$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: iwhLlt4d88hw1Md9DynhQeAgX9+3N3mD4OzNG9PyK44= Subject key identifier: 02:86:DE:68:64:ED:63:9A:71:DE:5C:CD:77:C5:CC:4A:8C:8C:71:6F Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 11E8CDBEEA3267E403FAB025E15FBB5E0584DD7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0305 Signing time: Wed 18 Jun 2025 03:51:34 +0000 Manifest this update: Wed 18 Jun 2025 03:46:34 +0000 Manifest next update: Sat 21 Jun 2025 15:30:34 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 2: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 3: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 4: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 5: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: LfSalynWRyR/eK/WB7CKHFD8IyT+op1Sy4XHwkoUa/s=) 6: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 15:30:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:e8:cd:be:ea:32:67:e4:03:fa:b0:25:e1:5f:bb:5e:05:84:dd:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Jun 18 03:46:34 2025 GMT Not After : Jun 21 15:30:34 2025 GMT Subject: CN=0286DE6864ED639A71DE5CCD77C5CC4A8C8C716F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4c:62:45:9a:48:a8:51:df:03:07:08:ea:3e: 4e:0a:7a:96:98:04:d5:df:a8:72:ad:e4:05:c6:e1: 3e:16:e7:b0:0d:a3:18:35:cd:93:cc:1b:43:04:7f: 6e:a8:42:f7:30:5e:01:a7:fe:d0:31:4e:c5:e3:52: c6:8e:44:c9:e6:98:dc:21:fa:e5:85:ac:00:65:bd: 27:42:0b:5a:62:2a:97:09:bc:2e:cc:0f:20:f5:5d: c7:15:1a:66:03:a4:2a:81:2a:78:4a:01:8c:4d:73: 37:24:82:f3:10:c9:c1:e1:27:21:11:13:72:55:74: fc:b3:11:56:8e:3e:47:86:5f:b9:02:fe:59:8c:f1: 2a:63:7e:69:34:61:4d:58:1f:c1:1b:07:03:39:aa: ec:bb:04:1f:95:76:63:38:33:21:28:4e:af:fb:6f: 45:70:99:68:a9:79:de:db:ed:0c:92:ab:9c:1f:88: a8:0b:9a:8f:84:db:97:d0:3f:d4:45:3c:ca:03:3b: 23:ad:dd:93:0c:96:4b:e4:af:4a:9b:19:6a:93:68: 14:19:27:d5:b7:b6:a4:72:a0:95:74:b2:ac:58:3d: 48:2e:ef:f4:c0:24:f7:bf:fc:66:69:32:c4:52:ab: d0:55:d2:dd:d7:00:8d:e3:33:c4:13:dd:55:67:fb: a1:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:86:DE:68:64:ED:63:9A:71:DE:5C:CD:77:C5:CC:4A:8C:8C:71:6F X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:f0:e1:b5:80:16:9f:b6:d5:e2:92:9b:03:62:42:9b:85:51: 61:db:a5:07:83:0c:c7:30:ae:eb:e4:fc:60:3b:06:8f:a8:e5: 07:19:fc:e4:c2:46:42:14:4b:db:e9:41:46:5b:41:c5:62:10: a8:a1:b8:93:54:17:09:28:f3:4b:2f:4f:67:e4:bb:ad:7a:5a: 42:a6:a4:6b:e2:7a:0b:b2:10:e0:a0:9d:ef:9a:d5:ab:13:27: 38:1b:11:aa:c2:46:0b:41:89:8c:1c:1d:7c:9a:fe:db:91:ff: 89:2c:34:48:8a:3e:13:70:c5:a6:34:25:63:7b:9e:d0:0a:17: 1f:21:98:03:3d:4b:83:27:7e:8a:24:67:63:4e:b9:c4:84:ce: df:d3:6c:a9:ea:b5:8c:a6:85:d8:87:00:d4:48:65:0f:7a:01: d0:87:c5:6b:fa:b7:65:d6:c9:ad:1b:97:be:08:14:a7:60:3b: ac:fa:9a:fa:83:a3:f8:01:82:6e:a4:82:64:a0:c8:cb:a7:25: 19:70:9b:20:1d:f7:9c:cb:5b:b6:19:05:45:a4:b4:a5:69:7a: 94:77:e6:e7:e1:08:38:51:37:4d:6a:3c:c3:ad:8b:59:c4:8b: 94:81:f9:2b:c4:af:7d:0a:53:4b:6e:ec:75:38:30:0c:b8:49: 1a:af:9a:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEejNvuoyZ+QD+rAl4V+7XgWE3XswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA2MTgwMzQ2MzRaFw0yNTA2MjExNTMwMzRaMDMxMTAvBgNV BAMTKDAyODZERTY4NjRFRDYzOUE3MURFNUNDRDc3QzVDQzRBOEM4QzcxNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATGJFmkioUd8DBwjqPk4KepaY BNXfqHKt5AXG4T4W57ANoxg1zZPMG0MEf26oQvcwXgGn/tAxTsXjUsaORMnmmNwh +uWFrABlvSdCC1piKpcJvC7MDyD1XccVGmYDpCqBKnhKAYxNczckgvMQycHhJyER E3JVdPyzEVaOPkeGX7kC/lmM8Spjfmk0YU1YH8EbBwM5quy7BB+VdmM4MyEoTq/7 b0VwmWiped7b7QySq5wfiKgLmo+E25fQP9RFPMoDOyOt3ZMMlkvkr0qbGWqTaBQZ J9W3tqRyoJV0sqxYPUgu7/TAJPe//GZpMsRSq9BV0t3XAI3jM8QT3VVn+6FrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAobeaGTtY5px3lzNd8XMSoyMcW8wHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbw4bWAFp+21eKSmwNiQpuFUWHbpQeDDMcw ruvk/GA7Bo+o5QcZ/OTCRkIUS9vpQUZbQcViEKihuJNUFwko80svT2fku616WkKm pGvieguyEOCgne+a1asTJzgbEarCRgtBiYwcHXya/tuR/4ksNEiKPhNwxaY0JWN7 ntAKFx8hmAM9S4MnfookZ2NOucSEzt/TbKnqtYymhdiHANRIZQ96AdCHxWv6t2XW ya0bl74IFKdgO6z6mvqDo/gBgm6kgmSgyMunJRlwmyAd95zLW7YZBUWktKVpepR3 5ufhCDhRN01qPMOti1nEi5SB+SvEr30KU0tu7HU4MAy4SRqvmho= -----END CERTIFICATE-----Generated at Thu Jun 19 02:51:05 2025 by rpki-client