$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: nofOw7P8sWNh+6RH4/o3bi1778rcwGjTK5GeTeiCXq0= Subject key identifier: 70:49:96:49:BB:5B:C5:BB:C2:01:64:24:04:77:34:41:AC:91:D8:63 Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 772F7574C4AA79A3BA0B8CC7791EBF5FA7ADFEC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 010A Signing time: Fri 05 Sep 2025 20:21:38 +0000 Manifest this update: Fri 05 Sep 2025 20:16:38 +0000 Manifest next update: Tue 09 Sep 2025 08:04:38 +0000 Files and hashes: 1: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 2: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: xB2EyGqCrnWXJqaMm30vSo2iYISfhvpvMWFfwxEtCbY=) 3: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) 4: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 08:04:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:2f:75:74:c4:aa:79:a3:ba:0b:8c:c7:79:1e:bf:5f:a7:ad:fe:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Sep 5 20:16:38 2025 GMT Not After : Sep 9 08:04:38 2025 GMT Subject: CN=70499649BB5BC5BBC201642404773441AC91D863 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:b4:45:ee:fb:84:71:a0:72:7b:4c:9c:90:fd: 33:3d:6d:ea:6d:ec:a9:11:d7:95:18:c9:36:7c:c8: de:f0:ca:6b:a8:a1:91:b2:82:3d:ae:b7:26:ac:58: 75:b3:db:36:ca:55:29:3a:46:b9:85:04:db:96:aa: db:f7:b2:95:09:d4:df:a8:c2:6e:51:a4:d2:57:f0: f0:c7:e6:86:20:4f:50:c1:d0:39:6c:b6:a7:b5:a2: c2:65:c8:77:3d:08:7a:1a:ac:3b:34:d7:4e:ea:af: b4:9c:ef:9c:af:f3:e1:2c:e0:41:d0:ce:08:80:bc: 3a:36:64:12:5f:6f:a3:bc:13:49:1e:32:e7:63:50: 11:f1:57:8b:2b:be:50:9e:29:ed:7f:d9:b7:a7:48: 5a:6a:e0:b4:e7:86:7a:e3:d7:b0:f2:2a:72:13:7d: 74:23:61:c4:71:95:9c:53:89:21:47:39:87:c7:41: 7d:8f:f7:9d:2c:c9:b6:e5:06:cb:69:be:20:93:64: eb:51:bc:6b:72:79:d7:5f:8d:56:b2:0e:36:33:b9: 9d:09:be:9d:29:e6:d5:6a:7a:33:ee:3d:ee:c1:01: 20:d7:2e:4f:df:a1:db:4a:4c:99:16:7e:e3:6c:c0: 17:65:1b:8b:ee:8c:91:d3:2b:cf:3e:dd:e1:0d:02: 30:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:49:96:49:BB:5B:C5:BB:C2:01:64:24:04:77:34:41:AC:91:D8:63 X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:37:86:ca:45:e5:7a:2c:f9:26:7e:d7:fa:99:ad:46:20:93: a8:7b:5a:01:a0:8b:d8:d6:3f:23:b6:58:30:20:ee:a9:10:90: b1:96:fd:06:cb:d3:a4:04:e2:37:7c:2d:d3:cc:1b:6f:56:0d: a3:ba:90:09:dc:c8:46:23:4a:80:05:7a:0d:68:cd:06:02:90: 40:7f:28:e9:e8:9a:f8:f5:8e:57:5d:aa:a0:53:10:a7:9a:62: 5f:46:10:5e:c1:59:3e:86:58:28:d4:3b:91:12:50:b5:54:57: ae:07:d1:c9:d3:2a:20:1a:be:4f:86:83:70:a2:87:48:30:c1: 55:82:5f:6f:11:ba:9f:a1:76:a9:e4:4f:c4:ff:c7:bb:95:4f: b2:0d:eb:c8:af:f3:7c:9b:ab:20:c2:6c:25:3d:27:5c:61:a3: 1d:45:9d:3c:a1:2a:a0:fd:7e:8f:a2:26:a0:2b:b8:76:b9:10: f6:92:08:65:27:c3:c3:97:58:44:08:5d:66:8a:5b:20:8d:10: 08:08:66:57:4a:ca:e5:06:95:de:2d:c0:69:d7:5c:9c:3d:73: 5e:49:d6:95:91:18:44:d7:a1:fb:fc:d2:56:a4:14:2b:38:66: 19:22:2e:11:4f:d9:c8:d4:ac:ff:b6:5a:25:27:10:bc:f4:5b: c4:ab:28:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdy91dMSqeaO6C4zHeR6/X6et/scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTA5MDUyMDE2MzhaFw0yNTA5MDkwODA0MzhaMDMxMTAvBgNV BAMTKDcwNDk5NjQ5QkI1QkM1QkJDMjAxNjQyNDA0NzczNDQxQUM5MUQ4NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVtEXu+4RxoHJ7TJyQ/TM9bept 7KkR15UYyTZ8yN7wymuooZGygj2utyasWHWz2zbKVSk6RrmFBNuWqtv3spUJ1N+o wm5RpNJX8PDH5oYgT1DB0Dlstqe1osJlyHc9CHoarDs0107qr7Sc75yv8+Es4EHQ zgiAvDo2ZBJfb6O8E0keMudjUBHxV4srvlCeKe1/2benSFpq4LTnhnrj17DyKnIT fXQjYcRxlZxTiSFHOYfHQX2P950sybblBstpviCTZOtRvGtyeddfjVayDjYzuZ0J vp0p5tVqejPuPe7BASDXLk/fodtKTJkWfuNswBdlG4vujJHTK88+3eENAjCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcEmWSbtbxbvCAWQkBHc0QayR2GMwHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACs3hspF5Xos+SZ+1/qZrUYgk6h7WgGgi9jW PyO2WDAg7qkQkLGW/QbL06QE4jd8LdPMG29WDaO6kAncyEYjSoAFeg1ozQYCkEB/ KOnomvj1jlddqqBTEKeaYl9GEF7BWT6GWCjUO5ESULVUV64H0cnTKiAavk+Gg3Ci h0gwwVWCX28Rup+hdqnkT8T/x7uVT7IN68iv83ybqyDCbCU9J1xhox1FnTyhKqD9 fo+iJqAruHa5EPaSCGUnw8OXWEQIXWaKWyCNEAgIZldKyuUGld4twGnXXJw9c15J 1pWRGETXofv80lakFCs4ZhkiLhFP2cjUrP+2WiUnELz0W8SrKNI= -----END CERTIFICATE-----Generated at Mon Sep 8 03:04:28 2025 by rpki-client