
$ rpki-client -vvf repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
File:                     BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft (raw, json)
Hash identifier:          /PRTQeuc4waLX2J3gUvI3noW8ba1lWCVP8yTgio3Wqk=
Subject key identifier:   0C:60:15:8B:EE:C4:D0:4C:48:9C:4E:F1:E2:18:7D:DF:28:AC:DF:02
Authority key identifier: BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
Certificate issuer:       /CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
Certificate serial:       4521BC80292B6368C9396BC9A7E8244BB5DB5DC3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
Manifest number:          01C5
Signing time:             Mon 03 Nov 2025 19:51:20 +0000
Manifest this update:     Mon 03 Nov 2025 19:46:20 +0000
Manifest next update:     Fri 07 Nov 2025 01:04:20 +0000
Files and hashes:         1: 3130332e3132312e3130382e302f32332d3234203d3e20313335343738.roa (hash: 7k9VB041/h48tvLV9+2dfEpOlnSTzjrAAE0UGdiG0sw=)
                          2: BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl (hash: nbfUNH2x/nI0cSfcrvOAe7Ra3vpcWX8GdgvLOD8coTk=)
                          3: 3130332e3132312e3131302e302f32332d3234203d3e20313335343738.roa (hash: CydGhUn3p1u4xZfx9Zchiu6R6+AqYD6N5mTo135Iu7E=)
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
                          rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Nov 2025 01:04:20 +0000
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:21:bc:80:29:2b:63:68:c9:39:6b:c9:a7:e8:24:4b:b5:db:5d:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE77663F7F3591A0E64D8D5AC98F2635919B4B3B
        Validity
            Not Before: Nov  3 19:46:20 2025 GMT
            Not After : Nov  7 01:04:20 2025 GMT
        Subject: CN=0C60158BEEC4D04C489C4EF1E2187DDF28ACDF02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:06:67:2c:36:b9:0a:aa:f7:1a:49:10:ac:a2:
                    fc:6b:85:bd:c4:5c:06:4e:f9:81:40:aa:06:c1:df:
                    c7:3c:d5:b3:54:6c:9e:a4:84:05:04:25:43:e0:21:
                    c6:cd:78:99:85:41:24:bb:af:7b:0d:6c:df:8e:c0:
                    4a:0d:14:11:05:5b:26:22:b7:36:c2:46:56:8a:b4:
                    ee:dc:a1:12:e9:28:57:f0:45:10:d3:b1:12:9a:a6:
                    25:4c:ca:7d:44:5c:20:87:c8:e0:e4:c6:ac:ec:0a:
                    28:cb:b0:82:8b:1e:1a:c7:bf:2b:56:80:84:eb:9d:
                    df:8c:f7:07:70:36:da:3e:12:b5:9d:4f:c0:1c:67:
                    6e:43:8e:36:16:ca:20:69:06:58:c1:ee:fc:f6:8a:
                    6e:81:74:6a:25:d6:d7:26:ba:c5:d1:69:34:72:e1:
                    8e:74:a3:92:1d:7c:d3:cd:6b:ad:47:c7:33:6d:02:
                    03:02:75:78:c0:22:df:f7:cd:e3:37:db:89:b2:65:
                    db:b7:bf:da:5b:15:82:2a:d8:85:49:cd:ee:ca:85:
                    47:2c:34:05:43:34:87:cb:aa:5c:b9:fc:cc:2e:e1:
                    dd:47:b9:d5:91:8e:6a:da:74:cc:81:fb:26:14:ce:
                    27:0c:63:e3:c8:7e:14:12:cd:98:70:e2:fc:d4:06:
                    75:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:60:15:8B:EE:C4:D0:4C:48:9C:4E:F1:E2:18:7D:DF:28:AC:DF:02
            X509v3 Authority Key Identifier:
                keyid:BE:77:66:3F:7F:35:91:A0:E6:4D:8D:5A:C9:8F:26:35:91:9B:4B:3B
            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:
                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.crl
            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.cer
            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b4fe93-7296-48b4-aa0d-c8a5a3dfd59a/0/BE77663F7F3591A0E64D8D5AC98F2635919B4B3B.mft
            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit
            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit
    Signature Algorithm: sha256WithRSAEncryption
         3e:38:d2:f0:f2:0f:ea:22:53:31:73:04:b0:b3:f3:73:f5:ff:
         cb:20:15:39:93:51:ed:b3:cf:f7:02:b0:ec:54:e4:8a:52:d5:
         84:e0:b4:92:11:88:1d:1e:db:2d:80:21:d0:d1:42:bc:f9:da:
         93:d7:96:72:71:ba:03:f2:2b:bb:ed:ec:83:ab:68:b7:28:2a:
         fe:42:87:25:0f:af:d4:26:20:e9:5e:b4:8a:2f:ba:e3:48:ae:
         a8:b4:67:ab:e6:1c:42:af:6e:27:18:c7:99:77:81:bc:95:90:
         63:ab:47:c4:e9:fb:dc:be:db:fe:ab:f0:61:09:ac:32:12:2b:
         34:b8:d8:42:ea:a4:2d:77:a2:d3:91:7d:18:5e:8a:2f:97:3c:
         d3:50:fa:4d:4e:6a:8e:2c:27:5e:d6:90:b1:4a:50:0a:cf:ad:
         ed:21:23:35:51:95:49:ef:91:cc:1e:a5:ac:8b:ef:da:68:08:
         f0:ab:99:ee:10:45:70:e5:7d:fb:06:7d:75:2c:f3:fe:85:c6:
         3b:ca:4c:81:dd:2b:25:f1:d1:24:a3:85:b1:45:60:ae:d9:3e:
         13:05:d0:90:73:46:c0:60:45:5f:8b:82:59:be:42:b5:e6:cf:
         e7:68:03:89:36:33:89:34:62:2f:db:84:c0:b4:41:6c:98:5b:
         92:e0:95:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov  4 12:38:09 2025 by rpki-client