$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: XUCWkz81OxrfY4uDen+A6Jk8D7mABtPQxW9EuZ3vq8Y= Subject key identifier: 2B:86:CB:BC:B2:62:E9:48:04:8A:4F:16:DA:08:62:5F:42:80:8D:1F Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 5BCD3D79423C2782661E9EEF0F3C5EEB95ACE448 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01D5 Signing time: Sun 02 Nov 2025 19:31:42 +0000 Manifest this update: Sun 02 Nov 2025 19:26:42 +0000 Manifest next update: Thu 06 Nov 2025 00:50:42 +0000 Files and hashes: 1: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: ReavMwUF8FjmLn30dVqfT+Gk4EVmocHPAYnkLmUoj+U=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:50:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:cd:3d:79:42:3c:27:82:66:1e:9e:ef:0f:3c:5e:eb:95:ac:e4:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Nov 2 19:26:42 2025 GMT Not After : Nov 6 00:50:42 2025 GMT Subject: CN=2B86CBBCB262E948048A4F16DA08625F42808D1F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1f:da:a5:9d:37:31:70:81:0b:d5:7d:1b:3d: bc:99:61:66:77:99:4f:29:be:bb:9e:10:d2:5e:c0: d3:6c:36:e8:3e:2a:b7:7d:ef:71:34:18:4b:51:0d: c0:f8:27:ca:3a:28:8b:d4:f0:c9:9a:f6:8d:ed:0d: 2d:6f:73:77:10:ab:41:6f:24:52:66:27:b4:8e:75: 65:72:5a:7c:92:fc:2d:f1:51:f4:9e:38:7e:91:5d: 02:b3:27:7d:59:b7:48:1a:32:f7:6f:33:30:72:8f: 42:a0:79:96:5d:ba:5f:1c:21:a9:a7:d1:79:ba:91: 9e:22:68:bf:4d:f0:b8:e9:c4:a0:3d:df:cb:60:86: 4d:cc:53:35:bc:ea:69:73:cd:ce:52:51:c5:4a:93: ae:26:c0:92:1a:d8:ef:8c:f9:d0:72:d4:4c:e1:e6: c6:4e:72:0a:3c:68:5b:62:15:76:03:a5:15:c4:0e: 26:3d:99:9e:ab:9f:5e:ee:8e:dc:dd:0c:e6:15:38: ec:c9:73:e1:41:c3:b3:6f:fd:15:0d:12:53:7d:a3: a6:2d:09:52:9e:a6:2b:a0:d8:87:3e:85:08:68:65: d0:ef:c5:c2:cc:80:0e:ba:d5:93:58:e1:55:f0:76: cc:d3:4e:fd:4c:ad:9c:11:13:61:23:b1:32:33:d0: d7:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:86:CB:BC:B2:62:E9:48:04:8A:4F:16:DA:08:62:5F:42:80:8D:1F X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:01:76:a7:86:04:fd:47:14:a9:90:5d:e0:d8:e9:b1:43:81: 61:c2:39:9a:c6:a7:44:e3:66:b3:8d:a6:d7:86:da:9f:f0:17: ba:a4:ed:b0:a6:09:f5:7f:09:84:14:ac:0d:ec:a6:a8:5f:68: 15:02:0c:09:35:23:8f:6a:42:a2:98:52:f8:df:f9:fe:1f:85: c7:07:88:d3:ba:7f:53:e2:ec:e0:e6:41:10:91:a7:c7:33:4d: c9:e7:51:94:50:0f:22:4b:8c:55:84:59:4e:75:5b:18:41:fe: 5c:c0:26:63:65:09:65:ee:80:d2:c2:e4:03:29:10:a0:47:fd: 34:b0:11:d8:ab:76:4f:b1:e3:c0:c7:8a:38:50:26:2f:db:bd: 0e:b6:26:44:30:2f:02:01:04:31:6a:b3:ee:44:27:32:ac:c3: f1:3e:6e:50:b4:f0:23:ee:c0:2f:61:93:74:a5:fd:71:f5:6e: 16:64:cc:7f:46:89:99:37:83:b8:07:23:d2:c9:af:60:ee:3c: 05:3a:88:10:78:ea:13:1f:f9:06:f6:16:1d:fe:b4:25:35:96: 0c:11:e2:24:13:56:3b:b4:63:de:03:67:58:24:c9:14:89:24: 72:51:8c:8f:81:bd:61:58:fe:18:1e:ad:04:94:30:cd:f9:b7: da:85:8d:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW809eUI8J4JmHp7vDzxe65Ws5EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTExMDIxOTI2NDJaFw0yNTExMDYwMDUwNDJaMDMxMTAvBgNV BAMTKDJCODZDQkJDQjI2MkU5NDgwNDhBNEYxNkRBMDg2MjVGNDI4MDhEMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoH9qlnTcxcIEL1X0bPbyZYWZ3 mU8pvrueENJewNNsNug+Krd973E0GEtRDcD4J8o6KIvU8Mma9o3tDS1vc3cQq0Fv JFJmJ7SOdWVyWnyS/C3xUfSeOH6RXQKzJ31Zt0gaMvdvMzByj0KgeZZdul8cIamn 0Xm6kZ4iaL9N8LjpxKA938tghk3MUzW86mlzzc5SUcVKk64mwJIa2O+M+dBy1Ezh 5sZOcgo8aFtiFXYDpRXEDiY9mZ6rn17ujtzdDOYVOOzJc+FBw7Nv/RUNElN9o6Yt CVKepiug2Ic+hQhoZdDvxcLMgA661ZNY4VXwdszTTv1MrZwRE2EjsTIz0NebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4bLvLJi6UgEik8W2ghiX0KAjR8wHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkBdqeGBP1HFKmQXeDY6bFDgWHCOZrGp0Tj ZrONpteG2p/wF7qk7bCmCfV/CYQUrA3spqhfaBUCDAk1I49qQqKYUvjf+f4fhccH iNO6f1Pi7ODmQRCRp8czTcnnUZRQDyJLjFWEWU51WxhB/lzAJmNlCWXugNLC5AMp EKBH/TSwEdirdk+x48DHijhQJi/bvQ62JkQwLwIBBDFqs+5EJzKsw/E+blC08CPu wC9hk3Sl/XH1bhZkzH9GiZk3g7gHI9LJr2DuPAU6iBB46hMf+Qb2Fh3+tCU1lgwR 4iQTVju0Y94DZ1gkyRSJJHJRjI+BvWFY/hgerQSUMM35t9qFjTw= -----END CERTIFICATE-----Generated at Tue Nov 4 08:03:48 2025 by rpki-client