$ rpki-client -vvf repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft File: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft (raw, json) Hash identifier: U98su3LLug248lb8l1wIQgokxgadT8yxHMLuSjBNDSk= Subject key identifier: E5:CC:19:8A:E6:DA:45:C3:11:A1:A7:7B:6C:AA:39:15:45:98:4B:5E Authority key identifier: 1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F Certificate issuer: /CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Certificate serial: 44F34DB5BDF72083A85D3413719DB01F5C45B078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft Manifest number: 018E Signing time: Sat 18 Oct 2025 19:01:05 +0000 Manifest this update: Sat 18 Oct 2025 18:56:05 +0000 Manifest next update: Tue 21 Oct 2025 20:57:05 +0000 Files and hashes: 1: 323430313a326334303a353a3a2f34382d3438203d3e203338353233.roa (hash: Iff17R7Y2PXgGNzQ48JwVBTPT+2Nxu79I9ZwquKjbxE=) 2: 323430313a326334303a343a3a2f34382d3438203d3e203338353233.roa (hash: Pipia0jUKsl0Bb0PnrXMjgVZSeCbzEQGM99k0tRnt6U=) 3: 3131372e37342e3131372e302f32342d3234203d3e203338353233.roa (hash: V8HVQOfgmh/cc0nhLeaxvvDoxZedeMVRv4rqy3Nfh7U=) 4: 323430313a326334303a323a3a2f34382d3438203d3e203338353233.roa (hash: GcXNkBAv1340rwM/Oan5xv5UHgMfOa0RbbyoNs7Mx0I=) 5: 3131372e37342e3131322e302f32342d3234203d3e203338353233.roa (hash: r7mX7DIOfxP1tvfX/0nO3uk5UJScpK1uxXF4s8uBd2k=) 6: 1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl (hash: 8/kvHYbKudq1ctqh3MtqX+uphynhJQ4uyrKO1b9uj8k=) 7: 323430313a326334303a333a3a2f34382d3438203d3e203338353233.roa (hash: K2sXmSDY1Q0Ib91bp7Ej+rMz+bv5TkPCX1Vm42UKq2g=) 8: 323430313a326334303a313a3a2f34382d3438203d3e203338353233.roa (hash: kHlmhNS5gQ6WL5MaK2adKxGIlTTXW61wpUfSl5HlAJc=) 9: 323430313a326334303a3a2f34382d3438203d3e203338353233.roa (hash: VqDDvUOu35p9WF+KpeR5rVDXBEuyr/t255Gs6Jfv+fI=) 10: 3131372e37342e3131342e302f32342d3234203d3e203338353233.roa (hash: wmUZdQN9smMnqKDgMvZP3VM5NikSry3YiZ+HF4rDvwk=) 11: 3131372e37342e3131382e302f32342d3234203d3e203338353233.roa (hash: 4fKehzLVKMt4BtIz5yX0ZNeUtM2OU5RTZbzjb0CfeGg=) 12: 3131372e37342e3131392e302f32342d3234203d3e203338353233.roa (hash: xNJ7kcT79xuTCgJoNY2LlV0p8gctQ3BS6QaupCIi9OQ=) 13: 3131372e37342e3131352e302f32342d3234203d3e203338353233.roa (hash: IzPZz6vu3cjWO+ZYwd6eSMpiSKGTjsqFFoCVeTSJVZ8=) 14: 3131372e37342e3131362e302f32342d3234203d3e203338353233.roa (hash: 4k9C18S/gej3vBFzU0qeNrYGkLmZVXuYXMm+WSQ8DFw=) 15: 3131372e37342e3131332e302f32342d3234203d3e203338353233.roa (hash: SrvCxxwtOAUSUTutTIMfTF6gsLrsVsYaxkHmFerjnWI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:57:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f3:4d:b5:bd:f7:20:83:a8:5d:34:13:71:9d:b0:1f:5c:45:b0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC497D0AD0ADA80683A4AD17C60B87B6039448F Validity Not Before: Oct 18 18:56:05 2025 GMT Not After : Oct 21 20:57:05 2025 GMT Subject: CN=E5CC198AE6DA45C311A1A77B6CAA391545984B5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9c:4b:f9:98:8e:ad:47:a5:3a:5f:c0:11:e7: de:9b:03:d7:8d:31:9b:43:c5:48:2d:c9:5d:28:9f: 9f:1d:c4:e1:18:6b:b9:9c:fa:f6:5e:8d:2f:b6:f8: ad:de:23:37:1b:eb:9c:c2:9f:57:63:e6:51:ce:46: 31:a4:aa:96:62:4b:db:66:e9:35:32:3b:00:24:fd: f6:49:53:9e:fb:ae:b4:be:3b:53:a2:13:5b:c4:11: f5:3c:32:e8:d6:ef:96:56:df:9a:0a:95:4b:5f:c0: 