$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: HZQX1TSYq1jx8GKIru6ybUscb8hKCKY1XC8e1gZEfcY= Subject key identifier: 7B:F0:23:26:3A:56:BE:AB:B8:84:2D:4D:A3:BC:0F:9C:C8:17:9B:17 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 1BC138ACA91F4247DFD423608B3D77F815D847F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04EE Signing time: Mon 21 Jul 2025 15:41:08 +0000 Manifest this update: Mon 21 Jul 2025 15:36:08 +0000 Manifest next update: Thu 24 Jul 2025 16:50:08 +0000 Files and hashes: 1: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 2: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 3: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 4: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: GsMEJd8PYj/9Q15oWyQzqilzeU9l8astXNpVMLubyuc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:50:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c1:38:ac:a9:1f:42:47:df:d4:23:60:8b:3d:77:f8:15:d8:47:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Jul 21 15:36:08 2025 GMT Not After : Jul 24 16:50:08 2025 GMT Subject: CN=7BF023263A56BEABB8842D4DA3BC0F9CC8179B17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:f1:47:74:f4:b5:51:fb:c5:07:58:e2:f5:1d: 7e:6c:cd:30:2e:f3:64:01:ab:1b:62:f6:f8:f5:c9: b4:61:a9:0d:1c:b5:c7:80:83:73:f2:b1:20:69:dc: 39:dc:eb:12:45:70:2b:10:c6:58:51:c3:f0:12:8a: 81:e7:51:b2:4a:97:57:d4:b0:9f:c7:ef:a4:51:e6: 03:02:ff:fd:dc:cc:7c:62:b3:66:de:4d:16:f9:46: 06:c5:1e:3c:34:7d:ce:47:af:f5:32:27:45:f1:62: ac:a9:3b:8f:10:03:70:c8:9e:56:0b:10:b8:e1:5a: 27:18:00:e5:b7:89:f3:2e:89:29:f2:86:56:26:83: b5:e3:52:a0:21:27:df:24:dc:40:0f:06:4b:58:ac: 3a:4b:6d:11:1d:1e:f7:a0:44:72:45:9f:7c:f9:d1: bd:b1:90:a5:1c:b3:1e:8c:12:2c:80:17:44:39:5f: 22:1c:47:ba:c5:d2:20:79:e2:d3:97:bd:15:66:1d: 97:6e:b8:b0:c2:da:88:f5:90:93:1f:34:28:70:04: c9:ad:13:81:31:e9:78:a0:02:4d:95:cb:a2:01:5b: c9:9e:f4:e1:df:e2:55:5a:10:8b:6f:93:f2:6b:ad: ed:3c:04:09:2c:35:84:2a:85:34:e0:2b:94:93:ec: b5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:F0:23:26:3A:56:BE:AB:B8:84:2D:4D:A3:BC:0F:9C:C8:17:9B:17 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:27:78:ac:77:0b:9a:73:57:e7:cb:9f:5e:54:29:48:3c:0c: 2b:03:0a:23:a3:50:03:e3:a2:30:47:a4:ff:b7:73:f3:dc:67: d5:30:bd:82:1f:9e:57:aa:3f:65:d6:e3:7e:dd:0b:db:31:da: 04:b1:f4:48:2d:67:49:a8:53:28:cb:98:db:e7:0d:ab:df:92: 80:b1:d5:15:29:27:98:bb:b0:83:25:fa:32:7c:df:73:19:b9: b6:86:eb:4f:40:13:d4:50:8d:ce:51:11:4e:7f:45:34:1c:43: d1:e3:c9:86:c8:72:49:90:f7:ec:f7:cc:d9:0c:9d:d8:48:b8: 9c:f1:9f:ab:28:02:8e:f1:74:08:88:a5:ec:e8:ef:3b:45:fb: 1c:e7:25:41:da:94:c9:47:89:3f:97:e7:c8:80:2e:73:0b:84: 15:85:9b:22:91:c9:02:4f:41:da:d5:ae:48:6f:59:fa:c7:aa: e3:b6:14:f3:09:dd:c2:01:c9:1b:f8:6d:6b:aa:65:93:da:52: f7:94:96:cd:fe:e5:cc:71:40:71:73:e8:cd:ba:be:28:6e:d4: 05:55:15:a9:a9:02:14:f5:af:69:0d:92:3c:63:6c:3e:4a:46: d0:eb:a2:69:da:b8:b1:72:00:24:c7:8a:c2:22:7b:e1:2e:c3: 51:52:0e:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG8E4rKkfQkff1CNgiz13+BXYR/EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA3MjExNTM2MDhaFw0yNTA3MjQxNjUwMDhaMDMxMTAvBgNV BAMTKDdCRjAyMzI2M0E1NkJFQUJCODg0MkQ0REEzQkMwRjlDQzgxNzlCMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE8Ud09LVR+8UHWOL1HX5szTAu 82QBqxti9vj1ybRhqQ0ctceAg3PysSBp3Dnc6xJFcCsQxlhRw/ASioHnUbJKl1fU sJ/H76RR5gMC//3czHxis2beTRb5RgbFHjw0fc5Hr/UyJ0XxYqypO48QA3DInlYL ELjhWicYAOW3ifMuiSnyhlYmg7XjUqAhJ98k3EAPBktYrDpLbREdHvegRHJFn3z5 0b2xkKUcsx6MEiyAF0Q5XyIcR7rF0iB54tOXvRVmHZduuLDC2oj1kJMfNChwBMmt E4Ex6XigAk2Vy6IBW8me9OHf4lVaEItvk/Jrre08BAksNYQqhTTgK5ST7LUtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe/AjJjpWvqu4hC1No7wPnMgXmxcwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIneKx3C5pzV+fLn15UKUg8DCsDCiOjUAPj ojBHpP+3c/PcZ9UwvYIfnleqP2XW437dC9sx2gSx9EgtZ0moUyjLmNvnDavfkoCx 1RUpJ5i7sIMl+jJ833MZubaG609AE9RQjc5REU5/RTQcQ9HjyYbIckmQ9+z3zNkM ndhIuJzxn6soAo7xdAiIpezo7ztF+xznJUHalMlHiT+X58iALnMLhBWFmyKRyQJP QdrVrkhvWfrHquO2FPMJ3cIByRv4bWuqZZPaUveUls3+5cxxQHFz6M26vihu1AVV FampAhT1r2kNkjxjbD5KRtDromnauLFyACTHisIie+Euw1FSDso= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:04 2025 by rpki-client