$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: aSywgB3HBrY9F8U35BW+b5zkhvqC1T7jV0pyC5vyup0= Subject key identifier: 2D:64:9B:DB:C4:7B:D1:F3:51:54:E6:58:B5:08:30:BC:5B:AC:C3:16 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 47B2C0D4733C2CFC2B75DCC9D726E56A332DD003 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: CE Signing time: Sat 06 Sep 2025 11:32:02 +0000 Manifest this update: Sat 06 Sep 2025 11:27:02 +0000 Manifest next update: Tue 09 Sep 2025 23:01:02 +0000 Files and hashes: 1: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: ed7Fo7F3w1vkKAQKDEDr0F0lTVP08sDUnjmhIiLXO1o=) 2: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 4: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 23:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b2:c0:d4:73:3c:2c:fc:2b:75:dc:c9:d7:26:e5:6a:33:2d:d0:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Sep 6 11:27:02 2025 GMT Not After : Sep 9 23:01:02 2025 GMT Subject: CN=2D649BDBC47BD1F35154E658B50830BC5BACC316 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d9:a5:d1:2b:2e:ae:9a:49:83:52:61:1e:62: 00:e2:08:e3:79:c7:be:e7:b8:66:5d:91:11:bc:86: f1:d1:44:b6:f1:4a:0b:1e:97:09:71:ab:9b:c1:ae: 7b:85:01:a2:b5:a6:9d:61:6a:2d:45:75:45:f5:f8: f3:e7:f7:47:78:27:fb:6d:44:80:56:fd:22:3b:87: bc:05:2d:53:c7:06:85:31:bc:18:17:31:4c:ac:da: 4c:29:e8:90:4d:1a:99:e4:6e:a5:b2:6b:a1:d7:c4: a1:c1:d0:96:15:c8:f4:01:93:cf:b8:bd:57:28:d7: 79:61:01:8d:13:8e:ae:e0:54:77:1f:2f:9f:32:3a: 70:32:cb:c0:13:b3:87:63:a5:10:1a:a4:f3:df:60: 33:65:3a:6e:cc:31:b1:3d:2d:a3:31:11:88:11:13: cc:3b:9c:c1:99:0b:1d:03:e8:a1:5b:02:f8:35:7b: 48:2c:2f:ac:ff:48:d3:70:dd:af:aa:60:24:4b:86: 70:3c:2c:2c:a9:94:96:65:fd:f5:72:e6:b9:18:d0: fc:00:83:6d:ba:7c:ef:05:b2:1b:ce:19:db:23:34: 19:79:56:e1:35:04:12:01:a1:5d:80:64:16:15:6f: 38:a6:43:43:86:24:08:e9:ae:af:ff:28:ef:83:e2: 7c:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:64:9B:DB:C4:7B:D1:F3:51:54:E6:58:B5:08:30:BC:5B:AC:C3:16 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:f7:1c:60:fe:71:71:5b:0f:82:a8:f1:3f:00:64:e5:fa:0f: e3:8e:83:b7:4c:57:c6:d2:ee:9e:ac:5c:b2:63:01:3f:34:86: 60:95:70:60:95:33:5d:08:1c:bd:b8:58:7d:e8:0e:e0:02:68: 6e:21:64:4c:39:59:b5:d5:31:43:95:f8:00:ba:de:f5:37:ae: d3:ab:72:80:88:e1:4f:65:36:da:1f:ec:17:c6:16:ec:c6:86: f6:c4:b7:a9:67:9c:c9:6e:c7:99:b8:c7:2b:d8:e4:02:a1:c1: 35:4e:01:34:32:8b:b8:f8:66:b2:8b:db:9b:01:1f:17:41:79: 3b:d7:76:82:56:70:b8:39:e1:71:28:b6:99:e0:d2:0d:f1:70: 75:81:4e:09:08:80:56:fc:7e:78:71:da:91:4c:19:55:25:da: 31:33:3c:21:a4:2a:60:0b:a5:50:7b:55:37:46:45:05:68:93: 3f:f0:41:be:58:ce:ec:c1:54:0f:06:41:5c:6d:0d:d0:62:34: aa:d5:0c:56:59:65:a4:85:d2:f2:dd:95:df:c2:c3:6e:96:fe: 8b:66:cd:24:d2:38:47:ba:ab:97:10:59:58:72:e1:27:6a:8b: 66:9b:9e:56:ef:1d:2c:29:40:2a:5e:11:90:80:d8:73:5c:40: 0f:37:10:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7LA1HM8LPwrddzJ1yblajMt0AMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA5MDYxMTI3MDJaFw0yNTA5MDkyMzAxMDJaMDMxMTAvBgNV BAMTKDJENjQ5QkRCQzQ3QkQxRjM1MTU0RTY1OEI1MDgzMEJDNUJBQ0MzMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa2aXRKy6umkmDUmEeYgDiCON5 x77nuGZdkRG8hvHRRLbxSgselwlxq5vBrnuFAaK1pp1hai1FdUX1+PPn90d4J/tt RIBW/SI7h7wFLVPHBoUxvBgXMUys2kwp6JBNGpnkbqWya6HXxKHB0JYVyPQBk8+4 vVco13lhAY0Tjq7gVHcfL58yOnAyy8ATs4djpRAapPPfYDNlOm7MMbE9LaMxEYgR E8w7nMGZCx0D6KFbAvg1e0gsL6z/SNNw3a+qYCRLhnA8LCyplJZl/fVy5rkY0PwA g226fO8FshvOGdsjNBl5VuE1BBIBoV2AZBYVbzimQ0OGJAjprq//KO+D4nwZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULWSb28R70fNRVOZYtQgwvFuswxYwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFn3HGD+cXFbD4Ko8T8AZOX6D+OOg7dMV8bS 7p6sXLJjAT80hmCVcGCVM10IHL24WH3oDuACaG4hZEw5WbXVMUOV+AC63vU3rtOr coCI4U9lNtof7BfGFuzGhvbEt6lnnMlux5m4xyvY5AKhwTVOATQyi7j4ZrKL25sB HxdBeTvXdoJWcLg54XEotpng0g3xcHWBTgkIgFb8fnhx2pFMGVUl2jEzPCGkKmAL pVB7VTdGRQVokz/wQb5YzuzBVA8GQVxtDdBiNKrVDFZZZaSF0vLdld/Cw26W/otm zSTSOEe6q5cQWVhy4Sdqi2abnlbvHSwpQCpeEZCA2HNcQA83EME= -----END CERTIFICATE-----Generated at Mon Sep 8 08:42:40 2025 by rpki-client