$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft File: 1BA1ADD734797C0383628A8723DEBADA827B5B02.mft (raw, json) Hash identifier: ZrG79AnEeX2fM2qwXJUKOlYeVfgzSJ7eVYC/RdDe9c0= Subject key identifier: 90:3D:9C:99:5C:35:6E:35:9B:CB:04:71:31:D5:10:A1:12:5B:B7:6B Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 Certificate issuer: /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Certificate serial: 6770835236886DFCF844BD48AC0FD1EBEFFA3213 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft Manifest number: 011D Signing time: Sun 19 Oct 2025 10:01:37 +0000 Manifest this update: Sun 19 Oct 2025 09:56:37 +0000 Manifest next update: Wed 22 Oct 2025 19:46:37 +0000 Files and hashes: 1: 3130332e3134312e3234352e302f32342d3234203d3e20313339333635.roa (hash: 18f8OBM8+ia5Uh/H3tljNYXZldWb+K9faa9nLSg225M=) 2: 3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (hash: 4uTLKiRhjulU7GOXHvon2zkM6nMTkkXWkFIniQjvCOg=) 3: 1BA1ADD734797C0383628A8723DEBADA827B5B02.crl (hash: KOty0BNEN1MXtqJUb8KKE5EWnzN/EwKyEvC4//5a0sc=) 4: 323030313a6466313a316438303a3a2f34382d3438203d3e20313339333635.roa (hash: Jd1nQVdoPb9xeVhKiBu85pl1W/vsrnMXJ91FlIH1uQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:46:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:70:83:52:36:88:6d:fc:f8:44:bd:48:ac:0f:d1:eb:ef:fa:32:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02 Validity Not Before: Oct 19 09:56:37 2025 GMT Not After : Oct 22 19:46:37 2025 GMT Subject: CN=903D9C995C356E359BCB047131D510A1125BB76B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3a:f2:60:0e:bf:40:b1:cf:1f:c4:e0:8d:18: 7f:80:73:4e:1c:24:ef:7e:c2:6f:9e:6e:1f:5c:82: ac:8d:8c:2f:b6:11:6b:75:af:e7:f7:ed:11:11:13: 54:70:0b:35:8d:60:a8:7d:90:31:4c:dd:41:85:b4: a8:c4:cf:aa:75:4f:6e:ad:b3:0d:03:c9:c5:9f:94: 2c:d1:97:45:2b:a7:09:95:33:51:36:17:63:56:e7: 00:6c:b4:c8:9e:96:f2:ea:94:f6:12:95:d6:11:31: ff:9a:71:42:5b:c4:57:4e:76:2d:a7:b0:b4:8a:a3: 8b:ea:96:90:8b:3d:5b:44:0a:44:79:f5:87:46:54: dc:5b:2e:e2:43:8a:a6:97:89:0a:f6:6b:fd:64:03: bd:d9:13:13:9d:a7:db:44:92:38:eb:dd:8f:32:47: cb:a6:88:7f:90:fc:68:0b:63:e2:67:3b:4b:9f:dc: ac:b7:a3:7a:60:fe:dd:3a:44:e6:e4:8c:bc:f2:c4: dd:de:6d:e2:85:4a:3e:47:89:90:f4:3d:49:3a:58: 2b:32:c0:5d:6c:33:57:a6:a5:77:22:1a:ed:07:9f: 80:6c:6a:61:e1:a7:20:92:17:88:b2:3e:c4:71:fa: c9:af:54:b0:db:fb:23:d9:b8:14:b6:56:38:97:47: 44:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:3D:9C:99:5C:35:6E:35:9B:CB:04:71:31:D5:10:A1:12:5B:B7:6B