$ rpki-client -vvf repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft File: BE7F813F3C6CA289A9CDAC5630975B7627458103.mft (raw, json) Hash identifier: eRP/AU27YtkwBSLkdJALcW9zwGcLXiAbJwrCcvk6avM= Subject key identifier: 2F:9A:4D:6B:A0:DC:AF:41:64:42:24:AD:8A:CB:96:8D:B4:11:6E:1B Authority key identifier: BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 Certificate issuer: /CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Certificate serial: 069AE67D22E26AABA3BB3DDBCADC4709326EE88F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject info access: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft Manifest number: 028B Signing time: Thu 04 Sep 2025 11:01:47 +0000 Manifest this update: Thu 04 Sep 2025 10:56:47 +0000 Manifest next update: Sun 07 Sep 2025 20:22:47 +0000 Files and hashes: 1: 3230322e3135302e3136382e302f32332d3233203d3e203435373235.roa (hash: CFmjdJ2vd2S1hwPDr69BfeMIGUvy+yNC1CU/AmoDxB8=) 2: 34332e3233302e3135342e302f32332d3233203d3e203435373235.roa (hash: FoOUIBlL9T9MhX4bEhccY3Kjn0yIPa1cMqY4C0eO3xI=) 3: 3230322e3135302e3136302e302f32302d3234203d3e203435373235.roa (hash: bcb47SdtlV0+rUuQrP25krobOWV4dOeRjxtP0NJ6Hg0=) 4: 3138302e3231312e38382e302f32332d3233203d3e203435373235.roa (hash: 6XFpo57f1LKHWqv/atS95pTJHDHEw9gxmYNcdpJ+RZk=) 5: 3130332e3234352e3133362e302f32322d3234203d3e203435373235.roa (hash: BI62UO3dEBMuV7GGUm78ylThtADmbOZbryA9/QTeswk=) 6: 3230322e3135302e3137302e302f32332d3233203d3e203435373235.roa (hash: RYaUaP8z76N+rN9/CRDsCKHTh8kwn9eyhhBEqvlMUwo=) 7: 323430323a3738303a343a3a2f34382d3438203d3e203435373235.roa (hash: q6uWsjDfmvPCM3wtKPBAHFLOKfxyuluuaFv/8slgJu8=) 8: 3230322e3135302e3136362e302f32332d3233203d3e203435373235.roa (hash: wRnGxN5uNoVdykOfNrkzIuyL1n8LTfsQZxmr2BmoYe4=) 9: 3230322e3135302e3136322e302f32332d3233203d3e203435373235.roa (hash: GwuWySNcSg5ncnIH7xe0pJhIF0SwLtWfmclvASXmbzI=) 10: 3130332e3234352e3133382e302f32332d3233203d3e203435373235.roa (hash: gXSdvzH/obw2tBhIhIcWb1ceK7qyFmLN4iW37pSP6wI=) 11: 3138302e3231312e39322e302f32332d3233203d3e203435373235.roa (hash: 5gtSpN1P146ocldJClXJUUX1hGb29RqzWbJ13iydccw=) 12: 3138302e3231312e38382e302f32312d3234203d3e203435373235.roa (hash: 6cpCf7GhdQEpx30p91qB9UYsON8gtbAQPKe5llQv0bs=) 13: 323430323a3738303a3a2f33322d3438203d3e203435373235.roa (hash: 95U2BXJDC2l18nsj8XM2nUsJ+ABvrMW9ZXaTSbsG2jU=) 14: 323430323a3738303a3a2f34382d3438203d3e203435373235.roa (hash: srQ63HzedpqK/Z+fkfeTxdmOJkM7qi6/v3UkdQRaL40=) 15: 34332e3233302e3135322e302f32322d3234203d3e203435373235.roa (hash: +4n6/TF4aeSEpR29DkcOnbNK9Y34aOX1PIvKhjQ5Hno=) 16: 3138302e3231312e39302e302f32332d3233203d3e203435373235.roa (hash: OgCMc6N8YMB+q9soDBfzLtklXuNaeCduzkpg+Npc+Pg=) 17: 34332e3233302e3135322e302f32332d3233203d3e203435373235.roa (hash: xHPJ7HI+304D7YAd37d8j6skpjceFwNnjTWGzXVwcKM=) 