$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: Ubwst16bU0tOK+BWJnpndGsJiXKbekcu8dsa6odc/0c= Subject key identifier: A4:F3:53:12:D9:1D:FE:82:24:FD:5C:0B:B8:41:B1:1E:CA:B4:55:81 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 0DD39A7CA1987F1F28CEA33403674DBE87DE357C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 04D1 Signing time: Fri 17 Apr 2026 22:12:20 +0000 Manifest this update: Fri 17 Apr 2026 22:07:20 +0000 Manifest next update: Tue 21 Apr 2026 05:51:20 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) 2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: Fx68HzOHBErkyyJqctL60MK1+RkupIvvzL89+1PyOe4=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 04:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d3:9a:7c:a1:98:7f:1f:28:ce:a3:34:03:67:4d:be:87:de:35:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Apr 17 22:07:20 2026 GMT Not After : Apr 21 05:51:20 2026 GMT Subject: CN=A4F35312D91DFE8224FD5C0BB841B11ECAB45581 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:c9:85:e8:ef:a0:8f:60:11:d5:6d:81:0a:36: bf:99:55:38:5b:67:26:61:61:d6:69:11:24:7f:dd: 4a:b5:e7:11:48:8c:47:e8:56:39:76:fb:ad:89:1e: 45:6f:17:fe:f6:ae:12:b1:1b:b6:7b:ad:a0:cc:e9: 1f:a1:98:f7:33:b4:fe:8a:ae:cf:e7:99:d3:b2:d7: d2:af:f1:96:3b:8e:55:ca:15:6c:2d:33:d5:63:12: 31:6e:ff:1a:d7:00:b2:ff:af:e0:f7:c2:80:1f:11: 23:bf:60:e6:fb:ee:c0:6f:21:b4:b5:ee:57:1b:01: 0e:18:88:e4:f0:0c:3a:f9:04:71:39:e5:cc:f3:59: 8b:21:f6:20:9a:5f:b2:08:27:ba:b6:c0:ee:49:11: 6e:3d:72:f9:b2:d8:43:4b:f3:47:69:79:98:0b:1c: 75:5e:34:92:d2:d4:d8:a2:06:11:bc:9a:57:7b:82: 85:06:4c:79:0d:f1:7b:4b:48:89:19:b3:a8:6c:9d: 51:3f:0a:62:98:fd:08:fd:e2:5b:25:bf:85:2f:73: b3:2e:25:68:ca:7e:ec:13:6c:15:70:7b:26:fc:2f: 25:ee:67:f7:1d:de:e0:0e:95:0f:f7:d3:ae:4f:d8: ac:c2:23:c7:56:3e:7b:37:d9:80:ec:08:12:4b:5e: 56:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:F3:53:12:D9:1D:FE:82:24:FD:5C:0B:B8:41:B1:1E:CA:B4:55:81 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:6a:35:06:17:ae:b5:20:2e:02:8b:b0:e8:e6:c5:4d:18:3a: 62:f8:8e:22:76:77:89:44:ea:e7:95:78:5c:4d:fc:5a:e0:bc: db:f1:c7:a2:97:89:54:8c:e9:9a:96:46:3a:a5:33:9a:00:2d: 7a:dc:06:18:3b:50:68:57:8b:bc:59:8e:f6:b9:ec:16:ff:a7: f1:36:cc:4e:49:ca:bb:58:56:56:c6:35:b1:e3:35:e6:08:b8: f0:fd:d9:91:78:c9:87:c8:d2:92:a9:5a:29:54:f5:a7:7c:3e: d0:c7:a1:60:ee:20:21:47:c1:dc:98:59:2d:f3:cc:55:17:8d: 51:b4:ac:da:8b:c5:c4:44:74:25:b4:cf:27:7a:9d:e2:c6:d9: 00:15:90:ed:b9:4a:1c:6d:28:78:aa:cc:77:80:ad:f0:b6:ba: 3f:0c:41:fc:6a:19:28:77:aa:ce:47:41:63:e7:04:70:cf:33: 0d:48:44:e5:b1:d6:d3:1d:b2:62:58:a8:65:eb:e2:d8:4f:2c: c2:5a:5a:db:4a:71:64:a3:e7:77:cf:45:16:c7:b0:20:0f:df: f3:cf:2c:35:55:93:bf:ed:fd:f5:0c:ba:0d:a7:ab:57:f2:42: 0e:04:a9:13:e2:25:48:f6:7b:a0:04:a3:27:a3:93:e4:b9:c1: 25:92:54:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdOafKGYfx8ozqM0A2dNvofeNXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNjA0MTcyMjA3MjBaFw0yNjA0MjEwNTUxMjBaMDMxMTAvBgNV BAMTKEE0RjM1MzEyRDkxREZFODIyNEZENUMwQkI4NDFCMTFFQ0FCNDU1ODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcyYXo76CPYBHVbYEKNr+ZVThb ZyZhYdZpESR/3Uq15xFIjEfoVjl2+62JHkVvF/72rhKxG7Z7raDM6R+hmPcztP6K rs/nmdOy19Kv8ZY7jlXKFWwtM9VjEjFu/xrXALL/r+D3woAfESO/YOb77sBvIbS1 7lcbAQ4YiOTwDDr5BHE55czzWYsh9iCaX7IIJ7q2wO5JEW49cvmy2ENL80dpeZgL HHVeNJLS1NiiBhG8mld7goUGTHkN8XtLSIkZs6hsnVE/CmKY/Qj94lslv4Uvc7Mu JWjKfuwTbBVweyb8LyXuZ/cd3uAOlQ/3065P2KzCI8dWPns32YDsCBJLXlYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpPNTEtkd/oIk/VwLuEGxHsq0VYEwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBqNQYXrrUgLgKLsOjmxU0YOmL4jiJ2d4lE 6ueVeFxN/FrgvNvxx6KXiVSM6ZqWRjqlM5oALXrcBhg7UGhXi7xZjva57Bb/p/E2 zE5JyrtYVlbGNbHjNeYIuPD92ZF4yYfI0pKpWilU9ad8PtDHoWDuICFHwdyYWS3z zFUXjVG0rNqLxcREdCW0zyd6neLG2QAVkO25ShxtKHiqzHeArfC2uj8MQfxqGSh3 qs5HQWPnBHDPMw1IROWx1tMdsmJYqGXr4thPLMJaWttKcWSj53fPRRbHsCAP3/PP LDVVk7/t/fUMug2nq1fyQg4EqRPiJUj2e6AEoyejk+S5wSWSVJc= -----END CERTIFICATE-----Generated at Sat Apr 18 01:07:11 2026 by rpki-client