$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: 7le0fBt0t0ZIMPmkPOt1zo0cXMTrGm9sHpHOzxTI3X8= Subject key identifier: D7:10:73:AD:9B:3A:D9:34:40:D5:29:73:F7:97:AB:5B:F9:F8:59:75 Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 0BA878CCF8A2EA7E36B4A051B2BE75D21A9DF117 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: E8 Signing time: Tue 04 Nov 2025 15:20:51 +0000 Manifest this update: Tue 04 Nov 2025 15:15:51 +0000 Manifest next update: Fri 07 Nov 2025 21:29:51 +0000 Files and hashes: 1: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: Hz+bwv5TeiqLZz4vHu5RdAv/BqFZcBIfsejW6ExngYw=) 2: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: 2OT/gLm+6YdS6mTsTVJ8jhHJoQ4oY4g7SyZpb99l5Ko=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: pleM7zjt401D1BJf2sqrcL6s2yWcWR5KklAwpJnySCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:a8:78:cc:f8:a2:ea:7e:36:b4:a0:51:b2:be:75:d2:1a:9d:f1:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Nov 4 15:15:51 2025 GMT Not After : Nov 7 21:29:51 2025 GMT Subject: CN=D71073AD9B3AD93440D52973F797AB5BF9F85975 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:ed:f2:60:8c:6f:0e:e6:ae:ab:8d:7b:59:80: e6:56:a4:2a:cf:35:3c:1d:3e:14:92:12:b2:f2:25: e0:8a:1a:25:59:15:60:c5:5c:88:1b:5f:ce:28:31: 40:46:c8:26:e7:f4:c4:e2:dc:d4:f8:0f:78:70:65: eb:e2:45:43:9e:43:d7:bc:b2:bb:9a:e4:b7:96:65: 3d:64:b9:bd:67:26:57:54:2c:aa:41:98:f2:c7:04: f6:b3:27:53:45:7c:66:ef:3c:7c:80:32:eb:33:93: 97:6e:16:5b:a6:14:6d:46:ee:26:cf:30:68:e8:08: 53:1f:00:2d:a9:cf:66:93:c5:25:d2:e1:00:d2:76: 38:8e:dc:77:67:14:ac:cb:45:a6:3a:cb:eb:e8:1b: 18:15:cd:60:3a:04:d0:5f:10:10:69:f1:24:ea:1a: 06:90:7e:e8:7d:d8:66:bf:ca:36:fc:4d:38:43:ff: 1c:8c:54:aa:09:d0:f3:10:05:90:95:d9:3e:cf:04: db:d9:5b:fe:ba:7a:fc:d5:5c:ca:4b:80:07:ed:f8: a5:1d:c8:53:8e:91:cc:01:19:0f:7f:19:ed:b9:71: 7d:97:64:f6:06:d7:d0:66:5e:62:85:57:ab:a0:ed: 70:f1:3c:90:89:c8:81:3f:44:a6:af:69:11:61:94: bd:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:10:73:AD:9B:3A:D9:34:40:D5:29:73:F7:97:AB:5B:F9:F8:59:75 X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:16:e0:41:b0:6a:90:c3:e4:be:b0:e5:d9:f6:36:e0:c5:cd: 09:40:2b:69:f1:6b:00:ef:5c:7d:66:4b:01:7a:5f:a5:93:93: 92:15:e2:6d:2f:aa:5e:5c:04:11:36:44:84:52:f8:77:eb:f8: 77:2a:4b:90:7a:b4:1d:d7:98:80:b6:61:5a:5c:d8:4a:46:db: 02:a0:01:78:70:a4:4b:e9:3d:37:16:16:be:d6:27:d2:90:32: af:cc:d8:2d:4e:23:81:b1:a7:a4:94:9b:d4:82:74:30:27:9a: ba:e6:ee:db:df:bc:cb:b7:8b:4b:1d:96:7c:e1:59:83:92:67: b2:84:f4:e4:14:9f:c1:fd:27:a0:38:3f:de:1b:cd:62:45:13: 81:e0:d5:99:9d:8b:58:e7:7c:a9:08:6a:7d:27:a7:f0:14:9a: 6e:b7:4d:ca:b7:54:12:e0:be:e6:c2:55:fd:df:49:03:20:c9: 72:98:e3:7e:39:41:40:9c:53:11:7e:70:1e:6d:6e:97:40:89: 90:5b:d7:38:a2:54:9c:09:40:7b:05:1c:78:20:e9:d4:a0:7d: 03:17:e9:e3:da:d5:b9:1e:16:75:ec:b4:72:8f:1f:f7:f6:6c: 02:8b:b4:34:4e:76:90:e8:c6:b0:5c:94:87:f8:ab:bb:6d:6f: 7d:f0:ac:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC6h4zPii6n42tKBRsr510hqd8RcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNTExMDQxNTE1NTFaFw0yNTExMDcyMTI5NTFaMDMxMTAvBgNV BAMTKEQ3MTA3M0FEOUIzQUQ5MzQ0MEQ1Mjk3M0Y3OTdBQjVCRjlGODU5NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe7fJgjG8O5q6rjXtZgOZWpCrP NTwdPhSSErLyJeCKGiVZFWDFXIgbX84oMUBGyCbn9MTi3NT4D3hwZeviRUOeQ9e8 srua5LeWZT1kub1nJldULKpBmPLHBPazJ1NFfGbvPHyAMuszk5duFlumFG1G7ibP MGjoCFMfAC2pz2aTxSXS4QDSdjiO3HdnFKzLRaY6y+voGxgVzWA6BNBfEBBp8STq GgaQfuh92Ga/yjb8TThD/xyMVKoJ0PMQBZCV2T7PBNvZW/66evzVXMpLgAft+KUd yFOOkcwBGQ9/Ge25cX2XZPYG19BmXmKFV6ug7XDxPJCJyIE/RKavaRFhlL2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1xBzrZs62TRA1Slz95erW/n4WXUwHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA8W4EGwapDD5L6w5dn2NuDFzQlAK2nxawDv XH1mSwF6X6WTk5IV4m0vql5cBBE2RIRS+Hfr+HcqS5B6tB3XmIC2YVpc2EpG2wKg AXhwpEvpPTcWFr7WJ9KQMq/M2C1OI4Gxp6SUm9SCdDAnmrrm7tvfvMu3i0sdlnzh WYOSZ7KE9OQUn8H9J6A4P94bzWJFE4Hg1Zmdi1jnfKkIan0np/AUmm63Tcq3VBLg vubCVf3fSQMgyXKY4345QUCcUxF+cB5tbpdAiZBb1ziiVJwJQHsFHHgg6dSgfQMX 6ePa1bkeFnXstHKPH/f2bAKLtDROdpDoxrBclIf4q7ttb33wrF4= -----END CERTIFICATE-----Generated at Wed Nov 5 03:58:11 2025 by rpki-client