18: 3130332e3234352e3133362e302f32332d3233203d3e203435373235.roa (hash: MSYIfxCSXKVIOCS47ld9jUS6r+ZriPGRUCkoG4RgECY=) 19: 323430323a3738303a3130303a3a2f34302d3430203d3e203435373235.roa (hash: ksLRob3f5SU2gNY1LxPipDlSLyvRGBxMHRiqu2c9VRY=) 20: 3230322e3135302e3137322e302f32332d3233203d3e203435373235.roa (hash: xC6iCUJS7sp4GX/eEQoZ92l1XLRswuGGeIaV26g4P7I=) 21: 3138302e3231312e39342e302f32332d3233203d3e203435373235.roa (hash: P35zqgp/DvY+opYrPtfb+V3CygXLWvgpif4jdHfrT6Q=) 22: 3130332e3234352e3133362e302f32322d3232203d3e203435373235.roa (hash: /MSndQdhW7y2Ps5XO1tBE5LRjY41c2iW6OY/QNg9AHs=) 23: 3230322e3135302e3136302e302f32332d3233203d3e203435373235.roa (hash: Vd4YXu/zv6QpeJqZrRqJLtEJqDsjx9BYEUrETFSOwbg=) 24: 3138302e3231312e38382e302f32312d3231203d3e203435373235.roa (hash: UrwHHQXWpjTi59OMqCHennU+aS155yzGb6/9UoO5zVs=) 25: 3230322e3135302e3136342e302f32332d3233203d3e203435373235.roa (hash: w2ICECGLA7nw6Zv4Eo0IQI3O8W+wpDGsaM5DtnIpJKo=) 26: 3230322e3135302e3136302e302f32302d3230203d3e203435373235.roa (hash: xQ4Ul97jwoDNyJ2eG9oO4TTlF8xSqcDLgnke6Urqw3k=) 27: BE7F813F3C6CA289A9CDAC5630975B7627458103.crl (hash: oE9Ko1g69lpkxjoRdgLFTspsuYoW6pgdmQCMksVSWUA=) 28: 34332e3233302e3135322e302f32322d3232203d3e203435373235.roa (hash: pO9hy5n7UjW4vxC4PIPIijgfvw5lRU378EbEfDIE6ec=) 29: 3230322e3135302e3137342e302f32332d3233203d3e203435373235.roa (hash: P6E4qcRf4KYQyvZ7AMZmZFaBs6o4L0ILx70mhGz8FoA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 20:22:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9a:e6:7d:22:e2:6a:ab:a3:bb:3d:db:ca:dc:47:09:32:6e:e8:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE7F813F3C6CA289A9CDAC5630975B7627458103 Validity Not Before: Sep 4 10:56:47 2025 GMT Not After : Sep 7 20:22:47 2025 GMT Subject: CN=2F9A4D6BA0DCAF41644224AD8ACB968DB4116E1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f8:f5:7b:b7:ab:5a:70:5f:97:01:1a:6d:7b: 79:ac:cd:74:5e:f5:1a:e8:05:b8:41:a5:5d:d0:4a: 7e:98:14:c9:14:1c:93:9d:e1:8d:e9:a4:34:27:ad: 1e:da:d6:d0:95:68:a4:f7:54:45:76:35:35:78:81: 01:26:08:8e:6a:b9:4a:a4:f5:ca:6b:58:62:8e:79: 60:a8:14:3b:2f:47:bc:d4:7b:9f:e3:8b:79:66:22: 11:1f:7b:9f:30:d6:8e:ad:a0:14:62:f7:6c:56:7f: 54:f3:46:38:c5:04:01:2f:0c:1e:7b:ab:32:4b:35: f5:e9:5a:2a:c2:19:93:3d:98:67:a7:3e:44:f8:7f: aa:0f:74:d6:f9:cb:f9:31:f0:2d:32:b5:70:0c:da: 7e:10:06:37:ac:e4:ca:49:89:a7:43:c9:58:11:86: e5:d5:82:85:10:29:fd:52:70:0e:83:66:ad:c3:e1: ad:23:97:0b:4e:eb:9f:b8:fa:76:c3:30:97:5f:5e: 11:94:29:8b:ba:81:46:48:34:90:1e:49:72:f9:c1: db:05:ff:ef:49:d8:70:c1:0d:56:fb:6e:c5:54:d1: c1:26:a8:be:75:d8:00:49:07:d6:ac:8e:21:2e:58: c0:6e:39:0b:5b:f4:ef:bf:77:df:15:cf:75:1e:74: 9f:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:9A:4D:6B:A0:DC:AF:41:64:42:24:AD:8A:CB:96:8D:B4:11:6E:1B X509v3 Authority Key Identifier: keyid:BE:7F:81:3F:3C:6C:A2:89:A9:CD:AC:56:30:97:5B:76:27:45:81:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE7F813F3C6CA289A9CDAC5630975B7627458103.