$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: dQn7KoANKlxXRp7mzEKY9bh1BgSQxMUfIMnsum7XoE8= Subject key identifier: 1E:BA:3E:BA:02:BE:A9:CC:64:13:24:DE:4B:94:51:E0:12:2F:69:4D Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 1382EC448CDA8DBF9C6ABFA310DDA06DD996D474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 0459 Signing time: Wed 23 Jul 2025 12:22:05 +0000 Manifest this update: Wed 23 Jul 2025 12:17:05 +0000 Manifest next update: Sat 26 Jul 2025 14:37:05 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 2: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) 3: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: t7m3/5Vs6kDZ2ncbGwvLY0TTqd/buhRoup4trpJmyuU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 14:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:82:ec:44:8c:da:8d:bf:9c:6a:bf:a3:10:dd:a0:6d:d9:96:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Jul 23 12:17:05 2025 GMT Not After : Jul 26 14:37:05 2025 GMT Subject: CN=1EBA3EBA02BEA9CC641324DE4B9451E0122F694D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:26:cf:2e:10:12:13:94:78:a4:fa:c3:97:23: 43:63:d7:c7:31:2f:86:5e:40:32:59:b6:bc:4a:49: 3c:85:7b:67:7a:29:9a:06:17:e7:81:f1:6e:92:e8: 66:94:bb:84:f7:48:23:b3:31:8a:3c:55:cc:86:01: 50:20:11:c0:67:a0:72:e0:2b:13:2a:44:ac:e0:76: b0:24:42:67:93:5f:7f:cb:4f:c6:b8:2c:d7:fb:ad: c3:55:9d:dc:be:6c:c1:df:07:ee:84:12:62:6c:32: c3:b9:3c:71:a3:d5:f5:3b:ff:4f:34:9c:82:c2:61: 20:3a:3e:de:af:32:92:76:54:38:c1:24:ec:3b:44: 46:f4:c3:0e:bf:0d:06:b9:a9:3e:82:92:d3:f6:e8: eb:b7:ff:ef:3d:e6:31:72:49:08:42:ef:18:4b:fd: 71:26:af:56:de:9a:8d:c1:66:74:c3:ac:4e:d6:01: 83:97:0f:27:70:4c:ab:26:0c:f7:a6:88:f1:de:15: 4f:73:c9:e7:fc:40:a8:2b:fb:ae:8e:b7:e7:69:6a: 44:65:0d:48:4f:99:e2:d0:11:b6:30:e8:87:fb:07: 25:b3:26:74:b2:87:11:96:f3:1e:d1:7e:81:14:f9: dc:64:3e:e8:91:24:91:61:3b:a6:67:dd:20:f7:e5: 92:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:BA:3E:BA:02:BE:A9:CC:64:13:24:DE:4B:94:51:E0:12:2F:69:4D X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:d1:69:8d:65:24:67:91:2f:15:20:6c:a9:9a:25:13:e0:5c: 40:a8:d8:1e:58:7c:b8:29:08:db:46:72:ae:5e:cc:dc:27:be: 44:92:d7:b6:7a:c9:af:4d:60:af:fc:00:fb:c9:39:54:d1:66: 5b:bc:56:8a:ba:26:99:04:47:52:a3:cc:fc:5a:f6:c9:61:e4: 88:43:bf:5b:0b:bb:41:50:57:24:dc:1d:89:a9:0f:75:be:49: 95:16:06:09:79:26:72:d6:02:b7:65:c1:0f:5d:ea:b2:7d:7c: fc:e8:fe:e7:44:4a:9f:1e:d7:c6:6d:3a:bf:9d:18:3c:76:46: db:0b:48:e9:e9:f1:85:77:bf:70:9f:97:16:6b:85:2b:41:e7: aa:26:3d:03:ad:0c:32:1a:e1:18:aa:e2:47:81:40:1d:97:4b: e9:45:da:06:a5:43:e6:c1:9f:03:ac:5d:25:35:c9:15:54:91: 06:5e:7b:a3:a6:ea:91:dc:59:e4:1b:cb:e9:dc:33:df:19:ac: b2:21:ac:30:51:a5:28:a2:75:03:7d:3a:90:61:8a:45:3b:9e: fd:67:e5:14:f4:37:29:74:78:51:65:92:06:e3:c4:dd:b3:74: 62:08:2d:96:2e:02:85:35:8e:71:01:32:60:5c:d0:ff:57:0e: db:82:69:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4LsRIzajb+car+jEN2gbdmW1HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA3MjMxMjE3MDVaFw0yNTA3MjYxNDM3MDVaMDMxMTAvBgNV BAMTKDFFQkEzRUJBMDJCRUE5Q0M2NDEzMjRERTRCOTQ1MUUwMTIyRjY5NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqJs8uEBITlHik+sOXI0Nj18cx L4ZeQDJZtrxKSTyFe2d6KZoGF+eB8W6S6GaUu4T3SCOzMYo8VcyGAVAgEcBnoHLg KxMqRKzgdrAkQmeTX3/LT8a4LNf7rcNVndy+bMHfB+6EEmJsMsO5PHGj1fU7/080 nILCYSA6Pt6vMpJ2VDjBJOw7REb0ww6/DQa5qT6CktP26Ou3/+895jFySQhC7xhL /XEmr1bemo3BZnTDrE7WAYOXDydwTKsmDPemiPHeFU9zyef8QKgr+66Ot+dpakRl DUhPmeLQEbYw6If7ByWzJnSyhxGW8x7RfoEU+dxkPuiRJJFhO6Zn3SD35ZJXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHro+ugK+qcxkEyTeS5RR4BIvaU0wHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfRaY1lJGeRLxUgbKmaJRPgXECo2B5YfLgp CNtGcq5ezNwnvkSS17Z6ya9NYK/8APvJOVTRZlu8Voq6JpkER1KjzPxa9slh5IhD v1sLu0FQVyTcHYmpD3W+SZUWBgl5JnLWArdlwQ9d6rJ9fPzo/udESp8e18ZtOr+d GDx2RtsLSOnp8YV3v3CflxZrhStB56omPQOtDDIa4Riq4keBQB2XS+lF2galQ+bB nwOsXSU1yRVUkQZee6Om6pHcWeQby+ncM98ZrLIhrDBRpSiidQN9OpBhikU7nv1n 5RT0Nyl0eFFlkgbjxN2zdGIILZYuAoU1jnEBMmBc0P9XDtuCack= -----END CERTIFICATE-----Generated at Fri Jul 25 03:56:08 2025 by rpki-client