$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: fHU1TIkIE4AuTMo+zuoMhWgOYMDixYBZp7j+iOUfEx0= Subject key identifier: CD:8C:B3:C2:38:88:D3:54:F9:DD:49:A4:88:57:A4:D3:F4:12:4B:D7 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 6AA080B3100EE80B643B514E629DE87EB84B9530 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0487 Signing time: Tue 04 Nov 2025 09:02:05 +0000 Manifest this update: Tue 04 Nov 2025 08:57:05 +0000 Manifest next update: Fri 07 Nov 2025 12:53:05 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: tYB8turL57lc9RMETg+1q7ZLb25ao0mvFk3xcoPxM7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 12:53:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:a0:80:b3:10:0e:e8:0b:64:3b:51:4e:62:9d:e8:7e:b8:4b:95:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Nov 4 08:57:05 2025 GMT Not After : Nov 7 12:53:05 2025 GMT Subject: CN=CD8CB3C23888D354F9DD49A48857A4D3F4124BD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:ff:97:68:ee:57:09:3a:c9:2b:8f:6f:4f: dc:80:29:a6:6c:69:e9:bf:fa:02:ec:38:9d:eb:ed: b2:0f:72:3a:5c:e5:d1:01:c4:58:dc:7d:51:7d:2a: 7f:ba:61:66:da:7e:9d:07:9b:52:72:d4:11:49:21: 9b:1e:a7:29:f1:97:cb:de:8d:a1:63:cd:99:31:db: 8a:d8:48:85:8d:44:67:d0:c8:ef:81:b0:b7:23:f7: 7d:f9:83:49:71:b8:18:47:49:65:d9:96:5f:5a:b4: 26:34:34:ab:20:24:ca:f6:98:f4:b9:93:46:7a:be: c3:b4:ea:3b:3e:e6:b2:34:f7:32:03:e6:f2:a9:30: 09:5e:d9:26:cf:a3:cd:46:10:6a:e4:e6:b1:2f:60: 57:23:80:c1:ad:56:d4:4a:42:a0:eb:07:81:8c:8f: d1:0d:e8:27:c8:41:50:dc:12:bc:d3:6d:b4:1f:ad: a7:e5:a8:a4:36:27:6f:c7:e4:82:8c:48:5e:00:42: 97:3e:c1:82:92:67:e5:90:f3:e3:26:d7:8f:95:29: dc:d9:d1:f9:74:aa:c6:57:3e:f5:53:33:9e:e3:a6: 8f:12:01:d5:d6:d9:57:6d:75:68:bb:df:d1:ac:4c: 3c:ea:0e:c3:d1:ec:8f:3d:2b:c4:c8:3c:1e:c7:5b: 5d:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:8C:B3:C2:38:88:D3:54:F9:DD:49:A4:88:57:A4:D3:F4:12:4B:D7 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:1a:ff:01:88:1c:72:ad:a6:ba:2d:68:1b:4d:8a:5d:27:79: 31:81:10:ce:3d:13:c5:22:88:a1:6e:51:59:14:24:21:27:5d: 28:0f:e3:aa:70:6a:7d:7f:eb:59:aa:10:96:15:cc:19:d2:88: 57:82:d2:27:27:67:7c:8b:6c:45:65:af:d6:c2:b7:13:ee:38: 70:25:b7:41:d0:b6:67:b5:3c:9d:00:f4:0a:a6:6f:a8:81:64: 5d:18:93:1b:11:0c:87:14:1d:12:e8:e6:24:44:fd:53:d1:ea: c8:9a:73:02:dc:b6:e3:bf:92:f8:9a:f6:2f:7e:eb:34:ec:0d: 8d:7b:7e:62:44:3a:06:9a:89:3b:b4:75:02:9f:cb:68:a9:a8: c7:83:88:ff:15:ef:1e:11:5a:0a:3f:38:b6:75:0a:69:e6:de: 97:f6:7e:a2:bb:e1:01:ab:3f:6b:15:a3:af:9f:1d:e4:b3:42: 77:36:1b:49:50:81:0a:30:45:8d:c7:ab:6f:1a:24:56:86:e6: 29:c3:04:7e:7b:eb:21:42:39:43:b0:01:bd:98:3e:19:dd:17: fe:45:f4:22:15:a7:aa:66:5e:cd:a4:e6:58:fb:53:ce:1e:f3: 28:d0:6c:26:a5:77:15:b0:56:b3:34:c6:b6:c5:b3:d1:eb:5b: c9:c3:f8:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaqCAsxAO6AtkO1FOYp3ofrhLlTAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTExMDQwODU3MDVaFw0yNTExMDcxMjUzMDVaMDMxMTAvBgNV BAMTKENEOENCM0MyMzg4OEQzNTRGOURENDlBNDg4NTdBNEQzRjQxMjRCRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzp/+XaO5XCTrJK49vT9yAKaZs aem/+gLsOJ3r7bIPcjpc5dEBxFjcfVF9Kn+6YWbafp0Hm1Jy1BFJIZsepynxl8ve jaFjzZkx24rYSIWNRGfQyO+BsLcj9335g0lxuBhHSWXZll9atCY0NKsgJMr2mPS5 k0Z6vsO06js+5rI09zID5vKpMAle2SbPo81GEGrk5rEvYFcjgMGtVtRKQqDrB4GM j9EN6CfIQVDcErzTbbQfraflqKQ2J2/H5IKMSF4AQpc+wYKSZ+WQ8+Mm14+VKdzZ 0fl0qsZXPvVTM57jpo8SAdXW2VdtdWi739GsTDzqDsPR7I89K8TIPB7HW11/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYyzwjiI01T53UmkiFek0/QSS9cwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKca/wGIHHKtprotaBtNil0neTGBEM49E8Ui iKFuUVkUJCEnXSgP46pwan1/61mqEJYVzBnSiFeC0icnZ3yLbEVlr9bCtxPuOHAl t0HQtme1PJ0A9Aqmb6iBZF0YkxsRDIcUHRLo5iRE/VPR6siacwLctuO/kvia9i9+ 6zTsDY17fmJEOgaaiTu0dQKfy2ipqMeDiP8V7x4RWgo/OLZ1Cmnm3pf2fqK74QGr P2sVo6+fHeSzQnc2G0lQgQowRY3Hq28aJFaG5inDBH576yFCOUOwAb2YPhndF/5F 9CIVp6pmXs2k5lj7U84e8yjQbCaldxWwVrM0xrbFs9HrW8nD+N0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:13:16 2025 by rpki-client