$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: PPbMefsZxffXjC5KOV1oEYsWcpVJ2yGpPNIUOTw+cDc= Subject key identifier: 38:4B:9A:32:14:AF:37:E3:33:46:14:41:07:55:0C:07:D2:D4:22:D5 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 358F9F7C32C0E28A3D89E55670F71E3D3CA2D474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 016D Signing time: Tue 05 Aug 2025 17:11:04 +0000 Manifest this update: Tue 05 Aug 2025 17:06:04 +0000 Manifest next update: Sat 09 Aug 2025 02:15:04 +0000 Files and hashes: 1: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: Rp4RXX/c2+/Hc2JURO6oX8kJjeZ21mx5kaTa4T4PbZw=) 2: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=) 3: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=) 4: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=) 5: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=) 6: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=) 7: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=) 8: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=) 9: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=) 10: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=) 11: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=) 12: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=) 13: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=) 14: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=) 15: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8f:9f:7c:32:c0:e2:8a:3d:89:e5:56:70:f7:1e:3d:3c:a2:d4:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Aug 5 17:06:04 2025 GMT Not After : Aug 9 02:15:04 2025 GMT Subject: CN=384B9A3214AF37E33346144107550C07D2D422D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:38:83:59:4a:e5:44:71:83:d4:c2:b3:e4:0a: f7:75:37:67:e8:32:42:56:f7:09:d0:52:2d:fb:7c: 46:f0:f2:8a:67:52:aa:8f:80:a8:e7:50:5b:53:bd: d2:ae:55:e2:d1:88:03:a5:e0:ff:b0:0c:01:44:f0: b0:62:ca:2e:4a:11:32:bc:4a:8a:da:dc:99:cc:dd: f7:73:fd:42:4f:f4:e6:a4:fc:a8:fc:1c:e3:14:96: 0e:b2:07:cf:7e:32:e3:a3:e1:cd:bf:ba:ed:af:ad: 86:a3:9d:69:49:57:ac:40:b6:4f:f8:12:86:2d:3c: 94:7d:5a:da:56:2c:6a:51:05:66:f6:cb:38:fb:98: d1:2b:19:50:f5:ce:85:4e:0b:ec:3a:f6:60:a9:37: 20:0a:98:17:08:0c:36:eb:e2:3c:95:68:da:5c:37: 84:95:d0:8c:04:62:54:8a:dc:dc:ba:5d:7e:b6:05: 8f:9c:ff:e8:a3:4e:5c:7f:09:73:19:d1:1f:a3:1a: 93:79:88:cd:6d:d0:0a:73:0c:5e:e8:21:8b:9b:9e: 8b:92:bd:e1:23:a7:e0:ee:b8:00:57:b2:54:4f:89: 3c:c6:86:dc:48:07:64:a1:8a:08:40:ca:5b:64:91: 00:8d:85:b6:6a:5a:62:86:bc:82:c9:e0:cf:ef:ac: 57:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:4B:9A:32:14:AF:37:E3:33:46:14:41:07:55:0C:07:D2:D4:22:D5 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:67:6f:dd:ab:48:cc:8d:69:dd:39:3f:3f:5b:ab:b5:d9:c6: 5e:aa:29:9b:a1:3b:79:b6:08:72:8d:80:d0:f6:24:d4:f8:d7: 73:c4:0d:5c:1f:77:e7:ea:4e:a6:9a:63:10:f5:ce:f7:fc:77: e3:3a:8d:f4:bd:04:61:34:18:ca:4d:0f:54:14:f1:ef:9b:7b: 8d:f9:4e:1d:bd:03:47:2c:5e:93:6e:78:21:ce:29:b5:09:35: 3c:02:d4:27:14:f9:ab:28:86:3c:1e:3c:de:c9:52:ec:f2:39: cd:dc:09:3a:83:87:ed:c1:86:65:3b:55:f4:9d:bf:45:24:02: 60:72:67:8d:49:2f:94:9c:a9:2d:27:86:0c:5b:69:32:23:d7: 0a:1e:d5:36:db:1b:c0:b2:00:89:82:69:fa:83:15:62:8d:f8: e0:1a:ed:3b:19:3e:0b:40:a2:89:d4:6e:38:52:fd:e7:97:2f: d3:43:75:26:7a:0d:8a:60:c0:7e:84:fc:de:68:b1:5a:dc:a2: 5d:ae:65:b6:e2:09:1d:e0:27:68:e9:97:86:11:e6:2d:44:da: 73:81:ec:ca:c5:3f:50:e8:c2:df:fc:70:10:ac:a2:4d:0c:4a: 96:25:34:9e:32:a5:a2:ac:5a:fc:55:ea:6c:c5:75:c3:50:77: 5d:16:6b:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNY+ffDLA4oo9ieVWcPcePTyi1HQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTA4MDUxNzA2MDRaFw0yNTA4MDkwMjE1MDRaMDMxMTAvBgNV BAMTKDM4NEI5QTMyMTRBRjM3RTMzMzQ2MTQ0MTA3NTUwQzA3RDJENDIyRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6OINZSuVEcYPUwrPkCvd1N2fo MkJW9wnQUi37fEbw8opnUqqPgKjnUFtTvdKuVeLRiAOl4P+wDAFE8LBiyi5KETK8 Sora3JnM3fdz/UJP9Oak/Kj8HOMUlg6yB89+MuOj4c2/uu2vrYajnWlJV6xAtk/4 EoYtPJR9WtpWLGpRBWb2yzj7mNErGVD1zoVOC+w69mCpNyAKmBcIDDbr4jyVaNpc N4SV0IwEYlSK3Ny6XX62BY+c/+ijTlx/CXMZ0R+jGpN5iM1t0ApzDF7oIYubnouS veEjp+DuuABXslRPiTzGhtxIB2ShighAyltkkQCNhbZqWmKGvILJ4M/vrFfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEuaMhSvN+MzRhRBB1UMB9LUItUwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1nb92rSMyNad05Pz9bq7XZxl6qKZuhO3m2 CHKNgND2JNT413PEDVwfd+fqTqaaYxD1zvf8d+M6jfS9BGE0GMpND1QU8e+be435 Th29A0csXpNueCHOKbUJNTwC1CcU+asohjwePN7JUuzyOc3cCTqDh+3BhmU7VfSd v0UkAmByZ41JL5ScqS0nhgxbaTIj1woe1TbbG8CyAImCafqDFWKN+OAa7TsZPgtA oonUbjhS/eeXL9NDdSZ6DYpgwH6E/N5osVrcol2uZbbiCR3gJ2jpl4YR5i1E2nOB 7MrFP1Dowt/8cBCsok0MSpYlNJ4ypaKsWvxV6mzFdcNQd10Wa60= -----END CERTIFICATE-----Generated at Thu Aug 7 01:08:10 2025 by rpki-client