$ rpki-client -vvf repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft File: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft (raw, json) Hash identifier: H389QyaRLPWkOUkzF2amlRLYTzoCnjt+hfZBsVyyQjE= Subject key identifier: 99:FE:36:CD:A1:9B:75:F3:AF:8B:BB:93:E8:B1:75:9F:98:A9:FC:76 Authority key identifier: BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 Certificate issuer: /CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Certificate serial: 4769A78DCB26A99777468E79A27105B6B5E10C9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft Manifest number: 8D Signing time: Sat 05 Apr 2025 04:31:50 +0000 Manifest this update: Sat 05 Apr 2025 04:26:50 +0000 Manifest next update: Tue 08 Apr 2025 13:53:50 +0000 Files and hashes: 1: BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl (hash: 3ikFIZaUnso8i2fjAzHkPxap8vowu3GPuPcciIgU1rk=) 2: 323030313a6466343a353430303a3a2f34382d3438203d3e20313333383335.roa (hash: VsyQXSiVMiwcm5yUroJ76knQx3U8ruXQ8DjfeYFUQB4=) 3: 3130332e35382e3134362e302f32342d3234203d3e20313333383335.roa (hash: 1v4ba7LsWYzkmrUUas5phQC6K2QN9Q5rS+nYtFeCnFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:69:a7:8d:cb:26:a9:97:77:46:8e:79:a2:71:05:b6:b5:e1:0c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641 Validity Not Before: Apr 5 04:26:50 2025 GMT Not After : Apr 8 13:53:50 2025 GMT Subject: CN=99FE36CDA19B75F3AF8BBB93E8B1759F98A9FC76 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4d:e0:93:dd:a7:f7:0a:a7:fd:4b:d1:33:24: 66:28:9e:c6:39:ae:bd:2f:7c:cc:73:82:0a:58:d2: d2:7c:29:c6:79:34:cf:4a:74:e2:08:1e:2c:2a:8b: 1d:5f:e5:c2:50:a2:d4:8c:fa:f0:df:d5:5c:58:e0: eb:a9:a1:f7:7f:1f:80:df:c1:1d:a2:c9:2e:0c:74: a5:96:cd:c3:3d:e0:a6:fc:77:a1:51:b0:4a:1c:69: 02:49:fc:db:19:94:4a:51:ff:9f:0a:05:9c:7f:00: b0:52:a3:a0:89:a0:8f:fd:96:36:cc:91:e6:d0:31: db:2a:6f:7d:56:8f:b2:32:e0:eb:0a:fc:09:4e:a2: 18:17:6d:d9:96:68:98:1c:02:f9:39:ae:ab:33:06: 13:ae:34:59:f7:99:11:af:6d:f8:c6:62:fe:5f:65: 47:46:d6:b1:7c:5f:a9:05:0c:77:52:21:f5:be:8c: 28:ff:f9:5a:1d:b9:1c:fd:d2:a8:78:c7:6e:67:10: 00:89:1a:c8:6e:7a:22:b3:53:1c:df:26:a3:4d:d9: f9:c3:53:7f:c1:12:19:85:a6:10:d8:da:7e:44:7a: 67:13:e7:b5:39:8d:11:87:79:0e:53:13:08:13:cb: 17:82:61:a6:e7:19:46:e7:41:69:e2:19:25:e3:5f: 50:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:FE:36:CD:A1:9B:75:F3:AF:8B:BB:93:E8:B1:75:9F:98:A9:FC:76 X509v3 Authority Key Identifier: