$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: 402Za4F6mD5if5gFuNO3mcbH/lQVO+QUTwI1XGF1PQ0= Subject key identifier: 36:3D:3F:55:93:8D:51:C4:AB:57:ED:FD:93:0F:BA:7A:E7:CB:7E:F1 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 6C7927F95968D931E22E179C0CD57D7620AC1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: E8 Signing time: Tue 04 Nov 2025 01:42:05 +0000 Manifest this update: Tue 04 Nov 2025 01:37:05 +0000 Manifest next update: Fri 07 Nov 2025 05:32:05 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: c9UORQTBcuU5+6OnetRhGMIQMIHZCTMtrWHOL9aNnvA=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 3: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 05:32:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:79:27:f9:59:68:d9:31:e2:2e:17:9c:0c:d5:7d:76:20:ac:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Nov 4 01:37:05 2025 GMT Not After : Nov 7 05:32:05 2025 GMT Subject: CN=363D3F55938D51C4AB57EDFD930FBA7AE7CB7EF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:e8:c5:da:7d:7b:e8:3e:0a:b8:dd:5b:98:79: 68:e9:e6:ee:8a:5e:f5:cb:f6:d5:85:84:1e:b7:b1: 45:85:06:23:b5:83:7c:a6:5b:99:0b:79:2a:66:c8: 13:3b:d4:6f:58:a9:05:09:f3:c8:69:ac:7b:fe:03: e1:18:91:b4:b5:bc:22:1f:e5:72:e9:ed:d0:8a:9b: 43:96:e0:6a:b9:28:83:92:28:ba:29:8b:65:29:5d: 76:bd:cb:9e:7f:fc:0e:87:d5:5a:e8:fa:47:d6:68: 45:ce:88:7f:a1:a7:df:2a:a5:a3:d2:ac:2b:fe:ef: 54:8c:65:f5:1a:c3:e7:7e:af:10:e5:e5:cd:b5:48: b8:fa:da:4a:c8:c9:52:5f:ac:36:b6:fe:e0:fc:07: 5c:cb:97:d0:f0:6a:62:c1:62:35:8a:f7:c0:82:a2: 1d:f8:49:c3:62:23:89:be:e6:36:8e:3c:32:53:6f: 47:72:4a:d5:0b:d9:1e:b0:dc:99:c5:73:47:39:71: 31:41:ed:23:56:03:31:1a:97:c8:7a:66:48:f0:3f: 5d:14:56:cf:d9:08:10:3a:e9:3b:dc:bf:8c:6f:e6: 77:47:f7:55:a8:00:d8:16:10:e0:45:80:51:1c:ed: da:82:0c:99:59:6c:ef:66:95:ed:f7:27:9b:26:68: e3:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:3D:3F:55:93:8D:51:C4:AB:57:ED:FD:93:0F:BA:7A:E7:CB:7E:F1 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:1a:88:c6:bd:7b:33:b0:40:44:bf:e0:5d:47:cb:c2:4a:5a: e1:7c:f9:4b:34:36:07:a4:a8:9d:66:69:16:bf:63:18:ec:95: c9:68:f2:4e:42:26:66:dd:be:44:f3:db:67:ed:1f:0a:a3:78: 36:de:c4:89:4a:7a:f6:4d:13:f8:1d:40:7a:8c:8d:58:ba:eb: 3d:53:da:c5:26:32:56:b0:eb:97:ce:c5:94:db:0b:8c:a8:e6: c2:ed:94:e7:ed:16:f7:f9:43:5c:72:53:79:e6:61:0a:37:ce: 31:ac:a0:a2:c7:81:ef:21:2b:2c:7d:33:db:2a:99:e6:9d:a1: 6b:49:6e:bd:a2:c0:0d:cf:50:9d:c6:6d:8f:19:ed:d9:96:24: 4a:06:e8:12:b9:31:17:2c:f4:46:f7:93:de:e8:18:9b:41:de: 37:5f:86:c2:eb:39:39:9c:f3:56:2a:14:42:86:d9:2a:ce:a3: 44:98:59:be:75:9e:60:9c:cb:33:72:9d:3e:6c:f6:2c:0f:1a: c5:ec:9f:61:be:d3:1f:ef:f9:ea:75:94:e5:f2:e7:ca:e2:03: 06:ee:20:d4:15:53:57:d2:a2:50:6c:8b:ba:df:1d:1f:ac:68: 7a:67:32:ae:f1:db:0f:00:89:b8:4f:2c:58:a3:26:ab:29:c0: d8:28:7d:bb -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITbHkn+Vlo2THiLhecDNV9diCsHjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCRTQxRkU3REM3NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4 ODRCQjhDMB4XDTI1MTEwNDAxMzcwNVoXDTI1MTEwNzA1MzIwNVowMzExMC8GA1UE AxMoMzYzRDNGNTU5MzhENTFDNEFCNTdFREZEOTMwRkJBN0FFN0NCN0VGMTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALXoxdp9e+g+CrjdW5h5aOnm7ope 9cv21YWEHrexRYUGI7WDfKZbmQt5KmbIEzvUb1ipBQnzyGmse/4D4RiRtLW8Ih/l cunt0IqbQ5bgarkog5IouimLZSlddr3Lnn/8DofVWuj6R9ZoRc6If6Gn3yqlo9Ks K/7vVIxl9RrD536vEOXlzbVIuPraSsjJUl+sNrb+4PwHXMuX0PBqYsFiNYr3wIKi HfhJw2Ijib7mNo48MlNvR3JK1QvZHrDcmcVzRzlxMUHtI1YDMRqXyHpmSPA/XRRW z9kIEDrpO9y/jG/md0f3VagA2BYQ4EWAURzt2oIMmVls72aV7fcnmyZo4xMCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ2PT9Vk41RxKtX7f2TD7p658t+8TAfBgNVHSME GDAWgBS+Qf59x3FIB56hysTJAF3raIS7jDAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFi ZGNlMzkxLWE1ZDMtNDExYi1hOTdiLWU4NjJmYmY1NjMxYy8wL0JFNDFGRTdEQzc3 MTQ4MDc5RUExQ0FDNEM5MDA1REVCNjg4NEJCOEMuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMS9CRTQxRkU3REM3NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRC QjhDLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xYmRjZTM5MS1hNWQzLTQxMWItYTk3 Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3NzE0ODA3OUVBMUNBQzRDOTAwNURF QjY4ODRCQjhDLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAMBqIxr17M7BARL/gXUfLwkpa4Xz5SzQ2B6So nWZpFr9jGOyVyWjyTkImZt2+RPPbZ+0fCqN4Nt7EiUp69k0T+B1AeoyNWLrrPVPa xSYyVrDrl87FlNsLjKjmwu2U5+0W9/lDXHJTeeZhCjfOMaygoseB7yErLH0z2yqZ 5p2ha0luvaLADc9QncZtjxnt2ZYkSgboErkxFyz0RveT3ugYm0HeN1+Gwus5OZzz VioUQobZKs6jRJhZvnWeYJzLM3KdPmz2LA8axeyfYb7TH+/56nWU5fLnyuIDBu4g 1BVTV9KiUGyLut8dH6xoemcyrvHbDwCJuE8sWKMmqynA2Ch9uw== -----END CERTIFICATE-----Generated at Tue Nov 4 18:57:31 2025 by rpki-client