$ rpki-client -vvf repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft File: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft (raw, json) Hash identifier: S1aGK66rrPYtQnZ7rYAhygLe6IPUDVkP2L4ZGJR/dPE= Subject key identifier: A0:75:C6:A6:2F:39:1E:51:0B:50:CE:52:71:00:5C:C5:50:8D:19:BB Authority key identifier: BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 Certificate issuer: /CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Certificate serial: 688D511CB439C6E5D175698F1A866DD257F4A2D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft Manifest number: 0130 Signing time: Fri 17 Apr 2026 04:00:59 +0000 Manifest this update: Fri 17 Apr 2026 03:55:59 +0000 Manifest next update: Mon 20 Apr 2026 05:05:59 +0000 Files and hashes: 1: BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl (hash: i07ssxy243REwAYgM5h6LghjR1plADkS7hDM4MpnUDc=) 2: 3136302e32302e33382e302f32342d3234203d3e20313532373637.roa (hash: Hz+bwv5TeiqLZz4vHu5RdAv/BqFZcBIfsejW6ExngYw=) 3: 3136302e32302e33392e302f32342d3234203d3e20313532373637.roa (hash: pleM7zjt401D1BJf2sqrcL6s2yWcWR5KklAwpJnySCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 05:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:8d:51:1c:b4:39:c6:e5:d1:75:69:8f:1a:86:6d:d2:57:f4:a2:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244 Validity Not Before: Apr 17 03:55:59 2026 GMT Not After : Apr 20 05:05:59 2026 GMT Subject: CN=A075C6A62F391E510B50CE5271005CC5508D19BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d1:da:15:c2:00:d1:99:f4:f1:0c:4a:2f:5f: cd:24:a6:99:fc:cf:1b:fe:00:3d:e1:68:89:da:af: 71:69:5f:db:c7:f8:18:f2:02:28:4d:76:4a:aa:be: 81:3e:e1:d8:a0:4d:e2:04:c5:64:72:54:71:35:bc: 1d:b6:11:71:cd:5d:76:06:7c:28:11:f4:0e:f6:81: 1e:1e:04:45:f5:7d:45:be:44:94:1c:f5:42:7c:c1: 65:67:eb:84:c9:bd:03:28:99:90:26:b5:9f:a2:df: d2:a9:5a:59:57:0b:d7:38:1f:bc:e6:86:f3:d4:f5: 21:fe:08:fd:80:82:4a:10:f4:32:f5:d1:f7:7d:bb: 4f:74:c7:2e:4f:d2:c7:e4:e9:3a:bb:be:3a:58:3d: 96:48:34:03:7c:d8:6e:81:75:7a:f9:d4:fc:84:cb: 5f:ae:07:1b:b6:8f:5a:f8:0f:18:f2:18:d4:db:6c: dc:e9:3d:15:1c:36:53:a6:18:b1:c8:0d:33:ce:bb: 10:76:a2:3d:40:9d:eb:1d:3f:d3:b4:87:a8:6b:7d: 0b:3d:26:17:48:28:ee:6d:04:8e:06:a6:7e:84:04: 53:5b:a0:9a:3f:41:43:07:26:84:13:f1:a1:3e:0e: 54:aa:f3:60:8d:4e:78:29:c5:02:76:93:da:04:db: 54:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:75:C6:A6:2F:39:1E:51:0B:50:CE:52:71:00:5C:C5:50:8D:19:BB X509v3 Authority Key Identifier: keyid:BC:A0:C1:EF:5A:4A:B3:AE:F4:25:E1:5A:B8:9A:19:CD:E5:68:82:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfe7dacc-2b45-4141-9775-f1bb9f052396/0/BCA0C1EF5A4AB3AEF425E15AB89A19CDE5688244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:a5:a7:39:2a:80:f4:82:9c:47:70:92:2d:63:64:47:bd:a9: fe:b6:64:ba:8e:52:dd:6e:2b:ee:3d:65:90:bb:f0:63:da:df: c0:29:2e:b6:15:46:83:2b:0d:f1:50:cd:de:ff:bc:72:97:99: c5:02:32:5c:2c:e0:67:4c:8e:72:21:41:9a:7d:ba:d2:16:a2: b7:12:29:7a:06:40:32:92:bb:62:64:f4:0d:ba:8a:2c:25:c8: d1:60:c4:95:dc:48:c7:46:50:8e:56:ba:1e:c7:11:86:c6:7a: f6:e7:cc:61:ae:88:ed:9c:bf:ff:0e:5e:ca:8f:fa:10:a4:50: b7:4f:fe:e2:1f:14:54:72:20:b0:f5:01:11:91:1d:54:c5:aa: d6:de:8f:eb:71:bd:a9:11:8d:3e:4f:fd:7a:8c:36:df:2a:be: 9a:00:91:27:27:84:27:93:5a:ef:2b:a7:7e:1a:a5:73:11:dc: 95:6a:f2:36:89:e2:fd:b8:8a:0c:89:a7:56:18:bc:94:33:43: 57:3f:cf:7f:2f:54:10:11:3a:71:87:24:d4:7b:1a:e4:23:8e: f6:cb:55:72:0d:7b:6f:a8:2a:01:b1:52:8c:1c:e5:3c:b3:b3: 1d:bc:9d:3c:43:ac:24:f8:43:94:73:78:74:7a:65:18:23:c6: 84:ba:0c:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaI1RHLQ5xuXRdWmPGoZt0lf0otQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RF NTY4ODI0NDAeFw0yNjA0MTcwMzU1NTlaFw0yNjA0MjAwNTA1NTlaMDMxMTAvBgNV BAMTKEEwNzVDNkE2MkYzOTFFNTEwQjUwQ0U1MjcxMDA1Q0M1NTA4RDE5QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD10doVwgDRmfTxDEovX80kppn8 zxv+AD3haInar3FpX9vH+BjyAihNdkqqvoE+4digTeIExWRyVHE1vB22EXHNXXYG fCgR9A72gR4eBEX1fUW+RJQc9UJ8wWVn64TJvQMomZAmtZ+i39KpWllXC9c4H7zm hvPU9SH+CP2AgkoQ9DL10fd9u090xy5P0sfk6Tq7vjpYPZZINAN82G6BdXr51PyE y1+uBxu2j1r4DxjyGNTbbNzpPRUcNlOmGLHIDTPOuxB2oj1AnesdP9O0h6hrfQs9 JhdIKO5tBI4Gpn6EBFNboJo/QUMHJoQT8aE+DlSq82CNTngpxQJ2k9oE21RnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoHXGpi85HlELUM5ScQBcxVCNGbswHwYDVR0j BBgwFoAUvKDB71pKs670JeFauJoZzeVogkQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmU3ZGFjYy0yYjQ1LTQxNDEtOTc3NS1mMWJiOWYwNTIzOTYvMC9CQ0EwQzFFRjVB NEFCM0FFRjQyNUUxNUFCODlBMTlDREU1Njg4MjQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5Q0RFNTY4 ODI0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZlN2RhY2MtMmI0NS00MTQxLTk3 NzUtZjFiYjlmMDUyMzk2LzAvQkNBMEMxRUY1QTRBQjNBRUY0MjVFMTVBQjg5QTE5 Q0RFNTY4ODI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKlpzkqgPSCnEdwki1jZEe9qf62ZLqOUt1u K+49ZZC78GPa38ApLrYVRoMrDfFQzd7/vHKXmcUCMlws4GdMjnIhQZp9utIWorcS KXoGQDKSu2Jk9A26iiwlyNFgxJXcSMdGUI5Wuh7HEYbGevbnzGGuiO2cv/8OXsqP +hCkULdP/uIfFFRyILD1ARGRHVTFqtbej+txvakRjT5P/XqMNt8qvpoAkScnhCeT Wu8rp34apXMR3JVq8jaJ4v24igyJp1YYvJQzQ1c/z38vVBAROnGHJNR7GuQjjvbL VXINe2+oKgGxUowc5Tyzsx28nTxDrCT4Q5RzeHR6ZRgjxoS6DL4= -----END CERTIFICATE-----Generated at Sat Apr 18 00:37:29 2026 by rpki-client