$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: bf7Is+7VKVglKlHcAtc34GU+xmu3Fsymx2P8PRW5mDw= Subject key identifier: 29:42:FA:5B:24:D6:C9:03:95:9D:E7:CE:49:D1:9D:F6:8A:7B:1E:71 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 60EA5E39648A179167BC8FFF542B8B466233EB78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 0140 Signing time: Mon 28 Apr 2025 20:21:01 +0000 Manifest this update: Mon 28 Apr 2025 20:16:01 +0000 Manifest next update: Thu 01 May 2025 20:48:01 +0000 Files and hashes: 1: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=) 2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=) 3: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=) 4: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: HbfUoDRl3FhDq0u3rILd3/64m4FtLYalIxPebK0Z8MM=) 5: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=) 6: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=) 7: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=) 8: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=) 9: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=) 10: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=) 11: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=) 12: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=) 13: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=) 14: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=) 15: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:48:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ea:5e:39:64:8a:17:91:67:bc:8f:ff:54:2b:8b:46:62:33:eb:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Apr 28 20:16:01 2025 GMT Not After : May 1 20:48:01 2025 GMT Subject: CN=2942FA5B24D6C903959DE7CE49D19DF68A7B1E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c9:2e:4e:aa:95:d3:c1:94:46:dc:98:37:69: 78:80:04:e4:9b:2f:cf:b0:4d:c2:0b:c7:50:74:bc: 36:81:fc:a0:67:a0:cd:e6:eb:e4:b4:38:27:af:97: 78:ba:79:76:2a:51:48:c5:10:b1:09:f2:7b:c6:cb: b8:d5:19:69:85:ec:63:85:8b:10:5e:a4:e3:2c:21: af:1a:36:67:35:16:23:4f:70:11:24:31:8f:da:e0: 2a:67:ec:c4:bc:06:d6:35:9e:f3:d4:e4:e3:53:2c: 69:43:ed:6b:7e:cd:69:46:62:a1:6a:c4:82:92:02: 74:3b:98:7c:e3:d2:ce:c9:c9:02:32:59:10:77:51: c6:98:3b:bc:38:fe:10:98:20:d6:43:81:0d:c4:4c: 74:33:0f:4b:e3:28:f5:6f:36:b0:fc:56:ae:96:52: df:bc:b0:43:56:bd:44:13:7b:a0:c9:22:2b:26:19: d1:9f:76:b4:7f:16:a7:0f:ef:e1:91:75:84:52:37: 47:f2:8e:24:a2:ae:fc:b9:3a:9d:07:55:51:94:0c: 74:82:64:8f:ad:f4:6b:88:ce:e2:23:ff:b2:9d:0f: 83:c1:71:11:bf:51:d4:65:6e:a3:d7:37:fc:6d:b7: 85:66:d7:53:52:eb:3e:2b:4a:49:cc:9d:43:5f:62: c4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:42:FA:5B:24:D6:C9:03:95:9D:E7:CE:49:D1:9D:F6:8A:7B:1E:71 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:59:a7:7e:5a:a3:19:71:12:78:80:f7:cc:ee:66:25:d9:3a: 39:e0:77:6b:1b:04:07:1a:86:36:a2:e2:6d:38:1d:f3:cb:7b: d4:3b:e0:8c:7a:f3:6d:31:a4:c8:f6:f7:28:56:ec:33:0f:a0: 62:93:a7:4b:b0:ad:0a:f1:f3:61:cc:3d:2f:c4:8d:77:f1:41: 6c:f6:2a:f4:d4:d1:04:46:d5:2a:c7:fc:13:28:5b:ba:28:f1: 20:2e:2f:55:9a:ec:f7:c0:2f:7b:e1:23:d6:05:53:9d:f2:8d: 8c:90:f3:aa:fd:17:3a:ee:e2:f9:dd:c1:1e:a0:1f:09:51:e0: 6c:66:af:14:db:99:8a:2c:2b:84:9c:fd:da:00:3b:ae:ba:85: 1c:3c:2f:90:29:8d:01:1e:a3:14:dd:60:5e:2b:b3:47:88:aa: a9:b0:49:1b:cc:3e:93:a2:be:99:da:ce:07:a8:7e:42:78:3a: e2:7c:77:4c:b9:d7:cb:e4:7d:4a:7d:86:54:5e:61:cc:d3:04: 02:20:3b:2a:64:44:d7:69:8d:85:cc:44:3d:7d:67:00:3f:24: 4a:11:52:76:74:fd:e4:d4:f4:d9:eb:ba:d1:f1:fe:d6:c8:20: 83:4b:19:d3:ae:47:b2:b7:66:99:58:07:c1:6c:a0:1d:38:92: 80:d6:ef:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOpeOWSKF5FnvI//VCuLRmIz63gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTA0MjgyMDE2MDFaFw0yNTA1MDEyMDQ4MDFaMDMxMTAvBgNV BAMTKDI5NDJGQTVCMjRENkM5MDM5NTlERTdDRTQ5RDE5REY2OEE3QjFFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/yS5OqpXTwZRG3Jg3aXiABOSb L8+wTcILx1B0vDaB/KBnoM3m6+S0OCevl3i6eXYqUUjFELEJ8nvGy7jVGWmF7GOF ixBepOMsIa8aNmc1FiNPcBEkMY/a4Cpn7MS8BtY1nvPU5ONTLGlD7Wt+zWlGYqFq xIKSAnQ7mHzj0s7JyQIyWRB3UcaYO7w4/hCYINZDgQ3ETHQzD0vjKPVvNrD8Vq6W Ut+8sENWvUQTe6DJIismGdGfdrR/FqcP7+GRdYRSN0fyjiSirvy5Op0HVVGUDHSC ZI+t9GuIzuIj/7KdD4PBcRG/UdRlbqPXN/xtt4Vm11NS6z4rSknMnUNfYsRPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKUL6WyTWyQOVnefOSdGd9op7HnEwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElZp35aoxlxEniA98zuZiXZOjngd2sbBAca hjai4m04HfPLe9Q74Ix6820xpMj29yhW7DMPoGKTp0uwrQrx82HMPS/EjXfxQWz2 KvTU0QRG1SrH/BMoW7oo8SAuL1Wa7PfAL3vhI9YFU53yjYyQ86r9Fzru4vndwR6g HwlR4GxmrxTbmYosK4Sc/doAO666hRw8L5ApjQEeoxTdYF4rs0eIqqmwSRvMPpOi vpnazgeofkJ4OuJ8d0y518vkfUp9hlReYczTBAIgOypkRNdpjYXMRD19ZwA/JEoR UnZ0/eTU9NnrutHx/tbIIINLGdOuR7K3ZplYB8FsoB04koDW7x4= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:40 2025 by rpki-client