$ rpki-client -vvf repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft File: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft (raw, json) Hash identifier: OThz+BtxHIB/SzQeQOY2mj/ZANX/u+uDGSNemeCfU+w= Subject key identifier: 5A:E0:5D:3E:C1:D2:5A:B2:EC:8A:DE:8B:A4:5A:EE:0B:89:7C:60:5E Authority key identifier: BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 Certificate issuer: /CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Certificate serial: 0E222463A4BDE71505F5EF10EE499FFE1373B0CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft Manifest number: 021C Signing time: Sat 18 Oct 2025 09:41:26 +0000 Manifest this update: Sat 18 Oct 2025 09:36:26 +0000 Manifest next update: Tue 21 Oct 2025 14:18:26 +0000 Files and hashes: 1: 3130332e3138392e3131392e302f32342d3234203d3e20313439383833.roa (hash: CeJsPXYZaSv3nt0/slveGAtFgQcdV+Sze89sGyxFRnw=) 2: 3130332e3138392e3131382e302f32332d3233203d3e20313439383833.roa (hash: N0XCMCw3s4kIWnX0GxZG8K7vrea02I3zr3x0DohynM4=) 3: 3130332e3138392e3131382e302f32342d3234203d3e20313439383833.roa (hash: D9RmffxIYaHEobvTe2y7ZZC1r4KqpQ5ll315JKMW8os=) 4: BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl (hash: /Dy4AsZ9RdtOGG5m/hvkIQkmStCsbtNpzKLq0ZgQrY0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:18:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:22:24:63:a4:bd:e7:15:05:f5:ef:10:ee:49:9f:fe:13:73:b0:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BAC82A4D55B368F48D80BE045E0F4A8418C3EA73 Validity Not Before: Oct 18 09:36:26 2025 GMT Not After : Oct 21 14:18:26 2025 GMT Subject: CN=5AE05D3EC1D25AB2EC8ADE8BA45AEE0B897C605E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:84:5a:0e:e2:1f:5d:df:be:47:e4:85:af:45: cf:d3:37:b9:0e:17:3e:5c:37:22:83:d7:6d:1f:18: 7a:ab:5d:37:73:3a:5e:55:88:e7:e3:9e:e6:67:06: 5e:31:04:06:13:f9:03:27:5c:8b:e2:41:89:77:7a: 15:0d:de:3b:73:f1:de:80:fb:ec:b8:7b:9f:5c:20: f3:87:f7:04:a6:1b:79:4f:ed:df:05:96:91:a0:3e: 88:7d:cb:2f:ca:a0:7b:a7:2e:bc:fb:bb:06:9f:f4: 13:ff:76:2a:95:67:71:f8:80:9f:fe:10:8c:77:48: 27:cf:15:ae:3c:4d:1f:fe:84:ed:c2:b1:da:0f:68: dd:14:b9:ca:74:17:fa:97:e1:99:34:75:24:3f:5a: 75:5a:ac:53:29:25:57:da:d6:83:2e:de:d1:e7:07: 64:28:9c:88:38:63:81:57:3d:04:c8:7c:c7:42:49: 58:a6:e5:3d:f5:d0:17:77:d1:e0:1a:4e:56:02:ff: c1:97:1c:41:d3:19:de:72:8a:7e:e1:5a:54:f1:92: d9:f3:86:c2:38:3c:35:a4:4d:bf:44:d7:ca:f2:5c: 36:ac:6d:05:d3:f4:d1:92:a3:9b:90:e8:75:45:a3: 39:a0:9e:a2:82:14:70:48:c4:d8:5f:bc:71:9a:ed: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:E0:5D:3E:C1:D2:5A:B2:EC:8A:DE:8B:A4:5A:EE:0B:89:7C:60:5E X509v3 Authority Key Identifier: