$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft File: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft (raw, json) Hash identifier: lAsHyqP2w7/pSirou28P/+lYi+UDvgzYA4tOh5/sTQk= Subject key identifier: 1D:48:62:4C:78:86:38:C7:C1:1B:CE:FF:FB:FA:A8:A6:3E:15:A4:60 Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 Certificate issuer: /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Certificate serial: 480152CD07477578F30CCB2775015B3F311A24B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft Manifest number: 046E Signing time: Mon 08 Sep 2025 02:12:05 +0000 Manifest this update: Mon 08 Sep 2025 02:07:05 +0000 Manifest next update: Thu 11 Sep 2025 04:48:05 +0000 Files and hashes: 1: 3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (hash: oT7jsoB/MSX7oA3hAjR9cy0JPZ1LVJx++z9THEGgY48=) 2: BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl (hash: /rz1oxILjw3YfI/d0tG3FDEQyjCOCeNu+j4px/IPhSQ=) 3: 3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (hash: 4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:01:52:cd:07:47:75:78:f3:0c:cb:27:75:01:5b:3f:31:1a:24:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5 Validity Not Before: Sep 8 02:07:05 2025 GMT Not After : Sep 11 04:48:05 2025 GMT Subject: CN=1D48624C788638C7C11BCEFFFBFAA8A63E15A460 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:19:b9:dd:56:b3:53:60:dd:e3:4f:0b:9a:3a: b8:f3:20:3b:91:05:fa:f9:15:76:5a:44:37:88:a6: 63:bd:b1:3a:a8:94:73:28:04:fd:d8:af:2f:e5:a0: 68:0b:44:3a:6f:e4:f7:b7:39:eb:e8:c8:e5:7b:3d: ec:51:68:87:62:32:8f:f6:0e:e3:52:e6:a4:4a:93: 5a:fd:cc:c1:f2:f4:59:be:ac:ec:2c:c8:d6:1b:4a: 05:1b:16:76:b5:ff:29:03:b7:85:fc:97:74:2a:57: f9:ad:3f:01:ee:79:b6:85:5b:d1:99:63:9a:95:7f: 68:62:bc:f5:29:e3:57:9b:e4:22:83:b5:0d:af:ce: 5a:0c:fb:21:82:34:f5:ee:92:0e:66:52:37:6a:8c: e4:76:1d:6d:ed:1e:58:3d:33:18:0c:9d:19:18:4c: b4:f9:e1:99:a3:c4:a3:9b:38:87:0e:12:44:2c:19: bc:24:6f:44:8d:75:b1:33:0c:ee:62:ae:7d:d1:79: 59:7f:a8:dc:d6:03:ce:3f:d5:03:84:ae:57:ea:2e: 55:06:0b:01:6c:1e:0b:5b:17:f9:3c:25:52:78:fa: 0c:ac:c1:7a:99:8b:28:ae:53:21:9d:65:08:91:d4: 17:2d:1b:25:a1:ad:8d:38:dd:05:fc:2c:8c:39:e0: 9c:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:48:62:4C:78:86:38:C7:C1:1B:CE:FF:FB:FA:A8:A6:3E:15:A4:60 X509v3 Authority Key Identifier: keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:bb:2b:f9:19:30:08:19:29:61:95:fa:57:91:dd:e9:e3:08: