$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: n7COGuMspUtCLh3xjxBHcoOZxGaQzEA2V09XX0pMBnQ= Subject key identifier: 08:F3:0E:B7:4E:D3:47:64:8E:85:8E:45:9A:F1:B1:F4:70:AC:A0:C6 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 6F2F32496A7907937031E3037A72618ACF1852B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: B9 Signing time: Mon 21 Jul 2025 08:02:02 +0000 Manifest this update: Mon 21 Jul 2025 07:57:02 +0000 Manifest next update: Thu 24 Jul 2025 14:37:02 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 2: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 3: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: oyVmFGPDAzFR+zUwor9hDl5ltmfymXfyAp0fLdFhA10=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 14:37:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:2f:32:49:6a:79:07:93:70:31:e3:03:7a:72:61:8a:cf:18:52:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Jul 21 07:57:02 2025 GMT Not After : Jul 24 14:37:02 2025 GMT Subject: CN=08F30EB74ED347648E858E459AF1B1F470ACA0C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:0e:8b:0e:6f:26:fd:8b:1a:01:e8:f4:c5: a4:f6:f0:8b:60:ae:0f:ac:4e:6d:1c:9a:9a:4a:ce: 40:22:bf:6b:24:17:45:ea:bb:f4:c0:bc:ad:ae:80: d6:e2:c4:38:45:db:0c:4e:50:24:e5:b1:85:4f:52: 45:71:91:0e:6e:64:05:4d:88:3d:8b:d8:fd:ae:15: 12:18:ab:8f:77:d0:73:31:37:27:70:87:2e:8b:e2: 41:df:ad:29:0f:41:c4:7b:55:97:e5:21:9b:ed:8d: d1:e2:dc:20:2d:e4:6a:83:00:f7:1c:86:c5:40:45: 3d:09:a4:c6:06:85:82:f2:5d:8c:c4:dd:48:03:1d: 24:48:70:71:35:61:2b:04:74:e6:42:ea:65:b4:5c: 08:32:49:b9:4c:c7:b5:15:65:42:d2:a8:50:44:80: a6:41:4b:90:e3:05:78:b2:22:71:e9:55:98:c7:22: 54:9b:14:f3:35:73:d5:3f:af:1b:b4:56:4a:3f:5d: be:7b:f8:f4:81:66:0d:e1:b8:46:b4:3e:61:38:af: 30:e0:30:a2:6d:44:ca:a6:ac:9c:b4:f3:fe:15:9b: c5:b5:e7:44:58:e1:4e:5b:49:67:b0:b3:83:a0:67: 86:f3:89:06:8d:16:ac:b1:ac:3e:c3:5c:d9:0e:f1: 8d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:F3:0E:B7:4E:D3:47:64:8E:85:8E:45:9A:F1:B1:F4:70:AC:A0:C6 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d0:59:d3:0f:e7:52:52:52:85:05:d8:54:6a:86:35:bd:31:f0: 63:40:a1:2f:2d:ab:2a:f3:94:1d:52:54:6f:7c:61:62:7a:c3: f1:f5:b9:3d:67:3c:3a:5b:dd:eb:1c:ef:be:75:4a:99:33:4f: f1:49:a0:1c:db:de:c0:85:29:80:2e:b4:40:0b:29:e8:a1:af: 6f:0f:83:91:67:71:13:c5:e3:20:37:44:2e:b9:70:19:ff:d5: e9:65:c5:70:b8:f6:d7:e1:96:0c:cf:6d:0e:d6:0d:1a:2b:14: bc:3a:55:f4:ca:89:58:0e:71:4c:dd:3f:b6:1d:3e:17:da:47: e8:68:76:b0:ed:0f:55:cc:a9:7f:ac:2d:55:44:f5:57:a0:45: fb:38:85:b0:e8:c3:8e:7d:58:66:81:2f:2c:0e:61:e0:4d:93: 46:e6:ab:d8:9a:2c:2c:50:f1:a5:59:d9:22:7d:e6:fe:01:2e: 72:57:81:78:1e:36:b8:b3:c1:fa:c9:ee:ce:65:8b:d8:2f:0d: 17:6c:c2:63:89:a1:f2:e2:02:6e:f9:05:0c:5a:6f:53:52:ad: a3:44:c1:49:f3:d9:e9:6f:08:43:a9:d8:e9:96:d5:33:3a:5b: 05:72:33:06:14:c8:72:02:c4:95:e8:b0:66:d0:19:ea:b2:a8: e4:06:c5:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUby8ySWp5B5NwMeMDenJhis8YUrQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA3MjEwNzU3MDJaFw0yNTA3MjQxNDM3MDJaMDMxMTAvBgNV BAMTKDA4RjMwRUI3NEVEMzQ3NjQ4RTg1OEU0NTlBRjFCMUY0NzBBQ0EwQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+aA6LDm8m/YsaAej0xaT28Itg rg+sTm0cmppKzkAiv2skF0Xqu/TAvK2ugNbixDhF2wxOUCTlsYVPUkVxkQ5uZAVN iD2L2P2uFRIYq4930HMxNydwhy6L4kHfrSkPQcR7VZflIZvtjdHi3CAt5GqDAPcc hsVART0JpMYGhYLyXYzE3UgDHSRIcHE1YSsEdOZC6mW0XAgySblMx7UVZULSqFBE gKZBS5DjBXiyInHpVZjHIlSbFPM1c9U/rxu0Vko/Xb57+PSBZg3huEa0PmE4rzDg MKJtRMqmrJy08/4Vm8W150RY4U5bSWews4OgZ4bziQaNFqyxrD7DXNkO8Y0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCPMOt07TR2SOhY5FmvGx9HCsoMYwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANBZ0w/nUlJShQXYVGqGNb0x8GNAoS8tqyrz lB1SVG98YWJ6w/H1uT1nPDpb3esc7751SpkzT/FJoBzb3sCFKYAutEALKeihr28P g5FncRPF4yA3RC65cBn/1ellxXC49tfhlgzPbQ7WDRorFLw6VfTKiVgOcUzdP7Yd PhfaR+hodrDtD1XMqX+sLVVE9VegRfs4hbDow459WGaBLywOYeBNk0bmq9iaLCxQ 8aVZ2SJ95v4BLnJXgXgeNrizwfrJ7s5li9gvDRdswmOJofLiAm75BQxab1NSraNE wUnz2elvCEOp2OmW1TM6WwVyMwYUyHICxJXosGbQGeqyqOQGxYk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:34:04 2025 by rpki-client