$ rpki-client -vvf repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft File: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft (raw, json) Hash identifier: irheHIkAaKvhAjv7bdW0fHtM2+sFKmDzHdVwN++9U7Y= Subject key identifier: A0:6B:D1:CD:67:4F:D0:A7:29:42:BF:FF:3C:33:A4:EB:53:F9:0F:D1 Authority key identifier: BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B Certificate issuer: /CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Certificate serial: 281017936102E8B7555ACED15830D513E25ACA17 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft Manifest number: 0523 Signing time: Sat 18 Oct 2025 17:52:24 +0000 Manifest this update: Sat 18 Oct 2025 17:47:24 +0000 Manifest next update: Tue 21 Oct 2025 22:27:24 +0000 Files and hashes: 1: 323030313a6466303a63623a3a2f34382d3438203d3e203435373836.roa (hash: /ZSyzzH4osQQo8OEYTUKDqHS0TOIh680hRVxT7riSK4=) 2: 3131312e36372e38362e302f32332d3234203d3e203234353337.roa (hash: tDz28BGDnFd3MGcS96yd4J0BbOjvcShV8THChhLQTrA=) 3: 3230322e36312e3130302e302f32332d3234203d3e203435373836.roa (hash: a8mTP5wqsK0/6i33hi9F2fx0vcrLrr8F0sXVOsBm+uM=) 4: BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl (hash: WhTY3acRvPefqb+5tq/Pv1ZbVzBYK7TBtBEoEfKFNqg=) 5: 34352e36342e3130302e302f32322d3234203d3e203435373836.roa (hash: sLI9kyH4UUKtJ48DuSDvIEt/kI9PlelTvUCSLOep6GI=) 6: 3138322e35302e3234302e302f32302d3234203d3e203435373836.roa (hash: duzHqAm6QedJQSgIxWwqnRHJ98BpWQZp6Vy/UDaP+2w=) 7: 3131312e36372e37362e302f32342d3234203d3e203536323333.roa (hash: q6kGIkTw1IEwFZ8E1rrhCKF72eKLzmU0iFvN+CMeGms=) 8: 3131312e36372e37332e302f32342d3234203d3e203536323333.roa (hash: LN/QrtLQN7eBHDeVxv+de8QzLZrhiGE5e9eCTFW2W9s=) 9: 3130332e32312e38342e302f32322d3234203d3e203435373836.roa (hash: TQgzpMcLfaNgOb2UQ22DmepvwTBX2ZphizKn7sBXlfU=) 10: 3131312e36372e38302e302f32332d3234203d3e203535363931.roa (hash: 6r7ytzVqOZCu9ltnazdoDFZyu1sN5kdyWtk6OiFCZME=) 11: 3131312e36372e38382e302f32332d3234203d3e203234353337.roa (hash: Kkkq08Mmxr8hsDH69JGbHxLxb84nfHJXao32g/p1mFQ=) 12: 3131312e36372e36342e302f31392d3234203d3e203435373836.roa (hash: WtJvSkSMcWIFCYDWJoeYFOWIHYYIU2e63ZAjyF2Lb8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:27:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:10:17:93:61:02:e8:b7:55:5a:ce:d1:58:30:d5:13:e2:5a:ca:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B Validity Not Before: Oct 18 17:47:24 2025 GMT Not After : Oct 21 22:27:24 2025 GMT Subject: CN=A06BD1CD674FD0A72942BFFF3C33A4EB53F90FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b5:e4:9d:67:32:e0:63:3f:16:df:bc:b2:33: b1:f0:a6:b4:53:05:5a:85:a5:34:7b:a0:65:b1:f3: de:a9:e8:aa:c8:a8:f9:ee:b3:39:c4:56:cf:5d:43: 47:db:a0:00:50:4b:e2:93:63:ac:e5:1f:9f:d2:95: 54:fc:3f:dd:9b:fe:54:d5:b2:c2:e6:c9:e6:15:73: f8:93:de:6d:da:ca:92:23:13:9c:34:bf:27:87:ed: d5:56:67:34:fa:15:03:6c:b3:6e:e4:a5:a6:45:84: fa:9b:35:40:3f:9b:70:d9:d4:09:95:fb:0f:6a:c0: 49:53:bd:af:96:ae:23:98:04:f7:47:7f:7a:70:8c: df:17:21:ed:1e:27:2e:b9:61:6c:fc:0b:42:5a:90: d2:91:41:31:c2:8c:bc:f7:0f:24:2c:d9:f1:ee:ae: 65:55:ef:22:67:36:ee:b8:2c:6e:77:18:ac:59:37: