$ rpki-client -vvf repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft File: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft (raw, json) Hash identifier: JmNEu0+hqBH2LdMOXFY5HCgKG4Rx/QCimpaAOl4ld78= Subject key identifier: BD:C3:A8:BF:A0:CB:75:85:F6:B8:D5:18:00:21:1F:78:17:57:94:2F Authority key identifier: BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 Certificate issuer: /CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Certificate serial: 18BCCD03DA250EEA43DA08C179FEF30D2D243D27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft Manifest number: C3 Signing time: Thu 04 Sep 2025 19:51:02 +0000 Manifest this update: Thu 04 Sep 2025 19:46:02 +0000 Manifest next update: Mon 08 Sep 2025 05:55:02 +0000 Files and hashes: 1: BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl (hash: 3lE0WI/qOHXhbBE35NDzhT0Z3hUN1+7XImhTFbtFtFQ=) 2: 3130332e3134322e39302e302f32332d3234203d3e20313339333734.roa (hash: BCR4399uDrDPTCg+MIbL26PuI+e2Uq0NkSYBiX921Hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 05:55:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:bc:cd:03:da:25:0e:ea:43:da:08:c1:79:fe:f3:0d:2d:24:3d:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8 Validity Not Before: Sep 4 19:46:02 2025 GMT Not After : Sep 8 05:55:02 2025 GMT Subject: CN=BDC3A8BFA0CB7585F6B8D51800211F781757942F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:14:d0:ae:15:dc:7d:74:08:b3:a9:65:2a:2f: b0:d3:00:64:c7:b7:aa:1c:96:6e:a7:23:00:7a:6e: 5c:7c:e1:8d:ba:cc:cb:32:d7:7c:fb:71:54:a3:b7: e0:0c:40:77:93:da:13:87:0e:16:2a:e9:4f:cb:f8: e0:96:70:f3:24:76:20:3b:6e:4e:0e:18:c4:34:ca: ac:14:ff:5a:bb:1d:df:19:ee:35:51:98:6d:a3:d7: 00:f7:a3:fd:40:ee:65:d1:06:f8:63:63:f2:fa:cf: 82:af:43:26:7c:05:f9:f4:8c:16:95:20:83:0d:22: 7c:31:e5:e1:c6:86:d2:e6:2b:9c:f9:e8:96:7b:d4: 69:41:55:3a:6a:00:16:c0:20:7b:cb:0d:cd:82:27: 9c:9e:c0:22:4a:75:ff:99:f4:c8:0e:7d:34:97:cb: 61:db:a5:8e:96:df:e5:65:05:9d:4b:cf:3a:1a:19: dd:e0:46:5a:36:ea:9d:b3:1a:04:fb:95:65:1d:3a: 26:83:f9:65:d8:9e:2d:55:9f:03:34:11:0f:d9:8a: ae:7a:85:be:03:d8:eb:20:90:28:90:60:c9:80:a1: aa:e0:c6:14:dd:6e:03:ad:ba:4c:bf:92:31:cf:f0: 03:0e:d2:44:c1:0f:01:0e:ca:7f:8e:8b:7d:81:34: b2:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:C3:A8:BF:A0:CB:75:85:F6:B8:D5:18:00:21:1F:78:17:57:94:2F X509v3 Authority Key Identifier: keyid:BC:BE:AD:46:72:B1:9E:91:24:8E:58:DD:91:C4:EC:D8:94:A7:A3:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae921917-13af-4403-97ab-9adaf5104c12/0/BCBEAD4672B19E91248E58DD91C4ECD894A7A3A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:4b:9a:11:08:99:1f:50:10:ba:fc:90:03:90:a3:9a:60:8c: 