$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: qOGrjbgo+xHd9gsgtPwjfkMw5teOdPbEGY4ojWrDHUs= Subject key identifier: 47:D4:08:17:76:BE:EE:8A:A5:09:5B:AC:F3:F4:6F:F8:83:DB:92:4E Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 75AF7987655DE5C4F610D88D91DF75D44F8BAFE7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 04BC Signing time: Sun 01 Mar 2026 23:42:19 +0000 Manifest this update: Sun 01 Mar 2026 23:37:19 +0000 Manifest next update: Thu 05 Mar 2026 01:30:19 +0000 Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: erwTtKUuglHwmeF4Wm/lLy6Pln9EWzRxLmGGyyhYoW8=) 2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:af:79:87:65:5d:e5:c4:f6:10:d8:8d:91:df:75:d4:4f:8b:af:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Mar 1 23:37:19 2026 GMT Not After : Mar 5 01:30:19 2026 GMT Subject: CN=47D4081776BEEE8AA5095BACF3F46FF883DB924E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:c4:fb:2d:de:78:23:3a:06:19:a2:25:b2:5f: 4e:2d:25:f9:91:f5:c2:12:b2:d6:60:53:d8:ac:f6: 76:71:51:35:29:cf:aa:22:f2:57:ca:07:71:21:77: 7e:a0:24:8d:80:e0:43:51:7a:31:91:2a:c6:84:44: 9c:5a:98:17:36:29:8e:cb:a9:5d:ea:d7:60:f3:6f: 51:c9:1d:c8:88:9c:23:94:98:8f:1c:72:ee:ca:45: 62:d1:8a:0e:d4:17:ae:90:33:18:8f:dd:9a:ca:dc: ae:6e:f4:40:83:35:e0:1f:43:7e:91:54:d4:27:89: d3:9c:08:4f:fd:12:40:88:af:88:67:f8:18:97:98: 0e:4d:00:e1:01:6e:85:62:b2:78:ef:b8:2c:8e:84: f5:31:5a:54:14:c2:e3:92:0c:95:a0:dd:ae:4d:ff: 24:c3:f3:53:d0:45:01:74:bd:24:37:fd:ff:6e:95: a0:6f:eb:19:af:c7:39:5d:df:9d:e9:23:4a:83:9b: f6:56:43:8d:b4:61:fa:3c:0e:4d:a2:1d:7a:e6:40: d6:16:2b:e6:a2:33:9b:77:bb:1f:7d:79:29:b4:4b: 60:78:5f:8a:47:34:82:49:4a:16:10:0d:fe:da:f5: 4e:2c:c3:4c:6f:3f:15:b9:d7:cf:a1:e4:e1:21:6e: 17:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D4:08:17:76:BE:EE:8A:A5:09:5B:AC:F3:F4:6F:F8:83:DB:92:4E X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:17:98:69:fc:d9:96:5f:ca:42:07:5b:45:95:e1:06:14:fa: 1f:5a:3e:90:c9:59:fb:14:87:3f:e3:a2:3e:46:ef:7c:d5:c3: 0b:10:c7:20:ce:be:b2:d4:3d:a6:8a:98:c9:3d:b6:46:1a:31: 8c:e8:4d:e4:c0:f1:66:f8:82:71:2f:c4:81:b1:42:8f:d7:9b: d6:02:59:81:cf:79:2a:29:38:3f:24:72:b7:3d:96:5c:cf:6c: 51:62:da:b3:d3:c4:bc:16:11:12:d5:ab:57:82:18:25:71:49: 5c:0e:75:00:75:d8:6f:fa:41:f2:d5:01:45:f0:24:d2:a7:b2: 42:4e:e2:63:83:d6:2c:aa:eb:0e:74:f2:47:7b:2f:89:3a:02: a3:db:0d:06:66:7d:c4:8b:fb:69:36:19:15:ed:56:9a:49:87: 12:ec:f9:54:11:89:f8:9f:fb:7a:7e:6c:5a:6c:72:bf:35:c5: 91:95:9e:76:fc:96:3a:f9:2a:17:e4:b9:e1:ec:e3:30:60:99: 37:06:f4:2c:e6:96:8d:62:82:27:88:6f:f3:07:f8:0f:d5:05: 82:0e:6f:77:d5:a2:75:82:60:e3:aa:f8:4e:c0:03:bd:0a:3f: 9c:ed:db:bd:69:a9:8c:74:1f:49:fe:db:6b:c9:b1:e0:24:12: 98:ad:1f:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUda95h2Vd5cT2ENiNkd911E+Lr+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNjAzMDEyMzM3MTlaFw0yNjAzMDUwMTMwMTlaMDMxMTAvBgNV BAMTKDQ3RDQwODE3NzZCRUVFOEFBNTA5NUJBQ0YzRjQ2RkY4ODNEQjkyNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYxPst3ngjOgYZoiWyX04tJfmR 9cISstZgU9is9nZxUTUpz6oi8lfKB3Ehd36gJI2A4ENRejGRKsaERJxamBc2KY7L qV3q12Dzb1HJHciInCOUmI8ccu7KRWLRig7UF66QMxiP3ZrK3K5u9ECDNeAfQ36R VNQnidOcCE/9EkCIr4hn+BiXmA5NAOEBboVisnjvuCyOhPUxWlQUwuOSDJWg3a5N /yTD81PQRQF0vSQ3/f9ulaBv6xmvxzld353pI0qDm/ZWQ420Yfo8Dk2iHXrmQNYW K+aiM5t3ux99eSm0S2B4X4pHNIJJShYQDf7a9U4sw0xvPxW518+h5OEhbhcfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9QIF3a+7oqlCVus8/Rv+IPbkk4wHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsXmGn82ZZfykIHW0WV4QYU+h9aPpDJWfsU hz/joj5G73zVwwsQxyDOvrLUPaaKmMk9tkYaMYzoTeTA8Wb4gnEvxIGxQo/Xm9YC WYHPeSopOD8kcrc9llzPbFFi2rPTxLwWERLVq1eCGCVxSVwOdQB12G/6QfLVAUXw JNKnskJO4mOD1iyq6w508kd7L4k6AqPbDQZmfcSL+2k2GRXtVppJhxLs+VQRifif +3p+bFpscr81xZGVnnb8ljr5KhfkueHs4zBgmTcG9Czmlo1igieIb/MH+A/VBYIO b3fVonWCYOOq+E7AA70KP5zt271pqYx0H0n+22vJseAkEpitH3A= -----END CERTIFICATE-----Generated at Mon Mar 2 16:29:57 2026 by rpki-client