$ rpki-client -vvf repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft File: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft (raw, json) Hash identifier: Lfbc2kugj+8mOeVpHmeiWrjxxWRPGwpdYjy20z0K9rI= Subject key identifier: AC:60:BA:04:7A:7F:41:76:D3:04:32:3B:FA:CA:38:89:85:AA:2B:05 Authority key identifier: BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F Certificate issuer: /CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Certificate serial: 236B94D59A56E266C2EF0F039B288BB42B34CA84 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft Manifest number: 017F Signing time: Wed 23 Apr 2025 05:01:37 +0000 Manifest this update: Wed 23 Apr 2025 04:56:37 +0000 Manifest next update: Sat 26 Apr 2025 06:30:37 +0000 Files and hashes: 1: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: ex+21fBaSyiItm2OS+YOTqm89deCqSKEYL8AQYAgtY0=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: 8mtJt2S7FnH2XqMpaERqdd8mg9cEUzD1SQhfJKt7rjM=) 3: BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl (hash: +kL9xhMyG5kjrP9+AHdF4GjsjEC0U3zSsuJIPoIpCoE=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: BlULhi+TctVeKV8dE0CflZMYmvk41Sd1spCHrO2rX3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Apr 2025 06:30:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6b:94:d5:9a:56:e2:66:c2:ef:0f:03:9b:28:8b:b4:2b:34:ca:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F Validity Not Before: Apr 23 04:56:37 2025 GMT Not After : Apr 26 06:30:37 2025 GMT Subject: CN=AC60BA047A7F4176D304323BFACA388985AA2B05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:11:f4:48:80:87:dc:67:6c:8d:d4:01:85:42: f8:d7:f2:a3:6c:87:34:03:2a:51:6c:b7:2c:3e:7d: 2c:48:97:94:6e:aa:d6:7f:b2:4e:de:c7:0e:4d:58: dc:68:c8:f7:10:e6:c5:72:63:bb:e3:0b:a9:82:31: f4:96:6d:f5:65:73:5f:79:17:a3:b9:9a:56:92:f0: e5:f5:c0:aa:a6:f6:fe:34:40:bd:f4:0c:66:5d:47: b4:fc:2b:93:b1:da:5f:3e:10:a1:2f:21:d4:1a:f8: bd:26:88:c1:f9:2d:bd:ca:88:af:ad:03:10:51:22: 9a:db:d1:24:5a:6e:d7:3e:1f:0d:5b:84:ab:ce:3f: cb:a5:04:95:b6:c7:cb:e3:06:00:b9:52:93:0c:e0: bd:6c:10:1f:f6:47:4a:a1:ae:e6:38:a8:7f:70:7e: ed:3b:64:58:37:97:3a:68:ca:ba:df:64:a3:72:a0: 71:6e:3f:8d:89:a7:ef:1c:9c:d0:c3:8e:16:2b:c8: e8:56:b8:b4:b4:c7:df:7e:b2:1e:7d:92:3f:ff:31: 15:63:ab:ba:5e:77:57:d2:d2:a5:5c:dd:8f:10:d3: cd:ea:fd:aa:12:5c:8d:01:14:bb:58:bb:ff:3e:b9: f2:50:01:57:a8:06:8d:39:1d:51:5f:dd:19:da:b7: d8:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:60:BA:04:7A:7F:41:76:D3:04:32:3B:FA:CA:38:89:85:AA:2B:05 X509v3 Authority Key Identifier: