:f9:ad:a4:dd:54:19:9b:e0:b7: 12:72:6b:09:df:e3:45:3f:1c:16:56:f4:7e:b6:91:a4:b2:ee: 24:2b:34:0a:1d:b3:3d:07:5b:e8:72:52:a3:c5:3f:13:a1:b9: 8f:75:aa:97:cf:7a:c2:46:e1:a5:32:6e:bd:49:76:44:10:a0: 8c:0d:24:ac:27:5c:b0:ed:34:29:97:d3:ac:7a:0e:54:a1:a0: 37:ca:72:f6:9c:3a:5c:e6:95:72:11:03:52:df:80:9f:c1:20: 1d:d4:00:bb:75:1d:b7:03:d7:a9:85:d1:ca:42:06:04:29:06: e6:c7:d4:0a:97:bc:99:fb:0e:3c:f9:88:b2:e3:3a:ad:1b:eb: 80:f4:20:8e:e3:d4:24:a6:d0:39:9e:a4:46:76:b5:cf:af:74: 17:90:a6:0a:7f:0f:f9:15:82:d9:76:53:e6:f0:bc:1a:d5:a8: 12:84:16:7d:38:ba:bb:14:c5:56:82:46:2d:99:b6:4e:f4:e7: 6d:20:87:f7:a3:9b:6f:ea:16:35:c7:b9:57:7c:b4:a6:13:14: 1d:c1:ff:14:e1:7b:86:df:98:40:4c:7b:ac:c9:a0:3e:0a:eb: 48:7d:da:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULZoqM+o9XDcUhjuSajY4ldy8dugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTA2MjgxMDE2MzlaFw0yNTA3MDExMTUxMzlaMDMxMTAvBgNV BAMTKDBEODA0NzVENzk3QzI1QzBDQzYwNDk4NzM4MDQ2MTM0MDhFRkE5NTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW8SSAb9AS2Np3eR/9IO/Ckxco QkhIEYG7Tnol8QvncIJ4Yns6oC0mMTSW23T4hLJbP9rPS9GTtk7bSreLOZD0/vmu j0fqe+hqDZaHr3N5zbX6kHGHjdTOM0Di8F4BQscn8LpVJ+/1oIyzAxevnQDncOk3 1+0n4iMx9MTW7R/O1YcZDTmfDFj9Iqx1HTQo+TzD7T+3zWUDIRqOga+PiKPr6HyT GGPsFKynWIGS0cULrWYY+WDTQKiiRjwLg9zHgFKassUyC90qZxUZlaGVpeUqhhYZ kt48nlIIaB7A8eGbdTIrT2uGMDQXVY3kp7Kmfj4uSA2WQ0x/hyyf4CQHW7VVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDYBHXXl8JcDMYEmHOARhNAjvqVEwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQhnlk2pH3w6iZhlXmIDpHeoJIfYEvQKMTg ufmtpN1UGZvgtxJyawnf40U/HBZW9H62kaSy7iQrNAodsz0HW+hyUqPFPxOhuY91 qpfPesJG4aUybr1JdkQQoIwNJKwnXLDtNCmX06x6DlShoDfKcvacOlzmlXIRA1Lf gJ/BIB3UALt1HbcD16mF0cpCBgQpBubH1AqXvJn7Djz5iLLjOq0b64D0II7j1CSm 0DmepEZ2tc+vdBeQpgp/D/kVgtl2U+bwvBrVqBKEFn04ursUxVaCRi2Ztk70520g h/ejm2/qFjXHuVd8tKYTFB3B/xThe4bfmEBMe6zJoD4K60h92uI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:17 2025 by rpki-client