$ rpki-client -vvf repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft File: BAC180E3FF326678277BE269EEBEC1DE3827226F.mft (raw, json) Hash identifier: HezqqSpHDPTCzVLqu8xGLoc84ji4VnE/19sh1iDcNJA= Subject key identifier: BF:10:0B:8E:C9:51:57:14:AD:0D:7C:85:34:0B:AC:F5:B3:44:D0:EA Authority key identifier: BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F Certificate issuer: /CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Certificate serial: 1D2E0BEE231384FDE8BC41E649792E399A756D59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft Manifest number: 0495 Signing time: Sat 18 Oct 2025 01:52:02 +0000 Manifest this update: Sat 18 Oct 2025 01:47:02 +0000 Manifest next update: Tue 21 Oct 2025 10:26:02 +0000 Files and hashes: 1: 3130332e3136312e3136322e302f32342d3234203d3e20313431363136.roa (hash: noONdtWPBfDg1v+b0voqR3p0t9tg/glTZSZzhJfbVqc=) 2: BAC180E3FF326678277BE269EEBEC1DE3827226F.crl (hash: 6sPrxH2zcoZJq0wotXt4xTBJGHfGCUz/+gw+Pi8gj7k=) 3: 3130332e3136312e3136332e302f32342d3234203d3e20313431363136.roa (hash: YNbhE8xdTKW/Q9U/93rD4JGqeL1yvNsJ+AG9m1iob8s=) 4: 3130332e3136312e3136322e302f32332d3233203d3e20313431363136.roa (hash: hUeOICfw2XBWAgqGUkttpxWF2O5J3sS4YAbQ6Mjer8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 10:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2e:0b:ee:23:13:84:fd:e8:bc:41:e6:49:79:2e:39:9a:75:6d:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC180E3FF326678277BE269EEBEC1DE3827226F Validity Not Before: Oct 18 01:47:02 2025 GMT Not After : Oct 21 10:26:02 2025 GMT Subject: CN=BF100B8EC9515714AD0D7C85340BACF5B344D0EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:bb:83:58:f2:7e:ff:a1:02:18:93:f4:1d:b5: b2:38:9b:a1:20:22:21:10:c4:be:b6:6d:db:2c:fb: 88:85:f4:b9:ad:0f:66:23:77:d7:18:95:c6:7e:bd: 12:02:aa:32:91:03:72:54:78:64:b3:4d:df:7a:50: 9f:10:77:ed:fd:1d:8a:51:9c:88:e5:e0:e4:82:a7: 6b:fb:80:1d:b5:0c:84:90:c4:a4:75:3f:a3:50:94: d9:12:72:e9:3b:6b:40:34:4b:2b:77:11:bf:b4:52: 1a:12:a4:3e:f5:93:cc:2f:b8:6e:63:24:b0:93:3c: 50:08:51:a9:46:e4:31:e7:e7:97:bc:a7:94:3b:db: 19:d0:df:36:d2:28:79:8a:7e:7b:e0:99:21:a5:50: 9b:8a:e6:8f:c5:02:3a:18:db:73:85:2b:98:54:55: f6:bf:76:c4:0a:00:99:a7:36:df:be:b2:b3:d6:11: 1f:2a:69:f3:c2:70:d1:65:07:89:17:ad:4d:1a:34: b9:45:89:81:42:0f:4a:a7:7d:a6:1b:0d:64:7c:9d: ea:f8:98:ac:f2:4a:bd:59:6c:46:f4:b4:ca:8d:ad: da:0e:68:f2:8b:da:56:25:96:b7:d4:6a:86:59:a6: 14:d5:ad:4f:d2:ca:71:ad:c4:de:c3:07:74:38:3a: 7d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:10:0B:8E:C9:51:57:14:AD:0D:7C:85:34:0B:AC:F5:B3:44:D0:EA X509v3 Authority Key Identifier: