$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft File: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft (raw, json) Hash identifier: fQJrLyp1b0hNQJpLyvu4f+xHEsAY8LzLJsd8Fi3kSAA= Subject key identifier: 70:C8:5D:AA:2F:BF:F4:D2:63:5A:F2:22:E7:75:81:DD:D8:AF:CF:F1 Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B Certificate issuer: /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Certificate serial: 13D6A4B8C895F69B35E68C541357CAB7FD0C7D01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft Manifest number: 0328 Signing time: Fri 05 Sep 2025 07:11:37 +0000 Manifest this update: Fri 05 Sep 2025 07:06:37 +0000 Manifest next update: Mon 08 Sep 2025 17:30:37 +0000 Files and hashes: 1: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: Cv0EMC5062htKdHyxcMyy6exUpE5aD8gtMnGLSz9Wog=) 2: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: vEMXCI3M8VvAH47LiF9RDbq7pXkdLmDpmzWuC+Jv+wQ=) 3: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2RhwyxU2ZZMzvcv7V8AkytYIscjSPeyUgoz7RilYeSY=) 4: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: NVnL3gu/ETV/ZZkGXx0LBYWbHfOXol4OHsqTQpLumLs=) 5: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: ImyXAYYU6gxFlWNkFMZjYF3LgN4oXFfG1+SCVAdQsYE=) 6: BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl (hash: TtCbq3xUlpG0aaZwzFO17TAy8/RIojxjLUYaNhYDFl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:d6:a4:b8:c8:95:f6:9b:35:e6:8c:54:13:57:ca:b7:fd:0c:7d:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B Validity Not Before: Sep 5 07:06:37 2025 GMT Not After : Sep 8 17:30:37 2025 GMT Subject: CN=70C85DAA2FBFF4D2635AF222E77581DDD8AFCFF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:22:09:63:fd:cb:22:21:cc:9f:1e:44:5a:a1: a3:7a:93:e1:63:f0:84:5d:93:ac:08:cb:ad:34:17: 97:9d:38:ec:7f:e0:a6:fb:4b:a5:04:97:75:f1:bf: 9e:a2:14:18:04:e6:2e:31:d8:df:ab:ba:4e:42:13: 6b:87:5f:e3:e9:a4:8a:94:7d:3a:f2:73:77:59:ea: 67:c6:af:a5:73:e6:49:a0:95:62:6d:36:0b:90:aa: 00:2a:83:74:71:63:24:c8:00:aa:71:bf:06:33:12: c2:c5:ca:76:5e:ad:b8:7f:fe:b0:d4:9a:4b:3b:32: fd:08:3a:49:43:1d:e4:f0:d7:52:6c:7e:eb:e6:87: 5a:bf:27:83:68:69:76:7d:cb:3e:94:c9:54:5c:2a: 1e:85:cd:53:02:2b:15:59:92:3e:3c:10:22:89:cf: bc:8a:24:b7:5b:0c:61:db:87:7c:39:3a:89:74:1b: 15:ee:30:df:11:89:81:18:f4:51:36:a3:56:a4:c7: e0:82:e2:f5:88:b9:e5:9a:4c:f4:a5:02:c3:ae:a7: c4:d0:14:37:8a:46:71:c4:85:40:2f:52:5f:c9:d3: 1e:55:94:d7:42:a4:3a:cc:c3:a6:a4:83:c6:4e:78: bb:43:63:5b:41:24:dc:e2:84:90:55:42:36:9b:4e: