$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: 8BqicAUUq1tsYEfEDEWVo3Uw7JyEKrdBfshVlO6sc2E= Subject key identifier: CC:5A:31:86:72:5F:78:E2:89:4A:54:07:01:69:57:71:E7:94:00:8C Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 38C9129E9F144FE4AFB368426712D6AE9E2E9CBC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 04C4 Signing time: Thu 19 Mar 2026 23:42:19 +0000 Manifest this update: Thu 19 Mar 2026 23:37:19 +0000 Manifest next update: Mon 23 Mar 2026 05:05:19 +0000 Files and hashes: 1: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: L9gwaED+QUmzaMbAp/UEcVrmmLkrQ0sQmHq9gT/oE4M=) 2: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: tvbrgpnRc/Q6RgyaqccXwIS95wHSwvk+hPXU5wbUrgY=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 16HQZb88y83aHIsJXjQBx7+/lMzUX78B/OozTUnK7s4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 05:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c9:12:9e:9f:14:4f:e4:af:b3:68:42:67:12:d6:ae:9e:2e:9c:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Mar 19 23:37:19 2026 GMT Not After : Mar 23 05:05:19 2026 GMT Subject: CN=CC5A3186725F78E2894A540701695771E794008C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:de:02:06:b1:19:e2:51:af:43:9e:57:7a: 4a:3e:fa:24:01:1d:e3:e2:a1:9c:a6:05:3c:5d:c6: 85:ef:2b:dc:f5:a7:41:1c:7f:dd:48:16:b7:bf:0a: 20:1e:44:ed:ee:68:f4:9c:1b:68:08:63:3e:af:81: 12:4c:35:b6:68:cd:98:8e:54:7d:3e:4c:89:91:39: 39:8e:c5:54:ce:c3:c5:67:32:68:e7:8e:bc:75:fd: 1d:49:d0:0e:9d:16:61:d6:94:3f:0a:13:1f:95:8a: 9f:d0:f5:16:17:8c:5e:47:3b:a5:b3:7c:f6:8e:67: 48:b5:60:59:28:f4:5d:91:fa:81:2a:f5:fd:05:99: 79:f6:81:bd:d1:30:1c:d0:25:21:73:25:94:55:05: e1:36:0b:8b:20:28:19:c7:6e:d9:7c:9f:f4:62:1e: 48:75:f3:4d:12:7b:da:c5:ab:3e:90:68:7d:54:e3: 38:c5:1a:ee:68:f0:10:fc:39:f2:0f:95:43:46:31: b6:60:11:b8:6c:90:cf:70:04:41:a1:00:0e:5e:50: c1:76:8e:38:2f:61:c3:09:88:34:7e:e8:c8:35:ce: 91:93:6a:ca:78:e5:13:fb:98:64:94:49:f4:2e:72: 9a:89:d8:0d:51:23:66:1c:03:c5:68:2d:28:d9:5a: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:5A:31:86:72:5F:78:E2:89:4A:54:07:01:69:57:71:E7:94:00:8C X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:9c:a7:6b:7c:16:ee:3f:aa:64:99:ee:58:12:a2:9e:e7:14: e8:da:f5:e8:3a:65:27:4a:d5:5b:cb:d8:2f:14:4d:7f:a6:31: 39:ef:31:fa:10:ae:46:4c:47:78:b4:a2:d9:81:39:04:21:0a: fc:10:36:f8:39:63:56:b1:8e:c5:37:31:8d:1e:c3:bf:ac:4c: 19:7c:54:65:d5:44:64:d8:4c:4a:37:af:b5:5d:6c:5c:12:fb: 1b:e6:95:35:9d:12:5a:15:a2:33:ee:d2:f2:19:0f:90:15:ef: fd:f7:90:a1:49:be:a8:51:8e:24:ca:eb:e6:62:65:91:d3:8e: e1:67:29:80:bd:56:fd:79:ff:8d:ce:f4:8e:f4:94:50:45:63: 8e:69:2b:3b:9c:44:68:60:38:a1:9b:48:a7:ca:c3:33:90:b9: ec:d1:e0:0b:6a:21:7c:8b:42:4b:dc:1c:31:16:96:4e:a7:fd: dd:74:6c:0a:37:3e:e5:97:93:eb:24:2a:00:e0:9b:1e:bd:dd: a8:b7:e8:64:54:ab:25:2f:41:ac:56:dc:d0:ef:6f:43:b9:da: e1:a7:a9:d0:af:6c:49:78:25:89:81:e5:6b:30:d0:42:5a:86: bd:e8:20:f8:a4:32:d0:29:42:93:ee:90:2b:c3:c2:ac:c1:c0: cb:cf:c1:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMkSnp8UT+Svs2hCZxLWrp4unLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNjAzMTkyMzM3MTlaFw0yNjAzMjMwNTA1MTlaMDMxMTAvBgNV BAMTKENDNUEzMTg2NzI1Rjc4RTI4OTRBNTQwNzAxNjk1NzcxRTc5NDAwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0t4CBrEZ4lGvQ55Xeko++iQB HePioZymBTxdxoXvK9z1p0Ecf91IFre/CiAeRO3uaPScG2gIYz6vgRJMNbZozZiO VH0+TImROTmOxVTOw8VnMmjnjrx1/R1J0A6dFmHWlD8KEx+Vip/Q9RYXjF5HO6Wz fPaOZ0i1YFko9F2R+oEq9f0FmXn2gb3RMBzQJSFzJZRVBeE2C4sgKBnHbtl8n/Ri Hkh1800Se9rFqz6QaH1U4zjFGu5o8BD8OfIPlUNGMbZgEbhskM9wBEGhAA5eUMF2 jjgvYcMJiDR+6Mg1zpGTasp45RP7mGSUSfQucpqJ2A1RI2YcA8VoLSjZWlmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFoxhnJfeOKJSlQHAWlXceeUAIwwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAacp2t8Fu4/qmSZ7lgSop7nFOja9eg6ZSdK 1VvL2C8UTX+mMTnvMfoQrkZMR3i0otmBOQQhCvwQNvg5Y1axjsU3MY0ew7+sTBl8 VGXVRGTYTEo3r7VdbFwS+xvmlTWdEloVojPu0vIZD5AV7/33kKFJvqhRjiTK6+Zi ZZHTjuFnKYC9Vv15/43O9I70lFBFY45pKzucRGhgOKGbSKfKwzOQuezR4AtqIXyL QkvcHDEWlk6n/d10bAo3PuWXk+skKgDgmx693ai36GRUqyUvQaxW3NDvb0O52uGn qdCvbEl4JYmB5Wsw0EJahr3oIPikMtApQpPukCvDwqzBwMvPwR8= -----END CERTIFICATE-----Generated at Sat Mar 21 15:32:37 2026 by rpki-client