$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: Qh3DKNu4WWh1hKqWzikoIK4wCAyvwcYfzYiuYbRcL50= Subject key identifier: 00:6B:A9:54:F2:82:A8:0F:03:BF:6F:46:57:40:70:0C:AE:BD:22:D8 Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 60DFD0275343668DE6EB9215A3CEC83AE325088F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 0224 Signing time: Tue 04 Nov 2025 08:41:24 +0000 Manifest this update: Tue 04 Nov 2025 08:36:24 +0000 Manifest next update: Fri 07 Nov 2025 15:55:24 +0000 Files and hashes: 1: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 2: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: Lv5fD5rfRHlKyv+xjGLPxs1JuFSqPk7n8uLV1DCanx8=) 3: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 4: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 15:55:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:df:d0:27:53:43:66:8d:e6:eb:92:15:a3:ce:c8:3a:e3:25:08:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Nov 4 08:36:24 2025 GMT Not After : Nov 7 15:55:24 2025 GMT Subject: CN=006BA954F282A80F03BF6F465740700CAEBD22D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:74:7b:19:be:c4:69:23:66:38:1b:da:ac:f1: fa:5f:d5:e4:92:42:dc:85:02:05:47:ed:87:15:c0: 34:54:20:7e:4b:4a:56:f8:2d:4f:f5:d7:5b:d1:d8: 76:67:c8:4c:cd:64:2a:74:94:9c:a0:83:00:41:d6: 6a:bb:c2:24:5a:c2:41:32:b5:85:74:19:e5:1e:b2: 1f:ba:ac:76:e2:ec:66:3a:27:71:fc:3c:05:a7:0c: 1b:d6:fb:6a:2d:cd:4f:1f:ae:38:99:ca:14:3f:31: b1:8f:17:8c:63:e7:49:ea:8b:ff:e2:15:f1:38:10: 82:7e:73:3c:a9:36:af:ab:00:a4:79:f2:fa:01:9a: f0:e2:bd:22:2a:8a:5d:d2:7b:14:79:01:30:08:27: 44:68:51:e4:e1:56:b6:22:70:ed:82:23:70:b3:eb: 68:a5:d0:47:01:b9:0f:31:3f:dd:ed:3c:39:5c:5d: df:45:87:fb:da:0d:18:55:ac:dd:04:13:da:e1:ef: 67:5c:41:b2:cc:0c:59:cb:86:58:0a:4f:08:6b:fc: 50:26:07:86:9e:47:41:8d:cd:b8:36:eb:c3:62:5c: 1e:33:38:52:17:0c:70:cc:9a:4b:3f:cf:4a:6b:e8: 77:57:86:45:c2:c1:34:ed:c5:e8:57:cd:b5:d2:77: 5e:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:6B:A9:54:F2:82:A8:0F:03:BF:6F:46:57:40:70:0C:AE:BD:22:D8 X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:4b:fa:8f:e9:e2:c5:8e:31:a9:bb:15:62:3b:b5:19:18:7e: 9d:19:b4:a6:b5:53:0b:fe:dd:c3:e6:a5:e7:a2:9a:ad:a8:18: a9:cc:d1:cd:93:0b:c2:0a:37:37:de:ec:e6:3e:6a:71:8e:a7: 33:d7:ca:fc:04:58:01:09:f6:09:ec:86:fd:c6:3e:3e:46:16: b6:5c:a6:16:66:38:a5:75:06:c2:df:99:ff:c3:5f:da:ab:b1: 09:ab:98:d5:98:0e:9d:b1:d1:e8:cb:c6:f6:0b:d9:f5:d8:64: 3a:33:4b:a5:a0:12:ba:88:27:b1:96:77:ce:4a:c6:a3:0b:63: 9c:bf:34:09:a0:87:7d:c5:52:e0:e1:25:fd:7d:c4:54:b3:fa: e8:d3:33:30:51:59:db:5f:94:b6:63:58:e3:e1:d3:a0:98:9c: 60:28:8f:43:85:41:46:cc:fe:6d:95:a0:2f:98:92:cb:d9:3c: 98:bc:d4:b0:4a:1e:89:84:14:f4:33:98:76:45:7a:e0:f3:26: d9:8f:84:64:73:99:0e:d6:ee:b7:8a:e0:3b:26:bf:c9:93:b0: 0d:6b:b8:cb:92:fb:59:a3:96:79:19:2a:ba:73:cc:4f:e0:2b: ac:4e:35:55:bf:b6:b3:fe:17:8c:d3:ec:dd:5d:ef:e7:89:0e: 6c:d2:6a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYN/QJ1NDZo3m65IVo87IOuMlCI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTExMDQwODM2MjRaFw0yNTExMDcxNTU1MjRaMDMxMTAvBgNV BAMTKDAwNkJBOTU0RjI4MkE4MEYwM0JGNkY0NjU3NDA3MDBDQUVCRDIyRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7dHsZvsRpI2Y4G9qs8fpf1eSS QtyFAgVH7YcVwDRUIH5LSlb4LU/111vR2HZnyEzNZCp0lJyggwBB1mq7wiRawkEy tYV0GeUesh+6rHbi7GY6J3H8PAWnDBvW+2otzU8frjiZyhQ/MbGPF4xj50nqi//i FfE4EIJ+czypNq+rAKR58voBmvDivSIqil3SexR5ATAIJ0RoUeThVrYicO2CI3Cz 62il0EcBuQ8xP93tPDlcXd9Fh/vaDRhVrN0EE9rh72dcQbLMDFnLhlgKTwhr/FAm B4aeR0GNzbg268NiXB4zOFIXDHDMmks/z0pr6HdXhkXCwTTtxehXzbXSd17HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGupVPKCqA8Dv29GV0BwDK69ItgwHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBL+o/p4sWOMam7FWI7tRkYfp0ZtKa1Uwv+ 3cPmpeeimq2oGKnM0c2TC8IKNzfe7OY+anGOpzPXyvwEWAEJ9gnshv3GPj5GFrZc phZmOKV1BsLfmf/DX9qrsQmrmNWYDp2x0ejLxvYL2fXYZDozS6WgErqIJ7GWd85K xqMLY5y/NAmgh33FUuDhJf19xFSz+ujTMzBRWdtflLZjWOPh06CYnGAoj0OFQUbM /m2VoC+YksvZPJi81LBKHomEFPQzmHZFeuDzJtmPhGRzmQ7W7reK4Dsmv8mTsA1r uMuS+1mjlnkZKrpzzE/gK6xONVW/trP+F4zT7N1d7+eJDmzSanE= -----END CERTIFICATE-----Generated at Wed Nov 5 03:10:21 2025 by rpki-client