$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft File: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft (raw, json) Hash identifier: LMfIob04EhN616AgW49WqUBF4Ew163FikiLOKAy6f2s= Subject key identifier: E7:8A:70:5E:1A:2F:33:16:A6:33:6F:52:35:6C:2B:A1:DC:6A:42:66 Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Certificate serial: 75D55B3C545C80AC2896B2F23B99879496AA85BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft Manifest number: 017C Signing time: Sat 05 Apr 2025 09:41:42 +0000 Manifest this update: Sat 05 Apr 2025 09:36:42 +0000 Manifest next update: Tue 08 Apr 2025 14:35:42 +0000 Files and hashes: 1: BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl (hash: UyD4hRtqP2b/48mdOmfaPiGC10Lc52LAApiR1U9dwfk=) 2: 3230322e38302e3131322e302f32302d3234203d3e203233363939.roa (hash: pu6/UsxjccuW1i483s8+VcEVhXPDGUX2MOdonN1OKvI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:d5:5b:3c:54:5c:80:ac:28:96:b2:f2:3b:99:87:94:96:aa:85:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8 Validity Not Before: Apr 5 09:36:42 2025 GMT Not After : Apr 8 14:35:42 2025 GMT Subject: CN=E78A705E1A2F3316A6336F52356C2BA1DC6A4266 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2d:08:63:ac:4b:45:2f:10:08:ad:41:80:d6: d1:40:90:0d:ab:19:dd:b8:8a:b1:56:ac:c5:07:be: dd:a3:5c:d9:36:19:61:42:b6:fd:d1:51:91:80:a1: a6:7d:1e:6c:19:f9:03:fc:3c:20:53:a1:8c:50:19: c3:e3:92:2b:5d:e8:54:53:7f:b6:b4:5e:a0:96:4d: cf:03:8f:05:bd:fd:0e:b2:93:87:59:1f:22:5a:11: 63:b4:7e:e9:f7:7d:28:bf:a3:c3:28:09:ec:1f:9e: b9:00:54:e1:88:b0:62:b8:27:45:41:56:ca:e6:68: 27:ff:cd:ac:26:ad:69:61:9e:72:96:e9:34:3a:8c: be:ab:23:9c:68:b3:ce:54:96:96:81:80:e9:75:9a: 4e:15:37:53:c7:2c:5c:1e:af:83:63:59:b2:d0:1b: 15:f6:03:6d:7d:dd:c4:a0:e7:96:b6:6f:fd:58:b1: 80:cd:69:32:bd:cf:32:db:90:7e:78:62:9f:cf:da: 95:87:87:93:74:03:16:e0:d5:7b:e5:b5:2a:15:07: 60:b8:95:0e:e8:f7:62:fc:d6:c1:11:ae:df:c5:3a: 0b:c8:f7:dd:4c:0a:5f:ae:03:2a:97:4b:fc:40:b3: d8:52:52:17:44:e1:63:f0:46:59:2a:ac:90:11:b3: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:8A:70:5E:1A:2F:33:16:A6:33:6F:52:35:6C:2B:A1:DC:6A:42:66 X509v3 Authority Key Identifier: keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ea:be:09:d5:fd:d6:4c:2f:21:71:c1:a7:ae:5c:7d:e8:c8: 91:c7:38:d1:56:cb:7d:4b:fb:92:bb:b2:5f:a3:6b:8e:a8:b2: 67:9b:c4:55:b2:5c:e9:ca:a8:3c:31:81:f3:47:88:16:38:1a: a0:f3:0c:fc:b1:4e:f5:58:7e:6d:7e:67:b3:d3:ed:c7:e5:61: 1c:4b:74:27:93:b8:45:d4:e1:d0:86:f4:4e:6c:c1:85:49:36: e9:4d:19:82:c4:2f:8b:41:a6:50:82:91:81:80:74:46:4b:45: e7:ff:94:2c:6a:3a:0a:d3:30:34:42:29:3c:75:2a:2b:66:b9: c6:8e:b4:8b:e1:f9:e0:65:b7:cc:da:31:a1:b5:e9:3c:ed:1e: 8c:13:09:01:d2:7a:80:be:51:d9:ac:59:63:33:9e:87:38:46: 89:dc:10:37:70:f4:15:aa:ca:ba:ac:b9:1c:dc:f6:5e:1e:dc: 11:91:ad:3a:b0:a2:44:ce:3b:a2:e3:e1:75:92:d3:95:f4:2e: 80:44:f8:ee:4c:d3:99:ae:f3:b1:68:5e:8c:60:d4:c1:6f:16: 22:9d:cb:21:45:6a:1a:89:2e:93:0b:52:c0:fd:8c:2e:61:4d: 09:f4:98:ba:13:47:37:2c:78:30:0d:46:c1:4f:11:e0:3d:8c: 3c:d3:63:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUddVbPFRcgKwolrLyO5mHlJaqhbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQz Qzc5MERDODAeFw0yNTA0MDUwOTM2NDJaFw0yNTA0MDgxNDM1NDJaMDMxMTAvBgNV BAMTKEU3OEE3MDVFMUEyRjMzMTZBNjMzNkY1MjM1NkMyQkExREM2QTQyNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNLQhjrEtFLxAIrUGA1tFAkA2r Gd24irFWrMUHvt2jXNk2GWFCtv3RUZGAoaZ9HmwZ+QP8PCBToYxQGcPjkitd6FRT f7a0XqCWTc8DjwW9/Q6yk4dZHyJaEWO0fun3fSi/o8MoCewfnrkAVOGIsGK4J0VB VsrmaCf/zawmrWlhnnKW6TQ6jL6rI5xos85UlpaBgOl1mk4VN1PHLFwer4NjWbLQ GxX2A2193cSg55a2b/1YsYDNaTK9zzLbkH54Yp/P2pWHh5N0Axbg1XvltSoVB2C4 lQ7o92L81sERrt/FOgvI991MCl+uAyqXS/xAs9hSUhdE4WPwRlkqrJARs8upAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU54pwXhovMxamM29SNWwrodxqQmYwHwYDVR0j BBgwFoAUvmnp4pnOLf8XbH76sUVELTx5DcgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzhhMjMxOS1iNGZmLTQ5NzMtOGRhOS1jNDFhZDJmNzMxZjMvMC9CRTY5RTlFMjk5 Q0UyREZGMTc2QzdFRkFCMTQ1NDQyRDNDNzkwREM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0MkQzQzc5 MERDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM4YTIzMTktYjRmZi00OTczLThk YTktYzQxYWQyZjczMWYzLzAvQkU2OUU5RTI5OUNFMkRGRjE3NkM3RUZBQjE0NTQ0 MkQzQzc5MERDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzqvgnV/dZMLyFxwaeuXH3oyJHHONFWy31L +5K7sl+ja46osmebxFWyXOnKqDwxgfNHiBY4GqDzDPyxTvVYfm1+Z7PT7cflYRxL dCeTuEXU4dCG9E5swYVJNulNGYLEL4tBplCCkYGAdEZLRef/lCxqOgrTMDRCKTx1 KitmucaOtIvh+eBlt8zaMaG16TztHowTCQHSeoC+UdmsWWMznoc4RoncEDdw9BWq yrqsuRzc9l4e3BGRrTqwokTOO6Lj4XWS05X0LoBE+O5M05mu87FoXoxg1MFvFiKd yyFFahqJLpMLUsD9jC5hTQn0mLoTRzcseDANRsFPEeA9jDzTY2g= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:17 2025 by rpki-client