$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: YVsTKKcB2yIzdB0q7dBb36CGnV7Qg2zo+Kl5UDQDb08= Subject key identifier: 15:A1:68:81:24:53:29:67:43:D3:DA:86:A7:EA:6C:E4:D0:D8:C3:C3 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 78FC65A37E31C07FAFC7F599D348E9190C89DD60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: 9C Signing time: Thu 08 May 2025 00:11:48 +0000 Manifest this update: Thu 08 May 2025 00:06:48 +0000 Manifest next update: Sun 11 May 2025 11:24:48 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: VsyQXSiVMiwcm5yUroJ76knQx3U8ruXQ8DjfeYFUQB4=) 3: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: hNXSog38qIK6coFGLkozOk4e1rJuRt7iHwoj6BQJREc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 11:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:fc:65:a3:7e:31:c0:7f:af:c7:f5:99:d3:48:e9:19:0c:89:dd:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: May 8 00:06:48 2025 GMT Not After : May 11 11:24:48 2025 GMT Subject: CN=15A168812453296743D3DA86A7EA6CE4D0D8C3C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:46:ff:b1:77:39:9b:fb:9d:ef:50:70:c2:81: 1b:7d:0b:54:06:8e:8c:76:f4:7a:fe:3c:ec:50:06: 09:a6:71:69:90:52:cf:d7:70:a2:d5:b4:ef:dc:e1: a3:92:59:10:e8:55:ef:03:1c:57:9c:92:1b:77:5a: e8:74:f3:37:fe:31:43:24:35:36:15:77:dd:a3:68: aa:35:ee:20:b7:5b:5a:fc:3d:e5:3f:bd:50:61:e6: c2:f2:31:f8:b7:7e:4b:54:38:f0:75:e6:9f:77:6a: 63:45:0e:09:fa:bb:92:ff:7a:dd:b4:5e:d9:39:90: 45:cc:cc:e2:27:af:5e:f2:f9:ca:98:e1:23:b1:f8: cc:e4:4a:41:27:d1:7c:b1:1c:e4:8e:d8:ac:07:6e: 2e:86:83:b8:22:03:69:6f:75:72:ac:96:3d:86:5f: 02:f7:b7:4b:c6:a8:af:7b:db:f5:af:77:05:ad:9a: 06:0c:da:98:74:f9:f9:7f:00:2d:4e:8b:48:73:52: 44:91:eb:64:ec:0d:44:57:06:7b:d4:ca:8f:f0:c1: dc:d3:07:dc:b3:57:63:70:48:d7:60:a7:61:51:63: dc:06:52:3c:c3:49:51:39:0e:ba:2c:c1:08:26:71: 6b:f6:81:5f:af:b8:de:38:b3:69:66:cd:d7:5f:4c: 8a:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:A1:68:81:24:53:29:67:43:D3:DA:86:A7:EA:6C:E4:D0:D8:C3:C3 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:8c:e7:ce:dc:83:10:fc:23:dd:b5:c1:66:2b:48:d6:f7:1a: 82:93:70:28:1d:f7:d7:77:3c:99:75:e4:2c:88:ef:dc:8e:5e: 92:e9:b0:7c:9a:f9:f4:97:18:45:54:42:e1:26:27:86:9e:8b: a8:29:fc:d4:ac:80:f3:39:44:36:40:38:5c:3e:08:ee:c1:6b: 51:33:0c:ae:70:b5:06:f8:1e:e4:7c:8e:7e:65:18:35:93:4e: 02:df:33:d5:73:17:80:7f:81:08:86:17:d7:d1:2f:a7:3a:15: 67:64:f1:bd:ed:c5:8d:af:c8:8c:04:d3:0d:d3:b7:ce:72:ed: 8b:98:58:eb:75:4b:4e:3f:e4:eb:a0:17:2b:14:d7:f9:ce:e9: 99:c5:e2:bb:f0:9c:73:35:5f:ad:05:42:ac:32:d0:79:7d:5a: 35:ef:34:f0:71:4d:26:c5:6d:4f:5f:08:f3:c0:ce:73:5e:fd: 73:df:e4:91:cf:9f:b9:10:a5:07:32:ee:21:26:4a:38:f9:bf: a2:6a:10:1f:4a:c2:a9:8c:3a:d0:84:85:92:97:11:5e:dd:29: bb:66:2e:5e:75:7c:34:f2:2c:d8:be:c1:55:45:55:cf:8c:f1: 3c:f5:8c:14:b7:37:cc:51:69:6a:c2:36:57:cc:e3:df:cb:a3: d5:61:ca:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUePxlo34xwH+vx/WZ00jpGQyJ3WAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA1MDgwMDA2NDhaFw0yNTA1MTExMTI0NDhaMDMxMTAvBgNV BAMTKDE1QTE2ODgxMjQ1MzI5Njc0M0QzREE4NkE3RUE2Q0U0RDBEOEMzQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZRv+xdzmb+53vUHDCgRt9C1QG jox29Hr+POxQBgmmcWmQUs/XcKLVtO/c4aOSWRDoVe8DHFeckht3Wuh08zf+MUMk NTYVd92jaKo17iC3W1r8PeU/vVBh5sLyMfi3fktUOPB15p93amNFDgn6u5L/et20 Xtk5kEXMzOInr17y+cqY4SOx+MzkSkEn0XyxHOSO2KwHbi6Gg7giA2lvdXKslj2G XwL3t0vGqK972/WvdwWtmgYM2ph0+fl/AC1Oi0hzUkSR62TsDURXBnvUyo/wwdzT B9yzV2NwSNdgp2FRY9wGUjzDSVE5DroswQgmcWv2gV+vuN44s2lmzddfTIppAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFaFogSRTKWdD09qGp+ps5NDYw8MwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCM587cgxD8I921wWYrSNb3GoKTcCgd99d3 PJl15CyI79yOXpLpsHya+fSXGEVUQuEmJ4aei6gp/NSsgPM5RDZAOFw+CO7Ba1Ez DK5wtQb4HuR8jn5lGDWTTgLfM9VzF4B/gQiGF9fRL6c6FWdk8b3txY2vyIwE0w3T t85y7YuYWOt1S04/5OugFysU1/nO6ZnF4rvwnHM1X60FQqwy0Hl9WjXvNPBxTSbF bU9fCPPAznNe/XPf5JHPn7kQpQcy7iEmSjj5v6JqEB9KwqmMOtCEhZKXEV7dKbtm Ll51fDTyLNi+wVVFVc+M8Tz1jBS3N8xRaWrCNlfM49/Lo9VhygU= -----END CERTIFICATE-----Generated at Sat May 10 05:34:19 2025 by rpki-client