$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft File: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft (raw, json) Hash identifier: XkualG4YJecJSAyVr5W03Pu8/0pW9AY+PJ8Z3okMk9Q= Subject key identifier: 7F:FC:EE:79:97:09:A3:DB:B4:86:D9:22:C5:EC:A1:E7:A6:B3:02:30 Authority key identifier: BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C Certificate issuer: /CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Certificate serial: 7D6BB564587704305641295A2CDAA78C5117563E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft Manifest number: A5 Signing time: Thu 05 Jun 2025 14:12:00 +0000 Manifest this update: Thu 05 Jun 2025 14:07:00 +0000 Manifest next update: Mon 09 Jun 2025 02:04:00 +0000 Files and hashes: 1: 3136302e32322e32372e302f32342d3234203d3e20313532383036.roa (hash: 0OeYR75ixQZTlrIcMsAEVIAMsFHHHRmOANT+VjAQdGg=) 2: BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl (hash: AU4ykOPWDA0d9MzLXCEiKttNaeTyVZCI3bI9bdeEEOg=) 3: 3136302e32322e32362e302f32342d3234203d3e20313532383036.roa (hash: 9EHkZCz3jJLHmIc/2dkH9Ib/3pIoSydcnX/ESKF5C0o=) 4: 3136302e32322e32362e302f32332d3233203d3e20313532383036.roa (hash: Kzrvc50VZVqxvNyylv+S6nQsNORPDp45F0+BBKuP5OE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6b:b5:64:58:77:04:30:56:41:29:5a:2c:da:a7:8c:51:17:56:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C Validity Not Before: Jun 5 14:07:00 2025 GMT Not After : Jun 9 02:04:00 2025 GMT Subject: CN=7FFCEE799709A3DBB486D922C5ECA1E7A6B30230 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:70:ff:db:96:34:a3:a7:79:9b:d9:70:80:2b: 7f:38:73:b3:34:4d:58:35:dc:1f:23:2c:ca:2b:8a: 0d:b9:e9:8f:fb:d5:8e:80:7b:df:27:c3:cf:d3:14: 64:2a:b6:2f:3f:fe:e6:f0:40:e4:fe:cf:2f:2f:21: 4f:9a:54:75:ad:1c:1b:4a:1f:78:d2:90:64:28:62: ca:51:84:dc:8a:92:11:3e:3a:81:09:d0:29:7c:15: 48:e3:a9:5d:b4:52:e1:c5:0e:e6:d8:f1:b8:1a:40: 48:f8:9e:af:f5:6c:2f:b0:0f:0c:10:27:16:08:94: 2c:22:d1:06:e8:5b:4f:93:46:49:25:b6:98:15:e2: 06:95:04:2c:42:d9:ca:ba:1d:13:e3:13:01:15:6f: 77:dc:7a:e8:cf:ab:75:4d:d0:98:c8:12:26:f1:ad: 5d:36:f8:78:d8:97:e9:3c:79:52:c8:c0:69:7c:b3: 3d:ee:98:3a:d9:81:16:91:04:54:92:02:56:00:36: d2:2c:0d:b9:47:2a:5d:64:ca:32:12:c2:e9:50:64: 7a:16:30:3a:8c:97:80:df:8f:12:b9:e3:aa:c5:4d: 80:1b:a5:e3:44:d2:6b:1f:27:54:61:2a:cb:61:71: 1c:fa:f5:4e:81:7d:fa:9e:49:4a:30:0b:ac:ce:15: df:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:FC:EE:79:97:09:A3:DB:B4:86:D9:22:C5:EC:A1:E7:A6:B3:02:30 X509v3 Authority Key Identifier: