$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: LyG2dH/0IfiUtcGeP7qHpjGV4zh4eU6mkZ7ZhqBJERI= Subject key identifier: E5:58:60:F2:63:0B:A0:67:4D:FB:33:88:3D:09:5F:88:5E:AE:B7:15 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 0D51D5A5546D1B0D4C3B09317A170D5ED6BAD21B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 01BF Signing time: Thu 23 Oct 2025 08:20:05 +0000 Manifest this update: Thu 23 Oct 2025 08:15:05 +0000 Manifest next update: Sun 26 Oct 2025 11:54:05 +0000 Files and hashes: 1: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: hHpqodeyU8amc0Yg+Vz1Yb1kEzG9g5qGdXKGONkFhDE=) 2: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 9CQ6JFUhExdNBAYYYWcUpyzc1PDrxOfBKcNbdLlWf6U=) 3: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: CSQkGTmQt+s2JfwWnvim+F5o3slRbbgf9XyF9r9GepU=) 4: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: IJ/QrpohwAAMEHf60VyOYZyE2rLKrvAARpcXl8wmM9I=) 5: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: 8i3x4gBaZ9q2FeKL77QwQugTPoFrVoqppzokcKf7V9U=) 6: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: K3N55cBe6+W2+UEDhGR/EreK/NsWeZinIyNl1uxEyoA=) 7: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: FqS1mlGjIL0BP5gK9enlmVRuaz2y9/mIcmX+UTD+qKA=) 8: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: 2xZFhZyU6Y/va0Eet3yGhweg9AxydMbfLGQBU/2i+vc=) 9: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: uzdxCFJ60y1EqFPWBfLgLUEnJ7LWJrfPQeMyJb9m5FM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 26 Oct 2025 08:51:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:51:d5:a5:54:6d:1b:0d:4c:3b:09:31:7a:17:0d:5e:d6:ba:d2:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Oct 23 08:15:05 2025 GMT Not After : Oct 26 11:54:05 2025 GMT Subject: CN=E55860F2630BA0674DFB33883D095F885EAEB715 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1b:7e:84:2a:be:15:68:a0:42:30:16:fb:1a: 73:96:71:f3:24:88:b7:a3:2e:6c:4c:43:a8:6a:5b: ec:1d:3d:8a:dc:69:59:56:3e:e3:64:d0:c7:c1:08: 54:01:fb:a2:b2:b4:63:3c:ab:e9:17:e7:f4:46:14: 0e:53:54:30:5d:c7:f7:5a:b4:2f:21:26:df:c7:89: c3:3f:58:90:ef:94:65:02:ec:a9:6d:e7:c2:03:85: a1:60:f6:01:37:5b:ff:d1:25:f9:6c:e7:47:b1:e9: 39:2e:b8:97:97:cd:33:ed:ac:bf:08:03:0f:62:12: bd:5d:9a:10:a9:b2:52:df:db:d5:de:d7:07:49:6c: 37:b9:3a:f5:2f:9d:71:4c:fb:19:08:62:29:5d:cd: 6c:a9:cf:70:47:fe:dc:77:93:82:92:ed:fb:b6:bc: 34:ec:50:5b:b1:be:ff:1e:c6:96:4f:fa:eb:f3:03: 11:b3:9c:b5:9f:48:91:21:f0:ec:da:6f:2f:be:0b: 10:21:81:bb:6a:2d:40:e2:eb:3f:96:e0:22:78:2f: 4a:a0:fa:d0:c4:1f:6c:03:6d:f0:ca:82:0f:b9:54: 5a:a4:1b:0e:32:fa:9f:fb:6e:0d:1a:3f:3a:2f:41: 18:c5:1a:09:bd:7a:5d:df:45:bd:80:63:81:43:a9: 10:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:58:60:F2:63:0B:A0:67:4D:FB:33:88:3D:09:5F:88:5E:AE:B7:15 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a6:73:4f:d5:f1:77:82:20:a3:7c:85:98:a0:7c:b2:1a:95: bc:c7:64:39:12:62:4d:c6:6c:f4:b4:29:e4:74:ec:da:83:b4: 92:3f:b9:3e:09:95:fc:4f:42:1e:53:ee:04:0a:65:c5:17:72: 51:f4:24:41:66:7b:03:1c:d7:d1:5b:13:a4:c9:27:89:37:97: f9:74:e4:6a:cf:7f:8e:d3:c0:6d:1c:26:32:16:45:a4:ab:89: e1:e8:88:dc:ca:2e:bb:75:bd:04:46:c5:b7:d7:cf:4c:2c:e4: ae:e8:8c:43:97:d7:dd:8c:e0:99:1f:65:dd:5d:e3:7d:06:71: 40:e5:01:0f:41:b8:fc:f6:9f:31:bf:b0:e1:fc:34:c2:8b:81: b3:43:f9:f6:36:53:26:90:77:05:97:5c:e8:88:06:7c:8b:fe: 64:b4:4f:0e:48:35:1e:18:90:6e:75:da:de:23:a8:75:da:b3: 0d:e6:75:e2:54:1c:59:35:11:68:17:73:b0:2b:6d:65:f9:d1: be:52:ea:de:68:65:fc:68:09:ce:e6:de:fc:1a:c4:98:2a:06: 81:df:23:5c:74:ff:4a:48:ce:d4:73:d3:71:79:d6:82:23:93: d2:08:6b:d8:3b:11:3e:17:79:f4:13:99:16:f3:1f:bb:70:24: e0:ad:4a:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDVHVpVRtGw1MOwkxehcNXta60hswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNTEwMjMwODE1MDVaFw0yNTEwMjYxMTU0MDVaMDMxMTAvBgNV BAMTKEU1NTg2MEYyNjMwQkEwNjc0REZCMzM4ODNEMDk1Rjg4NUVBRUI3MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4G36EKr4VaKBCMBb7GnOWcfMk iLejLmxMQ6hqW+wdPYrcaVlWPuNk0MfBCFQB+6KytGM8q+kX5/RGFA5TVDBdx/da tC8hJt/HicM/WJDvlGUC7Klt58IDhaFg9gE3W//RJfls50ex6TkuuJeXzTPtrL8I Aw9iEr1dmhCpslLf29Xe1wdJbDe5OvUvnXFM+xkIYildzWypz3BH/tx3k4KS7fu2 vDTsUFuxvv8expZP+uvzAxGznLWfSJEh8Ozaby++CxAhgbtqLUDi6z+W4CJ4L0qg +tDEH2wDbfDKgg+5VFqkGw4y+p/7bg0aPzovQRjFGgm9el3fRb2AY4FDqRCFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5Vhg8mMLoGdN+zOIPQlfiF6utxUwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSmc0/V8XeCIKN8hZigfLIalbzHZDkSYk3G bPS0KeR07NqDtJI/uT4JlfxPQh5T7gQKZcUXclH0JEFmewMc19FbE6TJJ4k3l/l0 5GrPf47TwG0cJjIWRaSrieHoiNzKLrt1vQRGxbfXz0ws5K7ojEOX192M4JkfZd1d 430GcUDlAQ9BuPz2nzG/sOH8NMKLgbND+fY2UyaQdwWXXOiIBnyL/mS0Tw5INR4Y kG512t4jqHXasw3mdeJUHFk1EWgXc7ArbWX50b5S6t5oZfxoCc7m3vwaxJgqBoHf I1x0/0pIztRz03F51oIjk9IIa9g7ET4XefQTmRbzH7twJOCtSmg= -----END CERTIFICATE-----Generated at Thu Oct 23 10:03:12 2025 by rpki-client