$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: lUEFo7dqAxay4o19Lw+GEd/YYLFpKfqCM34wsoIaA3w= Subject key identifier: 59:99:6A:93:7B:80:7B:02:7D:E6:AA:DB:06:D0:E4:69:8E:83:09:80 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 35115AE0CC549E18B4C14C34A724EA6ED2987203 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0300 Signing time: Fri 06 Jun 2025 23:01:36 +0000 Manifest this update: Fri 06 Jun 2025 22:56:36 +0000 Manifest next update: Tue 10 Jun 2025 05:51:36 +0000 Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 3: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 4: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 5: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: y9y797qfnHlN+TTGJ0a/7vhrwtwFGDo5m4Alv2Zu9c4=) 6: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 05:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:11:5a:e0:cc:54:9e:18:b4:c1:4c:34:a7:24:ea:6e:d2:98:72:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Jun 6 22:56:36 2025 GMT Not After : Jun 10 05:51:36 2025 GMT Subject: CN=59996A937B807B027DE6AADB06D0E4698E830980 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b8:40:aa:11:64:e6:7c:85:78:9a:dd:fb:d0: 05:61:d6:9b:ea:c4:1c:1a:8d:ba:97:c7:c5:58:b8: 06:f6:53:0a:44:58:0e:4c:84:fb:0a:f6:a4:94:58: a5:88:ac:83:69:31:69:e0:b2:41:ea:12:f9:76:1c: f0:db:9d:cb:2c:64:f6:0b:78:01:3a:69:c1:dc:b3: b6:9c:8c:3e:ff:b5:45:b0:f8:b2:16:2d:aa:06:2c: aa:10:ac:73:63:0e:af:b0:f3:cf:fd:74:5d:38:e1: be:ea:9f:9b:83:09:2a:52:2b:98:11:a8:32:2a:6b: c9:2b:9c:cd:cf:b3:a3:32:5b:d4:59:4e:da:cd:07: cb:b4:76:40:71:a0:98:7c:0e:c1:75:03:a0:71:71: 8e:8e:14:39:1f:d7:3b:c7:0b:b0:f2:69:35:2f:1f: 41:41:33:fb:6e:f6:c6:b8:1c:46:bc:06:53:48:28: 8f:b8:3f:5b:18:b7:ab:dc:e4:1e:46:e5:af:51:7b: a5:69:7b:d5:52:eb:37:04:de:d3:c6:ff:cd:ac:b7: 3c:94:9e:d2:73:02:11:08:73:b1:4b:50:e9:33:49: 02:17:2c:5a:60:26:d2:a0:a2:01:dc:ba:9f:99:17: f7:00:04:20:c5:06:ec:c8:51:49:92:7f:73:66:02: f3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:99:6A:93:7B:80:7B:02:7D:E6:AA:DB:06:D0:E4:69:8E:83:09:80 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:d0:52:8e:47:84:45:8c:ec:53:7a:19:49:74:83:21:a5:b9: 04:0c:0d:e4:bb:5f:b3:c5:3b:56:5e:da:da:4c:ae:3f:6d:21: 2a:31:b1:87:e7:04:80:e5:4e:98:0c:18:1d:ab:46:d0:83:e6: d0:06:f9:c6:06:9b:33:87:d6:6b:32:04:69:b9:f1:fd:88:f4: 8a:66:d5:fd:15:1d:b3:3d:1a:89:34:4d:15:8c:c1:01:09:3c: e8:7a:8e:54:43:9e:87:74:73:ec:b6:ad:fb:f6:39:4e:d3:84: bb:16:de:74:52:30:4d:20:8d:20:ac:f1:58:0b:14:96:32:c8: d5:55:c8:09:70:a9:96:50:f8:e9:e2:81:42:4e:3d:1d:47:dd: 20:ac:eb:0a:e5:61:16:b2:b8:50:89:3e:dc:ac:07:0a:2f:fa: 1f:7a:46:d1:de:1c:c1:08:73:f8:25:e1:6b:89:f2:93:59:d3: e6:b9:3d:af:ec:22:fe:64:e2:8d:c6:13:70:f2:cb:98:c3:d0: 1f:f7:f5:cd:70:b9:11:67:39:fb:9c:8e:d6:3d:24:8e:5c:50: b2:22:77:c5:64:17:7b:39:3e:77:bf:23:fc:83:f0:8b:47:c5: e0:3e:aa:ba:3c:51:4d:24:99:9c:4c:84:34:1b:86:f1:c4:02: ea:e9:16:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNRFa4MxUnhi0wUw0pyTqbtKYcgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA2MDYyMjU2MzZaFw0yNTA2MTAwNTUxMzZaMDMxMTAvBgNV BAMTKDU5OTk2QTkzN0I4MDdCMDI3REU2QUFEQjA2RDBFNDY5OEU4MzA5ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCauECqEWTmfIV4mt370AVh1pvq xBwajbqXx8VYuAb2UwpEWA5MhPsK9qSUWKWIrINpMWngskHqEvl2HPDbncssZPYL eAE6acHcs7acjD7/tUWw+LIWLaoGLKoQrHNjDq+w88/9dF044b7qn5uDCSpSK5gR qDIqa8krnM3Ps6MyW9RZTtrNB8u0dkBxoJh8DsF1A6BxcY6OFDkf1zvHC7DyaTUv H0FBM/tu9sa4HEa8BlNIKI+4P1sYt6vc5B5G5a9Re6Vpe9VS6zcE3tPG/82stzyU ntJzAhEIc7FLUOkzSQIXLFpgJtKgogHcup+ZF/cABCDFBuzIUUmSf3NmAvM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWZlqk3uAewJ95qrbBtDkaY6DCYAwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFHQUo5HhEWM7FN6GUl0gyGluQQMDeS7X7PF O1Ze2tpMrj9tISoxsYfnBIDlTpgMGB2rRtCD5tAG+cYGmzOH1msyBGm58f2I9Ipm 1f0VHbM9Gok0TRWMwQEJPOh6jlRDnod0c+y2rfv2OU7ThLsW3nRSME0gjSCs8VgL FJYyyNVVyAlwqZZQ+OnigUJOPR1H3SCs6wrlYRayuFCJPtysBwov+h96RtHeHMEI c/gl4WuJ8pNZ0+a5Pa/sIv5k4o3GE3Dyy5jD0B/39c1wuRFnOfucjtY9JI5cULIi d8VkF3s5Pne/I/yD8ItHxeA+qro8UU0kmZxMhDQbhvHEAurpFhU= -----END CERTIFICATE-----Generated at Sun Jun 8 20:04:59 2025 by rpki-client