$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: oR5jzHgFmuzYrAt7cPArulNXzAqsGi0Oi+q075fJia0= Subject key identifier: A7:D2:70:B9:9B:62:1C:60:4E:DA:F5:43:4E:22:73:C9:B8:97:E9:EF Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 0FEF98D89B851C3ECCB92FBC6F240FF949D0E671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 0502 Signing time: Thu 04 Sep 2025 09:51:09 +0000 Manifest this update: Thu 04 Sep 2025 09:46:09 +0000 Manifest next update: Sun 07 Sep 2025 16:41:09 +0000 Files and hashes: 1: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: uAbNiHNS8lposPCbhlkpq/p+BIjT6Qh1NiYhyUFxe50=) 3: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) 4: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 16:41:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ef:98:d8:9b:85:1c:3e:cc:b9:2f:bc:6f:24:0f:f9:49:d0:e6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Sep 4 09:46:09 2025 GMT Not After : Sep 7 16:41:09 2025 GMT Subject: CN=A7D270B99B621C604EDAF5434E2273C9B897E9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:72:af:e3:1d:d6:28:6d:10:9f:2f:8a:cc:3b: 37:1f:de:40:4c:56:86:d3:3c:a2:9c:8e:be:ef:81: d3:1b:27:66:98:2c:9f:07:a3:dc:fa:f6:75:ab:62: b2:0a:c7:cd:73:2d:d0:12:a8:07:fa:6d:d7:9c:2b: 63:04:ce:d6:67:cc:cd:2b:95:d9:16:7c:b3:c9:e4: 6f:1f:08:9a:82:4d:27:7d:39:15:15:82:92:8d:64: b7:3b:c2:51:bf:df:bb:9a:f1:79:95:51:dd:74:ad: 8a:7d:e3:0f:70:d9:b6:26:e8:6e:43:fa:af:0b:13: d6:59:d4:d9:76:c4:f9:2a:6c:7c:6b:ca:d8:8a:8c: 70:e8:e4:98:e6:83:17:3f:75:32:59:b0:5a:85:63: 0e:f5:6c:39:f4:82:5b:f2:ce:9b:a5:60:c7:86:9b: 68:a4:d0:84:13:f6:f9:67:7b:2c:4d:a5:d4:cc:a1: 75:bd:6f:8c:07:3d:ec:ef:90:18:79:66:c4:46:0e: e7:47:9b:ab:a3:8a:9e:44:42:e8:7c:93:1b:da:67: 2f:ae:ef:23:86:c1:d9:24:8f:e6:af:47:81:5d:5b: c4:c4:91:11:27:c4:26:80:1a:85:98:b0:6c:2f:3d: 41:3e:65:99:77:a5:45:37:33:14:c1:3f:a6:c9:f6: f5:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:D2:70:B9:9B:62:1C:60:4E:DA:F5:43:4E:22:73:C9:B8:97:E9:EF X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:55:67:5a:b6:44:2c:fa:bd:ef:72:77:c7:06:eb:a5:0a:62: ad:97:7b:88:8e:95:e1:58:8c:c8:0d:44:b1:56:5e:43:5d:95: 66:a7:06:0b:22:26:fa:d8:27:74:87:d4:c8:54:5d:5d:17:31: 06:6c:b9:a9:00:54:32:1e:ab:b3:f0:22:e5:57:f4:b9:9f:74: 72:4d:91:45:9e:e3:de:d4:c1:7e:2a:c4:ef:8a:81:e4:99:d4: cd:6c:b0:83:73:87:fd:74:d1:ff:b7:16:d0:98:54:ff:e4:1b: b2:d4:ba:7d:cb:0f:28:7d:78:2f:be:89:ea:c7:66:47:75:c3: 67:25:77:d8:b7:51:86:1a:01:f3:d0:fb:f3:9f:3f:a1:eb:67: 02:63:ea:36:c2:94:34:3a:e4:c4:23:5d:7e:f6:17:22:88:20: 06:f6:45:f8:01:c1:cf:41:2f:9a:a6:6c:07:f4:a3:20:a1:f1: b8:e2:83:72:1c:2f:bc:0f:f6:43:2c:8d:dc:eb:0f:7e:11:fe: e9:ac:52:27:83:5b:da:3a:5a:7f:5b:18:58:44:75:b1:f0:69: 9b:a5:77:ca:2e:74:eb:84:9f:bb:cb:e3:f8:46:b4:e8:c1:13: 2d:47:0a:94:d9:81:0d:ce:e6:78:0a:62:c7:73:f0:83:83:11: 30:17:50:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD++Y2JuFHD7MuS+8byQP+UnQ5nEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA5MDQwOTQ2MDlaFw0yNTA5MDcxNjQxMDlaMDMxMTAvBgNV BAMTKEE3RDI3MEI5OUI2MjFDNjA0RURBRjU0MzRFMjI3M0M5Qjg5N0U5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZcq/jHdYobRCfL4rMOzcf3kBM VobTPKKcjr7vgdMbJ2aYLJ8Ho9z69nWrYrIKx81zLdASqAf6bdecK2MEztZnzM0r ldkWfLPJ5G8fCJqCTSd9ORUVgpKNZLc7wlG/37ua8XmVUd10rYp94w9w2bYm6G5D +q8LE9ZZ1Nl2xPkqbHxrytiKjHDo5Jjmgxc/dTJZsFqFYw71bDn0glvyzpulYMeG m2ik0IQT9vlneyxNpdTMoXW9b4wHPezvkBh5ZsRGDudHm6ujip5EQuh8kxvaZy+u 7yOGwdkkj+avR4FdW8TEkREnxCaAGoWYsGwvPUE+ZZl3pUU3MxTBP6bJ9vVdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp9JwuZtiHGBO2vVDTiJzybiX6e8wHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpVZ1q2RCz6ve9yd8cG66UKYq2Xe4iOleFY jMgNRLFWXkNdlWanBgsiJvrYJ3SH1MhUXV0XMQZsuakAVDIeq7PwIuVX9LmfdHJN kUWe497UwX4qxO+KgeSZ1M1ssINzh/100f+3FtCYVP/kG7LUun3LDyh9eC++ierH Zkd1w2cld9i3UYYaAfPQ+/OfP6HrZwJj6jbClDQ65MQjXX72FyKIIAb2RfgBwc9B L5qmbAf0oyCh8bjig3IcL7wP9kMsjdzrD34R/umsUieDW9o6Wn9bGFhEdbHwaZul d8oudOuEn7vL4/hGtOjBEy1HCpTZgQ3O5ngKYsdz8IODETAXUGM= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:54 2025 by rpki-client