$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: ZqCyLWpJB/y4g1xLXuD8KZ+YJQ1Uye22DZ/ur4JVQw4= Subject key identifier: F2:C5:56:2A:F8:1D:EE:6E:2D:96:2F:4C:5E:12:97:72:64:36:F7:F3 Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 524CB580E90E9C2BB5789D80DE4E32720B71FB70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: BD Signing time: Fri 22 Aug 2025 00:21:04 +0000 Manifest this update: Fri 22 Aug 2025 00:16:04 +0000 Manifest next update: Mon 25 Aug 2025 08:58:04 +0000 Files and hashes: 1: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) 2: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: JOBY/NlSlGHoPdllwWg6uYaDmZUNUQw9rStYyvzjiy8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 08:58:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:4c:b5:80:e9:0e:9c:2b:b5:78:9d:80:de:4e:32:72:0b:71:fb:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Aug 22 00:16:04 2025 GMT Not After : Aug 25 08:58:04 2025 GMT Subject: CN=F2C5562AF81DEE6E2D962F4C5E1297726436F7F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2f:02:74:65:9a:25:54:ea:4f:45:24:ab:f8: 7c:e7:68:fc:dc:58:80:ad:12:38:f6:0b:10:73:07: 0c:a6:25:8f:34:18:1f:f6:fb:cf:97:d2:db:fd:0d: 32:a3:3b:ff:41:ec:f6:df:4b:1a:f0:f0:b3:9c:53: 5c:19:75:b8:77:eb:95:93:92:15:93:0a:17:08:5b: 3c:2f:ca:91:83:35:e3:6d:ce:05:f3:aa:a4:ce:ab: 12:fc:c1:cc:be:80:89:c2:d4:f8:43:45:5b:18:13: 93:11:7e:d7:9e:4e:64:9e:a1:74:c5:21:58:27:8b: 18:41:69:42:3b:6f:80:67:22:fc:4f:06:38:df:ec: 6d:5e:b0:06:74:fd:ea:af:22:0f:31:1e:62:60:68: 6e:0f:df:53:f7:5a:45:43:97:ae:97:c3:7b:98:ee: 9b:5a:3c:21:42:c3:6a:bd:ae:52:37:6a:d7:4d:3e: 56:37:a2:29:22:2e:6e:c5:a3:c0:a8:c7:c3:19:35: b7:c4:73:21:0f:4f:c9:1b:1b:f4:63:35:85:2e:9f: 3f:1b:2c:dc:87:b4:7a:c7:64:29:4f:73:9a:41:27: fc:51:eb:28:9d:18:25:8c:bd:05:74:a7:4c:8e:e6: 51:ad:d0:f4:25:08:a4:b1:78:fd:cc:c8:3b:d2:48: 2a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:C5:56:2A:F8:1D:EE:6E:2D:96:2F:4C:5E:12:97:72:64:36:F7:F3 X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:9b:0e:32:b3:7b:95:39:ac:38:95:49:d7:20:24:0e:b4:a0: 11:63:90:ef:48:ff:d7:81:a3:0d:4a:4e:a2:3a:06:07:f0:94: d2:84:4a:68:d2:7d:35:7d:5c:d6:1d:c4:4c:f2:c7:a5:d0:ad: 8b:6d:db:3c:40:c3:cb:fa:36:1b:b8:3f:f1:0f:0c:b0:cd:e9: 99:ca:31:5d:fd:bb:e3:40:6d:71:bc:b2:ac:d1:24:0e:ed:10: 98:7d:4a:41:e6:f3:82:3b:b7:db:da:2f:01:b0:a9:55:62:4f: 75:bf:54:35:df:ff:7d:a8:96:55:a6:0d:5b:f8:d0:49:83:13: 96:30:c5:96:b2:4d:20:0c:85:0d:1e:0c:61:81:8e:1f:d5:ab: 18:0b:9c:d8:f9:5f:c2:88:4d:c1:06:92:2d:bc:a7:c5:89:9b: 90:1c:28:2c:20:c3:39:e2:df:d5:71:69:c8:8c:6b:f6:52:eb: f1:f9:74:61:55:e8:c0:eb:8d:b9:d1:52:37:d9:cd:c0:84:6d: b2:a5:e9:ef:c3:c9:46:13:3a:13:77:36:4f:67:b2:0c:73:a2: 52:d1:87:dd:81:eb:bb:98:cc:c3:1b:89:48:f7:77:7c:6e:96: ca:94:4f:38:41:76:9f:12:b1:3b:2b:fb:94:40:08:63:ca:60: f2:5a:02:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUky1gOkOnCu1eJ2A3k4ycgtx+3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA4MjIwMDE2MDRaFw0yNTA4MjUwODU4MDRaMDMxMTAvBgNV BAMTKEYyQzU1NjJBRjgxREVFNkUyRDk2MkY0QzVFMTI5NzcyNjQzNkY3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLwJ0ZZolVOpPRSSr+HznaPzc WICtEjj2CxBzBwymJY80GB/2+8+X0tv9DTKjO/9B7PbfSxrw8LOcU1wZdbh365WT khWTChcIWzwvypGDNeNtzgXzqqTOqxL8wcy+gInC1PhDRVsYE5MRfteeTmSeoXTF IVgnixhBaUI7b4BnIvxPBjjf7G1esAZ0/eqvIg8xHmJgaG4P31P3WkVDl66Xw3uY 7ptaPCFCw2q9rlI3atdNPlY3oikiLm7Fo8Cox8MZNbfEcyEPT8kbG/RjNYUunz8b LNyHtHrHZClPc5pBJ/xR6yidGCWMvQV0p0yO5lGt0PQlCKSxeP3MyDvSSCrxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8sVWKvgd7m4tli9MXhKXcmQ29/MwHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM6bDjKze5U5rDiVSdcgJA60oBFjkO9I/9eB ow1KTqI6BgfwlNKESmjSfTV9XNYdxEzyx6XQrYtt2zxAw8v6Nhu4P/EPDLDN6ZnK MV39u+NAbXG8sqzRJA7tEJh9SkHm84I7t9vaLwGwqVViT3W/VDXf/32ollWmDVv4 0EmDE5YwxZayTSAMhQ0eDGGBjh/VqxgLnNj5X8KITcEGki28p8WJm5AcKCwgwzni 39VxaciMa/ZS6/H5dGFV6MDrjbnRUjfZzcCEbbKl6e/DyUYTOhN3Nk9nsgxzolLR h92B67uYzMMbiUj3d3xulsqUTzhBdp8SsTsr+5RACGPKYPJaAqU= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:12 2025 by rpki-client