keyid:BE:E3:6A:B8:35:1A:FE:80:F1:B0:CE:8F:12:AA:40:08:98:29:BB:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/BEE36AB8351AFE80F1B0CE8F12AA40089829BB6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:2d:5b:51:7c:d9:9e:c2:c9:d8:26:52:38:a9:2c:c4:a6:c8: 11:15:a1:f2:54:da:46:77:43:f3:d2:1a:81:65:11:e3:42:14: 34:4c:27:e2:2c:1f:f4:65:a5:d8:50:8d:77:e1:99:2f:8d:54: e8:b7:4d:cb:ab:d9:e8:f2:68:ab:10:4a:f8:77:aa:4b:ac:c2: 49:13:b7:ac:95:bb:0c:13:75:51:ea:98:3f:78:a0:45:e9:b9: 1c:53:c9:5b:12:63:fd:41:a1:44:e6:c8:85:12:41:05:b2:06: 88:54:7e:a8:ba:a5:36:ec:94:fa:7f:0c:46:90:97:b6:6e:e4: c0:8a:57:1f:db:a7:09:88:24:be:53:d2:a2:d8:59:8c:e3:62: 24:fa:5c:ab:87:03:4d:13:88:d6:22:65:15:33:3e:3f:c7:ba: d1:4b:e9:d0:6a:76:5d:48:2f:40:40:74:1a:4e:3a:ea:f5:47: 84:c8:2f:0d:cf:2b:4b:20:b2:19:93:b1:55:d1:3f:fe:5d:41: af:4c:a7:62:38:0d:83:99:32:3b:0a:c1:93:0d:3c:a1:93:8e: 7e:0f:cc:47:0d:72:2c:f9:2c:3a:12:e3:43:5e:12:93:f1:d1: 7d:e3:1d:11:14:3a:cb:42:67:f5:67:b4:18:9f:f2:48:03:ec: 1e:6c:9d:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2uU1ZpW4mbC7w8DmyiLtCs0yoQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5 ODI5QkI2RjAeFw0yNTA0MjMwNDU2MzdaFw0yNTA0MjYwNjMwMzdaMDMxMTAvBgNV BAMTKEFDNjBCQTA0N0E3RjQxNzZEMzA0MzIzQkZBQ0EzODg5ODVBQTJCMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3EfRIgIfcZ2yN1AGFQvjX8qNs hzQDKlFstyw+fSxIl5RuqtZ/sk7exw5NWNxoyPcQ5sVyY7vjC6mCMfSWbfVlc195 F6O5mlaS8OX1wKqm9v40QL30DGZdR7T8K5Ox2l8+EKEvIdQa+L0miMH5Lb3KiK+t AxBRIprb0SRabtc+Hw1bhKvOP8ulBJW2x8vjBgC5UpMM4L1sEB/2R0qhruY4qH9w fu07ZFg3lzpoyrrfZKNyoHFuP42Jp+8cnNDDjhYryOhWuLS0x99+sh59kj//MRVj q7ped1fS0qVc3Y8Q083q/aoSXI0BFLtYu/8+ufJQAVeoBo05HVFf3Rnat9jxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrGC6BHp/QXbTBDI7+so4iYWqKwUwHwYDVR0j BBgwFoAUvuNquDUa/oDxsM6PEqpACJgpu28wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTI0YjRiNS03ODEzLTQ2Y2QtOWRiNC1hM2NkNTg1ZTBlZDQvMC9CRUUzNkFCODM1 MUFGRTgwRjFCMENFOEYxMkFBNDAwODk4MjlCQjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQwMDg5ODI5 QkI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvQkVFMzZBQjgzNTFBRkU4MEYxQjBDRThGMTJBQTQw MDg5ODI5QkI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQtW1F82Z7CydgmUjipLMSmyBEVofJU2kZ3 Q/PSGoFlEeNCFDRMJ+IsH/RlpdhQjXfhmS+NVOi3Tcur2ejyaKsQSvh3qkuswkkT t6yVuwwTdVHqmD94oEXpuRxTyVsSY/1BoUTmyIUSQQWyBohUfqi6pTbslPp/DEaQ l7Zu5MCKVx/bpwmIJL5T0qLYWYzjYiT6XKuHA00TiNYiZRUzPj/HutFL6dBqdl1I L0BAdBpOOur1R4TILw3PK0sgshmTsVXRP/5dQa9Mp2I4DYOZMjsKwZMNPKGTjn4P zEcNciz5LDoS40NeEpPx0X3jHREUOstCZ/VntBif8kgD7B5snRE= -----END CERTIFICATE-----Generated at Wed Apr 23 06:31:50 2025 by rpki-client on console.sobornost.net