X509v3 Authority Key Identifier: keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:08:2a:7d:77:14:6d:24:9a:45:00:b5:2a:be:b7:cb:e9:82: b3:a6:b9:71:a0:53:67:90:f9:12:27:53:b4:88:53:56:10:57: 5f:53:e5:7f:0a:7f:29:de:95:d5:55:ae:de:99:54:2b:2b:e4: 05:95:e0:95:d4:05:76:28:88:82:3d:69:7a:b7:94:55:84:04: 83:43:37:05:55:c3:cf:d6:fd:aa:78:61:6d:2c:1c:ca:fd:e0: f1:6b:75:9d:d5:9b:5c:57:12:4b:8f:fe:e0:5e:2f:9f:d4:2e: db:37:f3:06:7a:67:b6:bb:2f:83:7c:43:58:2a:19:a6:aa:43: f1:22:5b:b5:21:ff:94:d2:f1:c7:92:b0:ef:e4:0b:0b:99:cd: 69:c3:8b:c5:ed:fd:e3:c1:52:6e:e6:92:16:31:b9:df:69:b9: ba:62:c6:11:19:85:ed:a7:29:ed:57:db:a6:11:1a:20:4b:f0: b6:66:62:46:1e:41:f4:de:5a:bd:79:79:1c:60:9c:69:fb:c3: 69:1a:e9:a5:10:dc:f3:3e:51:42:8a:9e:2d:46:9e:fc:66:7d: d0:94:38:51:ad:5f:c2:9b:50:0c:29:7c:2f:fd:57:1e:3d:0d: e6:da:e7:7a:76:a0:9c:78:b7:29:6d:36:4a:1a:38:67:81:1e: 5c:d4:59:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3CDUjaIbfz4RL1IrA/R6+/6MhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4 MjdCNUIwMjAeFw0yNTEwMTkwOTU2MzdaFw0yNTEwMjIxOTQ2MzdaMDMxMTAvBgNV BAMTKDkwM0Q5Qzk5NUMzNTZFMzU5QkNCMDQ3MTMxRDUxMEExMTI1QkI3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvOvJgDr9Asc8fxOCNGH+Ac04c JO9+wm+ebh9cgqyNjC+2EWt1r+f37RERE1RwCzWNYKh9kDFM3UGFtKjEz6p1T26t sw0DycWflCzRl0UrpwmVM1E2F2NW5wBstMielvLqlPYSldYRMf+acUJbxFdOdi2n sLSKo4vqlpCLPVtECkR59YdGVNxbLuJDiqaXiQr2a/1kA73ZExOdp9tEkjjr3Y8y R8umiH+Q/GgLY+JnO0uf3Ky3o3pg/t06RObkjLzyxN3ebeKFSj5HiZD0PUk6WCsy wF1sM1empXciGu0Hn4BsamHhpyCSF4iyPsRx+smvVLDb+yPZuBS2VjiXR0RHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkD2cmVw1bjWbywRxMdUQoRJbt2swHwYDVR0j BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0 Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC NUIwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JlZDgzYmQtODk4Ni00NDI5LWEw MTEtYWM1OTA3MjRkNTg2LzAvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJB REE4MjdCNUIwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEMIKn13FG0kmkUAtSq+t8vpgrOmuXGgU2eQ +RInU7SIU1YQV19T5X8KfyneldVVrt6ZVCsr5AWV4JXUBXYoiII9aXq3lFWEBIND NwVVw8/W/ap4YW0sHMr94PFrdZ3Vm1xXEkuP/uBeL5/ULts38wZ6Z7a7L4N8Q1gq GaaqQ/EiW7Uh/5TS8ceSsO/kCwuZzWnDi8Xt/ePBUm7mkhYxud9pubpixhEZhe2n Ke1X26YRGiBL8LZmYkYeQfTeWr15eRxgnGn7w2ka6aUQ3PM+UUKKni1GnvxmfdCU OFGtX8KbUAwpfC/9Vx49Deba53p2oJx4tyltNkoaOGeBHlzUWSI= -----END CERTIFICATE-----Generated at Mon Oct 20 15:22:51 2025 by rpki-client