d5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:C8:5D:AA:2F:BF:F4:D2:63:5A:F2:22:E7:75:81:DD:D8:AF:CF:F1 X509v3 Authority Key Identifier: keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:c5:b4:74:01:28:a8:88:45:44:b0:a3:03:f8:db:3a:9b: a9:af:2b:56:d7:68:e7:bc:69:86:8d:17:2e:ed:f0:d5:55:69: d0:e6:86:f7:5f:52:68:6e:23:20:09:04:e4:c5:c3:e1:87:75: 08:67:3f:8b:5e:35:6f:94:fe:f2:14:62:99:db:e6:31:b3:1b: 00:c6:62:af:4f:6f:5e:04:6c:4c:fa:90:77:02:fb:0b:8a:63: 4e:f9:a1:00:82:05:27:c0:de:96:7c:b2:d4:c3:e9:44:c1:f3: 13:f4:4d:c0:64:cb:ad:93:f8:68:c5:3e:95:03:77:bc:a9:13: e9:c2:8b:81:ce:24:ba:a7:60:e0:6e:65:82:70:06:a7:8d:6c: 65:10:6f:9d:0f:74:d3:a3:af:57:1b:bd:7f:4a:03:91:03:37: af:93:2b:52:8c:d6:91:b8:46:e3:fa:11:fd:16:04:cc:30:03: c2:d0:99:d6:b5:5b:a6:a5:1f:0a:dd:85:81:f3:26:16:cd:04: 07:e1:2b:fd:f5:89:5b:e8:00:98:f5:09:72:c5:29:d8:47:2a: cf:f7:c3:8b:30:69:52:3b:06:ad:d0:07:a7:80:f7:b6:60:47: 87:98:85:a8:a6:3e:e4:9f:d1:0e:43:89:67:59:c8:79:23:e6: 50:01:72:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE9akuMiV9ps15oxUE1fKt/0MfQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQz RkZGQjUyQjAeFw0yNTA5MDUwNzA2MzdaFw0yNTA5MDgxNzMwMzdaMDMxMTAvBgNV BAMTKDcwQzg1REFBMkZCRkY0RDI2MzVBRjIyMkU3NzU4MURERDhBRkNGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNIglj/csiIcyfHkRaoaN6k+Fj 8IRdk6wIy600F5edOOx/4Kb7S6UEl3Xxv56iFBgE5i4x2N+ruk5CE2uHX+PppIqU fTryc3dZ6mfGr6Vz5kmglWJtNguQqgAqg3RxYyTIAKpxvwYzEsLFynZerbh//rDU mks7Mv0IOklDHeTw11Jsfuvmh1q/J4NoaXZ9yz6UyVRcKh6FzVMCKxVZkj48ECKJ z7yKJLdbDGHbh3w5Ool0GxXuMN8RiYEY9FE2o1akx+CC4vWIueWaTPSlAsOup8TQ FDeKRnHEhUAvUl/J0x5VlNdCpDrMw6akg8ZOeLtDY1tBJNzihJBVQjabTtXtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcMhdqi+/9NJjWvIi53WB3divz/EwHwYDVR0j BBgwFoAUviqe3IxVbU3XhGiSYS4L7T//tSswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjBjZTczMy03N2Y0LTRlMWQtYjVlYy02MWVkZTRkYTA3NGQvMC9CRTJBOUVEQzhD NTU2RDRERDc4NDY4OTI2MTJFMEJFRDNGRkZCNTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBCRUQzRkZG QjUyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvQkUyQTlFREM4QzU1NkQ0REQ3ODQ2ODkyNjEyRTBC RUQzRkZGQjUyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyxxbR0ASioiEVEsKMD+Ns6m6mvK1bXaOe8 aYaNFy7t8NVVadDmhvdfUmhuIyAJBOTFw+GHdQhnP4teNW+U/vIUYpnb5jGzGwDG Yq9Pb14EbEz6kHcC+wuKY075oQCCBSfA3pZ8stTD6UTB8xP0TcBky62T+GjFPpUD d7ypE+nCi4HOJLqnYOBuZYJwBqeNbGUQb50PdNOjr1cbvX9KA5EDN6+TK1KM1pG4 RuP6Ef0WBMwwA8LQmda1W6alHwrdhYHzJhbNBAfhK/31iVvoAJj1CXLFKdhHKs/3 w4swaVI7Bq3QB6eA97ZgR4eYhaimPuSf0Q5DiWdZyHkj5lABcro= -----END CERTIFICATE-----Generated at Fri Sep 5 10:39:39 2025 by rpki-client