$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: vItg4YTE7B8mM/3oxl6dxVqOk3tYDjVCTCJTWOBxhIo= Subject key identifier: 7B:2C:1D:CC:FA:ED:F9:73:7C:59:A4:E2:FF:1D:DC:AA:9B:C7:8B:30 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 516D8167759997056EA9499E78CDF5B6A4C9E06E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 031C Signing time: Fri 08 Aug 2025 17:41:36 +0000 Manifest this update: Fri 08 Aug 2025 17:36:36 +0000 Manifest next update: Tue 12 Aug 2025 05:28:36 +0000 Files and hashes: 1: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: P0Cve0vp0S+duHDM6Yh7OaJR81dOTiOfobvsoGjUG+Q=) 2: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 3: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 4: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 5: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 00:46:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6d:81:67:75:99:97:05:6e:a9:49:9e:78:cd:f5:b6:a4:c9:e0:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Aug 8 17:36:36 2025 GMT Not After : Aug 12 05:28:36 2025 GMT Subject: CN=7B2C1DCCFAEDF9737C59A4E2FF1DDCAA9BC78B30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:55:44:ca:e7:f0:03:c6:a5:88:18:5e:b4:3f: 39:8f:be:ec:e5:ac:f1:f2:25:77:c2:a7:f2:7b:04: f5:56:9f:2d:4f:d9:03:2f:6b:cc:91:a9:5c:cd:5f: b4:45:4b:15:d1:0b:88:41:99:96:f6:fe:31:3f:1c: d6:9d:ae:cf:b9:93:cd:d3:69:8c:ea:02:30:2a:30: c0:d0:21:e1:bb:a4:d2:f5:86:54:55:02:7a:e3:7e: 3e:6d:8f:24:14:00:18:12:3f:5c:95:a3:59:c4:fc: 57:a9:85:8c:9d:1c:8e:6e:5e:38:6b:f1:85:f3:78: 45:e5:1a:c1:1d:2e:6c:79:04:78:be:fc:19:20:5c: 84:44:ec:67:74:19:dd:1a:8c:0f:b1:fd:f2:21:e5: 51:c0:d6:c3:af:39:b4:59:63:b0:2a:c6:0d:5a:5e: 2c:18:f5:fb:65:a6:0f:f9:36:15:60:4c:a5:15:53: 15:10:3c:0c:04:7f:ca:e0:7e:95:9e:e4:e3:d3:aa: cf:9c:f5:f5:75:4d:c2:22:66:92:f8:d8:7f:71:4b: ff:94:4e:d3:3e:79:52:9b:c0:65:73:b0:15:b3:e0: e0:6d:37:51:35:f9:ed:c2:bc:81:e1:80:09:95:fb: e5:36:13:d4:34:b4:e7:eb:2e:8c:d4:77:9f:6c:1e: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:2C:1D:CC:FA:ED:F9:73:7C:59:A4:E2:FF:1D:DC:AA:9B:C7:8B:30 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:79:1c:fa:c9:6c:e4:05:a4:54:6b:dc:1b:b7:4d:9b:3a:c2: 01:eb:6a:98:ad:24:6f:4d:93:89:03:a3:b8:97:6d:fc:18:1b: f5:94:91:87:15:f7:1d:a5:ce:7e:52:ee:3b:ec:69:9b:e6:37: c0:0e:24:81:be:96:cd:0e:29:82:a9:cf:14:af:4e:c0:44:45: 5c:3f:71:90:60:58:95:6e:9d:68:49:68:54:39:24:2f:57:5e: cd:d9:35:c5:91:c2:2b:d0:e9:16:a6:22:93:92:e4:b6:c8:1a: 3d:a1:81:29:a8:54:91:92:95:10:70:a4:cb:35:fd:1d:e2:b4: 60:1f:b2:e2:c3:d2:9d:a0:f3:60:db:00:dc:0d:30:e5:5a:48: 2a:99:50:c8:24:34:99:73:d0:ad:31:04:55:bf:8c:09:e3:70: ae:09:f0:66:51:cb:7e:8d:2c:b4:61:0a:48:39:5d:d2:b2:b6: 23:40:b2:c8:00:2c:c3:70:7e:30:0b:17:21:3f:fd:36:5f:5e: 0d:4c:e7:e8:95:09:d6:4d:c8:40:a6:e5:2d:70:7a:47:c8:cb: 3d:8d:e0:8f:c0:9e:a4:54:f0:76:b1:11:72:a3:d0:7e:f5:9f: 0e:21:62:15:be:97:11:e2:7e:82:1c:66:59:67:cc:90:b2:3b: 5f:8d:e8:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUW2BZ3WZlwVuqUmeeM31tqTJ4G4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA4MDgxNzM2MzZaFw0yNTA4MTIwNTI4MzZaMDMxMTAvBgNV BAMTKDdCMkMxRENDRkFFREY5NzM3QzU5QTRFMkZGMUREQ0FBOUJDNzhCMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpVUTK5/ADxqWIGF60PzmPvuzl rPHyJXfCp/J7BPVWny1P2QMva8yRqVzNX7RFSxXRC4hBmZb2/jE/HNadrs+5k83T aYzqAjAqMMDQIeG7pNL1hlRVAnrjfj5tjyQUABgSP1yVo1nE/FephYydHI5uXjhr 8YXzeEXlGsEdLmx5BHi+/BkgXIRE7Gd0Gd0ajA+x/fIh5VHA1sOvObRZY7Aqxg1a XiwY9ftlpg/5NhVgTKUVUxUQPAwEf8rgfpWe5OPTqs+c9fV1TcIiZpL42H9xS/+U TtM+eVKbwGVzsBWz4OBtN1E1+e3CvIHhgAmV++U2E9Q0tOfrLozUd59sHo35AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeywdzPrt+XN8WaTi/x3cqpvHizAwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEp5HPrJbOQFpFRr3Bu3TZs6wgHrapitJG9N k4kDo7iXbfwYG/WUkYcV9x2lzn5S7jvsaZvmN8AOJIG+ls0OKYKpzxSvTsBERVw/ cZBgWJVunWhJaFQ5JC9XXs3ZNcWRwivQ6RamIpOS5LbIGj2hgSmoVJGSlRBwpMs1 /R3itGAfsuLD0p2g82DbANwNMOVaSCqZUMgkNJlz0K0xBFW/jAnjcK4J8GZRy36N LLRhCkg5XdKytiNAssgALMNwfjALFyE//TZfXg1M5+iVCdZNyECm5S1wekfIyz2N 4I/AnqRU8HaxEXKj0H71nw4hYhW+lxHifoIcZllnzJCyO1+N6Co= -----END CERTIFICATE-----Generated at Fri Aug 8 20:51:46 2025 by rpki-client