$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: xyzea89Fjn4D8wPBs2vpSwj4/NAp01T8GSZycBGp/E8= Subject key identifier: 3F:04:C6:97:77:59:EF:54:7A:D6:BB:DF:77:92:D0:F8:73:0F:6F:06 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 6F9F4C79E5543662FB651761FFF465FFC368097E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: B4 Signing time: Sun 29 Jun 2025 23:21:48 +0000 Manifest this update: Sun 29 Jun 2025 23:16:48 +0000 Manifest next update: Thu 03 Jul 2025 06:37:48 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: BCbUyQsp0H+fY+MVZ2nN/RxPdn5tM6T/sm1Dn7A+EoE=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9f:4c:79:e5:54:36:62:fb:65:17:61:ff:f4:65:ff:c3:68:09:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Jun 29 23:16:48 2025 GMT Not After : Jul 3 06:37:48 2025 GMT Subject: CN=3F04C6977759EF547AD6BBDF7792D0F8730F6F06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:8e:86:31:04:60:db:35:dc:ff:bd:40:86:f6: 96:3e:c7:1c:eb:bc:1c:d6:fa:d4:22:dd:eb:37:fd: bc:b1:bb:ff:f2:34:07:73:58:44:0c:50:cd:26:18: b1:c3:ce:b0:ca:ea:b7:91:d6:f3:bb:4f:65:1f:36: 2b:b0:5c:46:0c:27:cb:2c:e5:78:57:ab:4f:42:06: 3e:d0:73:05:42:ff:9b:8b:03:59:b6:35:a1:09:df: 36:ed:5d:1a:cd:3f:1e:9b:62:62:4d:c9:b7:4d:00: eb:fa:ae:54:b3:b0:27:31:76:af:19:f8:c2:c0:39: c4:10:0d:05:0c:e6:af:0c:b3:ee:4f:a5:10:87:af: ae:11:7d:b0:07:92:eb:a3:f8:66:00:51:8b:87:ca: bb:0f:d5:f4:c4:93:1c:1d:c7:1d:02:1b:77:6e:d9: 06:65:46:ac:35:7c:4c:7a:24:8a:62:db:97:c9:99: e9:f6:26:90:8b:61:95:f4:5f:38:50:5f:07:20:f3: 1c:b3:3c:c7:2f:0c:b8:01:ab:8e:78:0f:93:e5:bb: ba:b8:21:27:3b:03:13:88:78:ec:0b:2e:bf:38:70: cd:a4:c4:16:58:eb:a3:b4:79:42:38:a2:cf:fc:c0: d8:50:8f:1c:34:a0:81:ed:00:16:66:e7:c6:73:c1: 00:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:04:C6:97:77:59:EF:54:7A:D6:BB:DF:77:92:D0:F8:73:0F:6F:06 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:d3:17:53:a6:23:27:5b:f3:5a:f1:21:ba:5d:0d:32:4d:78: f2:8a:84:20:0c:96:0c:12:b5:c0:a0:71:60:77:47:87:b5:2c: 44:1d:09:e0:7b:c6:e3:d4:af:24:d1:31:58:b3:aa:b6:c1:5f: 87:e6:90:dd:24:c5:91:59:4a:97:4b:84:1d:1b:2a:92:bf:33: 0b:6c:c1:08:7c:61:25:3e:21:bc:c8:18:e7:f1:db:e7:e9:3e: da:68:ba:cc:68:6a:ad:ab:d6:32:90:6d:59:ec:fa:b0:99:b4: fe:d9:d8:8b:17:00:b1:8d:16:f3:ca:6f:2e:0c:f3:27:e1:48: cd:30:e4:82:cf:29:54:8e:19:7e:f0:62:ab:0e:19:d6:2a:8c: 2c:af:40:a0:b4:78:9e:d5:12:7c:a8:eb:81:d8:19:f8:5d:37: c2:e3:65:df:32:fd:f3:41:36:15:df:e2:83:d2:b8:2b:59:d5: 7a:44:9b:c6:24:60:26:35:7a:06:d2:11:dc:71:bd:6d:b2:bb: ed:87:d4:f4:9f:45:98:cb:33:e6:be:2f:14:4f:32:df:6c:f6: a3:ea:ce:d8:64:a8:26:35:c2:f9:9f:3e:db:e3:ff:99:bd:f2: 5e:d6:7a:57:cf:bd:18:53:82:28:e8:4b:f3:0e:f7:db:c1:b0: 24:fe:a6:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb59MeeVUNmL7ZRdh//Rl/8NoCX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA2MjkyMzE2NDhaFw0yNTA3MDMwNjM3NDhaMDMxMTAvBgNV BAMTKDNGMDRDNjk3Nzc1OUVGNTQ3QUQ2QkJERjc3OTJEMEY4NzMwRjZGMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnjoYxBGDbNdz/vUCG9pY+xxzr vBzW+tQi3es3/byxu//yNAdzWEQMUM0mGLHDzrDK6reR1vO7T2UfNiuwXEYMJ8ss 5XhXq09CBj7QcwVC/5uLA1m2NaEJ3zbtXRrNPx6bYmJNybdNAOv6rlSzsCcxdq8Z +MLAOcQQDQUM5q8Ms+5PpRCHr64RfbAHkuuj+GYAUYuHyrsP1fTEkxwdxx0CG3du 2QZlRqw1fEx6JIpi25fJmen2JpCLYZX0XzhQXwcg8xyzPMcvDLgBq454D5Plu7q4 ISc7AxOIeOwLLr84cM2kxBZY66O0eUI4os/8wNhQjxw0oIHtABZm58ZzwQCJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPwTGl3dZ71R61rvfd5LQ+HMPbwYwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrTF1OmIydb81rxIbpdDTJNePKKhCAMlgwS tcCgcWB3R4e1LEQdCeB7xuPUryTRMVizqrbBX4fmkN0kxZFZSpdLhB0bKpK/Mwts wQh8YSU+IbzIGOfx2+fpPtpousxoaq2r1jKQbVns+rCZtP7Z2IsXALGNFvPKby4M 8yfhSM0w5ILPKVSOGX7wYqsOGdYqjCyvQKC0eJ7VEnyo64HYGfhdN8LjZd8y/fNB NhXf4oPSuCtZ1XpEm8YkYCY1egbSEdxxvW2yu+2H1PSfRZjLM+a+LxRPMt9s9qPq zthkqCY1wvmfPtvj/5m98l7WelfPvRhTgijoS/MO99vBsCT+pr8= -----END CERTIFICATE-----Generated at Mon Jun 30 21:54:28 2025 by rpki-client