keyid:BA:C1:80:E3:FF:32:66:78:27:7B:E2:69:EE:BE:C1:DE:38:27:22:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC180E3FF326678277BE269EEBEC1DE3827226F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d094d3e-089c-4c68-80a2-56b5cbfc103d/0/BAC180E3FF326678277BE269EEBEC1DE3827226F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:d0:f8:82:db:ad:44:d6:aa:1d:53:60:cd:76:15:8d:58:47: 95:f8:55:f4:4b:9b:d6:ec:71:6c:b2:a5:2e:7d:40:4c:f0:f3: 06:4a:9b:ff:a7:7f:df:9a:d5:68:f7:f9:83:73:52:9d:b7:bc: 11:3c:e6:54:17:56:b0:a9:5f:db:c2:0c:4f:c3:f5:dd:92:bf: fb:11:f8:91:c2:9c:c1:4d:8c:7c:c9:4d:57:ab:f5:a8:2f:bb: d8:00:2f:0f:27:61:c7:92:69:de:3e:93:df:f1:ed:06:1a:3d: 6a:d4:ee:e8:0c:e0:98:4c:3c:01:b5:40:0d:87:54:c2:3e:2c: ef:7a:f7:1e:7e:a4:78:68:68:f3:ef:8f:96:5e:8b:b1:f1:46: 17:9f:21:d5:2b:30:48:c2:33:46:41:7c:0f:f3:80:4a:f8:3c: b2:42:77:d0:ed:78:17:59:6a:3e:59:c2:91:49:64:4c:b1:7b: 89:79:ee:00:b5:9f:88:2b:eb:5f:ef:b1:24:81:f7:c1:f2:89: 81:94:e2:76:85:99:ce:ad:6f:1c:f1:8e:d4:d6:6b:d0:6a:50: 4d:44:a5:80:54:58:36:50:85:16:c0:85:cf:d9:eb:16:e5:38: 05:3e:c2:bd:68:f9:00:27:1c:fc:be:3d:b4:d7:cb:57:1c:ee: 53:cb:59:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS4L7iMThP3ovEHmSXkuOZp1bVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUz ODI3MjI2RjAeFw0yNTEwMTgwMTQ3MDJaFw0yNTEwMjExMDI2MDJaMDMxMTAvBgNV BAMTKEJGMTAwQjhFQzk1MTU3MTRBRDBEN0M4NTM0MEJBQ0Y1QjM0NEQwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5u4NY8n7/oQIYk/QdtbI4m6Eg IiEQxL62bdss+4iF9LmtD2Yjd9cYlcZ+vRICqjKRA3JUeGSzTd96UJ8Qd+39HYpR nIjl4OSCp2v7gB21DISQxKR1P6NQlNkScuk7a0A0Syt3Eb+0UhoSpD71k8wvuG5j JLCTPFAIUalG5DHn55e8p5Q72xnQ3zbSKHmKfnvgmSGlUJuK5o/FAjoY23OFK5hU Vfa/dsQKAJmnNt++srPWER8qafPCcNFlB4kXrU0aNLlFiYFCD0qnfaYbDWR8ner4 mKzySr1ZbEb0tMqNrdoOaPKL2lYllrfUaoZZphTVrU/SynGtxN7DB3Q4On3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvxALjslRVxStDXyFNAus9bNE0OowHwYDVR0j BBgwFoAUusGA4/8yZngne+Jp7r7B3jgnIm8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDA5NGQzZS0wODljLTRjNjgtODBhMi01NmI1Y2JmYzEwM2QvMC9CQUMxODBFM0ZG MzI2Njc4Mjc3QkUyNjlFRUJFQzFERTM4MjcyMjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMxREUzODI3 MjI2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQwOTRkM2UtMDg5Yy00YzY4LTgw YTItNTZiNWNiZmMxMDNkLzAvQkFDMTgwRTNGRjMyNjY3ODI3N0JFMjY5RUVCRUMx REUzODI3MjI2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrQ+ILbrUTWqh1TYM12FY1YR5X4VfRLm9bs cWyypS59QEzw8wZKm/+nf9+a1Wj3+YNzUp23vBE85lQXVrCpX9vCDE/D9d2Sv/sR +JHCnMFNjHzJTVer9agvu9gALw8nYceSad4+k9/x7QYaPWrU7ugM4JhMPAG1QA2H VMI+LO969x5+pHhoaPPvj5Zei7HxRhefIdUrMEjCM0ZBfA/zgEr4PLJCd9DteBdZ aj5ZwpFJZEyxe4l57gC1n4gr61/vsSSB98HyiYGU4naFmc6tbxzxjtTWa9BqUE1E pYBUWDZQhRbAhc/Z6xblOAU+wr1o+QAnHPy+PbTXy1cc7lPLWZU= -----END CERTIFICATE-----Generated at Mon Oct 20 08:46:15 2025 by rpki-client