$ rpki-client -vvf repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft File: BCDF6D8F5670257F852914E87D552983AA37A3A3.mft (raw, json) Hash identifier: 5MbtKtbTiYvOkqSHrl/bemZ919FnwsrCrauyEvQ+Eso= Subject key identifier: BD:E0:42:B3:2C:FF:44:04:2C:46:DD:13:09:C6:15:9F:14:CC:D6:BB Authority key identifier: BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 Certificate issuer: /CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Certificate serial: 67E7B77A7E522D471EA830250CEDC8849B737E88 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft Manifest number: 0470 Signing time: Sun 19 Oct 2025 20:31:01 +0000 Manifest this update: Sun 19 Oct 2025 20:26:01 +0000 Manifest next update: Wed 22 Oct 2025 21:34:01 +0000 Files and hashes: 1: BCDF6D8F5670257F852914E87D552983AA37A3A3.crl (hash: AUWrMLW9D6bF1D2VMmDyVYU80BqqAgrwsO2zi5mG86I=) 2: 3130332e3134372e37372e302f32342d3234203d3e20313339393532.roa (hash: gks4E4RAlqsYzpMbY7s86LphrkEHlbXfODEV9a6VKSU=) 3: 3130332e3134372e37362e302f32342d3234203d3e20313339393532.roa (hash: 2JYulwUxi2T/jzgAmBWLWpOPU3Z1C06NLPJ2YJd9h44=) 4: 3130332e3134372e37362e302f32332d3233203d3e20313339393532.roa (hash: ZtfrmcdIDZFk5FXV0vrgffSS//LC3R042y4pGOoRFVw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e7:b7:7a:7e:52:2d:47:1e:a8:30:25:0c:ed:c8:84:9b:73:7e:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCDF6D8F5670257F852914E87D552983AA37A3A3 Validity Not Before: Oct 19 20:26:01 2025 GMT Not After : Oct 22 21:34:01 2025 GMT Subject: CN=BDE042B32CFF44042C46DD1309C6159F14CCD6BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:48:85:2d:41:52:f1:00:da:78:04:fa:46:fa: e2:74:c5:f8:c7:96:0c:a2:8f:28:04:38:01:68:ed: be:04:43:f9:ed:77:15:81:fa:19:9b:02:73:9d:2c: ca:2c:72:f2:86:8d:6c:8d:11:c3:b9:fd:25:f6:17: f2:be:ec:e1:8f:ba:15:1e:2b:80:e3:dd:2c:02:e4: b5:e1:6d:36:85:b0:84:dc:df:65:84:05:59:5b:ce: d0:5c:cd:4d:81:bf:cf:52:cd:b7:85:15:23:e1:bc: 9a:f1:89:cd:e1:9c:67:71:86:6f:08:6e:bc:c7:f1: 63:b4:1d:6a:9d:16:57:2e:e3:a5:4b:a8:4c:5b:06: 91:4f:e9:27:42:66:44:41:c3:39:c4:28:83:7d:e4: da:a4:9d:15:4c:9c:ce:e1:c6:a4:c5:53:42:3a:34: 64:0f:c5:2d:28:92:9b:a8:0c:18:68:13:dd:d7:9f: 16:1f:41:3c:c8:36:8d:47:bc:4f:c2:ce:6b:ee:5f: 0e:45:05:99:b2:c5:40:c1:f7:c1:36:f9:e3:4e:05: ae:ff:b5:9e:44:2f:55:0f:97:17:50:a6:c8:9b:4b: 90:4e:4b:1c:fa:42:9c:81:e4:0d:ad:6a:90:d9:a6: 72:99:59:fc:0e:1b:e1:5f:42:d2:7a:b7:18:50:1e: 1e:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:E0:42:B3:2C:FF:44:04:2C:46:DD:13:09:C6:15:9F:14:CC:D6:BB X509v3 Authority Key Identifier: keyid:BC:DF:6D:8F:56:70:25:7F:85:29:14:E8:7D:55:29:83:AA:37:A3:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCDF6D8F5670257F852914E87D552983AA37A3A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/877b01cf-b1c9-450f-8551-4dcb4cbd4262/0/BCDF6D8F5670257F852914E87D552983AA37A3A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:2e:39:13:90:2e:fa:e1:11:01:6a:1d:a0:bb:cf:a2:b9:41: 37:51:f7:56:92:f5:2d:88:5b:f8:b7:4b:e6:c4:5d:cc:f5:db: 5c:ea:13:ca:1b:f0:90:26:dd:8a:0b:c5:a4:87:e5:33:fb:5b: 42:15:8e:e1:a3:ac:a7:73:b0:ef:62:18:ac:24:08:a3:e1:96: d5:a7:c5:1c:95:0a:25:eb:ad:3a:29:ad:b8:ef:72:f3:06:13: 24:9e:51:6a:17:7f:da:e5:63:01:56:83:de:69:2e:5c:7f:42: cd:d0:4b:c5:80:94:fa:96:b3:aa:11:00:d0:b8:7a:35:4a:85: 0a:bf:f8:fc:8f:18:84:79:1e:23:b1:58:36:e1:a3:e5:b2:93: f0:7f:c3:b5:63:46:25:6e:fd:35:a2:da:38:2a:d8:48:b3:b3: 06:92:25:6a:ad:82:15:a3:07:8b:3f:98:1f:60:44:15:4e:97: 6b:34:61:fd:75:83:32:59:c9:b1:b0:bd:18:a0:44:bb:15:39: a5:6d:d5:06:62:87:23:b8:1f:83:dc:2c:d5:ce:6e:77:18:4e: 98:24:68:54:ec:04:b1:35:bc:ff:3f:57:67:68:80:cc:df:3c: d9:93:ac:c8:9a:88:fb:2d:10:c6:50:ef:b6:55:37:d8:3a:93: 1b:02:a7:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+e3en5SLUceqDAlDO3IhJtzfogwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNB QTM3QTNBMzAeFw0yNTEwMTkyMDI2MDFaFw0yNTEwMjIyMTM0MDFaMDMxMTAvBgNV BAMTKEJERTA0MkIzMkNGRjQ0MDQyQzQ2REQxMzA5QzYxNTlGMTRDQ0Q2QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUSIUtQVLxANp4BPpG+uJ0xfjH lgyijygEOAFo7b4EQ/ntdxWB+hmbAnOdLMoscvKGjWyNEcO5/SX2F/K+7OGPuhUe K4Dj3SwC5LXhbTaFsITc32WEBVlbztBczU2Bv89SzbeFFSPhvJrxic3hnGdxhm8I brzH8WO0HWqdFlcu46VLqExbBpFP6SdCZkRBwznEKIN95NqknRVMnM7hxqTFU0I6 NGQPxS0okpuoDBhoE93XnxYfQTzINo1HvE/CzmvuXw5FBZmyxUDB98E2+eNOBa7/ tZ5EL1UPlxdQpsibS5BOSxz6QpyB5A2tapDZpnKZWfwOG+FfQtJ6txhQHh7/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUveBCsyz/RAQsRt0TCcYVnxTM1rswHwYDVR0j BBgwFoAUvN9tj1ZwJX+FKRTofVUpg6o3o6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzdiMDFjZi1iMWM5LTQ1MGYtODU1MS00ZGNiNGNiZDQyNjIvMC9CQ0RGNkQ4RjU2 NzAyNTdGODUyOTE0RTg3RDU1Mjk4M0FBMzdBM0EzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5ODNBQTM3 QTNBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc3YjAxY2YtYjFjOS00NTBmLTg1 NTEtNGRjYjRjYmQ0MjYyLzAvQkNERjZEOEY1NjcwMjU3Rjg1MjkxNEU4N0Q1NTI5 ODNBQTM3QTNBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkuOROQLvrhEQFqHaC7z6K5QTdR91aS9S2I W/i3S+bEXcz121zqE8ob8JAm3YoLxaSH5TP7W0IVjuGjrKdzsO9iGKwkCKPhltWn xRyVCiXrrToprbjvcvMGEySeUWoXf9rlYwFWg95pLlx/Qs3QS8WAlPqWs6oRANC4 ejVKhQq/+PyPGIR5HiOxWDbho+Wyk/B/w7VjRiVu/TWi2jgq2EizswaSJWqtghWj B4s/mB9gRBVOl2s0Yf11gzJZybGwvRigRLsVOaVt1QZihyO4H4PcLNXObncYTpgk aFTsBLE1vP8/V2dogMzfPNmTrMiaiPstEMZQ77ZVN9g6kxsCp+k= -----END CERTIFICATE-----Generated at Mon Oct 20 15:52:31 2025 by rpki-client