$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: aB39XcEnCF8xHnWtE+YdQUWfUg3hUDtmVJovU9onE/4= Subject key identifier: 69:07:AD:00:D4:85:9F:47:9F:7E:9D:A5:32:93:06:2E:9C:28:B1:98 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 53459BD52ED83244780772E94464ECB6AB382EF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 0473 Signing time: Mon 16 Jun 2025 03:02:51 +0000 Manifest this update: Mon 16 Jun 2025 02:57:51 +0000 Manifest next update: Thu 19 Jun 2025 11:08:51 +0000 Files and hashes: 1: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: sT6gc0kUg3HYvM0KM8AFDsH35OTHgd4gfQKRRn1NKZI=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: IfhhVFH3PrLXhWjFzuTapS5Iq5sRD6WA4e1zrAIjak8=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 4: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 5: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: cJOBNoxIG+XdgkJa+RxEvdYzqEAiE0yonzEzhxIBb8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:45:9b:d5:2e:d8:32:44:78:07:72:e9:44:64:ec:b6:ab:38:2e:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Jun 16 02:57:51 2025 GMT Not After : Jun 19 11:08:51 2025 GMT Subject: CN=6907AD00D4859F479F7E9DA53293062E9C28B198 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:39:6e:a4:28:43:51:e0:31:de:2d:5c:19:ab: 3b:68:d8:bd:62:ec:6d:b0:ec:71:09:22:6e:cf:08: 97:87:48:03:24:9b:fa:d2:9e:b3:6a:9d:23:08:0f: f8:d4:72:57:af:6b:ca:b3:af:86:11:97:67:03:94: b6:cc:0c:d6:a7:eb:77:56:6f:71:d4:15:6d:92:75: 6e:dd:d3:d0:9d:ec:06:57:a5:b5:46:bd:4f:23:bd: 29:1e:cf:21:67:f7:dd:28:25:d0:fd:70:3d:d0:5a: e4:94:df:ec:fe:dc:52:7c:15:4d:50:e0:99:a3:19: 72:77:30:c9:83:23:58:a1:bf:82:18:c3:61:2b:6b: c4:12:03:78:82:66:b9:af:10:17:a6:62:c6:82:e4: 81:a1:f0:70:f5:06:2c:a4:4b:dc:32:0b:32:72:6b: 8c:22:5c:b6:01:37:18:d5:df:c5:17:12:c4:dd:1c: 2c:53:1d:75:86:41:ce:92:a4:ab:ec:38:6b:7c:62: 8b:c2:52:42:f5:34:d1:96:ad:a4:b0:f3:74:28:49: 99:67:69:66:26:a7:fc:d2:af:3f:ea:93:1f:8a:dc: 08:fd:ab:77:29:25:f9:7f:95:e6:c5:2b:25:b2:f4: e1:65:ba:12:7b:09:60:ec:d3:eb:d9:43:97:4c:47: 85:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:07:AD:00:D4:85:9F:47:9F:7E:9D:A5:32:93:06:2E:9C:28:B1:98 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:0f:dd:f7:94:0d:5f:14:bf:b4:92:91:e7:3b:d9:15:2a:cd: 7f:7a:9d:bc:62:52:0d:a2:b8:39:cc:83:d5:5a:50:02:86:c2: 4f:70:4f:6e:aa:e4:e3:77:8c:eb:6f:e8:6c:58:79:f1:63:2e: e8:7c:d9:0e:49:50:0b:9c:81:2a:13:d0:41:df:e6:f4:cc:b6: c2:c6:f2:ed:b9:d6:27:76:3f:83:94:1e:07:de:00:0c:3c:14: 54:d3:4c:e7:66:bc:05:91:2e:c2:6f:82:24:43:42:6d:68:4d: 2e:24:7c:1d:61:a8:c9:f4:37:b8:06:fd:59:04:c4:8f:7b:a0: 6b:8f:df:26:d4:ff:ba:98:20:72:43:9e:c3:ee:bd:e1:13:42: 51:31:30:00:bf:37:8b:59:ca:05:d9:f0:a8:15:5b:91:50:ff: 29:24:94:4b:38:d8:2e:10:61:75:1f:8e:9f:49:00:33:54:aa: d4:ae:a4:14:57:6b:32:89:5f:69:d1:51:b9:a8:60:56:62:a1: 1f:ee:24:44:9b:7e:3a:33:52:31:b6:5d:01:62:06:36:a3:46: db:98:6a:b9:c2:1e:9c:ed:32:75:df:54:39:bb:26:a0:02:d4: 9a:29:a8:27:11:e8:b9:ee:84:80:0f:a2:2d:7d:0c:18:74:63: ce:26:b4:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0Wb1S7YMkR4B3LpRGTstqs4LvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTA2MTYwMjU3NTFaFw0yNTA2MTkxMTA4NTFaMDMxMTAvBgNV BAMTKDY5MDdBRDAwRDQ4NTlGNDc5RjdFOURBNTMyOTMwNjJFOUMyOEIxOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgOW6kKENR4DHeLVwZqzto2L1i 7G2w7HEJIm7PCJeHSAMkm/rSnrNqnSMID/jUcleva8qzr4YRl2cDlLbMDNan63dW b3HUFW2SdW7d09Cd7AZXpbVGvU8jvSkezyFn990oJdD9cD3QWuSU3+z+3FJ8FU1Q 4JmjGXJ3MMmDI1ihv4IYw2Era8QSA3iCZrmvEBemYsaC5IGh8HD1BiykS9wyCzJy a4wiXLYBNxjV38UXEsTdHCxTHXWGQc6SpKvsOGt8YovCUkL1NNGWraSw83QoSZln aWYmp/zSrz/qkx+K3Aj9q3cpJfl/lebFKyWy9OFluhJ7CWDs0+vZQ5dMR4VRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQetANSFn0effp2lMpMGLpwosZgwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIP3feUDV8Uv7SSkec72RUqzX96nbxiUg2i uDnMg9VaUAKGwk9wT26q5ON3jOtv6GxYefFjLuh82Q5JUAucgSoT0EHf5vTMtsLG 8u251id2P4OUHgfeAAw8FFTTTOdmvAWRLsJvgiRDQm1oTS4kfB1hqMn0N7gG/VkE xI97oGuP3ybU/7qYIHJDnsPuveETQlExMAC/N4tZygXZ8KgVW5FQ/ykklEs42C4Q YXUfjp9JADNUqtSupBRXazKJX2nRUbmoYFZioR/uJESbfjozUjG2XQFiBjajRtuY arnCHpztMnXfVDm7JqAC1JopqCcR6LnuhIAPoi19DBh0Y84mtPo= -----END CERTIFICATE-----Generated at Wed Jun 18 06:36:02 2025 by rpki-client