$ rpki-client -vvf repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft File: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft (raw, json) Hash identifier: SWN6dLabsCOr/GWe58ViC6aSe4hn/DituVKo0qln0kk= Subject key identifier: 57:79:2F:BE:A9:20:0A:28:E9:A7:65:78:89:C1:59:BC:EE:E1:BC:C4 Authority key identifier: BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 Certificate issuer: /CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Certificate serial: 636D94F54731AC965769FDAD7E4ACB81C49D0E04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject info access: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft Manifest number: 04D8 Signing time: Mon 02 Jun 2025 02:02:52 +0000 Manifest this update: Mon 02 Jun 2025 01:57:52 +0000 Manifest next update: Thu 05 Jun 2025 03:57:52 +0000 Files and hashes: 1: 3130332e3135312e32332e302f32342d3234203d3e20313430343034.roa (hash: bYtdH3bHM7U4F7bJ3T9zU9hXlE72l+eUu+9la3AGBTU=) 2: BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl (hash: peoFW4lmiDVzstPL+2bA4xbizMhKQSW36Dw7giB/Gos=) 3: 3130332e3135312e32322e302f32332d3233203d3e20313430343034.roa (hash: 7A1iTDrwk8kXb580V7UHZYGVNfXcQ2O63NbSELLsFpc=) 4: 3130332e3135312e32322e302f32342d3234203d3e20313430343034.roa (hash: 2DJXbY7xN8WlOd/aLrW1rEx9vxnt9jS/uQOEXM2RB4s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:57:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6d:94:f5:47:31:ac:96:57:69:fd:ad:7e:4a:cb:81:c4:9d:0e:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEB3B35BA1C3DACA59C6C525EA9823FF902AF998 Validity Not Before: Jun 2 01:57:52 2025 GMT Not After : Jun 5 03:57:52 2025 GMT Subject: CN=57792FBEA9200A28E9A7657889C159BCEEE1BCC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:58:2c:67:5b:21:40:95:14:0e:7f:cd:fc: b9:a9:98:36:d7:93:0b:31:98:56:e9:9a:98:94:e6: ad:12:a9:cb:4b:e2:47:fc:a1:15:95:84:84:e4:11: 3e:8b:94:42:6f:76:7c:b8:e9:08:f1:01:fc:62:2c: 2a:5a:64:93:c8:d8:e3:46:f0:95:f4:48:9c:26:5f: 3b:80:fa:0e:e6:0f:22:55:74:a1:a4:d8:63:f7:4c: ac:14:ca:28:14:e8:a9:a7:82:b7:3b:5d:d6:cd:97: bd:31:d3:eb:87:3e:c7:b4:fc:7b:7d:c1:5e:a1:e1: 6d:3c:61:5a:4c:25:a7:0e:88:54:fb:31:a6:18:92: dd:df:bb:6a:8c:0a:3d:0f:d7:98:b7:7a:10:c1:1a: af:6a:70:f4:2d:a9:da:f6:f0:8b:8d:fc:d9:d2:63: e8:ca:0e:56:c1:cf:e7:5f:b2:6b:5a:b0:60:88:9b: 96:d7:1a:c1:fd:7f:40:bc:5a:26:fa:a6:9e:03:10: e3:4c:af:7f:90:89:af:d3:56:f7:7a:ed:e1:d9:16: 16:d5:77:5a:6a:98:ff:a9:f3:44:71:ed:f3:7d:f5: 93:53:a6:7a:6d:6c:2a:ac:01:fb:95:e1:a0:8f:e6: 48:ee:a5:65:a5:1a:d6:f1:47:fb:c5:b2:70:53:00: 8e:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:79:2F:BE:A9:20:0A:28:E9:A7:65:78:89:C1:59:BC:EE:E1:BC:C4 X509v3 Authority Key Identifier: keyid:BE:B3:B3:5B:A1:C3:DA:CA:59:C6:C5:25:EA:98:23:FF:90:2A:F9:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50cb5c9b-f383-4e81-812c-0e227ad46b1b/0/BEB3B35BA1C3DACA59C6C525EA9823FF902AF998.