$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: Bes1bI/nXTAI8qG8FPHNJr08JIXDYAhoU5XJoh6qw6w= Subject key identifier: 6D:5B:76:54:DF:5E:5A:1C:A7:98:AC:FA:50:BF:85:E0:E0:D1:FD:D0 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 31765B8A323EFA4758370ED3E01961405CCBBD6E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 0449 Signing time: Thu 13 Mar 2025 00:51:06 +0000 Manifest this update: Thu 13 Mar 2025 00:46:06 +0000 Manifest next update: Sun 16 Mar 2025 10:59:06 +0000 Files and hashes: 1: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: a3TPnWpJ3I4ZtK9san4P2E8TcTsGi2abTmE7blrS/54=) 2: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: IfhhVFH3PrLXhWjFzuTapS5Iq5sRD6WA4e1zrAIjak8=) 3: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: rYJoTOD8z4DcPT/fzVnGdtXyf0wrQPHEf/e+UIXL5xY=) 4: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: cJOBNoxIG+XdgkJa+RxEvdYzqEAiE0yonzEzhxIBb8I=) 5: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: dXT0M7LuAnNB2t9UxaBsD6tePbKHXIZhBVfnEuEAR+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 10:59:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:76:5b:8a:32:3e:fa:47:58:37:0e:d3:e0:19:61:40:5c:cb:bd:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Mar 13 00:46:06 2025 GMT Not After : Mar 16 10:59:06 2025 GMT Subject: CN=6D5B7654DF5E5A1CA798ACFA50BF85E0E0D1FDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:44:50:39:0a:3a:0f:74:23:f2:ec:03:6f: d1:ec:2a:99:dc:ec:ea:a7:82:cf:a9:bd:2d:d3:45: 90:01:7e:70:0d:d3:e5:49:c4:b0:ea:2d:4e:d6:8f: 68:45:6a:ab:e0:d9:0e:9c:6c:53:50:5e:a5:fd:88: 03:e9:ad:43:2d:aa:8b:b4:d3:86:0b:78:e4:02:84: 18:5d:d8:d6:0d:0a:92:79:3f:a9:ad:e4:87:8c:f4: 8e:1c:6d:cf:fc:2e:58:35:7a:88:b0:6f:dd:df:a0: 8c:5d:fe:12:43:42:04:31:36:24:35:84:82:7a:25: d2:3a:63:be:e1:14:e0:df:7c:da:fe:5b:64:0b:2f: 3b:c4:58:a1:9c:36:19:18:98:4b:1c:df:e4:8e:8e: 2d:3b:35:f4:cd:d4:3c:ab:55:ff:27:98:c6:82:e5: b7:f6:6e:e0:a5:5d:4c:c8:4c:47:63:86:d8:38:85: 5b:b4:c0:3c:89:bf:c5:f0:80:84:ff:19:f4:76:03: 6a:e5:92:9b:43:a1:d7:31:1f:aa:4a:21:f4:f2:1a: 6b:00:e5:b4:70:03:66:4b:ce:6b:4e:aa:90:20:4d: ba:17:25:84:90:4b:c6:a9:da:fa:7c:ff:7c:b3:52: 7d:82:c9:b6:e3:a7:cf:91:31:d8:a6:bb:b7:aa:e7: 47:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:5B:76:54:DF:5E:5A:1C:A7:98:AC:FA:50:BF:85:E0:E0:D1:FD:D0 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:91:44:c6:10:c6:f3:c3:b6:96:d6:d8:97:f2:06:b9:bd:30: 08:6b:2d:d7:8a:71:91:c7:e5:67:39:d7:e5:a1:b7:b5:d4:35: 55:d1:e0:70:16:af:f6:df:2c:64:0f:ad:82:53:92:28:4c:7d: b0:b6:0d:58:86:08:4e:2c:4f:85:47:f9:4b:74:f5:bc:12:ec: 83:d0:d4:e9:c1:df:59:90:86:a5:14:ee:a6:fb:bd:d8:a8:24: 6a:b2:31:28:21:6d:a4:41:5c:62:2f:7b:5e:05:ab:c9:97:96: 86:43:c5:7c:0f:83:32:09:0d:38:9d:5a:2f:b3:72:24:2e:0c: 81:8d:6b:9b:2c:d4:ef:fa:72:6f:95:06:72:e6:6d:3b:47:7a: e7:d6:41:93:7a:e0:1d:1c:7b:ac:f0:09:c3:9b:5f:61:74:9c: 87:01:b4:0c:c6:10:52:c3:6c:77:cd:9e:0f:8c:22:b3:11:1c: 2e:93:85:7f:93:5b:b1:29:fa:17:7d:00:c0:80:d9:f7:d5:20: 6e:9e:81:56:a4:3f:91:53:2f:cc:54:67:9b:b5:53:9a:6b:b1: 61:98:ba:42:28:ae:a1:b3:73:e9:ee:32:0a:a2:22:66:5c:d6: 5b:98:72:a1:92:7e:f6:f3:be:69:c2:35:4a:e6:e1:19:2e:1a: 79:af:46:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXZbijI++kdYNw7T4BlhQFzLvW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTAzMTMwMDQ2MDZaFw0yNTAzMTYxMDU5MDZaMDMxMTAvBgNV BAMTKDZENUI3NjU0REY1RTVBMUNBNzk4QUNGQTUwQkY4NUUwRTBEMUZERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGURQOQo6D3Qj8uwDb9HsKpnc 7Oqngs+pvS3TRZABfnAN0+VJxLDqLU7Wj2hFaqvg2Q6cbFNQXqX9iAPprUMtqou0 04YLeOQChBhd2NYNCpJ5P6mt5IeM9I4cbc/8Llg1eoiwb93foIxd/hJDQgQxNiQ1 hIJ6JdI6Y77hFODffNr+W2QLLzvEWKGcNhkYmEsc3+SOji07NfTN1DyrVf8nmMaC 5bf2buClXUzITEdjhtg4hVu0wDyJv8XwgIT/GfR2A2rlkptDodcxH6pKIfTyGmsA 5bRwA2ZLzmtOqpAgTboXJYSQS8ap2vp8/3yzUn2Cybbjp8+RMdimu7eq50fRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbVt2VN9eWhynmKz6UL+F4ODR/dAwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKqRRMYQxvPDtpbW2JfyBrm9MAhrLdeKcZHH 5Wc51+Wht7XUNVXR4HAWr/bfLGQPrYJTkihMfbC2DViGCE4sT4VH+Ut09bwS7IPQ 1OnB31mQhqUU7qb7vdioJGqyMSghbaRBXGIve14Fq8mXloZDxXwPgzIJDTidWi+z ciQuDIGNa5ss1O/6cm+VBnLmbTtHeufWQZN64B0ce6zwCcObX2F0nIcBtAzGEFLD bHfNng+MIrMRHC6ThX+TW7Ep+hd9AMCA2ffVIG6egVakP5FTL8xUZ5u1U5prsWGY ukIorqGzc+nuMgqiImZc1luYcqGSfvbzvmnCNUrm4RkuGnmvRhw= -----END CERTIFICATE-----Generated at Thu Mar 13 21:33:05 2025 by rpki-client