$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: rRnkYpaFqftJA4PdIp6tC+CI5hb94L6B+q4oGu2K2Pw= Subject key identifier: 1A:09:D2:25:C2:E8:D4:C9:C3:EC:5E:40:54:05:7B:42:5A:CA:1D:E6 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 30EEA3268ED29480D2BB8CFC78AB8A660699A170 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0480 Signing time: Sun 19 Oct 2025 15:32:05 +0000 Manifest this update: Sun 19 Oct 2025 15:27:05 +0000 Manifest next update: Thu 23 Oct 2025 00:56:05 +0000 Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: tZZgiDisckrmzoikVkhPDulCsSbDLVzQctWigq46Ztg=) 2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 00:56:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:ee:a3:26:8e:d2:94:80:d2:bb:8c:fc:78:ab:8a:66:06:99:a1:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Oct 19 15:27:05 2025 GMT Not After : Oct 23 00:56:05 2025 GMT Subject: CN=1A09D225C2E8D4C9C3EC5E4054057B425ACA1DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:78:f4:2e:9e:bf:fa:33:f2:e4:fd:c9:16:61: 31:0c:37:bb:01:fb:8f:d8:73:4d:c0:0f:66:67:29: c8:7a:62:c4:3e:0c:ff:a8:11:16:1c:4d:89:b9:a8: 58:ec:1c:7e:96:29:03:f2:bf:5e:3a:27:e3:fa:53: 20:1d:1d:1e:60:1c:00:30:dc:5b:36:ce:98:02:85: e7:2e:61:a3:c6:7a:7b:3e:34:58:19:43:bd:2a:e4: 9a:24:a0:71:79:e7:e2:8c:05:e0:5d:cd:52:02:05: 08:75:a0:a4:bf:89:5e:6e:a9:90:4a:d9:6e:d0:53: 16:30:cc:8f:b4:9e:ce:28:53:0b:de:35:31:51:3a: c8:7d:30:2b:d3:98:a1:65:12:1f:ae:92:13:bf:fd: 69:0f:6b:7e:09:5d:6b:fe:26:31:b9:c4:a8:e0:d3: ac:b5:4c:ba:cb:50:0b:76:3f:d7:bf:b5:28:2a:49: ea:e8:77:d1:c7:64:84:db:72:15:84:4e:36:bb:f9: 73:bf:5a:f4:e3:7b:f7:f3:6d:bf:3b:52:f8:fe:a8: e5:8c:9a:d8:a8:96:46:2e:5a:42:94:6a:c6:32:d0: 00:b5:61:ac:cf:03:e7:f0:72:6c:ab:ad:ae:8c:6b: f7:d6:4e:ad:f3:88:2b:b2:a7:14:61:30:30:1d:8c: 88:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:09:D2:25:C2:E8:D4:C9:C3:EC:5E:40:54:05:7B:42:5A:CA:1D:E6 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:1e:0a:b3:15:89:e7:6b:ce:a2:3b:d2:56:c4:b3:0d:f3:e4: 4b:ac:ae:92:cc:e9:ac:f7:1d:d2:81:f7:26:82:cc:b6:45:fe: 31:43:34:01:6c:10:bd:ee:1a:39:82:6c:c2:64:63:76:52:26: de:21:e9:7f:08:7c:d4:1c:3e:6b:e8:f5:ba:8a:46:cd:35:98: 9f:84:10:fa:e0:0c:81:1b:1a:80:22:ad:8a:10:d3:97:ca:48: 3b:3c:da:ad:1c:e4:85:78:a1:e2:d2:88:a5:eb:aa:6a:a2:e5: f2:4a:52:1f:b1:b2:2b:87:b5:78:75:ed:da:bd:b4:21:dc:cc: 69:73:f6:77:67:8f:22:61:96:ac:37:f3:c5:2b:5a:63:78:a6: 52:f9:a6:a9:02:c4:7a:39:7e:74:c7:99:64:06:c5:73:80:df: d9:03:9b:bf:6d:d4:c2:5c:e8:ad:1e:f2:f3:7f:de:5f:57:f7: 73:f0:42:12:db:0d:00:28:6f:3d:b3:e9:d5:12:d5:ec:b5:b9: 2c:24:06:34:a1:e3:ca:5f:fd:eb:46:96:37:4a:71:7f:99:02: d4:df:bb:a0:56:bc:f8:c6:f7:68:46:56:7a:d7:06:35:69:43: b7:d7:88:9e:dc:d2:57:c5:ed:63:b1:3f:8c:3f:af:48:aa:7f: ab:d8:78:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMO6jJo7SlIDSu4z8eKuKZgaZoXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTEwMTkxNTI3MDVaFw0yNTEwMjMwMDU2MDVaMDMxMTAvBgNV BAMTKDFBMDlEMjI1QzJFOEQ0QzlDM0VDNUU0MDU0MDU3QjQyNUFDQTFERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1ePQunr/6M/Lk/ckWYTEMN7sB +4/Yc03AD2ZnKch6YsQ+DP+oERYcTYm5qFjsHH6WKQPyv146J+P6UyAdHR5gHAAw 3Fs2zpgChecuYaPGens+NFgZQ70q5JokoHF55+KMBeBdzVICBQh1oKS/iV5uqZBK 2W7QUxYwzI+0ns4oUwveNTFROsh9MCvTmKFlEh+ukhO//WkPa34JXWv+JjG5xKjg 06y1TLrLUAt2P9e/tSgqSerod9HHZITbchWETja7+XO/WvTje/fzbb87Uvj+qOWM mtiolkYuWkKUasYy0AC1YazPA+fwcmyrra6Ma/fWTq3ziCuypxRhMDAdjIh5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGgnSJcLo1MnD7F5AVAV7QlrKHeYwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQeCrMViedrzqI70lbEsw3z5EusrpLM6az3 HdKB9yaCzLZF/jFDNAFsEL3uGjmCbMJkY3ZSJt4h6X8IfNQcPmvo9bqKRs01mJ+E EPrgDIEbGoAirYoQ05fKSDs82q0c5IV4oeLSiKXrqmqi5fJKUh+xsiuHtXh17dq9 tCHczGlz9ndnjyJhlqw388UrWmN4plL5pqkCxHo5fnTHmWQGxXOA39kDm79t1MJc 6K0e8vN/3l9X93PwQhLbDQAobz2z6dUS1ey1uSwkBjSh48pf/etGljdKcX+ZAtTf u6BWvPjG92hGVnrXBjVpQ7fXiJ7c0lfF7WOxP4w/r0iqf6vYeAI= -----END CERTIFICATE-----Generated at Tue Oct 21 02:14:30 2025 by rpki-client