ac:1b:f8:b7:ac:87:b6:3a:77:9b:25:16:2d:97:73:0e:8f:53: d5:c3:1a:cd:6b:5a:df:da:1a:48:87:fd:0c:25:8b:ae:d6:e0: 8d:a8:19:0c:43:e0:bd:eb:a4:f7:0d:5e:6e:95:6b:c9:8c:dc: 38:9d:6f:4c:c5:56:0d:5c:8b:9d:e3:f8:64:37:4f:bf:1e:f6: ca:68:0a:71:cc:f3:2d:b5:d0:d5:1e:ab:35:e1:c4:e8:b8:a6: b8:95:1d:2f:30:b5:f1:09:15:3e:06:87:55:3e:c7:da:ed:91: fc:00:1f:b7:fd:63:a5:12:1d:a9:d4:78:c2:f7:04:88:57:4c: 85:d9:d0:64:58:d6:b9:10:09:c4:b2:73:6f:27:c5:05:03:84: 6f:fc:3e:18:0a:a3:36:cc:77:20:b5:0e:2e:04:83:d2:09:89: 95:52:36:c8:bc:08:f8:53:de:d8:56:1b:06:2e:24:50:c9:c4: 4d:8c:0a:30:01:10:54:c3:af:af:64:dd:ae:85:c5:62:08:5c: bb:3a:78:df:c6:ad:c3:4d:70:f6:2b:1f:7a:bd:83:59:da:6f: 58:33:f0:0c:84:ce:e5:37:e7:31:63:b0:0e:2f:87:07:d8:4c: 16:5c:d9:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAFSzQdHdXjzDMsndQFbPzEaJLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERC RjFFNjZFNTAeFw0yNTA5MDgwMjA3MDVaFw0yNTA5MTEwNDQ4MDVaMDMxMTAvBgNV BAMTKDFENDg2MjRDNzg4NjM4QzdDMTFCQ0VGRkZCRkFBOEE2M0UxNUE0NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwGbndVrNTYN3jTwuaOrjzIDuR Bfr5FXZaRDeIpmO9sTqolHMoBP3Yry/loGgLRDpv5Pe3OevoyOV7PexRaIdiMo/2 DuNS5qRKk1r9zMHy9Fm+rOwsyNYbSgUbFna1/ykDt4X8l3QqV/mtPwHuebaFW9GZ Y5qVf2hivPUp41eb5CKDtQ2vzloM+yGCNPXukg5mUjdqjOR2HW3tHlg9MxgMnRkY TLT54ZmjxKObOIcOEkQsGbwkb0SNdbEzDO5irn3ReVl/qNzWA84/1QOErlfqLlUG CwFsHgtbF/k8JVJ4+gyswXqZiyiuUyGdZQiR1BctGyWhrY043QX8LIw54JwTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUhiTHiGOMfBG87/+/qopj4VpGAwHwYDVR0j BBgwFoAUvBj9okmzvVYCBkjoPwsk3b8eZuUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NjQ3YTZhMi0xYWQwLTQ2YzctOWNhZC01OGJiZDcxZmI1YTQvMC9CQzE4RkRBMjQ5 QjNCRDU2MDIwNjQ4RTgzRjBCMjREREJGMUU2NkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0RERCRjFF NjZFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzY0N2E2YTItMWFkMC00NmM3LTlj YWQtNThiYmQ3MWZiNWE0LzAvQkMxOEZEQTI0OUIzQkQ1NjAyMDY0OEU4M0YwQjI0 RERCRjFFNjZFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADe7K/kZMAgZKWGV+leR3enjCKwb+Lesh7Y6 d5slFi2Xcw6PU9XDGs1rWt/aGkiH/Qwli67W4I2oGQxD4L3rpPcNXm6Va8mM3Did b0zFVg1ci53j+GQ3T78e9spoCnHM8y210NUeqzXhxOi4priVHS8wtfEJFT4Gh1U+ x9rtkfwAH7f9Y6USHanUeML3BIhXTIXZ0GRY1rkQCcSyc28nxQUDhG/8PhgKozbM dyC1Di4Eg9IJiZVSNsi8CPhT3thWGwYuJFDJxE2MCjABEFTDr69k3a6FxWIIXLs6 eN/GrcNNcPYrH3q9g1nab1gz8AyEzuU35zFjsA4vhwfYTBZc2WA= -----END CERTIFICATE-----Generated at Mon Sep 8 11:18:50 2025 by rpki-client