$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: ndXYTHXuNMq3UsnouZW6KlAqprSE4mTVUu1oz2LaqM4= Subject key identifier: 1C:62:F9:5F:9B:07:A7:ED:A5:4A:6D:6D:5D:0E:CC:74:4F:53:99:90 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 7BC86CDDBF2C40C836AEBB19296D6A5457866AD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 0483 Signing time: Tue 22 Jul 2025 07:41:07 +0000 Manifest this update: Tue 22 Jul 2025 07:36:07 +0000 Manifest next update: Fri 25 Jul 2025 17:22:07 +0000 Files and hashes: 1: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: /gWajE4O+qKGgNkwLNxU3vgDhbXJal7i+EFFmq6SJZQ=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: IfhhVFH3PrLXhWjFzuTapS5Iq5sRD6WA4e1zrAIjak8=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: cJOBNoxIG+XdgkJa+RxEvdYzqEAiE0yonzEzhxIBb8I=) 5: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c8:6c:dd:bf:2c:40:c8:36:ae:bb:19:29:6d:6a:54:57:86:6a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Jul 22 07:36:07 2025 GMT Not After : Jul 25 17:22:07 2025 GMT Subject: CN=1C62F95F9B07A7EDA54A6D6D5D0ECC744F539990 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:3d:cf:43:36:ce:b5:e6:39:4c:8d:b3:71:78: 8b:97:e6:95:eb:89:0d:e6:fe:ba:f2:64:da:bd:54: 16:19:6b:ea:c2:2d:0d:02:20:9d:4c:2e:43:bf:c0: 58:8c:da:81:7f:d4:13:0f:d3:0a:27:87:fe:fd:aa: b9:b8:a3:05:1c:49:91:71:b7:04:fa:1b:25:c4:e2: cf:a6:55:92:fa:88:d2:ee:4a:31:45:39:54:94:0f: 9e:50:15:e8:1c:a4:bf:6e:d9:14:6b:30:5e:d9:67: 00:fe:c0:48:7a:7a:e4:3f:5f:36:66:65:22:ad:e8: a9:13:fa:4c:d4:32:c8:3c:e1:d5:d1:b9:11:7c:27: 83:de:f6:e7:7d:19:b6:b2:c6:a7:e1:b0:cd:ae:7f: f4:b1:09:bf:ae:58:80:3f:5e:02:ae:4a:18:19:37: 5b:5e:e6:ff:1a:a0:0b:8a:cd:f6:22:9b:91:4a:56: 30:c4:7a:62:de:8d:25:d7:f1:e8:da:5c:3a:ce:bf: e6:18:6b:07:11:b1:0f:af:66:f3:0c:c7:34:9a:af: 96:1c:d5:3e:bb:04:63:1a:a6:4a:26:85:a7:da:70: ba:b9:01:11:3a:cc:0d:7f:dc:1b:20:61:8e:b0:38: 94:90:8d:a2:1b:ab:69:63:4e:be:c6:72:cd:99:b3: bc:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:62:F9:5F:9B:07:A7:ED:A5:4A:6D:6D:5D:0E:CC:74:4F:53:99:90 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:4d:23:95:ea:fa:5d:09:dd:aa:a0:29:de:2f:b4:34:d0:31: 20:fe:8b:84:c8:07:d3:ea:3a:8d:e5:54:f0:9d:7b:2c:5b:8c: ef:a3:ec:9a:a4:1f:3e:40:b9:47:3a:63:2c:fc:5d:df:4e:5d: fa:01:d3:71:7b:c6:d0:5f:2d:02:1e:f2:57:34:23:6a:a6:67: 80:d7:3b:a4:7b:70:3f:90:96:a6:58:3f:c2:26:46:6b:82:30: a0:52:24:a3:f5:2e:e4:eb:6c:c4:cf:e2:a6:4a:80:00:39:08: 65:a2:c0:38:02:cc:f9:1f:84:4f:67:9c:60:fc:ee:08:6b:e0: ba:b4:97:fb:50:d9:d0:56:f8:3f:ed:b5:b3:d3:64:7e:17:9a: f7:98:cc:9c:db:d0:59:ae:30:9c:7c:a6:1b:59:25:fd:d0:55: b8:1a:b6:c2:f3:84:8b:4f:f8:a6:ba:92:15:27:60:74:f7:76: 0e:ce:2e:cc:c7:23:72:67:eb:4b:66:56:d6:db:2e:ba:ce:d0: 34:fd:da:06:0a:b4:da:eb:b9:fa:a3:a2:7b:c2:59:f0:c8:4f: d5:58:26:e3:6d:2a:3a:0d:be:e9:d3:1e:af:85:b0:ef:54:c8: 73:a5:19:4b:5e:38:e4:86:c2:5b:69:e7:04:88:b1:ae:26:89: ad:b1:57:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8hs3b8sQMg2rrsZKW1qVFeGatIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTA3MjIwNzM2MDdaFw0yNTA3MjUxNzIyMDdaMDMxMTAvBgNV BAMTKDFDNjJGOTVGOUIwN0E3RURBNTRBNkQ2RDVEMEVDQzc0NEY1Mzk5OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJPc9DNs615jlMjbNxeIuX5pXr iQ3m/rryZNq9VBYZa+rCLQ0CIJ1MLkO/wFiM2oF/1BMP0wonh/79qrm4owUcSZFx twT6GyXE4s+mVZL6iNLuSjFFOVSUD55QFegcpL9u2RRrMF7ZZwD+wEh6euQ/XzZm ZSKt6KkT+kzUMsg84dXRuRF8J4Pe9ud9GbayxqfhsM2uf/SxCb+uWIA/XgKuShgZ N1te5v8aoAuKzfYim5FKVjDEemLejSXX8ejaXDrOv+YYawcRsQ+vZvMMxzSar5Yc 1T67BGMapkomhafacLq5ARE6zA1/3BsgYY6wOJSQjaIbq2ljTr7Gcs2Zs7xTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHGL5X5sHp+2lSm1tXQ7MdE9TmZAwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVNI5Xq+l0J3aqgKd4vtDTQMSD+i4TIB9Pq Oo3lVPCdeyxbjO+j7JqkHz5AuUc6Yyz8Xd9OXfoB03F7xtBfLQIe8lc0I2qmZ4DX O6R7cD+QlqZYP8ImRmuCMKBSJKP1LuTrbMTP4qZKgAA5CGWiwDgCzPkfhE9nnGD8 7ghr4Lq0l/tQ2dBW+D/ttbPTZH4XmveYzJzb0FmuMJx8phtZJf3QVbgatsLzhItP +Ka6khUnYHT3dg7OLszHI3Jn60tmVtbbLrrO0DT92gYKtNrrufqjonvCWfDIT9VY JuNtKjoNvunTHq+FsO9UyHOlGUteOOSGwltp5wSIsa4mia2xV1g= -----END CERTIFICATE-----Generated at Thu Jul 24 05:01:22 2025 by rpki-client