keyid:BE:41:FE:7D:C7:71:48:07:9E:A1:CA:C4:C9:00:5D:EB:68:84:BB:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/0/BE41FE7DC77148079EA1CAC4C9005DEB6884BB8C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:bd:dd:d5:ac:b4:31:de:fd:d6:06:4c:c8:24:09:8a:e8:63: b9:9f:28:14:a3:ff:b2:0d:63:dd:dc:68:19:fe:fa:9b:37:e8: ef:be:53:50:a1:2a:15:53:60:e7:8f:ca:f4:14:f6:4a:8b:2f: 95:9b:fb:be:d6:e5:10:b4:a6:e0:a4:67:23:3d:8c:e7:40:cc: 7a:c3:ae:ed:45:e8:ae:dc:e9:dc:70:e8:66:86:03:f2:fe:e1: 66:18:d2:68:19:b1:8a:4b:bc:d4:cb:21:00:15:75:5a:6e:d0: 94:3a:08:58:a0:53:11:56:66:4e:d5:6b:33:c8:df:4a:ef:c4: 87:aa:01:a6:75:6e:13:1e:36:bf:0e:2b:a5:1e:4e:55:4c:ca: df:7b:03:f3:00:01:40:50:6a:1b:ae:af:b3:7f:15:07:c5:f2: d2:ab:cf:24:ee:b0:e3:16:3e:da:66:fa:0b:0d:05:d1:6f:40: 8c:39:f0:96:31:ef:ec:88:6d:2d:b1:90:61:d0:ef:d5:b1:db: 04:f0:f7:66:df:8d:57:89:37:ff:de:11:69:b9:6e:51:e5:f3: 8d:24:2a:46:9a:f1:8d:89:06:94:0c:31:3c:85:da:ba:de:42: ef:05:62:02:90:6a:b9:ec:26:96:a4:cf:96:0f:e2:58:4e:13: 0b:8b:5a:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWu1ZFh3BDBWQSlaLNqnjFEXVj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2 ODg0QkI4QzAeFw0yNTA2MDUxNDA3MDBaFw0yNTA2MDkwMjA0MDBaMDMxMTAvBgNV BAMTKDdGRkNFRTc5OTcwOUEzREJCNDg2RDkyMkM1RUNBMUU3QTZCMzAyMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDocP/bljSjp3mb2XCAK384c7M0 TVg13B8jLMorig256Y/71Y6Ae98nw8/TFGQqti8//ubwQOT+zy8vIU+aVHWtHBtK H3jSkGQoYspRhNyKkhE+OoEJ0Cl8FUjjqV20UuHFDubY8bgaQEj4nq/1bC+wDwwQ JxYIlCwi0QboW0+TRkkltpgV4gaVBCxC2cq6HRPjEwEVb3fceujPq3VN0JjIEibx rV02+HjYl+k8eVLIwGl8sz3umDrZgRaRBFSSAlYANtIsDblHKl1kyjISwulQZHoW MDqMl4DfjxK546rFTYAbpeNE0msfJ1RhKsthcRz69U6BffqeSUowC6zOFd9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/zueZcJo9u0htkixeyh56azAjAwHwYDVR0j BBgwFoAUvkH+fcdxSAeeocrEyQBd62iEu4wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMC9CRTQxRkU3REM3 NzE0ODA3OUVBMUNBQzRDOTAwNURFQjY4ODRCQjhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVERUI2ODg0 QkI4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzAvQkU0MUZFN0RDNzcxNDgwNzlFQTFDQUM0QzkwMDVE RUI2ODg0QkI4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS93dWstDHe/dYGTMgkCYroY7mfKBSj/7IN Y93caBn++ps36O++U1ChKhVTYOePyvQU9kqLL5Wb+77W5RC0puCkZyM9jOdAzHrD ru1F6K7c6dxw6GaGA/L+4WYY0mgZsYpLvNTLIQAVdVpu0JQ6CFigUxFWZk7VazPI 30rvxIeqAaZ1bhMeNr8OK6UeTlVMyt97A/MAAUBQahuur7N/FQfF8tKrzyTusOMW Ptpm+gsNBdFvQIw58JYx7+yIbS2xkGHQ79Wx2wTw92bfjVeJN//eEWm5blHl840k Kkaa8Y2JBpQMMTyF2rreQu8FYgKQarnsJpakz5YP4lhOEwuLWsQ= -----END CERTIFICATE-----Generated at Fri Jun 6 04:59:18 2025 by rpki-client