$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: NRC22d3hcf3IbOpZULMdIZRKVeLLCJ/eQKTcOvyfe4A= Subject key identifier: 28:ED:8E:62:64:80:C1:9D:2D:2E:63:5B:D8:54:13:CF:1F:07:30:95 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 3F00FC1FA3548F32D08458421AB42D544E95C222 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: AA Signing time: Tue 17 Jun 2025 11:52:30 +0000 Manifest this update: Tue 17 Jun 2025 11:47:30 +0000 Manifest next update: Fri 20 Jun 2025 12:15:30 +0000 Files and hashes: 1: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 2: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: Qma2qUuNHFItxzFBJcvMjkTeC2dIyOt+cWF2RCMucl0=) 3: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 4: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 12:15:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:00:fc:1f:a3:54:8f:32:d0:84:58:42:1a:b4:2d:54:4e:95:c2:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Jun 17 11:47:30 2025 GMT Not After : Jun 20 12:15:30 2025 GMT Subject: CN=28ED8E626480C19D2D2E635BD85413CF1F073095 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b2:9e:da:7a:e1:b7:d9:60:a3:1a:3c:38:35: f2:66:f8:df:5e:48:7e:e2:2a:52:df:9c:eb:ef:b8: 38:66:10:eb:26:22:18:f0:68:e3:e2:e2:f4:03:0e: ab:c4:8e:fd:f1:da:7e:a2:50:48:6f:52:df:ad:97: cf:b9:cd:fd:78:a1:4f:cb:31:31:f2:af:35:96:56: 3c:d5:cb:9f:cf:e6:fc:1f:40:54:60:d9:cc:de:c4: 2d:9f:16:d4:2b:e5:b8:29:d5:1a:51:df:9e:d2:2f: 35:6b:4e:0c:a8:69:70:74:24:b9:3e:99:c5:6a:04: 93:51:c0:e1:c8:82:98:fc:30:d8:3d:17:b3:0f:87: 43:65:e0:70:56:40:6e:4c:d2:94:6c:28:67:03:13: 5b:86:93:27:23:97:ce:e4:30:9b:7e:f5:21:a6:93: 39:03:2b:1e:4f:c9:e8:0d:cf:0a:88:3e:ce:d0:08: 69:14:84:57:06:1d:6d:b8:07:f8:55:cb:d7:5c:2f: b2:2b:80:04:a6:ba:27:4c:bc:42:f4:b9:b0:7b:1d: 2f:eb:21:84:2e:0f:3e:ed:3f:50:c9:55:50:c6:50: b4:82:40:36:0b:f8:87:67:a2:a4:3d:67:c0:ce:66: 60:4a:47:22:9c:c6:1a:98:c1:d8:9e:ea:21:8f:7b: 14:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:ED:8E:62:64:80:C1:9D:2D:2E:63:5B:D8:54:13:CF:1F:07:30:95 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:e5:86:98:e5:1f:91:db:ef:36:ac:e7:b3:64:c7:f8:f0:d6: 2f:88:bf:4d:39:71:6c:44:68:18:f3:6d:e8:da:96:11:50:3b: 1a:25:22:ca:96:f4:93:68:7c:39:a6:2d:c5:2b:c5:2e:b0:8a: 7a:d6:42:e0:e8:c7:d1:9c:8f:e7:e1:98:78:6d:86:07:27:c0: dc:2b:e4:76:09:9a:56:3a:c1:ab:49:b9:4b:a4:09:cf:9a:aa: 04:eb:5d:3a:ca:a9:71:39:1f:42:34:49:cf:4d:af:52:85:06: 46:9d:08:04:e3:6d:fe:22:a1:9c:90:9a:4f:f6:32:a2:67:f0: 77:65:9e:52:e8:49:7a:5d:62:24:35:9a:b3:d4:ae:dc:b1:5f: 56:84:c1:03:77:3b:03:9e:f4:bd:f6:1e:31:b8:28:de:b9:59: 83:85:8e:82:25:4d:6b:d2:42:8a:99:fe:62:71:48:d6:4d:a4: 55:15:fa:b1:0d:99:91:a3:67:1d:76:c5:af:ff:ad:27:1a:1b: 21:1d:ee:db:4b:de:9c:79:04:ca:15:e1:00:85:c1:c0:66:9e: 50:10:42:2b:ab:3d:41:fb:10:34:0c:f6:0e:48:ca:e6:47:15: 9a:4c:bf:0a:d5:f9:f4:b7:b6:ca:9b:15:b5:9b:b8:16:d2:f2: 28:b2:68:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPwD8H6NUjzLQhFhCGrQtVE6VwiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA2MTcxMTQ3MzBaFw0yNTA2MjAxMjE1MzBaMDMxMTAvBgNV BAMTKDI4RUQ4RTYyNjQ4MEMxOUQyRDJFNjM1QkQ4NTQxM0NGMUYwNzMwOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPsp7aeuG32WCjGjw4NfJm+N9e SH7iKlLfnOvvuDhmEOsmIhjwaOPi4vQDDqvEjv3x2n6iUEhvUt+tl8+5zf14oU/L MTHyrzWWVjzVy5/P5vwfQFRg2czexC2fFtQr5bgp1RpR357SLzVrTgyoaXB0JLk+ mcVqBJNRwOHIgpj8MNg9F7MPh0Nl4HBWQG5M0pRsKGcDE1uGkycjl87kMJt+9SGm kzkDKx5PyegNzwqIPs7QCGkUhFcGHW24B/hVy9dcL7IrgASmuidMvEL0ubB7HS/r IYQuDz7tP1DJVVDGULSCQDYL+IdnoqQ9Z8DOZmBKRyKcxhqYwdie6iGPexQbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKO2OYmSAwZ0tLmNb2FQTzx8HMJUwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3lhpjlH5Hb7zas57Nkx/jw1i+Iv005cWxE aBjzbejalhFQOxolIsqW9JNofDmmLcUrxS6winrWQuDox9Gcj+fhmHhthgcnwNwr 5HYJmlY6watJuUukCc+aqgTrXTrKqXE5H0I0Sc9Nr1KFBkadCATjbf4ioZyQmk/2 MqJn8HdlnlLoSXpdYiQ1mrPUrtyxX1aEwQN3OwOe9L32HjG4KN65WYOFjoIlTWvS QoqZ/mJxSNZNpFUV+rENmZGjZx12xa//rScaGyEd7ttL3px5BMoV4QCFwcBmnlAQ QiurPUH7EDQM9g5IyuZHFZpMvwrV+fS3tsqbFbWbuBbS8iiyaEQ= -----END CERTIFICATE-----Generated at Wed Jun 18 01:52:24 2025 by rpki-client