$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: 0FIiRmwRuWym/o8K7Rgrk3iI5r6eqaQ17zv77edH5dY= Subject key identifier: F1:54:D7:F7:D5:08:AA:22:99:3E:C2:DD:92:5C:A5:C7:93:0E:DC:4B Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 3BF826662294E49A28AABE0A561685A7AD09A731 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04B3 Signing time: Mon 03 Nov 2025 16:11:09 +0000 Manifest this update: Mon 03 Nov 2025 16:06:09 +0000 Manifest next update: Fri 07 Nov 2025 02:57:09 +0000 Files and hashes: 1: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) 3: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) 4: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: ho8N0twunM25srchYWTswtWleekK9VCnhyLok/0nl+Y=) 5: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:57:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:f8:26:66:22:94:e4:9a:28:aa:be:0a:56:16:85:a7:ad:09:a7:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Nov 3 16:06:09 2025 GMT Not After : Nov 7 02:57:09 2025 GMT Subject: CN=F154D7F7D508AA22993EC2DD925CA5C7930EDC4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:07:d1:18:8d:64:3f:4c:c2:d5:2f:6a:c8:76: 0f:24:34:f0:11:0d:5a:59:1e:7e:b0:5c:9e:6f:87: e3:2b:4d:b8:4a:4a:b7:fb:4f:ca:1d:67:6e:84:01: 06:c8:d5:e9:bb:15:8b:ea:7c:5b:39:8a:a7:b6:ad: 15:65:06:7c:ba:26:52:eb:45:38:d5:0b:dd:98:3b: 17:3e:8b:c3:6c:66:7b:ce:b0:75:1e:17:e7:63:90: 22:18:84:ec:aa:2e:75:11:06:3c:00:45:bc:ee:bb: bf:8b:93:b4:a3:3c:4b:1d:0e:35:1b:6e:bf:15:50: 24:34:01:a3:84:48:0a:97:e2:d9:83:e4:d8:2e:81: fa:8d:54:29:df:55:f3:4d:11:a8:e6:77:2c:79:2c: b3:ef:da:da:69:ff:45:b5:fd:7c:81:ee:bb:37:cb: 4c:71:c7:cc:2b:05:38:54:42:c4:f2:09:d5:52:c4: 05:62:70:8c:18:41:69:b8:70:81:09:80:49:44:a0: 83:a0:32:df:00:b6:63:02:0c:e9:8b:23:d7:b4:11: 62:8a:7d:4f:dc:d6:dd:c3:ce:f7:9a:0d:3a:33:7c: fa:d6:90:28:65:f1:e1:4d:5b:ab:0f:20:42:58:83: 29:33:f0:4f:2b:d5:36:89:57:59:23:8b:1b:6f:9e: 44:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:54:D7:F7:D5:08:AA:22:99:3E:C2:DD:92:5C:A5:C7:93:0E:DC:4B X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fe:9d:1a:db:28:7c:67:ae:62:14:3f:ab:b1:71:d1:ad:91: 97:fa:03:cc:40:61:2e:9d:00:84:a1:ba:3c:31:1a:db:ba:e9: af:ae:28:ad:bc:c4:9b:40:1b:53:cb:d8:23:6e:fe:de:76:cf: 37:4b:72:5f:dc:e3:2c:09:7b:e5:1f:e3:c7:26:ce:c6:35:68: 04:fa:d2:39:c9:a5:d9:9a:64:7f:11:0c:31:fe:dc:7c:56:43: 04:b4:d6:c4:30:bf:6f:d7:18:d4:20:c6:f4:91:a1:83:ed:74: 83:8e:58:87:51:a2:92:f2:7a:ed:f1:6f:2b:c7:cc:7c:27:a6: 25:2d:0d:a4:9f:20:a8:1c:06:fd:1a:71:8b:bd:01:4e:c3:a5: 0d:c7:aa:7d:29:1b:fe:0b:f1:f8:d2:45:03:39:13:3a:52:77: ec:cc:94:21:ba:b1:1e:bd:11:59:4f:bc:7f:bc:6a:37:95:b2: c1:cd:ae:4e:79:c5:d8:73:71:e7:ea:a7:ac:da:47:e6:b1:3c: 1b:19:6a:42:cb:19:1b:43:24:b6:66:5d:74:af:5d:46:84:7a: 65:55:1d:ab:a4:9b:9f:13:7f:cd:1f:a1:94:8c:dd:43:53:fd: 7f:63:6d:0a:cf:0e:2f:38:a2:2a:0c:18:b8:3e:c3:55:9d:8d: d6:4c:a2:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/gmZiKU5Jooqr4KVhaFp60JpzEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTExMDMxNjA2MDlaFw0yNTExMDcwMjU3MDlaMDMxMTAvBgNV BAMTKEYxNTREN0Y3RDUwOEFBMjI5OTNFQzJERDkyNUNBNUM3OTMwRURDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBB9EYjWQ/TMLVL2rIdg8kNPAR DVpZHn6wXJ5vh+MrTbhKSrf7T8odZ26EAQbI1em7FYvqfFs5iqe2rRVlBny6JlLr RTjVC92YOxc+i8NsZnvOsHUeF+djkCIYhOyqLnURBjwARbzuu7+Lk7SjPEsdDjUb br8VUCQ0AaOESAqX4tmD5NgugfqNVCnfVfNNEajmdyx5LLPv2tpp/0W1/XyB7rs3 y0xxx8wrBThUQsTyCdVSxAVicIwYQWm4cIEJgElEoIOgMt8AtmMCDOmLI9e0EWKK fU/c1t3DzveaDTozfPrWkChl8eFNW6sPIEJYgykz8E8r1TaJV1kjixtvnkRJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8VTX99UIqiKZPsLdklylx5MO3EswHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn+nRrbKHxnrmIUP6uxcdGtkZf6A8xAYS6d AIShujwxGtu66a+uKK28xJtAG1PL2CNu/t52zzdLcl/c4ywJe+Uf48cmzsY1aAT6 0jnJpdmaZH8RDDH+3HxWQwS01sQwv2/XGNQgxvSRoYPtdIOOWIdRopLyeu3xbyvH zHwnpiUtDaSfIKgcBv0acYu9AU7DpQ3Hqn0pG/4L8fjSRQM5EzpSd+zMlCG6sR69 EVlPvH+8ajeVssHNrk55xdhzcefqp6zaR+axPBsZakLLGRtDJLZmXXSvXUaEemVV Haukm58Tf80foZSM3UNT/X9jbQrPDi84oioMGLg+w1WdjdZMomg= -----END CERTIFICATE-----Generated at Tue Nov 4 19:57:45 2025 by rpki-client