$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: Yqvb8TJ/lzLEde0Xgr12sF8seyXAy7bmX6WVYbPoIwg= Subject key identifier: B1:E6:B5:F0:65:9C:69:FA:3C:45:7C:12:5B:F4:0E:CC:06:06:ED:63 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 1D529C2985E2ADD184DE590711B052A281C94B86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04C8 Signing time: Sun 27 Apr 2025 12:11:08 +0000 Manifest this update: Sun 27 Apr 2025 12:06:08 +0000 Manifest next update: Wed 30 Apr 2025 22:09:08 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: H4Mljy64TF64wUNSwj+AzCiQqQvCFa0xecWWT/Y6tf4=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: Kz2gNonBlcPb5z0/UDg9awgcMV7ktHlNZlszicmpwpM=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: NqUq2XyAeB0lSnJLYEVZb40ubddRS40CGCfnHqTCKvg=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: zDCAlAOQmPKd75zbRwUUowA/7GtmYxJIftrZudSNftg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 22:09:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:52:9c:29:85:e2:ad:d1:84:de:59:07:11:b0:52:a2:81:c9:4b:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Apr 27 12:06:08 2025 GMT Not After : Apr 30 22:09:08 2025 GMT Subject: CN=B1E6B5F0659C69FA3C457C125BF40ECC0606ED63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:2c:9c:6b:02:49:ff:2a:cf:e0:5a:e4:eb: 94:6b:68:dd:b4:1a:49:36:df:5c:31:8d:10:c2:70: 3a:fe:b5:d3:12:91:92:f4:c3:ea:38:b4:59:46:55: 12:49:70:a9:15:b0:3f:11:c6:97:86:b9:31:1c:86: f1:e7:35:17:33:f3:7c:4d:09:05:01:3e:7e:7c:42: d1:d8:4e:f8:3d:7d:36:f2:56:75:83:3c:0b:f4:dc: 2a:c5:b8:62:60:b5:5f:6e:88:27:00:0e:d4:bb:7b: 38:e1:0b:87:cc:a3:09:2c:13:e3:10:1b:80:aa:0c: b3:58:05:49:2f:f4:d1:17:e8:9f:71:2c:6c:1f:d0: 4f:00:4f:22:f6:2a:63:f8:fa:b2:2f:13:40:58:a8: 72:f2:9d:71:df:81:f7:c6:6b:ea:f0:b3:f5:02:69: 29:fa:28:6e:11:32:88:ef:ab:af:bf:54:05:bb:c1: 92:f5:38:d9:60:95:df:d9:da:16:a3:ad:de:5a:c2: e2:0a:83:69:dc:56:07:1f:9b:00:8d:88:49:a3:cf: 5e:90:a0:f3:a3:a6:da:e1:c4:2f:3a:b5:2b:f9:d4: ac:75:49:2c:7d:85:48:0f:85:bd:c5:eb:2c:6c:c8: 1e:c6:cd:f8:5d:ba:c4:a7:14:4c:26:b8:bf:a6:fd: 38:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:E6:B5:F0:65:9C:69:FA:3C:45:7C:12:5B:F4:0E:CC:06:06:ED:63 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:86:28:e6:61:55:67:2e:ad:2a:1c:40:e1:c6:ad:bf:11:7b: 56:87:7a:8f:6d:a1:29:ba:a3:66:74:03:cd:2a:6e:36:2e:91: 97:4c:c7:25:8b:e9:f9:08:c7:a3:cb:41:82:dc:6c:62:96:d0: 50:d4:bd:a4:21:54:e2:f5:00:c7:6d:82:30:48:7a:5d:93:74: 1a:1d:ed:eb:70:b3:3b:05:ac:3a:14:eb:f5:38:5a:d4:be:65: 4b:fb:0f:a5:ec:06:cc:1f:fa:f4:cb:1e:62:40:39:10:59:95: bc:e3:da:c4:ec:42:70:dc:dc:83:cc:f2:b5:41:75:72:8c:38: 78:b4:17:c1:b0:23:fa:d3:6d:65:46:9a:c4:11:44:ae:7b:c4: ef:82:b2:5c:73:a8:df:a9:07:e0:ea:06:a7:61:cd:6b:dc:60: 7d:bf:91:8f:51:ec:61:27:fe:ca:b8:d3:af:4c:e8:01:f7:2c: 7e:fd:6f:0a:50:e8:c3:27:a0:de:e1:65:06:b4:ad:72:5e:fb: 82:cc:3e:15:9a:3d:22:d0:14:25:7c:3e:4d:be:7a:25:38:24: a1:e3:65:08:ca:1e:f8:86:ed:9b:51:8c:9e:c4:66:08:85:c8: fd:24:c2:08:cc:53:62:bc:c7:17:e3:d8:20:39:02:1e:8b:a6: 98:06:86:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVKcKYXirdGE3lkHEbBSooHJS4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA0MjcxMjA2MDhaFw0yNTA0MzAyMjA5MDhaMDMxMTAvBgNV BAMTKEIxRTZCNUYwNjU5QzY5RkEzQzQ1N0MxMjVCRjQwRUNDMDYwNkVENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEyycawJJ/yrP4Frk65RraN20 Gkk231wxjRDCcDr+tdMSkZL0w+o4tFlGVRJJcKkVsD8RxpeGuTEchvHnNRcz83xN CQUBPn58QtHYTvg9fTbyVnWDPAv03CrFuGJgtV9uiCcADtS7ezjhC4fMowksE+MQ G4CqDLNYBUkv9NEX6J9xLGwf0E8ATyL2KmP4+rIvE0BYqHLynXHfgffGa+rws/UC aSn6KG4RMojvq6+/VAW7wZL1ONlgld/Z2hajrd5awuIKg2ncVgcfmwCNiEmjz16Q oPOjptrhxC86tSv51Kx1SSx9hUgPhb3F6yxsyB7GzfhdusSnFEwmuL+m/TjTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsea18GWcafo8RXwSW/QOzAYG7WMwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCGKOZhVWcurSocQOHGrb8Re1aHeo9toSm6 o2Z0A80qbjYukZdMxyWL6fkIx6PLQYLcbGKW0FDUvaQhVOL1AMdtgjBIel2TdBod 7etwszsFrDoU6/U4WtS+ZUv7D6XsBswf+vTLHmJAORBZlbzj2sTsQnDc3IPM8rVB dXKMOHi0F8GwI/rTbWVGmsQRRK57xO+CslxzqN+pB+DqBqdhzWvcYH2/kY9R7GEn /sq4069M6AH3LH79bwpQ6MMnoN7hZQa0rXJe+4LMPhWaPSLQFCV8Pk2+eiU4JKHj ZQjKHviG7ZtRjJ7EZgiFyP0kwgjMU2K8xxfj2CA5Ah6LppgGhi0= -----END CERTIFICATE-----Generated at Tue Apr 29 17:39:36 2025 by rpki-client