$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: 1ErbeW20v/tsiNzZBfMX104JRZHPdsiiCFWXrrHOXmA= Subject key identifier: 29:04:1F:E5:3B:62:C4:EA:60:56:E7:91:C8:4E:52:05:54:0F:95:92 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 57F76B9C1844B5404471F88FD29AD4FC0969CAAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 02E2 Signing time: Tue 08 Apr 2025 16:01:34 +0000 Manifest this update: Tue 08 Apr 2025 15:56:34 +0000 Manifest next update: Fri 11 Apr 2025 19:02:34 +0000 Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: 9mvwB+Ook70fsomsL5rBOKlk077qIgjq42/zbahljiA=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: DevRUOBrBnLuFdFg+uPjOCH/cIZdiHwciBZvhhEle6Y=) 3: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: LsAYTUQr5As8qfFqTa+1DZCPoeyEavqXAP87UR2mlIE=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: 6VJ/MYCO9xuGaO2E0r07+5Yt+FbEnGyN0t5eMGpo0s4=) 5: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: 5g01Mqn+xfyfUIEoTpznqLL6wQ97fwI4hYs5Th/CeIg=) 6: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 4nF39wRALqFShI2k467oN5qmtzcgwppZaMcdszyLsyY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 19:02:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:f7:6b:9c:18:44:b5:40:44:71:f8:8f:d2:9a:d4:fc:09:69:ca:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Apr 8 15:56:34 2025 GMT Not After : Apr 11 19:02:34 2025 GMT Subject: CN=29041FE53B62C4EA6056E791C84E5205540F9592 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:44:8c:b2:5d:d7:dc:f1:ab:1b:f9:7f:99:3e: b7:c8:aa:55:11:e8:29:64:57:c2:f4:12:d1:7f:ce: 72:cc:df:8d:fb:f5:b4:90:1e:c8:4e:e3:5b:2f:d3: 77:39:68:3f:b5:84:1d:82:26:b7:c1:3c:38:d1:a1: 4e:c0:11:88:6c:8c:9f:ef:79:59:9a:f4:be:75:cc: a9:7c:3d:2c:72:2a:8b:9a:b0:f4:c8:fb:18:04:eb: 7d:d9:06:6e:76:47:75:a1:36:a5:ed:ed:0a:05:35: e6:1f:71:9a:52:3f:c2:33:c3:7a:a0:3c:e0:48:8c: 40:46:b6:1c:5b:fa:87:48:04:68:6e:2e:8e:6a:d2: 84:69:0e:08:c3:ad:c8:0a:f8:f3:59:fb:59:50:49: 45:9d:3e:3e:f5:41:14:90:6f:2e:51:40:71:95:8f: 55:e2:10:0a:7d:c8:fb:61:90:47:5f:c2:5e:6f:98: b7:78:b5:23:6d:96:4a:f4:f8:06:2e:b5:d4:8c:92: 46:b4:ca:b8:ee:1b:59:4f:66:53:cb:d4:5d:1f:03: 55:d4:e8:8a:dd:4c:0c:d1:d4:03:06:65:19:69:95: 63:96:a3:68:51:61:98:ab:28:80:f5:bb:5c:ce:82: d0:e1:42:76:28:25:21:b0:d0:4d:c2:0f:9f:57:75: c0:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:04:1F:E5:3B:62:C4:EA:60:56:E7:91:C8:4E:52:05:54:0F:95:92 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:97:c7:75:5b:b3:9e:b5:64:42:a1:61:38:cb:2e:80:f2:31: 93:e4:c7:fd:a4:1e:43:51:2e:c6:0d:72:64:82:c9:25:0a:12: 68:5f:e4:62:84:c7:1b:a1:60:ef:7e:55:03:18:d5:ef:01:cc: 27:ce:a7:ae:fe:8c:b3:e5:5f:94:b0:e5:99:80:43:cf:3c:eb: 25:e8:8c:41:a8:59:8c:3c:04:44:65:55:b2:22:43:9e:9e:52: 3b:d5:67:32:7e:b7:5e:89:a2:66:79:5d:b1:6c:10:64:44:0f: a3:1d:bb:25:1f:74:ca:3f:42:6a:ca:f5:57:02:f3:db:47:77: 38:95:18:2f:eb:a2:3b:2e:db:cd:7f:4d:bb:9b:00:22:55:3d: ca:61:0a:de:f1:5c:df:70:a1:6b:e9:01:f6:8e:fd:20:5e:52: 0d:06:23:e8:94:0c:e9:ac:d4:7e:ae:22:ac:c6:4a:83:b9:88: 9b:be:5e:f6:a1:bd:29:81:36:d9:57:96:5c:c5:8e:99:7b:d6: 50:54:30:8c:6a:b6:37:e4:04:18:2b:87:06:e1:65:54:b7:9c: 56:bd:27:2a:c6:9d:38:c4:65:68:bf:6d:9a:95:dc:a2:f5:b3: ad:3b:b5:57:0d:c4:a1:89:6d:b4:51:dd:73:1d:2a:02:a6:d9: 16:d0:f6:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV/drnBhEtUBEcfiP0prU/Alpyq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA0MDgxNTU2MzRaFw0yNTA0MTExOTAyMzRaMDMxMTAvBgNV BAMTKDI5MDQxRkU1M0I2MkM0RUE2MDU2RTc5MUM4NEU1MjA1NTQwRjk1OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqRIyyXdfc8asb+X+ZPrfIqlUR 6ClkV8L0EtF/znLM34379bSQHshO41sv03c5aD+1hB2CJrfBPDjRoU7AEYhsjJ/v eVma9L51zKl8PSxyKouasPTI+xgE633ZBm52R3WhNqXt7QoFNeYfcZpSP8Izw3qg POBIjEBGthxb+odIBGhuLo5q0oRpDgjDrcgK+PNZ+1lQSUWdPj71QRSQby5RQHGV j1XiEAp9yPthkEdfwl5vmLd4tSNtlkr0+AYutdSMkka0yrjuG1lPZlPL1F0fA1XU 6IrdTAzR1AMGZRlplWOWo2hRYZirKID1u1zOgtDhQnYoJSGw0E3CD59XdcAfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQQf5TtixOpgVueRyE5SBVQPlZIwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHiXx3Vbs561ZEKhYTjLLoDyMZPkx/2kHkNR LsYNcmSCySUKEmhf5GKExxuhYO9+VQMY1e8BzCfOp67+jLPlX5Sw5ZmAQ8886yXo jEGoWYw8BERlVbIiQ56eUjvVZzJ+t16JomZ5XbFsEGRED6MduyUfdMo/QmrK9VcC 89tHdziVGC/rojsu281/TbubACJVPcphCt7xXN9woWvpAfaO/SBeUg0GI+iUDOms 1H6uIqzGSoO5iJu+XvahvSmBNtlXllzFjpl71lBUMIxqtjfkBBgrhwbhZVS3nFa9 JyrGnTjEZWi/bZqV3KL1s607tVcNxKGJbbRR3XMdKgKm2RbQ9sE= -----END CERTIFICATE-----Generated at Thu Apr 10 22:09:50 2025 by rpki-client