42:cb:47:16:da:ba:eb:4f:cf:b8:b4:88:21:d1:ba:b7:e1:83: a3:71:1a:96:6b:d3:95:5c:24:68:f9:bc:e6:b9:3c:79:32:6c: d4:63:95:ae:e2:6b:4c:ee:ac:f4:80:08:f8:e1:55:7a:25:0b: 13:28:92:0a:ed:5d:ca:21:69:f5:56:e2:6c:ca:bd:5c:17:0e: 99:ed:c4:08:cc:bc:c1:dc:49:99:7a:16:cc:6a:e7:a7:43:ad: ff:5b:9a:e1:9d:04:31:ef:ae:13:78:7b:c6:a9:d9:2c:01:5d: e0:27:b7:8b:24:e0:07:bf:1c:e7:e6:de:bf:96:31:4c:ab:d1: 7a:e4:63:87:30:d6:8d:fd:96:29:46:41:70:f4:6a:ab:c6:55: c0:f1:69:e8:9f:38:2c:15:a6:95:44:0d:3b:02:28:0e:5b:90: 5d:f2:3d:81:b2:33:63:c3:6f:48:24:a1:75:94:44:fe:7f:8d: ae:e6:82:36:41:df:b8:17:8a:3b:4c:b8:1c:00:57:02:0a:14: 93:43:54:f7:87:1b:1e:0d:85:91:38:cf:5a:4c:ba:fa:59:e7: b8:82:ab:93:15:34:c4:26:b1:42:31:97:89:cf:26:51:40:80: cb:bd:0c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGLzNA9olDupD2gjBef7zDS0kPScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5 NEE3QTNBODAeFw0yNTA5MDQxOTQ2MDJaFw0yNTA5MDgwNTU1MDJaMDMxMTAvBgNV BAMTKEJEQzNBOEJGQTBDQjc1ODVGNkI4RDUxODAwMjExRjc4MTc1Nzk0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFNCuFdx9dAizqWUqL7DTAGTH t6oclm6nIwB6blx84Y26zMsy13z7cVSjt+AMQHeT2hOHDhYq6U/L+OCWcPMkdiA7 bk4OGMQ0yqwU/1q7Hd8Z7jVRmG2j1wD3o/1A7mXRBvhjY/L6z4KvQyZ8Bfn0jBaV IIMNInwx5eHGhtLmK5z56JZ71GlBVTpqABbAIHvLDc2CJ5yewCJKdf+Z9MgOfTSX y2HbpY6W3+VlBZ1LzzoaGd3gRlo26p2zGgT7lWUdOiaD+WXYni1VnwM0EQ/Ziq56 hb4D2OsgkCiQYMmAoargxhTdbgOtuky/kjHP8AMO0kTBDwEOyn+Oi32BNLK3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvcOov6DLdYX2uNUYACEfeBdXlC8wHwYDVR0j BBgwFoAUvL6tRnKxnpEkjljdkcTs2JSno6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTkyMTkxNy0xM2FmLTQ0MDMtOTdhYi05YWRhZjUxMDRjMTIvMC9CQ0JFQUQ0Njcy QjE5RTkxMjQ4RTU4REQ5MUM0RUNEODk0QTdBM0E4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVDRDg5NEE3 QTNBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU5MjE5MTctMTNhZi00NDAzLTk3 YWItOWFkYWY1MTA0YzEyLzAvQkNCRUFENDY3MkIxOUU5MTI0OEU1OEREOTFDNEVD RDg5NEE3QTNBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFLmhEImR9QELr8kAOQo5pgjELLRxbauutP z7i0iCHRurfhg6NxGpZr05VcJGj5vOa5PHkybNRjla7ia0zurPSACPjhVXolCxMo kgrtXcohafVW4mzKvVwXDpntxAjMvMHcSZl6Fsxq56dDrf9bmuGdBDHvrhN4e8ap 2SwBXeAnt4sk4Ae/HOfm3r+WMUyr0XrkY4cw1o39lilGQXD0aqvGVcDxaeifOCwV ppVEDTsCKA5bkF3yPYGyM2PDb0gkoXWURP5/ja7mgjZB37gXijtMuBwAVwIKFJND VPeHGx4NhZE4z1pMuvpZ57iCq5MVNMQmsUIxl4nPJlFAgMu9DLs= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:43 2025 by rpki-client