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:d4:1d:b0:5c:2f:90:ca:55:02:58:a3:82:56:1d:31:65:4d: 22:e0:07:fe:f6:2b:bb:52:be:ff:7a:8e:64:f0:ab:d6:38:12: 22:fc:1e:72:66:26:28:1b:06:1c:4f:39:5b:b7:c9:db:fd:71: 31:78:51:79:b2:85:91:0b:63:45:7d:e7:78:87:a8:46:c2:b5: 8a:83:54:eb:35:8c:48:5e:b1:42:c0:3a:64:6a:86:2f:7e:dd: 01:bd:bb:9b:fe:64:9d:fa:49:2a:14:55:e1:12:07:4f:16:04: 86:4a:f3:03:f3:2f:45:2f:01:e1:8a:17:d4:25:62:30:56:dd: 7a:67:8a:34:c0:a8:32:5c:7e:e1:8b:2e:eb:63:3f:f6:00:bd: 66:c3:b2:4a:71:46:06:a4:5d:e3:a9:0b:00:b5:13:a7:3a:cd: 9a:b2:26:a0:89:93:56:c2:e4:07:68:73:ae:b1:35:f3:60:06: 94:32:42:72:89:71:15:88:e7:b7:8e:bb:4d:83:47:5d:a3:c1: cc:d0:f9:df:d2:5a:41:ba:87:5b:81:18:52:8f:63:34:2c:bc: 8b:26:c7:eb:50:a3:37:40:1c:4b:c8:cf:f7:37:fa:39:b5:80: de:18:cf:55:84:ed:14:d3:42:80:3b:3f:b9:1a:ae:72:5c:9f: e2:a4:f7:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY22U9UcxrJZXaf2tfkrLgcSdDgQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5 MDJBRjk5ODAeFw0yNTA2MDIwMTU3NTJaFw0yNTA2MDUwMzU3NTJaMDMxMTAvBgNV BAMTKDU3NzkyRkJFQTkyMDBBMjhFOUE3NjU3ODg5QzE1OUJDRUVFMUJDQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQ1gsZ1shQJUUDn/N/LmpmDbX kwsxmFbpmpiU5q0SqctL4kf8oRWVhITkET6LlEJvdny46QjxAfxiLCpaZJPI2ONG 8JX0SJwmXzuA+g7mDyJVdKGk2GP3TKwUyigU6Kmngrc7XdbNl70x0+uHPse0/Ht9 wV6h4W08YVpMJacOiFT7MaYYkt3fu2qMCj0P15i3ehDBGq9qcPQtqdr28IuN/NnS Y+jKDlbBz+dfsmtasGCIm5bXGsH9f0C8Wib6pp4DEONMr3+Qia/TVvd67eHZFhbV d1pqmP+p80Rx7fN99ZNTpnptbCqsAfuV4aCP5kjupWWlGtbxR/vFsnBTAI6dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV3kvvqkgCijpp2V4icFZvO7hvMQwHwYDVR0j BBgwFoAUvrOzW6HD2spZxsUl6pgj/5Aq+ZgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MGNiNWM5Yi1mMzgzLTRlODEtODEyYy0wZTIyN2FkNDZiMWIvMC9CRUIzQjM1QkEx QzNEQUNBNTlDNkM1MjVFQTk4MjNGRjkwMkFGOTk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIzRkY5MDJB Rjk5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTBjYjVjOWItZjM4My00ZTgxLTgx MmMtMGUyMjdhZDQ2YjFiLzAvQkVCM0IzNUJBMUMzREFDQTU5QzZDNTI1RUE5ODIz RkY5MDJBRjk5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHUHbBcL5DKVQJYo4JWHTFlTSLgB/72K7tS vv96jmTwq9Y4EiL8HnJmJigbBhxPOVu3ydv9cTF4UXmyhZELY0V953iHqEbCtYqD VOs1jEhesULAOmRqhi9+3QG9u5v+ZJ36SSoUVeESB08WBIZK8wPzL0UvAeGKF9Ql YjBW3XpnijTAqDJcfuGLLutjP/YAvWbDskpxRgakXeOpCwC1E6c6zZqyJqCJk1bC 5Adoc66xNfNgBpQyQnKJcRWI57eOu02DR12jwczQ+d/SWkG6h1uBGFKPYzQsvIsm x+tQozdAHEvIz/c3+jm1gN4Yz1WE7RTTQoA7P7karnJcn+Kk94g= -----END CERTIFICATE-----Generated at Tue Jun 3 23:35:50 2025 by rpki-client