$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft File: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json) Hash identifier: uiPDhg6M183YCG/xNz/lam2N7bi4ZGMTtppnoiZWv50= Subject key identifier: 66:96:62:1F:B3:7D:80:34:EC:E6:5E:57:03:CB:5B:16:D7:0A:3B:07 Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B Certificate issuer: /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Certificate serial: 01B46FE00F43EA01E9520CCD7788D4C5CD8AE232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft Manifest number: 019E Signing time: Thu 07 Aug 2025 10:41:18 +0000 Manifest this update: Thu 07 Aug 2025 10:36:18 +0000 Manifest next update: Sun 10 Aug 2025 13:34:18 +0000 Files and hashes: 1: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: CydGhUn3p1u4xZfx9Zchiu6R6+AqYD6N5mTo135Iu7E=) 2: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: 7k9VB041/h48tvLV9+2dfEpOlnSTzjrAAE0UGdiG0sw=) 3: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: nWE00GDsSXBpOWLwISmeWDUOIk6dwjhqmBahEVaYHS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 13:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b4:6f:e0:0f:43:ea:01:e9:52:0c:cd:77:88:d4:c5:cd:8a:e2:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B Validity Not Before: Aug 7 10:36:18 2025 GMT Not After : Aug 10 13:34:18 2025 GMT Subject: CN=6696621FB37D8034ECE65E5703CB5B16D70A3B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:01:5e:56:df:f2:e0:7b:6c:66:6a:7b:d7:7e: ef:a8:61:2a:f5:a3:b0:4c:73:bf:c1:a6:4e:eb:fc: 2e:5a:36:5c:82:8f:39:4b:7f:4a:de:01:28:ca:59: 40:0e:f2:38:8a:b1:55:0c:85:29:5d:10:82:37:eb: f9:b1:3e:58:42:b8:cf:4b:ec:f8:96:ff:3a:09:b3: 04:fd:b0:97:8a:86:99:29:c2:c1:8d:79:54:f6:9c: a5:b4:e2:76:3e:a0:20:63:74:a2:78:b4:5c:e2:25: ab:99:16:bf:ba:56:1c:83:2e:03:c0:8c:84:51:54: 08:73:ba:9e:d7:e7:b2:2f:7e:0f:12:7b:08:5b:cd: a0:1e:4b:af:55:47:64:8a:49:b4:ed:83:8b:55:73: ed:9f:fe:70:5a:bc:d7:3c:f3:52:86:dc:6d:f3:3a: e1:35:b8:bc:64:9d:69:62:87:ee:49:0c:88:ca:95: 79:35:21:d9:4c:41:22:d5:a8:26:d2:4a:e2:3a:b8: 89:ae:08:bf:74:01:fe:76:dd:20:63:ed:ff:63:79: b2:f6:95:3f:eb:7b:fc:0e:5a:bb:0c:e2:23:6e:33: 38:dc:8f:5e:b8:42:6c:cc:51:49:6b:01:77:a5:15: 3b:26:a7:00:ef:09:f5:1b:f3:c5:74:aa:00:df:6b: 29:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:96:62:1F:B3:7D:80:34:EC:E6:5E:57:03:CB:5B:16:D7:0A:3B:07 X509v3 Authority Key Identifier: keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:c7:3a:1c:c4:64:92:57:ad:e4:f3:e7:b7:19:c5:e9:5a:81: b7:63:75:5d:44:33:24:44:b0:be:0d:4c:f0:d8:d3:e5:fa:90: 0b:6e:a0:3d:bc:dd:13:25:a2:8f:65:8f:89:b9:c7:2e:64:e8: 63:3a:a4:f7:40:3f:0d:65:f7:d5:cb:d1:f8:b9:88:46:74:72: b3:8a:f0:65:2d:34:15:22:a3:3e:5e:75:96:b5:b2:d4:70:5f: c2:da:ce:53:3b:52:db:16:b6:4c:81:d8:b4:51:85:f7:e7:08: 9b:88:0a:d0:26:ec:08:f6:66:40:18:83:e4:35:43:cb:89:9c: 4e:0f:43:5e:2f:4e:7e:ed:12:15:d1:77:aa:d7:23:f3:ac:ee: bf:5a:2a:33:fd:73:f9:d3:53:57:c7:27:e6:01:7f:d2:61:ab: 5d:e6:48:73:76:b6:40:f3:7e:86:e7:20:7f:71:1a:40:43:ce: cc:47:08:3c:d6:42:45:5c:03:f6:e5:de:34:de:99:74:09:33: 0c:3b:fa:51:ff:ec:78:3b:d3:f2:c6:eb:c3:00:dc:1d:b1:64: a9:74:cd:eb:a5:97:85:7d:f3:d9:ec:6b:af:e8:da:a0:84:19: 8d:fd:ab:86:1d:0a:35:63:fd:a3:f7:11:f5:82:64:40:d3:54: ca:24:a1:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbRv4A9D6gHpUgzNd4jUxc2K4jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5 MTlCNEIzQjAeFw0yNTA4MDcxMDM2MThaFw0yNTA4MTAxMzM0MThaMDMxMTAvBgNV BAMTKDY2OTY2MjFGQjM3RDgwMzRFQ0U2NUU1NzAzQ0I1QjE2RDcwQTNCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcAV5W3/Lge2xmanvXfu+oYSr1 o7BMc7/Bpk7r/C5aNlyCjzlLf0reASjKWUAO8jiKsVUMhSldEII36/mxPlhCuM9L 7PiW/zoJswT9sJeKhpkpwsGNeVT2nKW04nY+oCBjdKJ4tFziJauZFr+6VhyDLgPA jIRRVAhzup7X57Ivfg8SewhbzaAeS69VR2SKSbTtg4tVc+2f/nBavNc881KG3G3z OuE1uLxknWlih+5JDIjKlXk1IdlMQSLVqCbSSuI6uImuCL90Af523SBj7f9jebL2 lT/re/wOWrsM4iNuMzjcj164QmzMUUlrAXelFTsmpwDvCfUb88V0qgDfaykxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZpZiH7N9gDTs5l5XA8tbFtcKOwcwHwYDVR0j BBgwFoAUvndmP381kaDmTY1ayY8mNZGbSzswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGI0ZmU5My03Mjk2LTQ4YjQtYWEwZC1jOGE1YTNkZmQ1OWEvMC9CRTc3NjYzRjdG MzU5MUEwRTY0RDhENUFDOThGMjYzNTkxOUI0QjNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2MzU5MTlC NEIzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRiNGZlOTMtNzI5Ni00OGI0LWFh MGQtYzhhNWEzZGZkNTlhLzAvQkU3NzY2M0Y3RjM1OTFBMEU2NEQ4RDVBQzk4RjI2 MzU5MTlCNEIzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLHOhzEZJJXreTz57cZxelagbdjdV1EMyRE sL4NTPDY0+X6kAtuoD283RMloo9lj4m5xy5k6GM6pPdAPw1l99XL0fi5iEZ0crOK 8GUtNBUioz5edZa1stRwX8LazlM7UtsWtkyB2LRRhffnCJuICtAm7Aj2ZkAYg+Q1 Q8uJnE4PQ14vTn7tEhXRd6rXI/Os7r9aKjP9c/nTU1fHJ+YBf9Jhq13mSHN2tkDz fobnIH9xGkBDzsxHCDzWQkVcA/bl3jTemXQJMww7+lH/7Hg70/LG68MA3B2xZKl0 zeull4V989nsa6/o2qCEGY39q4YdCjVj/aP3EfWCZEDTVMokoZM= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:51 2025 by rpki-client