$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: 59ALWKQOpg2XR4JMp7L8/wZPSsawTlFMTVfkP/kefVc= Subject key identifier: 4D:69:C0:D5:6B:53:D9:9E:1A:DB:58:7F:41:AF:F7:27:3A:EA:E3:71 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 485A1545491A6B2FAB1FFE6C988C987F32C45694 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 01AE Signing time: Wed 06 Aug 2025 17:41:41 +0000 Manifest this update: Wed 06 Aug 2025 17:36:41 +0000 Manifest next update: Sun 10 Aug 2025 00:00:41 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) 2: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: FfdIX3xBHRzJJkBCtGPgMHyZIkr8NY426fSreTys2sY=) 3: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 00:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5a:15:45:49:1a:6b:2f:ab:1f:fe:6c:98:8c:98:7f:32:c4:56:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Aug 6 17:36:41 2025 GMT Not After : Aug 10 00:00:41 2025 GMT Subject: CN=4D69C0D56B53D99E1ADB587F41AFF7273AEAE371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6d:e0:02:16:f1:30:e7:22:30:78:2a:d4:52: e9:e0:34:2f:14:3e:63:7e:07:0f:b6:e5:c8:bc:bf: 73:61:f1:c7:a6:d8:35:69:1c:2f:3a:a4:45:58:3e: a9:6e:9e:1e:6b:9e:2a:5d:b2:58:ab:1f:b6:44:c6: d5:f9:2a:ca:4e:e1:57:7b:28:0d:07:cd:af:89:1f: 68:44:95:3e:fe:1e:82:be:61:ac:6f:a2:d2:c0:31: 4b:46:f3:08:1d:00:bd:f1:1e:15:b6:c0:da:c7:6a: 53:d9:6d:f3:d2:8d:cd:d4:01:05:10:b5:4b:f2:4a: ea:1e:7a:62:9b:2a:e0:b4:1b:16:cb:87:18:ef:2c: 01:0e:62:35:41:da:3d:86:9c:74:88:16:58:1d:f4: 2b:c0:15:a7:21:72:d2:ea:6c:19:35:02:0f:40:a4: fa:ca:08:f8:30:53:78:4f:a7:8a:74:b5:ba:56:40: 4d:b8:fb:fe:e4:7a:8a:f1:73:7c:97:8c:bc:90:8a: 12:8f:ee:c1:a8:03:ee:6a:56:81:3c:7c:c8:9a:f3: 80:46:54:03:26:e1:7f:92:a0:6d:89:5a:72:40:35: e9:6c:9b:2c:54:16:be:cc:93:95:43:ce:e9:38:2f: c2:c8:d8:67:b6:1b:70:aa:b2:ba:32:d1:c9:20:7b: cf:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:69:C0:D5:6B:53:D9:9E:1A:DB:58:7F:41:AF:F7:27:3A:EA:E3:71 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:27:ce:31:c7:66:c0:a7:1d:39:35:85:63:7a:b6:25:d3:ea: b9:c9:6b:62:a2:84:a1:58:be:92:4c:ab:28:30:71:01:46:6d: f9:d0:03:26:33:ad:54:06:8d:ba:9a:c3:6e:37:33:06:9a:22: 38:b8:80:30:f6:43:b3:be:67:56:77:4f:7a:22:0b:dc:8c:bc: 50:90:09:56:67:e3:af:96:97:f1:16:9c:9b:06:31:1d:21:6a: 44:46:64:27:f1:17:8c:18:6c:5e:6f:47:d5:59:4f:45:88:67: f1:87:07:b8:21:a8:e1:d2:92:1f:d1:78:5c:87:1d:97:a4:09: 02:06:cf:80:e6:a9:57:72:9d:25:b5:87:3f:53:3f:4d:84:92: e4:18:ea:ed:19:0b:7c:96:0d:23:8a:9d:3c:04:bd:c8:8d:e9: 10:e6:0f:40:2b:19:ff:ba:7e:f5:b9:6e:8e:71:16:c6:f3:cb: 21:f4:8a:17:ac:d5:67:23:0f:98:6f:b7:9e:54:68:e1:dd:29: a7:b5:08:d8:f2:1e:84:16:3d:fc:c7:87:5e:a4:fe:98:58:cf: f3:b7:4b:bc:82:eb:53:64:51:82:c8:2f:7d:c8:9f:b7:b8:3a: 01:0f:4f:da:fb:bd:51:f6:49:5b:e5:30:cf:c0:1e:53:fb:ef: fa:03:59:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFoVRUkaay+rH/5smIyYfzLEVpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTA4MDYxNzM2NDFaFw0yNTA4MTAwMDAwNDFaMDMxMTAvBgNV BAMTKDRENjlDMEQ1NkI1M0Q5OUUxQURCNTg3RjQxQUZGNzI3M0FFQUUzNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmbeACFvEw5yIweCrUUungNC8U PmN+Bw+25ci8v3Nh8cem2DVpHC86pEVYPqlunh5rnipdslirH7ZExtX5KspO4Vd7 KA0Hza+JH2hElT7+HoK+YaxvotLAMUtG8wgdAL3xHhW2wNrHalPZbfPSjc3UAQUQ tUvySuoeemKbKuC0GxbLhxjvLAEOYjVB2j2GnHSIFlgd9CvAFachctLqbBk1Ag9A pPrKCPgwU3hPp4p0tbpWQE24+/7keorxc3yXjLyQihKP7sGoA+5qVoE8fMia84BG VAMm4X+SoG2JWnJANelsmyxUFr7Mk5VDzuk4L8LI2Ge2G3Cqsroy0ckge89lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTWnA1WtT2Z4a21h/Qa/3Jzrq43EwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYnzjHHZsCnHTk1hWN6tiXT6rnJa2KihKFY vpJMqygwcQFGbfnQAyYzrVQGjbqaw243MwaaIji4gDD2Q7O+Z1Z3T3oiC9yMvFCQ CVZn46+Wl/EWnJsGMR0hakRGZCfxF4wYbF5vR9VZT0WIZ/GHB7ghqOHSkh/ReFyH HZekCQIGz4DmqVdynSW1hz9TP02EkuQY6u0ZC3yWDSOKnTwEvciN6RDmD0ArGf+6 fvW5bo5xFsbzyyH0ihes1WcjD5hvt55UaOHdKae1CNjyHoQWPfzHh16k/phYz/O3 S7yC61NkUYLIL33In7e4OgEPT9r7vVH2SVvlMM/AHlP77/oDWcM= -----END CERTIFICATE-----Generated at Thu Aug 7 03:23:10 2025 by rpki-client