keyid:BA:C8:2A:4D:55:B3:68:F4:8D:80:BE:04:5E:0F:4A:84:18:C3:EA:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43ad5226-656d-461d-9cff-c83ac0742f20/0/BAC82A4D55B368F48D80BE045E0F4A8418C3EA73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:9e:ff:42:e0:0a:d3:d2:1d:b9:aa:22:97:70:9e:f2:d5:9a: 81:49:47:23:19:cd:2a:48:32:c8:58:d8:c9:b0:88:54:1f:0e: e7:41:6f:86:21:7a:55:4b:05:01:a1:cf:20:4b:53:ec:c9:e7: 9e:26:15:1a:0f:43:6e:6b:80:50:4d:78:be:d8:63:e8:9f:3d: 47:de:4e:52:6b:c4:af:15:aa:98:10:b9:0a:38:78:2e:69:d0: 82:46:cf:4d:15:a0:66:81:85:0a:47:f7:a3:52:e5:02:d2:84: 5f:e4:e1:db:b3:7c:43:10:b6:47:e7:84:c7:63:b8:8e:8f:38: c4:9f:60:78:b3:07:d5:91:27:66:8d:97:2d:5d:71:76:13:33: 7b:24:3e:26:84:a4:a3:23:7f:91:cf:33:7a:fd:e4:c7:71:cd: 84:22:cf:27:cb:0e:57:6b:07:9c:bb:85:03:62:85:64:ff:69: be:ad:a8:b1:50:19:e1:73:82:61:78:cc:f4:d6:1f:f5:71:4f: 80:7c:0a:a8:15:31:78:32:75:f4:83:16:5d:3a:d3:cb:ff:e6: c4:6b:e8:41:d6:4e:c5:e3:4c:51:05:c1:18:9e:e5:24:2a:66: 7b:8b:72:bc:ef:f3:b4:a8:84:aa:10:27:03:9a:c0:6a:70:a5: 34:8f:5f:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDiIkY6S95xUF9e8Q7kmf/hNzsMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQx OEMzRUE3MzAeFw0yNTEwMTgwOTM2MjZaFw0yNTEwMjExNDE4MjZaMDMxMTAvBgNV BAMTKDVBRTA1RDNFQzFEMjVBQjJFQzhBREU4QkE0NUFFRTBCODk3QzYwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjhFoO4h9d375H5IWvRc/TN7kO Fz5cNyKD120fGHqrXTdzOl5ViOfjnuZnBl4xBAYT+QMnXIviQYl3ehUN3jtz8d6A ++y4e59cIPOH9wSmG3lP7d8FlpGgPoh9yy/KoHunLrz7uwaf9BP/diqVZ3H4gJ/+ EIx3SCfPFa48TR/+hO3CsdoPaN0Uucp0F/qX4Zk0dSQ/WnVarFMpJVfa1oMu3tHn B2QonIg4Y4FXPQTIfMdCSVim5T310Bd30eAaTlYC/8GXHEHTGd5yin7hWlTxktnz hsI4PDWkTb9E18ryXDasbQXT9NGSo5uQ6HVFozmgnqKCFHBIxNhfvHGa7YxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWuBdPsHSWrLsit6LpFruC4l8YF4wHwYDVR0j BBgwFoAUusgqTVWzaPSNgL4EXg9KhBjD6nMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2FkNTIyNi02NTZkLTQ2MWQtOWNmZi1jODNhYzA3NDJmMjAvMC9CQUM4MkE0RDU1 QjM2OEY0OEQ4MEJFMDQ1RTBGNEE4NDE4QzNFQTczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRBODQxOEMz RUE3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhZDUyMjYtNjU2ZC00NjFkLTlj ZmYtYzgzYWMwNzQyZjIwLzAvQkFDODJBNEQ1NUIzNjhGNDhEODBCRTA0NUUwRjRB ODQxOEMzRUE3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6e/0LgCtPSHbmqIpdwnvLVmoFJRyMZzSpI MshY2MmwiFQfDudBb4YhelVLBQGhzyBLU+zJ554mFRoPQ25rgFBNeL7YY+ifPUfe TlJrxK8VqpgQuQo4eC5p0IJGz00VoGaBhQpH96NS5QLShF/k4duzfEMQtkfnhMdj uI6POMSfYHizB9WRJ2aNly1dcXYTM3skPiaEpKMjf5HPM3r95MdxzYQizyfLDldr B5y7hQNihWT/ab6tqLFQGeFzgmF4zPTWH/VxT4B8CqgVMXgydfSDFl0608v/5sRr 6EHWTsXjTFEFwRie5SQqZnuLcrzv87SohKoQJwOawGpwpTSPX0g= -----END CERTIFICATE-----Generated at Sun Oct 19 17:59:52 2025 by rpki-client