$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: WWxp9gPYmKZZOc02/rtq1EdnB13iAhEA7ULUNsz65S0= Subject key identifier: A2:93:95:FB:8E:B7:60:69:26:23:13:D9:24:76:B5:52:D4:47:73:FC Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 133AEAB92E2D4B9D4B9F4C612D022DEBB30191C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04DF Signing time: Tue 17 Jun 2025 08:21:07 +0000 Manifest this update: Tue 17 Jun 2025 08:16:07 +0000 Manifest next update: Fri 20 Jun 2025 18:21:07 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: BxjjJ/YPUbmBvZofcOZLeKjv+0BPnTic+nb0zx9v0nA=) 3: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 13:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:3a:ea:b9:2e:2d:4b:9d:4b:9f:4c:61:2d:02:2d:eb:b3:01:91:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Jun 17 08:16:07 2025 GMT Not After : Jun 20 18:21:07 2025 GMT Subject: CN=A29395FB8EB76069262313D92476B552D44773FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:5b:e2:99:04:17:a6:b6:27:fb:3a:f5:23:d1: 52:e7:2b:7b:d3:c9:2b:aa:a4:07:36:4a:10:48:26: ff:3c:49:fd:e9:e4:92:c0:dd:02:46:ea:74:8a:47: 32:08:aa:69:a1:61:ca:75:8d:16:4a:e6:b1:52:0f: d7:76:7e:92:b7:75:63:72:df:91:2b:0d:18:98:75: fc:e4:28:1c:ed:bb:4d:80:02:4b:8b:7f:a4:0a:2d: ee:c8:91:17:ad:5d:cf:2f:72:66:3f:a7:18:cf:ab: b2:7a:42:01:b1:3f:98:57:3f:57:79:95:a7:c0:8f: 76:a5:1f:66:98:92:a3:7f:c5:5c:26:0f:47:05:47: 18:c8:da:a0:f3:83:d4:23:16:4d:73:a3:29:83:a6: c3:c7:a2:40:20:eb:55:b2:5a:92:05:c1:3c:55:1e: 74:5b:e1:8c:db:01:cd:8a:ec:f2:9d:44:4c:c9:a3: 21:1f:b4:c0:7d:c6:93:a5:8a:fb:d7:49:cc:70:94: 57:4b:98:38:4c:45:85:9d:3e:08:d8:6c:b1:ba:5a: 52:3e:c4:d8:db:aa:e0:81:14:cb:97:af:2c:92:a0: f3:03:eb:d3:05:bd:39:5d:ba:ef:9c:6c:a7:1e:74: c8:0c:99:04:13:04:1a:8f:76:5f:0d:43:ef:99:c2: b2:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:93:95:FB:8E:B7:60:69:26:23:13:D9:24:76:B5:52:D4:47:73:FC X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:36:7d:60:5e:91:88:9e:00:8a:df:0f:18:3e:9c:d6:1c:12: 33:6f:ee:5a:9e:75:90:cd:bc:85:97:35:a6:72:52:72:f2:0c: 66:9c:88:79:9b:6c:c4:55:d6:7d:37:9d:11:b3:9d:91:7a:f0: e1:77:3d:dc:2d:0e:af:e4:be:e0:5c:47:73:ca:11:ca:d4:ee: c5:1f:aa:2f:e4:11:18:8c:4e:d6:40:51:f8:c1:48:06:42:f5: 16:ed:45:38:35:de:81:b1:4a:ea:eb:80:a6:7a:ca:55:8c:f8: 7f:12:d6:33:40:aa:4e:78:1e:ba:95:d8:fc:8a:0e:4c:b1:50: 25:2f:6c:66:0c:5f:5b:4a:2e:93:9e:b8:79:77:94:4a:23:14: e8:9c:f9:e3:3e:d1:05:1f:b2:87:be:35:c1:94:39:e7:42:a1: fe:f1:8a:f2:bd:e6:02:49:2f:02:3c:0f:6c:82:14:7b:88:94: 2b:06:16:4e:78:17:d4:be:04:62:38:ff:36:0b:13:c5:15:f4: 4d:ec:8b:b3:ab:36:bf:90:48:c5:15:42:d8:9c:d1:b7:ee:0f: 8b:1d:a4:9d:c8:e9:53:7d:06:f5:00:6d:12:58:bd:66:68:bb: 30:22:11:c7:7b:65:32:ca:c3:4e:97:20:79:d6:94:7a:9e:c5: 73:60:9b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzrquS4tS51Ln0xhLQIt67MBkcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA2MTcwODE2MDdaFw0yNTA2MjAxODIxMDdaMDMxMTAvBgNV BAMTKEEyOTM5NUZCOEVCNzYwNjkyNjIzMTNEOTI0NzZCNTUyRDQ0NzczRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPW+KZBBemtif7OvUj0VLnK3vT ySuqpAc2ShBIJv88Sf3p5JLA3QJG6nSKRzIIqmmhYcp1jRZK5rFSD9d2fpK3dWNy 35ErDRiYdfzkKBztu02AAkuLf6QKLe7IkRetXc8vcmY/pxjPq7J6QgGxP5hXP1d5 lafAj3alH2aYkqN/xVwmD0cFRxjI2qDzg9QjFk1zoymDpsPHokAg61WyWpIFwTxV HnRb4YzbAc2K7PKdREzJoyEftMB9xpOlivvXScxwlFdLmDhMRYWdPgjYbLG6WlI+ xNjbquCBFMuXryySoPMD69MFvTlduu+cbKcedMgMmQQTBBqPdl8NQ++ZwrKDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopOV+463YGkmIxPZJHa1UtRHc/wwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANY2fWBekYieAIrfDxg+nNYcEjNv7lqedZDN vIWXNaZyUnLyDGaciHmbbMRV1n03nRGznZF68OF3PdwtDq/kvuBcR3PKEcrU7sUf qi/kERiMTtZAUfjBSAZC9RbtRTg13oGxSurrgKZ6ylWM+H8S1jNAqk54HrqV2PyK DkyxUCUvbGYMX1tKLpOeuHl3lEojFOic+eM+0QUfsoe+NcGUOedCof7xivK95gJJ LwI8D2yCFHuIlCsGFk54F9S+BGI4/zYLE8UV9E3si7OrNr+QSMUVQtic0bfuD4sd pJ3I6VN9BvUAbRJYvWZouzAiEcd7ZTLKw06XIHnWlHqexXNgm8U= -----END CERTIFICATE-----Generated at Tue Jun 17 17:26:51 2025 by rpki-client