keyid:BE:A8:C6:D5:F4:B4:24:A9:EA:BF:C2:F6:8F:71:B0:50:5B:7E:36:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8fca42f-836a-40ec-a76f-b604711f3364/0/BEA8C6D5F4B424A9EABFC2F68F71B0505B7E3641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:63:ba:2a:fb:37:ed:5f:23:d7:a8:05:55:90:ce:3a:1a:06: 81:a1:87:bc:94:b1:8d:a6:be:b8:dc:43:37:d4:77:35:95:79: f6:01:b5:08:31:bc:e4:d0:3d:c4:64:dd:a8:49:10:8a:54:ef: 73:90:ee:ab:02:19:24:e4:fd:3e:76:9d:a2:4b:fb:cf:27:f4: 11:24:f1:7b:ae:ba:bb:55:ce:f6:e1:1f:01:c4:08:9a:a0:f9: 9e:d9:a6:50:8f:74:73:09:48:41:88:1c:5c:00:e2:b4:d4:67: d0:90:aa:40:46:19:9e:8f:c9:39:ef:a6:25:a8:48:3f:4b:31: 20:df:59:b5:c1:57:fe:d5:ec:be:14:df:5e:a5:8f:96:b9:c7: 8a:0d:03:f1:61:4f:e8:70:2e:52:c8:c5:a8:10:bb:56:dc:87: f1:64:7b:d0:69:af:96:cb:9c:68:7d:43:05:c6:61:09:74:d6: 7d:78:b1:d6:35:a2:ce:5f:dd:b8:27:e1:b1:e0:73:24:8f:20: be:91:1d:ab:27:0e:80:a9:30:27:5a:9f:e7:c7:89:06:89:d3: 82:6f:12:9a:6e:2a:4e:dd:1e:e5:81:c4:23:04:71:60:e8:f1: 1d:f6:64:c2:bf:1c:3d:f3:33:8d:d7:a7:80:7f:3c:71:da:88: 2d:5f:fd:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2mnjcsmqZd3Ro55onEFtrXhDJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1 QjdFMzY0MTAeFw0yNTA0MDUwNDI2NTBaFw0yNTA0MDgxMzUzNTBaMDMxMTAvBgNV BAMTKDk5RkUzNkNEQTE5Qjc1RjNBRjhCQkI5M0U4QjE3NTlGOThBOUZDNzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWTeCT3af3Cqf9S9EzJGYonsY5 rr0vfMxzggpY0tJ8KcZ5NM9KdOIIHiwqix1f5cJQotSM+vDf1VxY4Oupofd/H4Df wR2iyS4MdKWWzcM94Kb8d6FRsEocaQJJ/NsZlEpR/58KBZx/ALBSo6CJoI/9ljbM kebQMdsqb31Wj7Iy4OsK/AlOohgXbdmWaJgcAvk5rqszBhOuNFn3mRGvbfjGYv5f ZUdG1rF8X6kFDHdSIfW+jCj/+VoduRz90qh4x25nEACJGshueiKzUxzfJqNN2fnD U3/BEhmFphDY2n5EemcT57U5jRGHeQ5TEwgTyxeCYabnGUbnQWniGSXjX1BpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmf42zaGbdfOvi7uT6LF1n5ip/HYwHwYDVR0j BBgwFoAUvqjG1fS0JKnqv8L2j3GwUFt+NkEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGZjYTQyZi04MzZhLTQwZWMtYTc2Zi1iNjA0NzExZjMzNjQvMC9CRUE4QzZENUY0 QjQyNEE5RUFCRkMyRjY4RjcxQjA1MDVCN0UzNjQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIwNTA1QjdF MzY0MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhmY2E0MmYtODM2YS00MGVjLWE3 NmYtYjYwNDcxMWYzMzY0LzAvQkVBOEM2RDVGNEI0MjRBOUVBQkZDMkY2OEY3MUIw NTA1QjdFMzY0MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVjuir7N+1fI9eoBVWQzjoaBoGhh7yUsY2m vrjcQzfUdzWVefYBtQgxvOTQPcRk3ahJEIpU73OQ7qsCGSTk/T52naJL+88n9BEk 8XuuurtVzvbhHwHECJqg+Z7ZplCPdHMJSEGIHFwA4rTUZ9CQqkBGGZ6PyTnvpiWo SD9LMSDfWbXBV/7V7L4U316lj5a5x4oNA/FhT+hwLlLIxagQu1bch/Fke9Bpr5bL nGh9QwXGYQl01n14sdY1os5f3bgn4bHgcySPIL6RHasnDoCpMCdan+fHiQaJ04Jv EppuKk7dHuWBxCMEcWDo8R32ZMK/HD3zM43Xp4B/PHHaiC1f/Xc= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:27 2025 by rpki-client