$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: OKZA7gnJFOVeujE0YtubEzUTWgH0A1Anz1D4S4hT22Y= Subject key identifier: 03:B0:18:21:E3:7E:55:FF:13:1F:67:2F:DC:A4:CC:F6:50:53:5F:BD Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 75CA03B55279B82741CA89B6BB6B4386395A89C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: C1 Signing time: Fri 08 Aug 2025 13:02:02 +0000 Manifest this update: Fri 08 Aug 2025 12:57:02 +0000 Manifest next update: Mon 11 Aug 2025 17:15:02 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: vFR89VzNpoAD6QEXaZn+YGStlx2l4opliTKHMTkYXH8=) 2: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 3: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:ca:03:b5:52:79:b8:27:41:ca:89:b6:bb:6b:43:86:39:5a:89:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Aug 8 12:57:02 2025 GMT Not After : Aug 11 17:15:02 2025 GMT Subject: CN=03B01821E37E55FF131F672FDCA4CCF650535FBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:c2:d1:c8:f6:ba:7c:36:92:8e:a2:a3:a7: d6:60:b5:cb:d0:bb:9a:db:da:da:97:b2:16:2d:2b: 6a:01:e8:bc:6c:a2:49:fc:b2:d2:84:fd:22:15:41: c3:5a:72:fc:cc:eb:02:69:ad:9f:bd:96:02:b6:e9: 38:88:ec:40:a2:d8:0a:a3:75:f9:f6:8e:e7:38:4a: cc:b9:77:b0:7a:1e:1e:5c:9f:1e:e7:80:8d:0e:b6: cb:83:3c:c1:3d:24:b1:cb:2a:f3:6e:a1:bf:55:fb: 2d:b5:de:8d:84:37:0b:a7:82:03:cf:77:1d:83:11: 7f:fb:5d:04:0e:b4:7f:04:30:35:4a:10:ee:fe:1e: a7:09:2c:71:eb:4f:10:fe:02:e2:8a:4a:c6:7e:60: a4:7a:af:42:1f:25:4a:93:15:5f:31:b8:64:4e:01: 36:bb:33:1d:81:40:e7:87:45:01:22:04:3d:38:bd: b7:38:7e:bc:33:39:c0:67:ed:77:fa:5a:bb:d2:ef: fe:5d:1f:65:b7:6f:b6:e7:fe:46:31:fe:7d:0b:95: 02:d9:72:4e:6a:af:1a:9a:e0:25:99:35:c7:0c:ba: 5e:8c:eb:a6:85:cc:fc:67:7f:57:52:0d:77:f1:be: d3:dc:12:e0:6e:74:1e:18:fc:10:60:03:5c:9e:cb: f9:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:B0:18:21:E3:7E:55:FF:13:1F:67:2F:DC:A4:CC:F6:50:53:5F:BD X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:ba:cc:94:c1:32:9d:0d:93:c8:99:87:24:fd:45:f0:0b:23: a6:12:7f:4b:59:4f:03:7c:0b:fa:fd:59:5e:72:fc:ee:e2:4b: ed:b2:21:ba:40:fb:ed:31:5c:1e:a6:92:af:bd:c5:86:9b:e4: 83:9e:e4:d7:09:25:bc:b6:10:a9:8b:54:d8:e9:15:5f:6d:72: 61:7a:28:03:22:c6:f5:51:0f:b1:f1:7b:19:94:eb:49:8e:9d: df:97:99:1b:5a:42:49:2f:b2:3f:82:e8:9c:aa:9f:d7:55:99: b3:f4:4b:42:ab:56:26:8b:d8:63:f6:5f:0d:2d:12:f1:3b:78: 43:2d:16:5c:c4:8b:6f:ee:42:bd:4f:7e:88:14:6f:d0:b6:de: b7:c8:d9:ed:f4:e2:35:63:11:23:c6:66:ee:11:95:5c:ce:27: a0:bc:bf:9c:1c:cf:4a:c7:21:b7:0e:bd:a6:5b:fe:70:91:17: 96:89:c5:d8:1c:fe:17:5f:59:3f:b6:4b:a0:56:ad:a5:5c:15: 06:7a:15:18:c4:0e:ff:cf:e7:b2:40:1b:30:94:77:ae:29:92: 6f:53:a5:e4:10:18:1a:9e:4e:17:76:7e:33:20:2e:3b:a3:1f: 2b:ab:a4:e3:da:08:74:0b:e8:1f:03:72:ad:ed:9a:8d:9c:b5: f0:23:27:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdcoDtVJ5uCdByom2u2tDhjlaicIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA4MDgxMjU3MDJaFw0yNTA4MTExNzE1MDJaMDMxMTAvBgNV BAMTKDAzQjAxODIxRTM3RTU1RkYxMzFGNjcyRkRDQTRDQ0Y2NTA1MzVGQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmMLRyPa6fDaSjqKjp9ZgtcvQ u5rb2tqXshYtK2oB6Lxsokn8stKE/SIVQcNacvzM6wJprZ+9lgK26TiI7ECi2Aqj dfn2juc4Ssy5d7B6Hh5cnx7ngI0OtsuDPME9JLHLKvNuob9V+y213o2ENwunggPP dx2DEX/7XQQOtH8EMDVKEO7+HqcJLHHrTxD+AuKKSsZ+YKR6r0IfJUqTFV8xuGRO ATa7Mx2BQOeHRQEiBD04vbc4frwzOcBn7Xf6WrvS7/5dH2W3b7bn/kYx/n0LlQLZ ck5qrxqa4CWZNccMul6M66aFzPxnf1dSDXfxvtPcEuBudB4Y/BBgA1yey/lPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA7AYIeN+Vf8TH2cv3KTM9lBTX70wHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIy6zJTBMp0Nk8iZhyT9RfALI6YSf0tZTwN8 C/r9WV5y/O7iS+2yIbpA++0xXB6mkq+9xYab5IOe5NcJJby2EKmLVNjpFV9tcmF6 KAMixvVRD7HxexmU60mOnd+XmRtaQkkvsj+C6Jyqn9dVmbP0S0KrViaL2GP2Xw0t EvE7eEMtFlzEi2/uQr1PfogUb9C23rfI2e304jVjESPGZu4RlVzOJ6C8v5wcz0rH IbcOvaZb/nCRF5aJxdgc/hdfWT+2S6BWraVcFQZ6FRjEDv/P57JAGzCUd64pkm9T peQQGBqeThd2fjMgLjujHyurpOPaCHQL6B8Dcq3tmo2ctfAjJ+4= -----END CERTIFICATE-----Generated at Sat Aug 9 20:45:48 2025 by rpki-client