$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: 7afY/0rUShaOPBFD5FOcgq/qn6ji5GHNPIKAQDlnpW0= Subject key identifier: A1:15:DA:B4:19:AE:00:AB:8C:4E:10:AD:34:69:7D:B4:3B:6E:26:CF Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 221419DA58A2D76CF9D3C6CC9DE22B5B765D9A67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: AD Signing time: Sat 14 Jun 2025 10:11:48 +0000 Manifest this update: Sat 14 Jun 2025 10:06:48 +0000 Manifest next update: Tue 17 Jun 2025 20:10:48 +0000 Files and hashes: 1: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) 3: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: xdeP/vPt/LD85IIQPOg2PRKakTs0Q3QkTIbnkjTUX0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 20:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:14:19:da:58:a2:d7:6c:f9:d3:c6:cc:9d:e2:2b:5b:76:5d:9a:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Jun 14 10:06:48 2025 GMT Not After : Jun 17 20:10:48 2025 GMT Subject: CN=A115DAB419AE00AB8C4E10AD34697DB43B6E26CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:97:5e:65:94:b6:96:c2:56:a4:2b:d9:1b:5d: a6:75:c5:fd:e4:4e:bb:d4:ec:d3:a6:ed:de:c6:00: 7d:66:40:a2:54:85:82:72:1e:54:86:bf:60:75:96: 59:17:0d:3d:a3:44:26:a2:c9:bf:dd:7d:c0:39:7b: ab:75:7f:ee:04:b2:f7:27:1c:81:45:37:49:1e:ee: 66:30:7d:75:54:f0:40:5c:c8:6b:b3:51:ed:c3:cd: cb:1d:8a:5f:5d:42:ec:21:80:93:86:fb:95:64:81: 2f:be:cc:20:2a:22:41:99:b7:ad:8d:85:d9:ec:71: 9d:2b:ce:c1:50:f8:a9:7c:1b:f7:2b:ec:a4:72:8e: 75:cc:b7:d6:9d:2a:47:ff:c3:55:f9:7c:e6:38:b8: c0:e4:7d:85:76:8b:93:05:2f:a4:08:4e:3a:a9:9f: 79:3e:e2:f1:01:5c:d8:33:f2:88:2e:75:a2:46:59: 21:5d:6c:26:48:b7:2e:ec:2e:ff:b2:53:cc:2a:a1: fc:cf:2a:d7:f6:95:78:ea:0d:20:c2:a3:dc:52:28: 38:7f:31:4c:d4:d7:82:70:d9:ce:d6:b8:50:9a:aa: 5b:2f:ff:be:6b:db:db:de:2b:9a:c5:d6:ec:d4:fb: 33:73:96:6a:c5:84:b3:f4:0b:86:04:15:48:cd:90: 0c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:15:DA:B4:19:AE:00:AB:8C:4E:10:AD:34:69:7D:B4:3B:6E:26:CF X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:5c:00:87:64:bb:79:a8:63:d5:d1:9e:7d:a8:6f:1f:17:70: 03:53:29:be:4c:95:8b:79:bb:b2:d1:ca:4b:c2:8e:f7:e1:b5: 88:e5:1f:c1:f9:72:19:2c:d6:dc:71:74:61:50:e8:39:16:0c: 61:03:bc:be:19:45:f8:3f:ee:0c:09:04:7e:c2:0b:7a:e1:e9: a0:84:85:8a:6a:3c:81:e9:3f:17:23:53:73:a8:4c:8d:13:39: 8c:97:9e:f9:2f:86:c5:87:4a:e4:aa:5c:62:b9:59:dc:b5:a8: 57:81:ae:29:71:75:2f:e4:87:67:5f:d2:cd:68:4a:a9:85:c2: 3d:41:07:e6:80:e2:62:7b:85:3b:b5:35:8d:54:2d:96:91:98: 06:03:ef:73:11:7a:08:8e:35:8d:79:cc:84:17:ab:97:a3:48: aa:13:a8:69:a8:10:ca:2d:2b:ca:b4:3b:25:1c:a6:5b:4b:0c: 04:23:5a:e6:f9:73:df:b8:8b:3a:d9:a4:35:ed:05:f4:18:27: 1b:e5:c7:59:60:f5:36:6d:32:73:b2:2f:1b:b1:4a:b8:8a:2b: fc:5e:56:17:a0:93:94:d5:4d:3c:94:ac:be:f5:b8:e6:57:c9: 58:b0:d1:ea:aa:e1:75:77:1c:01:ac:6a:dc:a8:00:2f:2b:39: ce:ff:5e:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhQZ2lii12z508bMneIrW3ZdmmcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA2MTQxMDA2NDhaFw0yNTA2MTcyMDEwNDhaMDMxMTAvBgNV BAMTKEExMTVEQUI0MTlBRTAwQUI4QzRFMTBBRDM0Njk3REI0M0I2RTI2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCal15llLaWwlakK9kbXaZ1xf3k TrvU7NOm7d7GAH1mQKJUhYJyHlSGv2B1llkXDT2jRCaiyb/dfcA5e6t1f+4Esvcn HIFFN0ke7mYwfXVU8EBcyGuzUe3Dzcsdil9dQuwhgJOG+5VkgS++zCAqIkGZt62N hdnscZ0rzsFQ+Kl8G/cr7KRyjnXMt9adKkf/w1X5fOY4uMDkfYV2i5MFL6QITjqp n3k+4vEBXNgz8ogudaJGWSFdbCZIty7sLv+yU8wqofzPKtf2lXjqDSDCo9xSKDh/ MUzU14Jw2c7WuFCaqlsv/75r29veK5rF1uzU+zNzlmrFhLP0C4YEFUjNkAxXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoRXatBmuAKuMThCtNGl9tDtuJs8wHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFcAIdku3moY9XRnn2obx8XcANTKb5MlYt5 u7LRykvCjvfhtYjlH8H5chks1txxdGFQ6DkWDGEDvL4ZRfg/7gwJBH7CC3rh6aCE hYpqPIHpPxcjU3OoTI0TOYyXnvkvhsWHSuSqXGK5Wdy1qFeBrilxdS/kh2df0s1o SqmFwj1BB+aA4mJ7hTu1NY1ULZaRmAYD73MRegiONY15zIQXq5ejSKoTqGmoEMot K8q0OyUcpltLDAQjWub5c9+4izrZpDXtBfQYJxvlx1lg9TZtMnOyLxuxSriKK/xe Vhegk5TVTTyUrL71uOZXyViw0eqq4XV3HAGsatyoAC8rOc7/XiU= -----END CERTIFICATE-----Generated at Mon Jun 16 04:41:33 2025 by rpki-client