$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: D0qquSVTlllQ1fl4CDcKWZpBEN22sh0Dkq2zJic5bSE= Subject key identifier: 9C:03:AE:ED:F7:2B:D0:4D:6C:32:E4:6B:E4:82:5C:ED:D4:BF:AA:0E Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 72D07236F95240BC6232DB0CF731A8DBBF17C6FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: D7 Signing time: Sun 19 Oct 2025 20:51:03 +0000 Manifest this update: Sun 19 Oct 2025 20:46:03 +0000 Manifest next update: Thu 23 Oct 2025 04:04:03 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: PA9AF+d5//WKlVUjZ2sK7o2yBK7+ryXSdQ3/t3H0/ZM=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 04:04:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:d0:72:36:f9:52:40:bc:62:32:db:0c:f7:31:a8:db:bf:17:c6:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Oct 19 20:46:03 2025 GMT Not After : Oct 23 04:04:03 2025 GMT Subject: CN=9C03AEEDF72BD04D6C32E46BE4825CEDD4BFAA0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:7f:3e:20:63:02:32:76:26:e0:69:7d:97:7c: fe:70:7b:b7:44:2a:ba:29:50:f1:43:cb:53:14:f4: 85:e1:22:d2:b9:e2:c9:94:7f:0b:84:44:73:66:c6: 2f:b4:ad:8d:72:2d:73:a4:51:ce:87:d2:04:b7:11: 1e:78:bc:17:59:9a:31:a2:fd:df:3a:b5:96:e3:83: e3:18:43:ba:b0:bf:5d:f2:38:69:89:2c:79:17:70: 87:61:7c:bb:73:5d:54:06:92:55:2a:63:b9:7d:b3: 4b:ff:77:0e:d8:c9:9a:00:d6:61:95:e3:7e:3e:57: f2:5b:c4:60:4e:eb:d5:16:c6:89:51:aa:6e:f7:fe: dd:de:40:7a:f8:1b:07:3f:8b:c3:62:ce:c9:98:23: de:3c:d9:73:bb:68:af:14:ba:aa:f1:66:d8:46:98: a7:f4:a2:7b:89:cf:79:ac:cf:af:58:e6:06:1b:aa: 56:ff:75:cb:0a:8b:80:1f:10:fe:59:ca:65:33:f5: 6a:6c:8b:ba:51:e4:0b:fa:8a:0e:e2:a8:c2:42:49: fc:86:d0:e8:78:02:fc:57:19:03:0c:2f:a7:88:53: f1:f4:62:98:3a:a8:63:5d:c6:38:9f:47:33:12:4a: 62:d6:0c:f5:f9:44:82:86:e7:64:13:a4:43:de:5c: d1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:03:AE:ED:F7:2B:D0:4D:6C:32:E4:6B:E4:82:5C:ED:D4:BF:AA:0E X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d1:30:00:a1:af:62:c7:f6:d3:f7:a3:39:56:54:3a:5f:53: 1f:7e:99:32:46:6e:e6:a7:04:fc:a7:5b:87:bc:9a:de:06:36: 5b:4d:29:c6:aa:e2:29:ba:08:ff:ed:6e:6f:11:68:03:be:2a: 3f:a7:b5:da:0d:f0:b5:e3:19:ca:c4:65:fa:e4:50:ae:01:21: 98:11:79:16:1a:cf:94:98:58:8d:ff:a2:75:17:de:f9:05:d5: 01:28:79:ea:4a:be:63:86:de:c9:36:db:6d:d9:e5:98:6e:97: 23:f9:15:3a:c0:e3:89:e7:99:c5:68:7a:66:42:e2:f1:b2:84: 28:04:e2:6a:fe:8c:e9:27:b9:e0:b2:2b:9a:5e:43:d9:02:f5: b2:a7:bd:8d:5e:47:f3:89:96:66:cc:82:b4:8e:39:e7:90:35: 16:99:15:3f:c1:b5:68:b8:78:fd:ba:9b:9b:11:ec:ae:b8:aa: 95:38:4b:cc:a7:6b:86:0d:17:98:47:d5:e8:35:11:00:49:9a: 95:b9:be:d0:59:2f:eb:fa:87:01:dd:d2:5d:e4:5b:17:21:7c: 95:6a:17:ea:05:21:8d:92:01:c9:28:51:68:cd:f8:af:3b:ef: 94:7a:15:98:14:25:e0:90:52:59:2f:ad:51:6c:cb:a5:da:88: 1f:e0:2e:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUctByNvlSQLxiMtsM9zGo278Xxv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTEwMTkyMDQ2MDNaFw0yNTEwMjMwNDA0MDNaMDMxMTAvBgNV BAMTKDlDMDNBRUVERjcyQkQwNEQ2QzMyRTQ2QkU0ODI1Q0VERDRCRkFBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsfz4gYwIydibgaX2XfP5we7dE KropUPFDy1MU9IXhItK54smUfwuERHNmxi+0rY1yLXOkUc6H0gS3ER54vBdZmjGi /d86tZbjg+MYQ7qwv13yOGmJLHkXcIdhfLtzXVQGklUqY7l9s0v/dw7YyZoA1mGV 434+V/JbxGBO69UWxolRqm73/t3eQHr4Gwc/i8NizsmYI9482XO7aK8UuqrxZthG mKf0onuJz3msz69Y5gYbqlb/dcsKi4AfEP5ZymUz9Wpsi7pR5Av6ig7iqMJCSfyG 0Oh4AvxXGQMML6eIU/H0Ypg6qGNdxjifRzMSSmLWDPX5RIKG52QTpEPeXNFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnAOu7fcr0E1sMuRr5IJc7dS/qg4wHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3RMAChr2LH9tP3ozlWVDpfUx9+mTJGbuan BPynW4e8mt4GNltNKcaq4im6CP/tbm8RaAO+Kj+ntdoN8LXjGcrEZfrkUK4BIZgR eRYaz5SYWI3/onUX3vkF1QEoeepKvmOG3sk2223Z5ZhulyP5FTrA44nnmcVoemZC 4vGyhCgE4mr+jOknueCyK5peQ9kC9bKnvY1eR/OJlmbMgrSOOeeQNRaZFT/BtWi4 eP26m5sR7K64qpU4S8yna4YNF5hH1eg1EQBJmpW5vtBZL+v6hwHd0l3kWxchfJVq F+oFIY2SAckoUWjN+K8775R6FZgUJeCQUlkvrVFsy6XaiB/gLjg= -----END CERTIFICATE-----Generated at Mon Oct 20 15:01:03 2025 by rpki-client