62:b2:4c:d2:b3:54:2d:6e:df:89:a2:33:b3:6c:15: 56:bc:fd:69:9e:8b:4a:38:19:d7:ad:c1:c1:bf:75: 11:59:8d:76:6e:b6:ba:9e:e6:b2:67:b0:20:44:4b: aa:41:03:dc:6e:5e:89:da:95:8c:55:2b:63:69:f9: 67:56:87:38:60:7d:e9:8d:96:9b:1e:0a:47:16:c3: ed:ba:c2:c0:57:3e:d3:6f:0f:a5:ed:b0:19:2a:3c: e5:47:71:60:3b:02:ad:d6:c9:e5:42:f3:d1:5d:e8: 5c:4c:dc:79:af:bf:6c:66:f4:7b:c5:10:9e:25:84: 4a:49:31:2f:d1:18:d8:70:e5:2a:29:de:39:9b:40: 90:2c:c3:48:aa:f0:c2:05:d7:ff:7e:6a:23:ab:87: f0:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CC:19:8A:E6:DA:45:C3:11:A1:A7:7B:6C:AA:39:15:45:98:4B:5E X509v3 Authority Key Identifier: keyid:1B:C4:97:D0:AD:0A:DA:80:68:3A:4A:D1:7C:60:B8:7B:60:39:44:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/355a1a44-337d-4db4-90d7-5bd4f37214b8/0/1BC497D0AD0ADA80683A4AD17C60B87B6039448F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:26:be:4f:73:28:d3:1f:79:e0:7f:12:de:97:24:ad:d7:eb: 41:73:0e:97:3e:ae:9a:46:af:09:ce:3f:9e:60:b9:69:d2:b7: 16:ee:00:d4:2d:12:9d:cd:fe:ad:9b:b4:d4:dd:45:06:55:db: da:aa:36:de:4f:a8:24:8a:3c:e9:e4:6a:15:1d:10:96:97:8d: bd:15:23:8e:ff:62:58:66:c5:6f:d2:7c:99:9c:b3:b7:02:56: 6d:4f:39:93:02:55:5f:81:0c:40:fe:8d:7d:5c:a8:a9:40:ec: 14:6d:28:2b:9c:94:e3:e9:c8:19:03:6e:56:ca:f1:64:5a:06: 81:af:48:a0:67:5f:d4:36:0e:1d:e5:55:9a:da:d4:02:94:43: 13:7e:46:f2:04:62:a9:ef:4f:16:86:3b:a1:48:87:85:07:98: 9c:5d:06:9f:cc:ed:8a:46:a4:7c:2e:86:45:ca:61:5b:5b:43: a0:65:da:1f:44:2f:5a:46:84:d4:34:ca:f0:9b:f4:50:a4:b4: 62:a0:c3:c8:e6:83:57:9e:61:08:97:58:a2:39:d7:38:71:2a: 59:69:1c:24:dd:bb:85:7c:ce:06:80:0a:0f:bc:48:19:b3:e3: b6:ac:d7:9a:dd:0a:43:5c:5b:ae:b6:40:e8:48:ae:53:46:e4: fa:ca:36:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPNNtb33IIOoXTQTcZ2wH1xFsHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2 MDM5NDQ4RjAeFw0yNTEwMTgxODU2MDVaFw0yNTEwMjEyMDU3MDVaMDMxMTAvBgNV BAMTKEU1Q0MxOThBRTZEQTQ1QzMxMUExQTc3QjZDQUEzOTE1NDU5ODRCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwnEv5mI6tR6U6X8AR596bA9eN MZtDxUgtyV0on58dxOEYa7mc+vZejS+2+K3eIzcb65zCn1dj5lHORjGkqpZiS9tm 6TUyOwAk/fZJU577rrS+O1OiE1vEEfU8MujW75ZW35oKlUtfwGKyTNKzVC1u34mi M7NsFVa8/Wmei0o4GdetwcG/dRFZjXZutrqe5rJnsCBES6pBA9xuXonalYxVK2Np +WdWhzhgfemNlpseCkcWw+26wsBXPtNvD6XtsBkqPOVHcWA7Aq3WyeVC89Fd6FxM 3Hmvv2xm9HvFEJ4lhEpJMS/RGNhw5Sop3jmbQJAsw0iq8MIF1/9+aiOrh/BFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cwZiubaRcMRoad7bKo5FUWYS14wHwYDVR0j BBgwFoAUG8SX0K0K2oBoOkrRfGC4e2A5RI8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NTVhMWE0NC0zMzdkLTRkYjQtOTBkNy01YmQ0ZjM3MjE0YjgvMC8xQkM0OTdEMEFE MEFEQTgwNjgzQTRBRDE3QzYwQjg3QjYwMzk0NDhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4N0I2MDM5 NDQ4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzU1YTFhNDQtMzM3ZC00ZGI0LTkw ZDctNWJkNGYzNzIxNGI4LzAvMUJDNDk3RDBBRDBBREE4MDY4M0E0QUQxN0M2MEI4 N0I2MDM5NDQ4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIEmvk9zKNMfeeB/Et6XJK3X60FzDpc+rppG rwnOP55guWnStxbuANQtEp3N/q2btNTdRQZV29qqNt5PqCSKPOnkahUdEJaXjb0V I47/YlhmxW/SfJmcs7cCVm1POZMCVV+BDED+jX1cqKlA7BRtKCuclOPpyBkDblbK 8WRaBoGvSKBnX9Q2Dh3lVZra1AKUQxN+RvIEYqnvTxaGO6FIh4UHmJxdBp/M7YpG pHwuhkXKYVtbQ6Bl2h9EL1pGhNQ0yvCb9FCktGKgw8jmg1eeYQiXWKI51zhxKllp HCTdu4V8zgaACg+8SBmz47as15rdCkNcW662QOhIrlNG5PrKNms= -----END CERTIFICATE-----Generated at Mon Oct 20 09:53:36 2025 by rpki-client