$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: jBpkY2kq7vA0wTWdYK6Z+DxJkwH6apytdDQfBnvalsE= Subject key identifier: A8:AD:35:FC:7D:7C:39:FB:03:61:3F:9F:20:77:51:B1:C5:13:3C:3E Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 04CDD7D503AA0594EEDA6BF12D3F0F1D4EEFAE4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 04C6 Signing time: Tue 24 Mar 2026 13:12:25 +0000 Manifest this update: Tue 24 Mar 2026 13:07:25 +0000 Manifest next update: Fri 27 Mar 2026 18:51:25 +0000 Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: HSie57xta5Mx2fitxryXEFxEsmzzOUHmhycZ9HC8x58=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) 3: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:cd:d7:d5:03:aa:05:94:ee:da:6b:f1:2d:3f:0f:1d:4e:ef:ae:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Mar 24 13:07:25 2026 GMT Not After : Mar 27 18:51:25 2026 GMT Subject: CN=A8AD35FC7D7C39FB03613F9F207751B1C5133C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:50:c6:e0:64:0f:07:32:a5:77:4a:a4:be:dd: f4:1b:b2:e2:c2:9e:37:ce:2c:eb:78:82:f5:a4:2b: c0:da:56:9c:06:7c:38:2d:9e:79:a3:1f:6d:ba:3d: 96:82:e2:99:9a:27:2f:65:88:f1:ed:1d:8d:70:6e: 3e:44:a0:08:2a:ec:da:d8:7c:05:f0:2b:25:4d:59: 27:93:ef:84:15:83:3a:33:65:6d:79:88:15:c4:d0: c4:9e:73:64:12:bf:f7:a6:bd:e4:7d:7d:e6:98:ed: 18:46:71:5c:20:71:6d:03:cf:2c:cd:f4:6f:89:60: 85:c4:c5:43:92:77:8a:b3:7f:f3:44:0f:39:ea:58: 4c:68:68:7a:9f:25:ab:5a:40:36:e1:58:92:9f:e7: 85:ca:5e:18:79:41:82:00:b5:37:61:24:3e:be:6f: 1c:a0:ac:88:4e:c1:55:0c:d0:a6:8b:1f:b7:8f:24: e5:02:99:66:35:09:5d:65:66:91:0d:b0:bf:50:47: 15:4a:2f:a0:b4:35:38:3e:dc:14:cf:89:e5:97:96: 4b:6d:bf:86:48:1c:65:02:0b:02:b0:1c:33:ea:00: e7:e8:78:78:93:fb:47:7c:53:7e:93:40:f6:27:15: d6:bb:e1:b0:00:e5:f6:8f:b1:2c:df:38:b3:d5:23: 2d:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:AD:35:FC:7D:7C:39:FB:03:61:3F:9F:20:77:51:B1:C5:13:3C:3E X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:6a:85:c2:5a:93:ea:dd:ef:5f:05:32:41:d2:55:f1:17:74: 2b:f6:86:35:e5:50:60:eb:6e:90:58:90:86:e1:6b:cb:d7:96: e9:00:22:b2:f1:cd:b6:9d:c9:99:8a:df:de:48:d1:14:c4:45: 7f:4d:c1:e0:99:71:e6:b0:b8:a9:f6:87:23:00:63:48:a7:fb: f8:1f:69:0e:31:c7:06:de:2c:25:ba:97:ec:5d:d5:3c:3e:46: 46:c5:12:57:0c:de:4a:b7:9f:33:c4:73:f6:76:ee:aa:35:0f: d4:a1:4b:56:04:23:0b:22:8a:00:e8:91:c0:fc:8b:d8:66:fe: e8:c7:56:d2:c0:82:04:c5:27:12:3f:2c:21:59:b5:5e:a4:d5: 74:a7:df:28:dc:50:48:90:36:1d:c4:93:8c:12:36:de:50:81: 84:64:dc:b6:f2:17:2d:75:5f:e6:7b:6d:22:d9:3a:1b:32:3f: 95:1b:96:55:cb:af:8f:ba:3e:fb:8f:76:6f:89:f4:57:d1:62: 19:3f:b3:50:49:34:3c:3b:bf:93:97:b9:e1:a4:41:84:b9:48: b0:ad:f4:2d:82:07:82:8e:d8:41:4c:d7:f9:c8:89:4e:2e:6d: 7c:3e:bd:04:af:ee:3e:5a:56:42:40:59:99:9b:87:5b:b0:30: f4:a7:d3:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBM3X1QOqBZTu2mvxLT8PHU7vrkowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNjAzMjQxMzA3MjVaFw0yNjAzMjcxODUxMjVaMDMxMTAvBgNV BAMTKEE4QUQzNUZDN0Q3QzM5RkIwMzYxM0Y5RjIwNzc1MUIxQzUxMzNDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkUMbgZA8HMqV3SqS+3fQbsuLC njfOLOt4gvWkK8DaVpwGfDgtnnmjH226PZaC4pmaJy9liPHtHY1wbj5EoAgq7NrY fAXwKyVNWSeT74QVgzozZW15iBXE0MSec2QSv/emveR9feaY7RhGcVwgcW0DzyzN 9G+JYIXExUOSd4qzf/NEDznqWExoaHqfJataQDbhWJKf54XKXhh5QYIAtTdhJD6+ bxygrIhOwVUM0KaLH7ePJOUCmWY1CV1lZpENsL9QRxVKL6C0NTg+3BTPieWXlktt v4ZIHGUCCwKwHDPqAOfoeHiT+0d8U36TQPYnFda74bAA5faPsSzfOLPVIy3xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqK01/H18OfsDYT+fIHdRscUTPD4wHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFqhcJak+rd718FMkHSVfEXdCv2hjXlUGDr bpBYkIbha8vXlukAIrLxzbadyZmK395I0RTERX9NweCZceawuKn2hyMAY0in+/gf aQ4xxwbeLCW6l+xd1Tw+RkbFElcM3kq3nzPEc/Z27qo1D9ShS1YEIwsiigDokcD8 i9hm/ujHVtLAggTFJxI/LCFZtV6k1XSn3yjcUEiQNh3Ek4wSNt5QgYRk3LbyFy11 X+Z7bSLZOhsyP5UbllXLr4+6PvuPdm+J9FfRYhk/s1BJNDw7v5OXueGkQYS5SLCt 9C2CB4KO2EFM1/nIiU4ubXw+vQSv7j5aVkJAWZmbh1uwMPSn00Q= -----END CERTIFICATE-----Generated at Thu Mar 26 15:42:16 2026 by rpki-client