$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: ThZDJZ+dMZO1HdmTdew4UerIl0b4weMcbuOjlgb7iSI= Subject key identifier: 20:0D:F6:1D:EA:FF:03:3A:7E:CF:73:B6:BD:8B:B1:7E:72:09:42:0A Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 216C48FC5DC8D5ABF69CBD6E7971F4E77F736139 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: BD Signing time: Sat 19 Jul 2025 22:41:50 +0000 Manifest this update: Sat 19 Jul 2025 22:36:50 +0000 Manifest next update: Wed 23 Jul 2025 00:18:50 +0000 Files and hashes: 1: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: 1t0X3fcrWohXaauC/QZ0BodRT+6x1rMONp2MoNIIOBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:18:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:6c:48:fc:5d:c8:d5:ab:f6:9c:bd:6e:79:71:f4:e7:7f:73:61:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Jul 19 22:36:50 2025 GMT Not After : Jul 23 00:18:50 2025 GMT Subject: CN=200DF61DEAFF033A7ECF73B6BD8BB17E7209420A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:d1:27:ec:59:05:5c:09:ac:17:09:d4:76:24: 80:0b:0b:85:36:8c:95:b2:b3:53:41:2a:44:a6:e4: 31:8f:6a:60:99:24:3a:d5:31:de:f4:08:7e:cb:77: 4b:16:50:55:e6:ad:a8:ab:98:2f:4e:f2:eb:be:78: 41:a3:d0:82:38:6a:db:b6:aa:8d:a1:fb:62:dd:68: 41:3f:a5:4a:74:7c:c7:a2:1c:f8:5e:38:0c:fe:8d: d9:67:62:43:6f:8b:02:a4:cc:04:f0:e7:17:94:a0: cb:ce:d6:8b:10:71:e2:3b:ee:48:80:91:16:20:7c: 94:46:dd:6d:8f:e7:a7:f0:03:ce:b0:72:f9:c8:e7: 34:63:e5:0d:29:94:d1:3e:db:cc:ae:90:39:b5:f6: 92:3c:d7:d6:29:6a:96:d2:57:b9:37:c3:e8:8a:d7: 46:72:d1:4a:86:6c:fa:8a:7d:16:06:c6:9a:92:f3: 39:7f:87:d8:a4:7a:2c:de:59:67:a7:39:2f:73:54: 70:8f:89:49:65:71:42:1c:1f:2a:2a:86:52:df:2c: 29:a1:46:38:04:39:09:d8:bc:20:ea:54:06:41:57: 42:38:33:33:b9:64:ea:50:e0:3b:67:c0:cf:2d:47: e9:a7:89:28:aa:df:4e:f1:ca:cf:65:cb:a8:39:a8: 26:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:0D:F6:1D:EA:FF:03:3A:7E:CF:73:B6:BD:8B:B1:7E:72:09:42:0A X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:de:78:e5:bb:7d:db:3b:95:ba:c4:c1:04:89:7a:23:24:8f: 04:e1:27:12:a6:0f:eb:18:ed:d9:12:ea:55:f1:06:08:ef:f7: b0:5d:57:25:4d:58:b0:dc:25:36:74:b7:9c:4e:59:ed:49:26: 0a:11:29:99:28:c5:d1:69:19:fb:d4:cc:16:37:4c:58:ee:1e: f0:91:a0:0a:08:62:b7:6a:5d:64:c9:f3:82:5c:95:6c:09:aa: 1a:97:46:e1:89:f6:1a:21:59:a4:2a:56:08:96:30:8d:98:76: 07:7e:cf:d9:f1:b3:29:6c:af:2c:67:54:82:8f:8a:0c:bc:36: 96:e7:ff:f8:52:22:e0:2e:6a:08:73:ab:8a:de:03:28:cb:3f: 9c:13:2b:2a:dd:af:e6:c2:0c:84:b2:7f:d4:fb:41:8c:50:08: 1c:2b:39:0c:80:83:78:29:8e:59:30:03:0c:2c:89:85:8b:87: 4c:5c:25:32:c5:c8:5e:39:f5:a1:be:f8:41:75:2c:6b:fa:5b: 73:3f:d5:b2:5f:02:6d:44:23:34:21:b0:71:e6:b6:7c:69:96: b8:af:98:ae:ca:78:06:87:d5:b2:4c:4b:fc:8e:a9:4d:1d:4b: ed:77:9a:c4:94:c9:95:f8:47:d0:cb:a7:32:1a:ee:4c:45:e1: 8c:83:f6:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIWxI/F3I1av2nL1ueXH0539zYTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA3MTkyMjM2NTBaFw0yNTA3MjMwMDE4NTBaMDMxMTAvBgNV BAMTKDIwMERGNjFERUFGRjAzM0E3RUNGNzNCNkJEOEJCMTdFNzIwOTQyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh0SfsWQVcCawXCdR2JIALC4U2 jJWys1NBKkSm5DGPamCZJDrVMd70CH7Ld0sWUFXmrairmC9O8uu+eEGj0II4atu2 qo2h+2LdaEE/pUp0fMeiHPheOAz+jdlnYkNviwKkzATw5xeUoMvO1osQceI77kiA kRYgfJRG3W2P56fwA86wcvnI5zRj5Q0plNE+28yukDm19pI819YpapbSV7k3w+iK 10Zy0UqGbPqKfRYGxpqS8zl/h9ikeizeWWenOS9zVHCPiUllcUIcHyoqhlLfLCmh RjgEOQnYvCDqVAZBV0I4MzO5ZOpQ4DtnwM8tR+mniSiq307xys9ly6g5qCbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIA32Her/Azp+z3O2vYuxfnIJQgowHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3eeOW7fds7lbrEwQSJeiMkjwThJxKmD+sY 7dkS6lXxBgjv97BdVyVNWLDcJTZ0t5xOWe1JJgoRKZkoxdFpGfvUzBY3TFjuHvCR oAoIYrdqXWTJ84JclWwJqhqXRuGJ9hohWaQqVgiWMI2Ydgd+z9nxsylsryxnVIKP igy8Npbn//hSIuAuaghzq4reAyjLP5wTKyrdr+bCDISyf9T7QYxQCBwrOQyAg3gp jlkwAwwsiYWLh0xcJTLFyF459aG++EF1LGv6W3M/1bJfAm1EIzQhsHHmtnxplriv mK7KeAaH1bJMS/yOqU0dS+13msSUyZX4R9DLpzIa7kxF4YyD9oI= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:03 2025 by rpki-client