$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: cBhAmCkuVLkMkXPUrtT6/ZMLwrKvzMWv2UesQEj+Cvk= Subject key identifier: D6:40:C3:DE:D7:01:7F:72:F5:95:19:8C:4C:0A:37:72:96:57:4E:60 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 7E57F024AAA80F30980C8F55CCE95E1D6DBDD923 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 017B Signing time: Sat 06 Sep 2025 03:41:03 +0000 Manifest this update: Sat 06 Sep 2025 03:36:03 +0000 Manifest next update: Tue 09 Sep 2025 07:48:03 +0000 Files and hashes: 1: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=) 2: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=) 3: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=) 4: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=) 5: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=) 6: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=) 7: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=) 8: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=) 9: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=) 10: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=) 11: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=) 12: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=) 13: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=) 14: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: zcWxcIEvqjkmGZJEp5RJLBrdX0WhJ42bnuUB6X7DLcg=) 15: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 07:48:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:57:f0:24:aa:a8:0f:30:98:0c:8f:55:cc:e9:5e:1d:6d:bd:d9:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Sep 6 03:36:03 2025 GMT Not After : Sep 9 07:48:03 2025 GMT Subject: CN=D640C3DED7017F72F595198C4C0A377296574E60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:42:fd:7e:fe:30:c4:bc:07:3a:ca:ac:ab:61: 4e:54:28:db:99:dd:49:10:e2:52:c7:04:a3:4c:b6: 70:b9:b8:a3:21:b2:1a:0f:4a:2f:4c:dc:82:4a:b3: 65:e7:f4:83:f4:03:5c:b2:67:d2:b5:eb:01:15:8c: 67:80:7f:0b:7c:50:ea:11:06:89:99:30:5e:d2:c6: de:81:4e:c5:56:a1:ac:00:89:8e:0b:4d:fa:ca:e5: bc:1b:b2:cb:04:7c:52:5e:d3:50:92:ba:9f:5c:b6: 09:30:1f:6f:a0:09:be:72:01:e9:00:4d:42:55:2b: 3f:a7:fc:b0:67:2f:05:f7:23:f1:ea:9d:04:13:ee: 02:01:81:84:e6:cc:6f:51:c5:04:1e:ee:21:d1:9d: 24:04:b1:d7:e0:d3:3b:4e:6c:99:6b:76:d5:7f:33: cf:48:a0:0a:9e:6a:8d:b2:62:a6:b9:7a:a7:c3:f8: fe:e2:76:6a:fd:14:5a:5e:2d:c2:52:a3:1f:e7:3d: a5:31:8c:94:32:57:b1:46:30:ad:fa:27:5f:35:cf: 9c:8f:9e:d9:2d:60:9b:3a:0d:8c:62:a7:ab:bf:d1: 8a:8f:ff:c8:f2:ff:33:e5:6f:46:e9:68:a3:fb:00: 8b:ba:d6:e5:c2:b6:b4:40:84:5d:d9:6d:56:13:ad: a4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:40:C3:DE:D7:01:7F:72:F5:95:19:8C:4C:0A:37:72:96:57:4E:60 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:86:72:c0:76:3d:df:3e:1b:0c:2e:4d:c4:a5:1b:5d:d1:02: 2c:72:dd:9b:22:aa:d0:ee:2c:f3:dc:17:9a:39:a6:e6:3d:52: 3a:e3:fe:d0:24:54:58:c0:b9:31:19:a7:79:3d:4a:50:7c:55: a0:d6:70:75:cf:54:03:76:db:80:4d:a0:97:15:a5:5b:5a:a3: ef:53:9b:5e:b5:1d:9f:b2:d6:79:f9:9b:9c:a4:f3:bc:f1:97: d3:5f:26:df:9e:2c:95:1e:3d:0b:1f:36:50:e7:7a:68:6e:d4: 0d:6a:7d:28:66:50:12:49:a5:9e:ed:2d:56:3a:cd:08:17:25: 4a:f5:53:19:e4:a9:92:05:af:f1:49:48:c7:ae:1e:1d:ea:eb: fc:ec:b5:6e:3c:0f:0b:d3:bc:7a:a3:3c:77:e7:2c:e8:27:ec: c0:c9:7d:6c:cb:23:43:e8:d9:75:0d:20:1e:29:22:3f:68:71: de:31:1d:60:6d:89:a9:00:56:96:30:17:f5:a9:78:61:0a:50: 0d:dd:3c:8c:21:12:88:6a:46:c5:35:6a:11:c1:fe:1e:f2:8a: e4:63:57:e3:d7:99:d9:11:88:fc:dd:81:9b:d2:e7:1a:9d:17: ff:25:a6:0e:30:f5:9d:43:f0:bf:60:39:7f:7a:92:45:3d:73: 69:81:64:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflfwJKqoDzCYDI9VzOleHW292SMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTA5MDYwMzM2MDNaFw0yNTA5MDkwNzQ4MDNaMDMxMTAvBgNV BAMTKEQ2NDBDM0RFRDcwMTdGNzJGNTk1MTk4QzRDMEEzNzcyOTY1NzRFNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQv1+/jDEvAc6yqyrYU5UKNuZ 3UkQ4lLHBKNMtnC5uKMhshoPSi9M3IJKs2Xn9IP0A1yyZ9K16wEVjGeAfwt8UOoR BomZMF7Sxt6BTsVWoawAiY4LTfrK5bwbsssEfFJe01CSup9ctgkwH2+gCb5yAekA TUJVKz+n/LBnLwX3I/HqnQQT7gIBgYTmzG9RxQQe7iHRnSQEsdfg0ztObJlrdtV/ M89IoAqeao2yYqa5eqfD+P7idmr9FFpeLcJSox/nPaUxjJQyV7FGMK36J181z5yP ntktYJs6DYxip6u/0YqP/8jy/zPlb0bpaKP7AIu61uXCtrRAhF3ZbVYTraRTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1kDD3tcBf3L1lRmMTAo3cpZXTmAwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+GcsB2Pd8+GwwuTcSlG13RAixy3ZsiqtDu LPPcF5o5puY9Ujrj/tAkVFjAuTEZp3k9SlB8VaDWcHXPVAN224BNoJcVpVtao+9T m161HZ+y1nn5m5yk87zxl9NfJt+eLJUePQsfNlDnemhu1A1qfShmUBJJpZ7tLVY6 zQgXJUr1UxnkqZIFr/FJSMeuHh3q6/zstW48DwvTvHqjPHfnLOgn7MDJfWzLI0Po 2XUNIB4pIj9ocd4xHWBtiakAVpYwF/WpeGEKUA3dPIwhEohqRsU1ahHB/h7yiuRj V+PXmdkRiPzdgZvS5xqdF/8lpg4w9Z1D8L9gOX96kkU9c2mBZPM= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:45 2025 by rpki-client