a4:e6:fe:d9:79:2d:bb:ba:4d:45:e7:d2:f2:b5:8b: c7:32:a8:63:0e:eb:2a:a0:30:b1:2d:b9:f1:6e:46: 28:91:3f:cf:97:cc:be:0f:cd:22:ea:71:d7:25:cf: 55:36:67:45:ad:28:02:08:e8:47:d8:9d:63:bf:f7: fb:d7:b3:b6:b0:cd:fd:68:ac:89:5c:ea:a7:f4:9f: 07:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:6B:D1:CD:67:4F:D0:A7:29:42:BF:FF:3C:33:A4:EB:53:F9:0F:D1 X509v3 Authority Key Identifier: keyid:BF:07:6E:A2:4A:68:CF:15:2C:32:3C:7A:3D:FD:3F:92:AF:E8:AA:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e50da447-a138-4625-a420-a711ac243519/0/BF076EA24A68CF152C323C7A3DFD3F92AFE8AA2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:cf:92:b0:1c:03:01:c2:82:52:fe:75:ca:2a:cd:1c:71:de: f8:61:e3:8c:d2:e4:31:0e:c6:20:99:fb:8e:8d:69:b5:ba:fe: 31:70:4a:ed:e6:ca:55:d6:9f:a7:3f:52:9a:d7:63:9d:85:9b: 9e:15:ea:7a:8f:32:44:97:9b:9a:7c:11:9b:39:a1:59:fc:f6: 54:d4:fb:70:7c:15:4d:07:ad:81:32:31:f7:f5:f5:91:5f:29: 53:28:23:f1:b9:8c:3b:e0:d7:b2:1d:11:43:4c:f2:f1:1b:e8: c8:f5:a9:3b:2b:2a:99:40:52:3e:f8:9f:b6:17:70:a7:5f:98: 2f:91:f9:b4:fc:84:ac:6b:50:e2:67:7b:dc:b2:2c:8f:24:a4: 5c:6f:08:45:1c:01:7a:ea:dd:6e:8f:34:70:4a:c3:56:5f:ef: 4b:e1:3d:43:85:13:63:40:84:c6:03:74:c9:c9:af:f8:6f:58: 01:80:a4:64:0f:f8:b6:ff:da:22:73:a2:bc:1c:16:bb:18:ef: 89:c9:2e:6d:22:1b:fb:8c:a9:7f:8e:30:19:5f:68:b1:c6:86: 32:55:05:a6:a2:0d:95:0d:7d:4a:12:a2:15:ac:ab:a8:19:78: 7f:87:70:a8:d9:f4:ed:38:44:14:df:2b:e0:b8:f4:5f:90:9a: e5:f2:cb:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKBAXk2EC6LdVWs7RWDDVE+JayhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJB RkU4QUEyQjAeFw0yNTEwMTgxNzQ3MjRaFw0yNTEwMjEyMjI3MjRaMDMxMTAvBgNV BAMTKEEwNkJEMUNENjc0RkQwQTcyOTQyQkZGRjNDMzNBNEVCNTNGOTBGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGteSdZzLgYz8W37yyM7HwprRT BVqFpTR7oGWx896p6KrIqPnusznEVs9dQ0fboABQS+KTY6zlH5/SlVT8P92b/lTV ssLmyeYVc/iT3m3aypIjE5w0vyeH7dVWZzT6FQNss27kpaZFhPqbNUA/m3DZ1AmV +w9qwElTva+WriOYBPdHf3pwjN8XIe0eJy65YWz8C0JakNKRQTHCjLz3DyQs2fHu rmVV7yJnNu64LG53GKxZN6Tm/tl5Lbu6TUXn0vK1i8cyqGMO6yqgMLEtufFuRiiR P8+XzL4PzSLqcdclz1U2Z0WtKAII6EfYnWO/9/vXs7awzf1orIlc6qf0nwfnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoGvRzWdP0KcpQr//PDOk61P5D9EwHwYDVR0j BBgwFoAUvwduokpozxUsMjx6Pf0/kq/oqiswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NTBkYTQ0Ny1hMTM4LTQ2MjUtYTQyMC1hNzExYWMyNDM1MTkvMC9CRjA3NkVBMjRB NjhDRjE1MkMzMjNDN0EzREZEM0Y5MkFGRThBQTJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNGOTJBRkU4 QUEyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTUwZGE0NDctYTEzOC00NjI1LWE0 MjAtYTcxMWFjMjQzNTE5LzAvQkYwNzZFQTI0QTY4Q0YxNTJDMzIzQzdBM0RGRDNG OTJBRkU4QUEyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALrPkrAcAwHCglL+dcoqzRxx3vhh44zS5DEO xiCZ+46NabW6/jFwSu3mylXWn6c/UprXY52Fm54V6nqPMkSXm5p8EZs5oVn89lTU +3B8FU0HrYEyMff19ZFfKVMoI/G5jDvg17IdEUNM8vEb6Mj1qTsrKplAUj74n7YX cKdfmC+R+bT8hKxrUOJne9yyLI8kpFxvCEUcAXrq3W6PNHBKw1Zf70vhPUOFE2NA hMYDdMnJr/hvWAGApGQP+Lb/2iJzorwcFrsY74nJLm0iG/uMqX+OMBlfaLHGhjJV BaaiDZUNfUoSohWsq6gZeH+HcKjZ9O04RBTfK+C49F+QmuXyy70= -----END CERTIFICATE-----Generated at Mon Oct 20 09:40:45 2025 by rpki-client