$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: q3y1nUF2xCeVSiIfgAGm3GAWDjyzB/sYdvc3tNxrnpY= Subject key identifier: 65:05:1E:02:0B:94:B8:89:0B:89:F6:F7:BA:49:8B:0A:92:F3:23:38 Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 1AFD2DFDDA1D2187017A4582E21818D230DF55FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 0145 Signing time: Sat 10 May 2025 03:11:03 +0000 Manifest this update: Sat 10 May 2025 03:06:03 +0000 Manifest next update: Tue 13 May 2025 05:33:03 +0000 Files and hashes: 1: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: dqOB/u4xKENBK0Kl6QRs/o7V0F/9mNc3zhDWjq7sNBA=) 2: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: BgrpAYav/pUESxArt2NS1teCYs0lWmtbdh6n4DVdjLM=) 3: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: fcQPwUouCVaeNmPsgU50oUU5piCrvcz7X4WUkw36Gi0=) 4: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=) 5: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=) 6: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: Z7MZGS10toSXvLmV5iBfghuNSI8n4mTpT95+VkC6QfE=) 7: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: bOBZGkzqysQJJCz7648wZEJREONFUo+QtRyxjh2BRFw=) 8: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=) 9: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: znSniW+lPXCPGxomzmN2hrx17CR9++zAKICSSEuO9Vw=) 10: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=) 11: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: BbLwPxFe+tWzZ8sOAXoZbHTuvfXUw6/yE4h7IQcYxzA=) 12: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: wop0enhk31jLHWhccpcZJr0EKUzHvqhNyLW2a5pNj2w=) 13: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=) 14: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: sSdx6bfz/Cb6HZkpzLLwduFVNFn1g0FyFXb3VTTUPws=) 15: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 05:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:fd:2d:fd:da:1d:21:87:01:7a:45:82:e2:18:18:d2:30:df:55:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: May 10 03:06:03 2025 GMT Not After : May 13 05:33:03 2025 GMT Subject: CN=65051E020B94B8890B89F6F7BA498B0A92F32338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:44:78:9e:89:8b:57:d9:ea:a3:9b:b9:fc:18: 82:06:2d:c3:cf:df:94:c4:14:d9:6c:5a:ee:37:a2: 74:55:6a:8c:42:24:56:31:f5:21:3c:ae:08:48:9b: 4f:08:b4:f2:04:6d:01:db:66:7f:58:b1:ed:ca:5d: cf:54:6a:1f:14:14:9c:12:a3:c4:d8:2c:27:1a:1e: d0:76:3f:54:8c:25:d6:0d:a9:be:52:27:e0:d0:a3: 80:d8:10:f0:b5:b8:b5:ea:59:ad:f4:7e:f8:83:13: 50:88:76:84:36:be:e0:7b:00:da:9b:6d:44:67:11: 8d:91:8f:bb:fd:d3:fe:f7:04:80:b7:c5:4b:4b:af: 31:8b:23:36:ac:cd:1e:7e:31:b4:35:6d:fb:5b:10: 54:95:2f:2c:0e:8a:b5:6a:7c:c4:b0:23:fe:a0:6f: 8d:c0:d5:47:73:c2:6c:4d:e1:38:a4:e7:96:d5:e9: 3f:13:f7:67:f4:58:23:9b:2b:c2:3d:b7:54:34:47: 13:57:ea:00:d9:45:4e:bc:c3:96:55:8d:20:b8:89: 86:a3:85:f7:91:4c:b7:53:22:a2:26:c3:1e:a2:76: 84:d1:44:d3:4f:50:e5:5c:7e:3b:b1:ee:83:bc:41: 4a:98:a4:7a:b5:c9:e1:45:c4:f8:00:6e:62:99:ce: 72:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:05:1E:02:0B:94:B8:89:0B:89:F6:F7:BA:49:8B:0A:92:F3:23:38 X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:e5:27:a1:f0:fe:c5:f1:a1:79:41:e8:6e:73:07:7d:0c:cf: 84:17:7e:bd:0b:c2:33:7d:bb:7b:88:5a:b6:4e:17:0c:8d:e7: 54:50:0d:4e:57:40:14:89:46:c8:6c:45:29:17:24:a4:d1:a1: 6e:67:73:ab:60:35:af:fe:17:a2:4e:a4:36:b0:61:5e:96:7d: 39:c0:a4:f4:5d:b0:c2:b9:8f:8e:e6:f8:17:5b:3d:07:70:b5: aa:d8:bd:cd:0f:87:76:64:f3:9e:eb:40:62:fd:0b:a6:bc:f9: e0:67:20:84:68:cd:e4:00:61:a2:e7:a1:48:da:e6:bc:4a:4a: 21:0d:93:81:b8:f7:c4:cd:42:32:42:9f:51:c2:ec:d0:1c:4a: 26:93:70:83:f2:94:da:71:66:cc:c2:da:44:25:3b:44:ef:a5: 3f:69:89:1c:dc:72:21:b6:75:c2:2c:a5:0d:79:4d:0b:0e:e3: 66:9e:e0:d1:3b:92:fc:db:c0:8e:cc:dd:11:43:b8:6a:dc:a1: 17:dc:94:00:f5:31:71:13:ef:ef:18:1f:4b:d3:34:0e:aa:03: 08:96:f1:d6:87:00:a8:7d:0a:77:f7:27:ca:bb:a0:39:26:7f: 3c:fd:19:e0:fc:fd:68:22:ff:e4:42:17:1e:19:9c:89:b0:f3: 3b:5f:5a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGv0t/dodIYcBekWC4hgY0jDfVfwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTA1MTAwMzA2MDNaFw0yNTA1MTMwNTMzMDNaMDMxMTAvBgNV BAMTKDY1MDUxRTAyMEI5NEI4ODkwQjg5RjZGN0JBNDk4QjBBOTJGMzIzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRHieiYtX2eqjm7n8GIIGLcPP 35TEFNlsWu43onRVaoxCJFYx9SE8rghIm08ItPIEbQHbZn9Yse3KXc9Uah8UFJwS o8TYLCcaHtB2P1SMJdYNqb5SJ+DQo4DYEPC1uLXqWa30fviDE1CIdoQ2vuB7ANqb bURnEY2Rj7v90/73BIC3xUtLrzGLIzaszR5+MbQ1bftbEFSVLywOirVqfMSwI/6g b43A1UdzwmxN4Tik55bV6T8T92f0WCObK8I9t1Q0RxNX6gDZRU68w5ZVjSC4iYaj hfeRTLdTIqImwx6idoTRRNNPUOVcfjux7oO8QUqYpHq1yeFFxPgAbmKZznIhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZQUeAguUuIkLifb3ukmLCpLzIzgwHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADzlJ6Hw/sXxoXlB6G5zB30Mz4QXfr0LwjN9 u3uIWrZOFwyN51RQDU5XQBSJRshsRSkXJKTRoW5nc6tgNa/+F6JOpDawYV6WfTnA pPRdsMK5j47m+BdbPQdwtarYvc0Ph3Zk857rQGL9C6a8+eBnIIRozeQAYaLnoUja 5rxKSiENk4G498TNQjJCn1HC7NAcSiaTcIPylNpxZszC2kQlO0TvpT9piRzcciG2 dcIspQ15TQsO42ae4NE7kvzbwI7M3RFDuGrcoRfclAD1MXET7+8YH0vTNA6qAwiW 8daHAKh9Cnf3J8q7oDkmfzz9GeD8/Wgi/+RCFx4ZnImw8ztfWrY= -----END CERTIFICATE-----Generated at Sun May 11 20:43:04 2025 by rpki-client