$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft File: BE82B469998A9E829F882655C99A5A05535A1AD4.mft (raw, json) Hash identifier: GUaQV8Nl0/XxvoopGGGOtwMr1QRLGxjvMcKHCMMaYEs= Subject key identifier: 3C:B7:84:52:32:AC:53:4A:69:67:C0:68:D3:B2:15:9D:D9:8A:4C:E9 Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 Certificate issuer: /CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Certificate serial: 768E683AB99A1ED9F3AD5C1D5C17077FFA596D17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft Manifest number: 04B5 Signing time: Sat 08 Nov 2025 11:41:08 +0000 Manifest this update: Sat 08 Nov 2025 11:36:08 +0000 Manifest next update: Tue 11 Nov 2025 16:49:08 +0000 Files and hashes: 1: BE82B469998A9E829F882655C99A5A05535A1AD4.crl (hash: EpE+PoVGjKPaGWJW7H6acYPCfw+m6Vjn5+D3wBzJvdM=) 2: 3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (hash: 2W1FqoGYBbRpSENvlyzwmtu3q2K4HpvO3Z6Fc5DZvEU=) 3: 3130332e3135382e32312e302f32342d3234203d3e203438343635.roa (hash: Y2HrxpbOCYLMY6XBSkrTiPuTnGk3sto9vtxHqBDKXLo=) 4: 3130332e3135382e32302e302f32332d3234203d3e20313431353833.roa (hash: 5crcrbB/LN7ILCPXkvbBRWMtAP/t3GajDPBToG3xT7s=) 5: 3130332e3135382e32302e302f32332d3234203d3e203236353631.roa (hash: g+ewJ+/FWnlKat+gPQr1tVTj8PjlEaEamMvWQs+8H98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:49:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:8e:68:3a:b9:9a:1e:d9:f3:ad:5c:1d:5c:17:07:7f:fa:59:6d:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4 Validity Not Before: Nov 8 11:36:08 2025 GMT Not After : Nov 11 16:49:08 2025 GMT Subject: CN=3CB7845232AC534A6967C068D3B2159DD98A4CE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:a3:af:1c:35:67:4f:c7:18:a7:0d:7c:b5:47: ca:0b:2b:ff:19:0b:4b:ca:c1:61:0f:6a:64:e6:40: 7f:b8:24:0f:ed:75:23:e4:76:26:69:0e:c0:e1:2d: 3f:f5:15:a4:a4:c7:39:4b:6b:5d:f4:07:b6:61:45: 57:ee:c7:83:85:9d:d8:df:40:7b:3d:51:6d:e4:ae: 24:38:cb:97:9c:44:ae:48:26:56:24:75:17:16:e7: 85:43:e2:37:96:bb:44:fc:07:e2:1b:9e:8c:6a:44: 23:77:67:0a:4e:f4:cf:38:03:fe:03:ee:65:ce:a4: 85:81:a5:13:25:17:83:1e:d7:eb:24:3f:ba:f3:0b: 9c:f5:47:f8:c4:24:28:88:41:ce:96:28:ee:4b:24: 8f:b4:69:30:0d:d7:86:bc:d9:d8:ca:4b:a1:eb:24: c4:8b:4d:71:b4:d0:83:e4:7b:2f:78:bd:47:f1:f6: 26:25:30:34:5d:63:e3:fa:7f:b7:fe:f0:75:c9:aa: 67:2b:7b:e2:ba:94:db:e9:1c:40:a8:dd:49:38:2d: 29:39:39:73:e6:7b:b2:95:c6:1c:1a:be:7c:19:38: 9c:d8:47:4a:d9:4b:f6:fb:11:02:b4:25:3d:d7:37: 74:ca:34:bf:4f:d7:9e:48:b9:e1:33:3e:6e:6a:32: 11:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:B7:84:52:32:AC:53:4A:69:67:C0:68:D3:B2:15:9D:D9:8A:4C:E9 X509v3 Authority Key Identifier: keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:39:30:b8:b8:cc:35:43:f9:d7:2c:80:e9:be:49:96:c6:9e: 3d:98:df:2f:40:c1:05:5d:84:89:0f:98:22:b3:ba:90:97:a4: 6f:f7:97:71:36:1f:af:f5:71:9f:69:dd:8f:27:53:ab:57:e4: 01:d3:2d:7e:5b:73:c7:44:be:94:3a:0d:7c:39:c2:e0:93:c5: 28:f9:34:f8:b7:f8:81:9e:2c:da:8a:7b:97:f8:07:2d:65:87: 8e:87:a7:e9:9d:5a:9f:d0:88:fc:dd:73:c2:0a:46:24:75:e9: c9:47:eb:ad:ac:4c:ba:78:3e:d0:fe:4b:3d:3b:59:c5:54:09: 6c:43:5b:48:2b:e9:43:ee:1e:dc:32:fc:4c:26:79:ae:ae:3f: 55:95:66:a2:fd:4e:43:02:af:20:45:3b:c3:55:ec:f8:62:f1: 81:10:04:b1:51:b3:d4:49:75:8c:0e:84:4f:5d:65:d1:15:00: e7:94:d2:d9:f8:ba:c7:c7:30:aa:52:fe:07:c5:1b:d7:b2:4b: ed:f2:3b:f7:af:81:9e:bc:96:02:fe:ef:ab:d6:f8:1d:13:71: b6:fe:a0:b7:f5:e8:11:45:f7:16:46:5d:b9:2f:ab:b5:7b:9c: 28:46:e2:fa:b4:73:25:93:cd:8c:9e:45:30:48:6f:0d:fe:04: bd:e4:38:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdo5oOrmaHtnzrVwdXBcHf/pZbRcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1 MzVBMUFENDAeFw0yNTExMDgxMTM2MDhaFw0yNTExMTExNjQ5MDhaMDMxMTAvBgNV BAMTKDNDQjc4NDUyMzJBQzUzNEE2OTY3QzA2OEQzQjIxNTlERDk4QTRDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCao68cNWdPxxinDXy1R8oLK/8Z C0vKwWEPamTmQH+4JA/tdSPkdiZpDsDhLT/1FaSkxzlLa130B7ZhRVfux4OFndjf QHs9UW3kriQ4y5ecRK5IJlYkdRcW54VD4jeWu0T8B+IbnoxqRCN3ZwpO9M84A/4D 7mXOpIWBpRMlF4Me1+skP7rzC5z1R/jEJCiIQc6WKO5LJI+0aTAN14a82djKS6Hr JMSLTXG00IPkey94vUfx9iYlMDRdY+P6f7f+8HXJqmcre+K6lNvpHECo3Uk4LSk5 OXPme7KVxhwavnwZOJzYR0rZS/b7EQK0JT3XN3TKNL9P155IueEzPm5qMhFhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPLeEUjKsU0ppZ8Bo07IVndmKTOkwHwYDVR0j BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5 OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB MUFENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQ4MWFjMDEtZjMwMi00NmVkLTll MWItNjU5MzQ1NmYyZDU5LzAvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVB MDU1MzVBMUFENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFQ5MLi4zDVD+dcsgOm+SZbGnj2Y3y9AwQVd hIkPmCKzupCXpG/3l3E2H6/1cZ9p3Y8nU6tX5AHTLX5bc8dEvpQ6DXw5wuCTxSj5 NPi3+IGeLNqKe5f4By1lh46Hp+mdWp/QiPzdc8IKRiR16clH662sTLp4PtD+Sz07 WcVUCWxDW0gr6UPuHtwy/Ewmea6uP1WVZqL9TkMCryBFO8NV7Phi8YEQBLFRs9RJ dYwOhE9dZdEVAOeU0tn4usfHMKpS/gfFG9eyS+3yO/evgZ68lgL+76vW+B0Tcbb+ oLf16BFF9xZGXbkvq7V7nChG4vq0cyWTzYyeRTBIbw3+BL3kOKU= -----END CERTIFICATE-----Generated at Mon Nov 10 09:22:48 2025 by rpki-client