$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: eUFFtdus+n50RcyT96H/rWUKmM2cxd6nCN+bGkqgWfo= Subject key identifier: F4:46:B8:B9:48:03:4B:DF:60:58:F7:FF:4E:A2:B0:EF:2C:B4:49:9D Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 6EC90DA64C70BB5341CA894D7E8FAFB3F1DE81C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: CC Signing time: Fri 22 Aug 2025 06:51:52 +0000 Manifest this update: Fri 22 Aug 2025 06:46:52 +0000 Manifest next update: Mon 25 Aug 2025 14:06:52 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 2: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: CQ7mArorBGV1gqn2v5MrQGbwsu/+neQZd7gZcKUAdlA=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 14:06:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c9:0d:a6:4c:70:bb:53:41:ca:89:4d:7e:8f:af:b3:f1:de:81:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Aug 22 06:46:52 2025 GMT Not After : Aug 25 14:06:52 2025 GMT Subject: CN=F446B8B948034BDF6058F7FF4EA2B0EF2CB4499D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:b5:32:53:c8:a7:16:78:ca:c9:58:32:7c:15: 68:d5:37:c2:c7:a3:21:01:ce:28:82:4d:7d:44:c6: e6:b3:83:b1:da:73:59:34:6c:4d:d9:bb:7a:33:fa: 3a:36:ad:ab:4b:dc:e5:00:6b:e9:95:51:fd:5b:aa: 1a:fe:dd:f0:70:35:53:52:2c:cc:bf:58:e7:92:4b: 0b:9b:10:fb:09:01:be:40:c6:03:76:63:ad:7a:a1: 25:e1:8b:55:e8:25:23:48:b4:16:31:44:8f:51:54: 5e:83:88:10:f1:c0:4a:a4:fb:6e:46:80:d7:60:b9: 99:76:b8:81:38:53:e2:27:fa:03:c2:6c:25:ed:dd: 4a:c3:3d:d6:aa:89:74:f6:3f:c4:19:ea:08:ea:2c: 38:2f:be:b7:ea:25:fd:b6:16:4b:bf:04:0f:db:a8: 56:14:c5:fa:6f:e9:68:c7:e2:a6:ab:94:d9:96:86: 9f:fc:71:25:7b:d9:fa:48:ae:47:d0:1a:58:38:c6: 72:ac:0c:46:f9:7f:77:c8:51:7b:48:b5:d0:b7:37: ba:a8:fc:15:10:95:25:fb:f6:91:6d:87:cc:9a:3d: 6c:d0:87:40:de:14:a4:8f:c4:ff:33:d3:43:49:a6: c4:3f:ec:ba:ca:40:39:2c:c7:ac:41:0c:3d:6b:1a: 80:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:46:B8:B9:48:03:4B:DF:60:58:F7:FF:4E:A2:B0:EF:2C:B4:49:9D X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:c7:63:87:4d:66:f0:74:9d:de:98:34:e2:26:78:88:aa:35: ff:cf:06:b7:e5:28:37:de:0a:bb:ee:fe:ab:1d:5e:bb:8f:89: 20:29:f2:f3:30:ee:9f:ed:58:7a:6e:45:d2:9e:6f:f6:e2:38: 1b:f6:b7:fa:65:1e:43:cd:22:40:0a:c4:e5:16:f4:03:f9:f9: e9:b1:58:81:f9:c4:a7:25:d8:6e:df:1e:15:d8:5b:9d:d4:fd: ed:1c:9e:2d:23:70:03:88:a7:ef:56:ce:65:95:2d:56:a8:05: 62:18:be:9a:e8:06:cb:49:60:0f:5a:c2:3d:af:6e:86:a8:16: a7:ff:85:20:35:30:62:99:ac:86:b7:d7:dc:63:a2:fe:29:55: 6f:60:d5:eb:d9:ae:c1:6c:74:b2:66:8d:c1:04:99:25:5e:8b: c3:33:5f:8f:d9:a4:27:d2:76:76:37:2e:09:c2:54:53:67:5b: 38:6c:60:9a:61:92:4b:c1:03:bb:89:0d:ee:0f:d5:f4:eb:21: 7f:ce:70:40:4d:36:1c:8a:6b:e8:0f:82:05:97:b7:7e:48:b7: a3:b3:50:ae:84:17:ff:53:d7:fd:8e:bc:fd:96:82:c3:f7:04: 80:8d:69:1e:e5:1c:3b:84:9a:f9:eb:4e:f5:a6:ca:17:ce:27: c7:a7:69:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbskNpkxwu1NByolNfo+vs/HegcAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA4MjIwNjQ2NTJaFw0yNTA4MjUxNDA2NTJaMDMxMTAvBgNV BAMTKEY0NDZCOEI5NDgwMzRCREY2MDU4RjdGRjRFQTJCMEVGMkNCNDQ5OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhtTJTyKcWeMrJWDJ8FWjVN8LH oyEBziiCTX1Exuazg7Hac1k0bE3Zu3oz+jo2ratL3OUAa+mVUf1bqhr+3fBwNVNS LMy/WOeSSwubEPsJAb5AxgN2Y616oSXhi1XoJSNItBYxRI9RVF6DiBDxwEqk+25G gNdguZl2uIE4U+In+gPCbCXt3UrDPdaqiXT2P8QZ6gjqLDgvvrfqJf22Fku/BA/b qFYUxfpv6WjH4qarlNmWhp/8cSV72fpIrkfQGlg4xnKsDEb5f3fIUXtItdC3N7qo /BUQlSX79pFth8yaPWzQh0DeFKSPxP8z00NJpsQ/7LrKQDksx6xBDD1rGoCXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Ea4uUgDS99gWPf/TqKw7yy0SZ0wHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfHY4dNZvB0nd6YNOImeIiqNf/PBrflKDfe Crvu/qsdXruPiSAp8vMw7p/tWHpuRdKeb/biOBv2t/plHkPNIkAKxOUW9AP5+emx WIH5xKcl2G7fHhXYW53U/e0cni0jcAOIp+9WzmWVLVaoBWIYvproBstJYA9awj2v boaoFqf/hSA1MGKZrIa319xjov4pVW9g1evZrsFsdLJmjcEEmSVei8MzX4/ZpCfS dnY3LgnCVFNnWzhsYJphkkvBA7uJDe4P1fTrIX/OcEBNNhyKa+gPggWXt35It6Oz UK6EF/9T1/2OvP2WgsP3BICNaR7lHDuEmvnrTvWmyhfOJ8enaW0= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:52 2025 by rpki-client