$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: jtqlzFbc1BfEQFHRQID3TpGErtb6rrRsUCCcksNsFwQ= Subject key identifier: 84:DF:95:9E:EC:7E:C6:C2:36:EF:B9:25:EA:43:D9:82:79:93:05:9F Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 327A2ACE762FA91555B692EB2C7BCD5499F07483 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: D2 Signing time: Fri 05 Sep 2025 01:11:50 +0000 Manifest this update: Fri 05 Sep 2025 01:06:50 +0000 Manifest next update: Mon 08 Sep 2025 05:21:50 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: 4wd3JmYcrS/mo3GO84kAFG1FTtsOIb0FhLAbElHkcEI=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:21:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:7a:2a:ce:76:2f:a9:15:55:b6:92:eb:2c:7b:cd:54:99:f0:74:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Sep 5 01:06:50 2025 GMT Not After : Sep 8 05:21:50 2025 GMT Subject: CN=84DF959EEC7EC6C236EFB925EA43D9827993059F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:f3:9c:f5:b9:d0:47:55:ea:ab:ca:a4:d9:0e: de:5c:06:3c:7a:77:d9:ef:b7:23:5b:33:75:ac:72: 7d:0f:52:73:6c:51:d9:e1:04:47:f1:30:a0:ec:84: ae:5f:ef:c1:55:16:c2:32:fc:a5:c5:7a:f7:16:72: 8e:6b:6a:f2:7f:1a:7b:3c:b8:83:fc:76:de:08:7e: 93:c1:d2:45:9f:5f:c7:0e:1d:da:11:65:52:78:b9: e4:5b:43:b1:fd:bd:ca:60:7d:19:62:15:9d:a4:78: ab:f2:69:09:01:88:72:6b:d7:4d:62:d1:61:24:28: f9:8b:68:2d:e1:bf:18:a1:3c:9a:b7:5d:32:b3:95: bf:c1:75:c0:dc:e6:f5:26:45:4c:e6:36:7c:3e:81: dc:3a:de:0f:a8:ed:be:40:e8:d8:db:7a:df:82:fe: 8c:6a:7f:c6:7f:bb:36:19:fb:fc:f4:41:ba:5f:8b: bb:87:ff:51:b1:d8:b1:2a:95:18:4b:90:d6:8b:c7: 04:76:9a:48:da:4a:e2:93:44:f4:cf:e7:fe:62:8a: 4b:fe:71:b8:f2:d2:ce:8e:a4:dc:e4:93:ba:10:45: 6d:e2:4c:26:a6:9a:9d:e8:cb:5d:0b:a7:ab:47:10: be:66:cc:2d:e3:05:01:0a:2e:9d:8b:52:35:33:d7: 46:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:DF:95:9E:EC:7E:C6:C2:36:EF:B9:25:EA:43:D9:82:79:93:05:9F X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:43:9a:bd:d0:ee:44:26:29:e4:01:15:13:8a:a9:b2:7d:26: 22:86:ea:96:63:54:1a:e1:cf:b8:7a:47:4a:e6:d4:d1:c6:e4: c6:00:6f:9f:6b:4b:a4:3f:80:d0:38:41:c8:d2:65:4d:f2:9e: 28:8b:cc:16:13:b3:86:4e:7d:6e:0e:ad:90:ea:6e:a9:7d:39: 3c:73:97:be:7b:1c:30:7f:82:3e:1f:3e:74:38:f9:47:56:40: 83:1d:a8:72:b0:06:03:bc:39:8b:e0:1f:10:cf:5f:70:34:7c: d5:1e:dc:50:4f:da:57:0b:02:8f:3d:7e:7f:b6:7c:a0:ba:89: 12:72:d3:5d:5e:b7:89:eb:e0:91:f1:b5:2f:ed:f0:a0:39:13: a3:3c:6e:ea:9e:87:d0:f1:b7:0b:8e:a7:0b:46:ca:97:5b:6f: 82:85:12:cf:3b:63:f7:1b:50:a5:36:a4:7e:b2:77:23:42:1f: 38:a1:e4:f2:cb:21:b2:9b:f1:f5:27:e1:30:e9:89:47:3a:c5: 5e:db:b0:2a:5d:81:d8:96:02:02:3a:96:59:3a:21:c4:b5:ad: ad:b0:3f:66:c5:47:80:7e:53:61:8d:9a:37:c4:f5:e2:cc:9b: 58:f0:82:79:f0:87:8e:ae:a8:75:c6:75:e5:11:d7:64:16:b1: 2d:89:d8:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMnoqznYvqRVVtpLrLHvNVJnwdIMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA5MDUwMTA2NTBaFw0yNTA5MDgwNTIxNTBaMDMxMTAvBgNV BAMTKDg0REY5NTlFRUM3RUM2QzIzNkVGQjkyNUVBNDNEOTgyNzk5MzA1OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO85z1udBHVeqryqTZDt5cBjx6 d9nvtyNbM3Wscn0PUnNsUdnhBEfxMKDshK5f78FVFsIy/KXFevcWco5ravJ/Gns8 uIP8dt4IfpPB0kWfX8cOHdoRZVJ4ueRbQ7H9vcpgfRliFZ2keKvyaQkBiHJr101i 0WEkKPmLaC3hvxihPJq3XTKzlb/BdcDc5vUmRUzmNnw+gdw63g+o7b5A6Njbet+C /oxqf8Z/uzYZ+/z0Qbpfi7uH/1Gx2LEqlRhLkNaLxwR2mkjaSuKTRPTP5/5iikv+ cbjy0s6OpNzkk7oQRW3iTCammp3oy10Lp6tHEL5mzC3jBQEKLp2LUjUz10Y9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhN+Vnux+xsI277kl6kPZgnmTBZ8wHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9Dmr3Q7kQmKeQBFROKqbJ9JiKG6pZjVBrh z7h6R0rm1NHG5MYAb59rS6Q/gNA4QcjSZU3yniiLzBYTs4ZOfW4OrZDqbql9OTxz l757HDB/gj4fPnQ4+UdWQIMdqHKwBgO8OYvgHxDPX3A0fNUe3FBP2lcLAo89fn+2 fKC6iRJy011et4nr4JHxtS/t8KA5E6M8buqeh9DxtwuOpwtGypdbb4KFEs87Y/cb UKU2pH6ydyNCHzih5PLLIbKb8fUn4TDpiUc6xV7bsCpdgdiWAgI6llk6IcS1ra2w P2bFR4B+U2GNmjfE9eLMm1jwgnnwh46uqHXGdeUR12QWsS2J2C8= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:22 2025 by rpki-client