$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: WhpfDMzpRgMyESmG4TcwXilez8Cm8ZspNlG3rTxFj4E= Subject key identifier: C7:A6:78:FB:58:A5:55:B2:3C:8F:AA:2C:B3:79:12:6D:86:D8:5E:E4 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 51A7B3F654BFE0C7E052E76343EC1D95C6AED842 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: 93 Signing time: Sat 26 Apr 2025 22:41:59 +0000 Manifest this update: Sat 26 Apr 2025 22:36:59 +0000 Manifest next update: Wed 30 Apr 2025 01:00:59 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: G33vreUm0+GT+Hbcw85GhrnyqKsSM59WrSimM3idWrA=) 2: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: /98MLFLi0kiWuGxGiywhSbj3ZdX9t0rrFDtPGZH2n4Q=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: FEhjZkMiGLlLLnkMlvhdRq66NHYMIVeWK07ZVTOZp+M=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: gRswT0x3O6GcGZIvbZdYbGTZFJLbdzQZujtUrtLFlm4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:a7:b3:f6:54:bf:e0:c7:e0:52:e7:63:43:ec:1d:95:c6:ae:d8:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Apr 26 22:36:59 2025 GMT Not After : Apr 30 01:00:59 2025 GMT Subject: CN=C7A678FB58A555B23C8FAA2CB379126D86D85EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:09:d9:c1:f4:6d:f8:91:67:b9:29:30:4e:bd: 18:68:5c:cb:1b:24:93:f2:58:8f:49:a5:23:c9:a2: f0:64:e7:a9:86:04:aa:3b:c9:98:37:d9:bb:fe:7b: 8f:af:78:11:2a:c1:27:66:15:0d:30:ae:ca:f3:fd: 44:ec:5d:53:4a:9b:37:ee:a3:1c:50:d8:40:d5:70: ad:06:4c:5d:97:60:8a:62:7e:65:30:b4:44:45:e3: 1c:76:58:19:9f:25:94:44:2a:55:eb:4d:de:43:00: 44:b8:6c:6a:c9:5a:d0:f0:d2:3e:d0:79:ae:07:37: 93:d5:86:c3:29:89:04:e9:ad:26:1e:8b:09:11:95: 42:fb:52:5a:14:1f:43:ca:24:78:89:50:30:76:70: ff:8b:21:a6:09:5d:0b:d9:8a:73:f2:ca:f3:c0:03: 57:0f:3c:51:7a:d0:4b:49:11:12:cb:79:57:42:7d: 07:a9:0f:10:5b:9d:92:d6:5f:8c:2a:56:d6:4d:c0: 5e:8c:ef:f0:ca:3f:ba:7f:6b:5a:60:db:38:b7:8f: a4:85:19:6e:c0:0f:19:6c:f8:9f:b5:7b:4b:19:9c: ba:8c:a6:82:64:3b:4f:91:8f:e1:62:82:f0:d9:9e: ed:87:ee:86:8e:82:49:e3:38:f8:dd:5a:2a:23:99: 18:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:A6:78:FB:58:A5:55:B2:3C:8F:AA:2C:B3:79:12:6D:86:D8:5E:E4 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:14:2f:4e:f0:05:b9:6b:36:79:9f:c5:6c:fd:10:5d:c1:83: ac:16:57:4f:bb:e3:65:8f:65:20:f7:ab:9a:44:cd:ce:90:a9: 3b:1b:f2:a7:ee:51:84:4a:29:56:87:41:cb:6d:33:48:82:f3: 94:a1:a9:0d:f7:23:91:5a:d3:d8:52:83:83:10:9d:f2:2f:6d: 62:64:df:cf:1d:75:10:7a:03:98:50:18:75:7a:71:3e:d7:c2: f4:bb:b9:9c:05:4b:8e:77:9a:ab:43:50:12:72:55:ff:60:83: 27:7f:2b:ed:17:c9:81:a2:64:d7:7d:c4:73:ea:80:f3:4f:11: 71:e7:6e:f0:9e:13:38:ce:d1:99:25:2b:ae:42:d0:63:04:02: b0:5a:4e:fb:aa:36:c7:79:52:f0:ce:35:8e:21:16:f5:e8:7f: b2:f3:bf:f4:ca:21:fb:ce:00:b7:b3:ee:02:ea:ab:8e:24:f7: fd:0d:ad:3c:57:09:cc:86:a5:d8:c2:7a:83:71:45:b0:03:b4: a9:19:f4:07:16:8e:8f:0c:43:1e:b8:86:5a:a7:df:a1:f7:0d: a4:09:86:2e:13:ed:db:e5:29:96:89:f2:53:0b:ba:8f:30:e2: 1b:4f:63:9f:55:44:fb:94:69:92:e0:ab:bf:1c:21:57:58:42: af:d6:fa:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUaez9lS/4MfgUudjQ+wdlcau2EIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA0MjYyMjM2NTlaFw0yNTA0MzAwMTAwNTlaMDMxMTAvBgNV BAMTKEM3QTY3OEZCNThBNTU1QjIzQzhGQUEyQ0IzNzkxMjZEODZEODVFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZCdnB9G34kWe5KTBOvRhoXMsb JJPyWI9JpSPJovBk56mGBKo7yZg32bv+e4+veBEqwSdmFQ0wrsrz/UTsXVNKmzfu oxxQ2EDVcK0GTF2XYIpifmUwtERF4xx2WBmfJZREKlXrTd5DAES4bGrJWtDw0j7Q ea4HN5PVhsMpiQTprSYeiwkRlUL7UloUH0PKJHiJUDB2cP+LIaYJXQvZinPyyvPA A1cPPFF60EtJERLLeVdCfQepDxBbnZLWX4wqVtZNwF6M7/DKP7p/a1pg2zi3j6SF GW7ADxls+J+1e0sZnLqMpoJkO0+Rj+FigvDZnu2H7oaOgknjOPjdWiojmRgHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6Z4+1ilVbI8j6oss3kSbYbYXuQwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQUL07wBblrNnmfxWz9EF3Bg6wWV0+742WP ZSD3q5pEzc6QqTsb8qfuUYRKKVaHQcttM0iC85ShqQ33I5Fa09hSg4MQnfIvbWJk 388ddRB6A5hQGHV6cT7XwvS7uZwFS453mqtDUBJyVf9ggyd/K+0XyYGiZNd9xHPq gPNPEXHnbvCeEzjO0ZklK65C0GMEArBaTvuqNsd5UvDONY4hFvXof7Lzv/TKIfvO ALez7gLqq44k9/0NrTxXCcyGpdjCeoNxRbADtKkZ9AcWjo8MQx64hlqn36H3DaQJ hi4T7dvlKZaJ8lMLuo8w4htPY59VRPuUaZLgq78cIVdYQq/W+tw= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:24 2025 by rpki-client