$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: 957K6N16MreumjP5XMQ72bEcCrMF61HEunVqRL1fGcU= Subject key identifier: 17:43:53:C3:75:F5:D2:3C:8B:69:C8:CD:E4:7C:C6:57:B1:6A:17:06 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 7788BEAA68A37E91BF1764336173F79355688B87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: EC Signing time: Mon 03 Nov 2025 18:51:52 +0000 Manifest this update: Mon 03 Nov 2025 18:46:52 +0000 Manifest next update: Fri 07 Nov 2025 03:57:52 +0000 Files and hashes: 1: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) 2: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: qBalV8Ll3agP8YjKi4ZYbCLNwTasIHNnJNjKywyM/wQ=) 3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 03:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:88:be:aa:68:a3:7e:91:bf:17:64:33:61:73:f7:93:55:68:8b:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Nov 3 18:46:52 2025 GMT Not After : Nov 7 03:57:52 2025 GMT Subject: CN=174353C375F5D23C8B69C8CDE47CC657B16A1706 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:78:d1:34:2f:f6:b2:40:2a:d0:58:33:fd:8b: 27:2b:04:ab:d4:8d:5e:65:b7:99:e0:82:3c:6a:a1: 78:82:fb:05:f5:50:f7:4e:04:be:c6:b0:c3:58:d6: b1:6d:f6:e3:e6:d1:a7:ac:ef:5b:b9:bf:80:3e:f4: 8d:e5:08:a5:ca:ae:5f:94:6c:64:09:07:f1:3a:a6: 88:17:f8:ff:96:8e:34:cf:f2:3b:82:08:37:37:a6: 8d:c8:de:68:71:0a:7a:7c:b7:46:4c:f8:00:4b:be: 5d:3b:9b:d6:f8:2a:fa:87:54:48:a5:79:a4:96:4a: 0d:3c:b3:90:33:3c:37:de:73:c3:39:90:46:3e:5f: bc:e2:70:55:aa:a2:e5:0c:ab:3b:72:2d:c5:7e:85: 56:a8:ea:90:51:d6:16:dc:65:7f:d3:ca:23:8b:a2: 60:1d:b1:aa:da:65:80:c9:2a:84:6e:60:8c:91:b9: 83:f9:af:59:d3:25:f8:f0:4f:b5:dd:fd:d6:d4:8b: ab:9c:f4:32:29:fb:46:4c:6e:38:08:da:be:39:5a: 92:7f:3f:05:40:88:f8:f4:4e:8f:1f:32:4f:ab:e0: c2:fc:1a:98:7c:8b:1c:c6:0f:68:f7:0f:fd:82:51: ea:55:63:9d:47:e8:ca:65:9a:36:e5:50:85:45:23: 0b:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:43:53:C3:75:F5:D2:3C:8B:69:C8:CD:E4:7C:C6:57:B1:6A:17:06 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:2c:d5:d2:4f:4a:19:26:e5:f3:41:25:bb:3c:30:43:7b:11: df:d1:7d:35:70:bc:5b:db:98:a3:ef:e0:b0:25:e7:c9:95:bf: c0:b0:fe:25:96:fe:78:50:91:b1:8e:e9:f5:1c:8d:cb:51:95: 29:94:8a:c4:7e:c6:ad:3e:eb:77:72:11:43:86:e2:0a:18:55: ef:bb:b5:4f:11:5c:b6:f9:34:dd:4c:ff:fb:d7:00:b7:78:53: af:9d:14:b1:f8:ec:f7:8a:c8:c7:bd:d9:b2:db:d6:4d:3b:c3: 73:f4:e0:a6:6f:4e:b7:fb:50:9d:f4:7e:53:70:20:3a:92:03: 32:ee:be:d3:a2:a6:1e:f3:b3:81:0e:43:fa:5f:f1:b7:05:1d: de:14:4f:6a:16:73:10:0d:31:89:50:f5:b8:9e:64:93:b8:de: 56:60:90:1d:29:d0:0e:84:7d:fb:03:94:5e:f6:5b:a7:14:99: 34:88:13:13:b2:d9:bd:53:7e:7e:6a:6f:6a:c0:b3:b6:cd:1e: 86:9c:ae:f5:53:7a:e8:86:1a:00:41:31:e6:40:89:aa:87:c9: c1:1d:05:af:b8:2d:9e:d4:37:3f:56:3e:b7:c1:2d:d2:03:0f: 25:c8:04:51:62:5d:75:84:a5:71:5a:2f:ac:8c:c8:48:25:4e: ab:64:f9:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd4i+qmijfpG/F2QzYXP3k1Voi4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTExMDMxODQ2NTJaFw0yNTExMDcwMzU3NTJaMDMxMTAvBgNV BAMTKDE3NDM1M0MzNzVGNUQyM0M4QjY5QzhDREU0N0NDNjU3QjE2QTE3MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTeNE0L/ayQCrQWDP9iycrBKvU jV5lt5nggjxqoXiC+wX1UPdOBL7GsMNY1rFt9uPm0aes71u5v4A+9I3lCKXKrl+U bGQJB/E6pogX+P+WjjTP8juCCDc3po3I3mhxCnp8t0ZM+ABLvl07m9b4KvqHVEil eaSWSg08s5AzPDfec8M5kEY+X7zicFWqouUMqztyLcV+hVao6pBR1hbcZX/TyiOL omAdsaraZYDJKoRuYIyRuYP5r1nTJfjwT7Xd/dbUi6uc9DIp+0ZMbjgI2r45WpJ/ PwVAiPj0To8fMk+r4ML8Gph8ixzGD2j3D/2CUepVY51H6MplmjblUIVFIwsjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF0NTw3X10jyLacjN5HzGV7FqFwYwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYs1dJPShkm5fNBJbs8MEN7Ed/RfTVwvFvb mKPv4LAl58mVv8Cw/iWW/nhQkbGO6fUcjctRlSmUisR+xq0+63dyEUOG4goYVe+7 tU8RXLb5NN1M//vXALd4U6+dFLH47PeKyMe92bLb1k07w3P04KZvTrf7UJ30flNw IDqSAzLuvtOiph7zs4EOQ/pf8bcFHd4UT2oWcxANMYlQ9bieZJO43lZgkB0p0A6E ffsDlF72W6cUmTSIExOy2b1Tfn5qb2rAs7bNHoacrvVTeuiGGgBBMeZAiaqHycEd Ba+4LZ7UNz9WPrfBLdIDDyXIBFFiXXWEpXFaL6yMyEglTqtk+YQ= -----END CERTIFICATE-----Generated at Tue Nov 4 08:12:41 2025 by rpki-client