$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: UihRyBncy29VESMjWRMeqrcS3ovCsVVm7ZNl9DvcPNo= Subject key identifier: 65:3D:5F:FC:4C:DA:EC:74:F9:FA:FF:00:23:BC:3D:13:94:0C:8C:24 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 2E717135A3D84CBA04A444FB9133CFC539B52650 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 0187 Signing time: Tue 29 Apr 2025 18:11:42 +0000 Manifest this update: Tue 29 Apr 2025 18:06:42 +0000 Manifest next update: Fri 02 May 2025 21:34:42 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: TwEMc8r750EuCMRfBpJ5ojR7LLm5AK9U8j+BORygBWM=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: pu6/UsxjccuW1i483s8+VcEVhXPDGUX2MOdonN1OKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:71:71:35:a3:d8:4c:ba:04:a4:44:fb:91:33:cf:c5:39:b5:26:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Apr 29 18:06:42 2025 GMT Not After : May 2 21:34:42 2025 GMT Subject: CN=653D5FFC4CDAEC74F9FAFF0023BC3D13940C8C24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:3b:93:61:72:21:65:12:65:27:a1:fc:72:0d: 09:1b:b9:15:83:91:e4:17:2d:ba:2f:5d:cc:9a:8d: 6e:ae:5c:1e:30:d2:0b:88:e5:7d:09:93:e4:d5:1b: 30:82:22:35:4b:88:90:b5:bc:25:ff:77:8a:2c:62: b5:07:19:3c:e8:3f:64:18:f5:82:a6:71:c4:b5:22: ed:e1:2e:db:28:b1:5d:91:db:d8:6e:94:d8:81:32: a2:6a:55:5f:73:cc:36:2c:b3:35:55:e9:3d:0c:ad: 94:10:87:77:39:d7:2e:1d:e8:cd:3c:2f:98:82:4b: 29:d8:dc:b3:7e:9d:8e:c1:4b:fd:88:8c:fb:d9:27: 4e:a0:b0:5f:19:68:cb:f9:a9:cf:8b:29:85:32:1b: c5:c3:bd:28:36:0a:2a:40:bf:18:b8:f8:aa:7f:7f: ca:be:4d:a1:13:df:97:a9:96:fa:f6:8c:e2:a8:84: 04:47:7a:fc:92:1f:72:62:36:8d:fa:6c:bc:98:c0: e3:a0:95:09:40:fa:8d:4a:29:13:e1:68:d5:27:39: 62:9a:92:16:37:40:13:07:20:92:20:07:2d:36:13: 4b:8a:3d:b8:4c:79:fb:98:73:72:35:bc:f9:53:43: 5d:34:36:95:54:cd:04:25:da:27:cf:64:5e:ce:98: aa:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:3D:5F:FC:4C:DA:EC:74:F9:FA:FF:00:23:BC:3D:13:94:0C:8C:24 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:0b:f8:33:85:73:27:43:70:30:9d:fa:bf:90:49:b2:ac:83: ca:61:79:03:24:2b:8e:ad:06:dc:ea:52:1a:39:62:db:45:13: 6d:45:aa:8e:b3:9d:c2:fc:9a:09:ef:47:df:07:b8:4d:37:ae: ad:00:df:b9:09:8e:78:ea:7a:00:c2:48:0c:4a:8a:9d:e5:87: 78:51:40:82:29:ee:ce:d1:36:92:36:79:b8:4b:9c:74:05:ab: 3b:a3:5e:a0:78:50:36:46:91:b9:25:23:09:3f:3e:0b:21:46: 36:9f:14:c4:39:8a:1b:40:06:ad:d3:d6:bf:32:0d:66:be:04: 44:00:b0:63:d8:ce:fa:86:50:a9:49:18:5e:8b:d6:48:59:8d: 9a:50:ed:64:d6:2f:74:25:52:21:7e:03:32:eb:5c:88:4c:5e: c2:f3:95:39:b9:4b:d4:2f:a6:1a:66:98:f8:63:26:21:c0:1a: d9:74:7e:7c:b3:b5:9e:78:12:51:cb:ec:cd:fc:48:7a:c9:6e: 64:e3:a0:00:a2:44:35:25:d7:5a:6d:51:e9:13:84:6e:07:0b: 5b:b0:76:d1:e7:54:e1:50:78:16:41:31:6a:29:12:11:9f:38: d7:30:4c:7d:62:83:1f:b2:0e:1c:08:7b:ab:3b:ae:8b:a8:3a: f2:d7:a1:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnFxNaPYTLoEpET7kTPPxTm1JlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTA0MjkxODA2NDJaFw0yNTA1MDIyMTM0NDJaMDMxMTAvBgNV BAMTKDY1M0Q1RkZDNENEQUVDNzRGOUZBRkYwMDIzQkMzRDEzOTQwQzhDMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrO5NhciFlEmUnofxyDQkbuRWD keQXLbovXcyajW6uXB4w0guI5X0Jk+TVGzCCIjVLiJC1vCX/d4osYrUHGTzoP2QY 9YKmccS1Iu3hLtsosV2R29hulNiBMqJqVV9zzDYsszVV6T0MrZQQh3c51y4d6M08 L5iCSynY3LN+nY7BS/2IjPvZJ06gsF8ZaMv5qc+LKYUyG8XDvSg2CipAvxi4+Kp/ f8q+TaET35eplvr2jOKohARHevySH3JiNo36bLyYwOOglQlA+o1KKRPhaNUnOWKa khY3QBMHIJIgBy02E0uKPbhMefuYc3I1vPlTQ100NpVUzQQl2ifPZF7OmKplAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZT1f/Eza7HT5+v8AI7w9E5QMjCQwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIgL+DOFcydDcDCd+r+QSbKsg8pheQMkK46t BtzqUho5YttFE21Fqo6zncL8mgnvR98HuE03rq0A37kJjnjqegDCSAxKip3lh3hR QIIp7s7RNpI2ebhLnHQFqzujXqB4UDZGkbklIwk/PgshRjafFMQ5ihtABq3T1r8y DWa+BEQAsGPYzvqGUKlJGF6L1khZjZpQ7WTWL3QlUiF+AzLrXIhMXsLzlTm5S9Qv phpmmPhjJiHAGtl0fnyztZ54ElHL7M38SHrJbmTjoACiRDUl11ptUekThG4HC1uw dtHnVOFQeBZBMWopEhGfONcwTH1igx+yDhwIe6s7rouoOvLXoeU= -----END CERTIFICATE-----Generated at Wed Apr 30 03:33:14 2025 by rpki-client