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/644216d8-70ce-4908-a72b-ec273f43bbc2/0/BE7F813F3C6CA289A9CDAC5630975B7627458103.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:c2:60:bc:13:3d:c0:ab:b6:9d:c7:d4:fb:34:0b:00:99:e7: 5f:15:fd:67:e7:46:72:26:00:d4:da:59:c8:db:36:dd:f6:20: cf:a8:0c:c0:89:08:fd:f5:19:03:ba:42:74:68:6f:21:06:f5: a1:d9:c7:61:ea:c6:17:1a:3c:7e:5c:23:e0:c7:4b:d9:21:7b: ee:cf:f3:25:24:47:21:43:81:f5:67:ea:10:58:c1:da:2e:93: ce:88:96:16:34:1c:76:bc:16:c0:30:be:1f:a3:05:f7:90:14: 26:64:f6:4c:db:e0:df:4a:52:e3:28:d4:f8:bd:bc:11:c3:b1: e6:fa:0c:65:b6:4c:a1:e0:ce:1e:bb:d8:17:d3:70:d9:ab:92: eb:a2:1b:41:b4:95:0a:57:41:87:fe:54:f8:c9:ea:7e:79:c2: 7d:d5:63:01:f9:a3:ce:72:84:72:9f:d7:23:14:27:50:4e:50: f0:92:cb:ba:17:b8:92:eb:60:30:14:8a:a7:f1:71:ee:e0:b2: 86:e2:70:57:db:12:93:9f:73:54:77:7a:65:28:bf:56:a5:78: 83:7d:9f:95:3b:14:c8:35:98:61:3b:5d:1b:bb:15:9c:f3:a4: 78:93:db:18:a9:03:22:f0:fc:79:1f:01:dd:c1:0b:9d:ad:fe: 3d:c5:cc:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBprmfSLiaqujuz3bytxHCTJu6I8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYy NzQ1ODEwMzAeFw0yNTA5MDQxMDU2NDdaFw0yNTA5MDcyMDIyNDdaMDMxMTAvBgNV BAMTKDJGOUE0RDZCQTBEQ0FGNDE2NDQyMjRBRDhBQ0I5NjhEQjQxMTZFMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC+PV7t6tacF+XARpte3mszXRe 9RroBbhBpV3QSn6YFMkUHJOd4Y3ppDQnrR7a1tCVaKT3VEV2NTV4gQEmCI5quUqk 9cprWGKOeWCoFDsvR7zUe5/ji3lmIhEfe58w1o6toBRi92xWf1TzRjjFBAEvDB57 qzJLNfXpWirCGZM9mGenPkT4f6oPdNb5y/kx8C0ytXAM2n4QBjes5MpJiadDyVgR huXVgoUQKf1ScA6DZq3D4a0jlwtO65+4+nbDMJdfXhGUKYu6gUZINJAeSXL5wdsF /+9J2HDBDVb7bsVU0cEmqL512ABJB9asjiEuWMBuOQtb9O+/d98Vz3UedJ+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL5pNa6Dcr0FkQiStisuWjbQRbhswHwYDVR0j BBgwFoAUvn+BPzxsoompzaxWMJdbdidFgQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDQyMTZkOC03MGNlLTQ5MDgtYTcyYi1lYzI3M2Y0M2JiYzIvMC9CRTdGODEzRjND NkNBMjg5QTlDREFDNTYzMDk3NUI3NjI3NDU4MTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVCNzYyNzQ1 ODEwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQ0MjE2ZDgtNzBjZS00OTA4LWE3 MmItZWMyNzNmNDNiYmMyLzAvQkU3RjgxM0YzQzZDQTI4OUE5Q0RBQzU2MzA5NzVC NzYyNzQ1ODEwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL7CYLwTPcCrtp3H1Ps0CwCZ518V/WfnRnIm ANTaWcjbNt32IM+oDMCJCP31GQO6QnRobyEG9aHZx2HqxhcaPH5cI+DHS9khe+7P 8yUkRyFDgfVn6hBYwdouk86IlhY0HHa8FsAwvh+jBfeQFCZk9kzb4N9KUuMo1Pi9 vBHDseb6DGW2TKHgzh672BfTcNmrkuuiG0G0lQpXQYf+VPjJ6n55wn3VYwH5o85y hHKf1yMUJ1BOUPCSy7oXuJLrYDAUiqfxce7gsobicFfbEpOfc1R3emUov1aleIN9 n5U7FMg1mGE7XRu7FZzzpHiT2xipAyLw/HkfAd3BC52t/j3FzIc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:31:53 2025 by rpki-client