$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: swC1WHYJwSFv8GU1SGWhH61hIDohAf7XSjkqTOEWB38= Subject key identifier: 9F:E4:6E:F5:CC:4B:EC:7A:CC:46:E9:48:76:78:E9:39:C7:0E:FC:8E Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 509DD5261B2A1AFC06D6AA1F9E5E64C499317F03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 01D4 Signing time: Sun 19 Oct 2025 19:31:44 +0000 Manifest this update: Sun 19 Oct 2025 19:26:44 +0000 Manifest next update: Thu 23 Oct 2025 04:37:44 +0000 Files and hashes: 1: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: gm33V+FpkTZp4vhfMn0R1HmBUVRHmRHaTZRlyRWh1Lc=) 2: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: LLjVcB4TK8HbGtL5twrWl8bdSaFD/4kWXLOVeKCbmtI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:9d:d5:26:1b:2a:1a:fc:06:d6:aa:1f:9e:5e:64:c4:99:31:7f:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Oct 19 19:26:44 2025 GMT Not After : Oct 23 04:37:44 2025 GMT Subject: CN=9FE46EF5CC4BEC7ACC46E9487678E939C70EFC8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:f8:44:de:01:63:9c:91:1e:0a:8b:9a:37:29: 74:f2:d6:d2:92:62:d2:4e:57:d7:36:d1:9c:c5:72: 5c:8d:1a:cf:a9:3e:b6:1c:a3:d4:c7:35:16:e5:36: a3:c3:2c:4f:1a:12:0a:f8:a5:1d:d3:ec:fb:da:ae: 5b:33:6a:7d:1f:30:bc:4a:a9:a2:fa:73:00:c0:26: 58:26:1c:dd:14:1f:5a:45:2b:3c:e7:13:6d:89:fa: 06:82:f0:8a:74:0a:e9:b9:32:0e:2c:51:04:7f:b8: 3c:d4:b3:b6:2f:20:2a:13:61:9f:d6:cd:4c:ad:ec: 50:59:d7:7b:f6:4c:c7:2b:0a:11:79:b5:c2:84:b2: 73:87:84:24:6f:40:96:42:e2:06:e9:fb:8b:d7:7d: 43:08:d5:24:08:66:fd:a4:10:0c:de:6d:28:f7:10: 46:a3:78:d8:ee:f1:c4:cb:b6:74:16:ff:73:7c:bb: ec:08:61:b6:b0:ce:36:9b:57:70:2a:31:60:1e:9d: ed:b4:ae:19:af:e1:21:d7:35:98:a8:58:14:e4:17: 28:ea:4f:1e:b7:28:fe:68:85:a8:be:e6:03:d8:b6: 93:8f:41:da:45:87:f3:24:8f:ee:5d:83:7c:79:c7: 1d:7c:a6:37:a5:4b:2c:1e:4f:66:fb:3b:04:b0:75: 00:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:E4:6E:F5:CC:4B:EC:7A:CC:46:E9:48:76:78:E9:39:C7:0E:FC:8E X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4e:31:e6:a3:c6:d9:ec:d2:bc:0e:4d:0d:74:85:ca:69:e9: 17:08:0c:b2:8d:be:f5:13:8d:cc:7d:bd:e7:b5:ff:5c:e4:f5: ab:c3:05:07:a2:a4:2e:1a:1c:9a:8e:8b:2a:19:45:c1:0d:20: d9:94:30:4c:5e:e1:18:77:26:e7:22:5e:52:8f:78:78:51:1f: 00:0c:82:f7:e6:5e:35:ee:cd:0f:54:67:42:fb:38:f5:17:cf: 07:4c:6d:35:ea:ce:f5:12:f9:3b:7f:cd:ec:d3:5e:86:6d:b4: ff:13:be:ff:a1:1b:3d:66:aa:49:c6:01:6c:35:3d:47:eb:85: 85:05:a0:76:9f:dd:ec:b4:35:c4:20:f1:e7:53:12:89:0a:9b: 6a:10:fa:53:cd:8c:96:99:05:f5:29:8b:57:66:08:0f:6d:51: 3b:db:88:ba:01:b5:da:ab:58:04:0d:17:69:87:e3:c8:8b:41: 43:71:2f:7a:e6:ee:bd:b9:93:5b:15:6a:fe:72:af:3a:0f:0d: 64:5e:05:a8:59:6b:d5:90:0f:3c:60:18:a9:8d:33:7f:b0:bf: f3:65:cb:73:96:de:4e:9c:9f:4e:bb:1b:e7:29:38:0b:a5:2a: d4:d9:ba:3a:d5:fb:68:0e:7b:9c:55:c6:24:e8:18:f3:4f:1b: de:6a:36:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUJ3VJhsqGvwG1qofnl5kxJkxfwMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTEwMTkxOTI2NDRaFw0yNTEwMjMwNDM3NDRaMDMxMTAvBgNV BAMTKDlGRTQ2RUY1Q0M0QkVDN0FDQzQ2RTk0ODc2NzhFOTM5QzcwRUZDOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB+ETeAWOckR4Ki5o3KXTy1tKS YtJOV9c20ZzFclyNGs+pPrYco9THNRblNqPDLE8aEgr4pR3T7Pvarlszan0fMLxK qaL6cwDAJlgmHN0UH1pFKzznE22J+gaC8Ip0Cum5Mg4sUQR/uDzUs7YvICoTYZ/W zUyt7FBZ13v2TMcrChF5tcKEsnOHhCRvQJZC4gbp+4vXfUMI1SQIZv2kEAzebSj3 EEajeNju8cTLtnQW/3N8u+wIYbawzjabV3AqMWAene20rhmv4SHXNZioWBTkFyjq Tx63KP5ohai+5gPYtpOPQdpFh/Mkj+5dg3x5xx18pjelSyweT2b7OwSwdQDLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn+Ru9cxL7HrMRulIdnjpOccO/I4wHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADROMeajxtns0rwOTQ10hcpp6RcIDLKNvvUT jcx9vee1/1zk9avDBQeipC4aHJqOiyoZRcENINmUMExe4Rh3JuciXlKPeHhRHwAM gvfmXjXuzQ9UZ0L7OPUXzwdMbTXqzvUS+Tt/zezTXoZttP8Tvv+hGz1mqknGAWw1 PUfrhYUFoHaf3ey0NcQg8edTEokKm2oQ+lPNjJaZBfUpi1dmCA9tUTvbiLoBtdqr WAQNF2mH48iLQUNxL3rm7r25k1sVav5yrzoPDWReBahZa9WQDzxgGKmNM3+wv/Nl y3OW3k6cn067G+cpOAulKtTZujrV+2gOe5xVxiToGPNPG95qNuk= -----END CERTIFICATE-----Generated at Mon Oct 20 19:43:32 2025 by rpki-client