$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: z8lxmLJilDyvz+YF7L0GFcRHMLsKiln85GEpERA2//8= Subject key identifier: 63:81:2B:71:13:9D:4C:5A:02:39:48:DA:35:72:BE:CC:9D:0A:83:2A Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 6154E432A22CF011136E164F0DD2A5A79E8F256E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: A8 Signing time: Tue 03 Jun 2025 06:51:49 +0000 Manifest this update: Tue 03 Jun 2025 06:46:49 +0000 Manifest next update: Fri 06 Jun 2025 08:39:49 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: XRxPmLyFeMGL3RaWZyCJ/+WeD1Q8jtXB5fqOECiUFcg=) 2: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: RZTZbSxb2PRYobjmO198JK6HQHDPb0oKEJ95ldcpw5Y=) 3: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: WVWkZoK2slUp5FXFBlvV70xmkvB8Xi8yr0ufb6QFcL0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 08:39:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:54:e4:32:a2:2c:f0:11:13:6e:16:4f:0d:d2:a5:a7:9e:8f:25:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Jun 3 06:46:49 2025 GMT Not After : Jun 6 08:39:49 2025 GMT Subject: CN=63812B71139D4C5A023948DA3572BECC9D0A832A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5f:47:f4:3d:46:2a:18:eb:2b:e8:1f:e2:ce: f3:db:5e:df:d8:e7:69:ca:17:56:e4:cc:5d:94:d3: 52:22:7a:7b:24:66:aa:5d:2a:98:84:70:80:3b:fd: 3c:a9:24:97:5d:6f:c8:83:1e:f7:5b:56:35:e5:76: 03:6e:c6:7c:b9:28:2e:05:e1:7e:68:b5:99:d8:81: c1:14:c6:31:bc:b8:d7:8f:bc:f1:69:bc:b9:ee:cb: 03:45:af:82:e1:61:17:a9:10:90:03:b7:b9:f0:b7: 5a:af:29:5a:f6:7e:c8:18:b9:7f:8e:25:cc:43:65: 13:bd:2b:92:8d:85:d5:fd:92:6e:13:f5:4e:15:c5: 62:4f:60:bf:ee:49:ec:ab:07:31:0d:4b:91:aa:92: 7e:0d:67:78:ad:93:cd:6e:f8:96:fd:6b:c5:55:a4: 5a:5b:be:b8:c1:4a:1d:a8:29:bd:29:79:06:18:0c: e3:2b:82:da:d6:07:ae:10:ce:61:19:a6:89:4c:0e: 71:b2:4a:db:59:32:02:23:68:0e:ac:08:58:20:be: 32:cd:85:ba:34:02:52:16:bc:a2:d8:e8:0e:e8:7f: 51:c2:78:f4:85:42:5f:fb:f6:f0:cb:fc:c7:44:c4: 61:9a:d1:89:0b:f1:76:27:ae:13:2e:2a:de:fe:7a: 63:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:81:2B:71:13:9D:4C:5A:02:39:48:DA:35:72:BE:CC:9D:0A:83:2A X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:00:c2:98:35:eb:64:05:f2:8a:5c:03:41:b9:a4:09:13:4a: 58:ef:42:3c:b1:0d:69:39:50:77:c2:7b:73:16:88:9b:54:db: 85:ed:73:90:7b:be:04:2c:6f:c9:db:52:8e:94:c6:fd:34:3b: dc:49:db:4b:46:e6:42:c4:4c:b7:e7:ea:20:b5:0d:59:d0:aa: 11:21:a7:0a:de:1e:47:5d:88:df:27:85:b9:6c:87:a5:5b:2b: e1:be:1c:e7:b1:54:12:96:49:95:25:df:32:aa:0d:38:7f:97: 53:2d:61:74:26:67:7d:95:5b:34:94:80:e9:33:2e:6f:ef:c1: 0d:91:bd:ef:04:a3:e9:1d:f1:fa:60:e5:df:09:ee:7f:63:bb: a8:0e:96:39:5e:f6:50:36:16:f4:e1:23:24:8e:c0:ad:63:33: 15:76:a8:15:e4:bb:9d:e1:1d:66:42:4c:15:09:c4:a6:a9:e2: d4:91:e3:90:19:27:bb:71:32:a9:89:b7:d9:62:e1:88:e9:53: 4d:84:a2:f0:20:19:1d:5f:f2:50:c4:00:53:b6:e4:96:57:dd: 54:84:6d:95:96:de:07:00:c1:d3:27:a3:3a:cc:57:6b:29:65: 68:e9:b9:d4:ca:35:68:d0:5a:0c:6c:4a:0f:ed:72:45:08:1e: 19:d0:be:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVTkMqIs8BETbhZPDdKlp56PJW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA2MDMwNjQ2NDlaFw0yNTA2MDYwODM5NDlaMDMxMTAvBgNV BAMTKDYzODEyQjcxMTM5RDRDNUEwMjM5NDhEQTM1NzJCRUNDOUQwQTgzMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOX0f0PUYqGOsr6B/izvPbXt/Y 52nKF1bkzF2U01IienskZqpdKpiEcIA7/TypJJddb8iDHvdbVjXldgNuxny5KC4F 4X5otZnYgcEUxjG8uNePvPFpvLnuywNFr4LhYRepEJADt7nwt1qvKVr2fsgYuX+O JcxDZRO9K5KNhdX9km4T9U4VxWJPYL/uSeyrBzENS5Gqkn4NZ3itk81u+Jb9a8VV pFpbvrjBSh2oKb0peQYYDOMrgtrWB64QzmEZpolMDnGySttZMgIjaA6sCFggvjLN hbo0AlIWvKLY6A7of1HCePSFQl/79vDL/MdExGGa0YkL8XYnrhMuKt7+emNXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4ErcROdTFoCOUjaNXK+zJ0KgyowHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIAwpg162QF8opcA0G5pAkTSljvQjyxDWk5 UHfCe3MWiJtU24Xtc5B7vgQsb8nbUo6Uxv00O9xJ20tG5kLETLfn6iC1DVnQqhEh pwreHkddiN8nhblsh6VbK+G+HOexVBKWSZUl3zKqDTh/l1MtYXQmZ32VWzSUgOkz Lm/vwQ2Rve8Eo+kd8fpg5d8J7n9ju6gOljle9lA2FvThIySOwK1jMxV2qBXku53h HWZCTBUJxKap4tSR45AZJ7txMqmJt9li4YjpU02EovAgGR1f8lDEAFO25JZX3VSE bZWW3gcAwdMnozrMV2spZWjpudTKNWjQWgxsSg/tckUIHhnQvhY= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:05 2025 by rpki-client