$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: iXCDeRXS4Oov+NnXh5ySLCM0/9BEpFMD+95oSvn+iFs= Subject key identifier: 72:40:CE:EF:9A:A9:93:6A:4C:C8:86:CF:60:B6:95:45:D9:2A:86:FA Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 198E7A07AC649C2D98024C0856079C5221140C61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 019B Signing time: Sat 14 Jun 2025 16:41:39 +0000 Manifest this update: Sat 14 Jun 2025 16:36:39 +0000 Manifest next update: Tue 17 Jun 2025 18:04:39 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: lzfF9mBc1sPpiNV9HRlfQJVpaz0RjDZk0oD+wjqtk2M=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: pu6/UsxjccuW1i483s8+VcEVhXPDGUX2MOdonN1OKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:8e:7a:07:ac:64:9c:2d:98:02:4c:08:56:07:9c:52:21:14:0c:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Jun 14 16:36:39 2025 GMT Not After : Jun 17 18:04:39 2025 GMT Subject: CN=7240CEEF9AA9936A4CC886CF60B69545D92A86FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:96:85:bc:72:26:b8:b5:de:d2:6b:94:6d:f0: a9:f1:60:58:21:51:6e:ec:ed:da:64:e2:a1:12:f3: dd:72:ea:f6:be:41:07:09:51:d4:e5:84:34:c0:e2: 64:c0:36:71:e1:e3:26:02:24:11:9b:b3:b6:35:37: ec:9e:9b:7f:35:d7:58:b7:5b:64:fe:83:31:2e:62: 1c:42:b6:a5:65:8e:1e:46:a5:92:5f:2d:fd:63:7c: 05:b0:a2:3b:b0:72:c9:a8:d9:90:b1:18:7d:c4:16: be:27:3f:89:52:32:f6:e6:47:fb:51:cc:ed:3e:4e: 3d:be:b5:98:5f:ba:0b:6d:e2:85:67:ec:5b:f2:6d: 22:09:e4:99:7b:41:91:d3:d0:b9:ed:95:47:94:e0: 58:a5:6c:09:73:93:7e:f4:4b:c2:78:9e:5b:4c:64: 1a:df:71:39:45:d8:c4:24:d1:bc:7e:3f:f1:60:a0: 02:07:77:dc:f9:45:3b:55:5c:4c:82:53:9f:7c:5d: 3e:38:28:62:54:28:d8:94:66:00:46:7a:e3:67:e1: 6e:1e:82:21:01:43:a1:19:44:d0:56:5e:f9:5e:d3: f7:e7:e2:be:b8:4e:e7:c7:33:a9:fc:92:ad:d4:5a: c5:8e:f8:4b:3b:19:79:34:08:d0:fb:30:07:7f:f3: 6e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:40:CE:EF:9A:A9:93:6A:4C:C8:86:CF:60:B6:95:45:D9:2A:86:FA X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:01:fd:16:7b:8a:71:dd:0c:43:68:d3:90:34:5b:09:32:10: 72:8c:f9:fc:3a:a4:77:16:c2:1a:ab:b6:78:a6:ef:2e:c6:bb: db:be:a4:a0:b1:0c:bf:a3:65:31:79:32:ad:a3:7f:6e:91:28: cc:1b:36:66:cd:e8:8a:65:ef:d9:bb:55:4a:94:eb:55:f3:8c: 80:dc:0f:17:4c:30:aa:6e:6b:22:64:b0:40:41:ed:35:6f:ca: 8d:98:ea:30:d5:3e:30:b2:00:72:f9:57:c4:88:35:59:54:1b: 31:07:d8:b8:14:14:c2:ca:6f:c3:be:ac:ce:79:59:44:bb:01: 8c:15:12:9e:8a:6a:d1:4a:34:85:ff:ce:ad:0a:27:a3:f8:31: 9e:1e:9c:35:81:49:85:08:95:18:76:e6:f4:9c:5d:50:02:99: 5c:ab:63:7e:e2:80:0f:75:46:e2:b9:26:f0:66:60:90:cd:77: 9e:eb:27:d5:31:11:e7:75:58:dd:05:2b:91:30:41:65:23:a1: e1:67:00:6c:a9:46:e1:5f:6b:3e:72:13:00:83:19:3c:8e:a2: 04:75:13:85:8e:fd:a4:79:c5:bf:9b:96:8f:25:18:bc:f8:89: f0:80:cb:71:d1:40:9f:fe:56:5f:48:9e:38:68:01:48:35:58: e1:12:a1:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGY56B6xknC2YAkwIVgecUiEUDGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTA2MTQxNjM2MzlaFw0yNTA2MTcxODA0MzlaMDMxMTAvBgNV BAMTKDcyNDBDRUVGOUFBOTkzNkE0Q0M4ODZDRjYwQjY5NTQ1RDkyQTg2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkloW8cia4td7Sa5Rt8KnxYFgh UW7s7dpk4qES891y6va+QQcJUdTlhDTA4mTANnHh4yYCJBGbs7Y1N+yem38111i3 W2T+gzEuYhxCtqVljh5GpZJfLf1jfAWwojuwcsmo2ZCxGH3EFr4nP4lSMvbmR/tR zO0+Tj2+tZhfugtt4oVn7FvybSIJ5Jl7QZHT0LntlUeU4FilbAlzk370S8J4nltM ZBrfcTlF2MQk0bx+P/FgoAIHd9z5RTtVXEyCU598XT44KGJUKNiUZgBGeuNn4W4e giEBQ6EZRNBWXvle0/fn4r64TufHM6n8kq3UWsWO+Es7GXk0CND7MAd/824pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckDO75qpk2pMyIbPYLaVRdkqhvowHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIB/RZ7inHdDENo05A0WwkyEHKM+fw6pHcW whqrtnim7y7Gu9u+pKCxDL+jZTF5Mq2jf26RKMwbNmbN6Ipl79m7VUqU61XzjIDc DxdMMKpuayJksEBB7TVvyo2Y6jDVPjCyAHL5V8SINVlUGzEH2LgUFMLKb8O+rM55 WUS7AYwVEp6KatFKNIX/zq0KJ6P4MZ4enDWBSYUIlRh25vScXVACmVyrY37igA91 RuK5JvBmYJDNd57rJ9UxEed1WN0FK5EwQWUjoeFnAGypRuFfaz5yEwCDGTyOogR1 E4WO/aR5xb+blo8lGLz4ifCAy3HRQJ/+Vl9InjhoAUg1WOESoZA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:38:20 2025 by rpki-client