$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: jPE8IzDsIv/U3G1mA8/5ywE3teJ+6OsNiLjeFWGoYko= Subject key identifier: 91:FF:D9:88:F1:2A:E9:F4:57:11:FB:16:B1:A9:4A:A6:27:D9:F2:C7 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 236B38C8C2807AFECCA272B94A6CC4746E5FDBF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01F2 Signing time: Sun 29 Jun 2025 03:01:16 +0000 Manifest this update: Sun 29 Jun 2025 02:56:16 +0000 Manifest next update: Wed 02 Jul 2025 09:14:16 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 3: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: t5RzONDor550gizTBaVtKNoYaSJOSnRs57EhX8m8tlU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6b:38:c8:c2:80:7a:fe:cc:a2:72:b9:4a:6c:c4:74:6e:5f:db:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Jun 29 02:56:16 2025 GMT Not After : Jul 2 09:14:16 2025 GMT Subject: CN=91FFD988F12AE9F45711FB16B1A94AA627D9F2C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:b6:1b:65:b5:24:f3:a7:87:0d:c6:85:ed:34: ad:78:c7:37:9c:de:1b:c4:cd:19:23:83:5d:39:10: 7a:04:fa:3e:ad:4c:d1:c5:af:fc:30:13:ed:b5:9d: 96:37:ef:98:af:91:94:f6:d7:a5:bd:61:17:bb:89: a3:06:cd:01:22:4e:c7:c7:01:96:ca:1b:c7:17:2b: 96:b6:e7:38:51:03:0d:44:8c:49:ce:b5:51:7e:a6: c6:db:40:0c:09:c5:5f:ea:85:47:e6:25:45:75:db: 52:32:ab:9a:3a:8a:82:1f:52:a9:be:44:ed:3b:af: 05:0e:5d:ef:3f:42:b3:56:8f:c1:ab:e0:e3:6a:4c: cb:c9:a4:f6:f9:a4:e1:cb:5a:36:08:65:f8:94:8d: b4:61:b0:8a:ab:3e:35:55:63:b7:1c:c9:b4:51:7f: 02:10:05:7d:bd:42:7c:2b:84:86:fb:50:2b:93:42: 43:4e:dd:71:a0:41:28:f6:73:7d:24:e2:16:3d:86: 73:aa:fd:7d:97:18:ca:b8:17:83:09:d3:de:21:58: d7:b7:b6:ec:00:54:7d:dd:08:59:bd:e2:18:61:20: a2:cf:db:38:27:8f:e9:4d:cc:91:6f:7f:a9:03:6f: b7:ec:7b:6f:1d:32:7c:6e:08:4e:95:eb:2e:74:5b: 98:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FF:D9:88:F1:2A:E9:F4:57:11:FB:16:B1:A9:4A:A6:27:D9:F2:C7 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:51:b8:26:cc:3d:f2:da:7f:aa:3a:c4:6b:99:63:87:ff:f4: d0:d1:5f:25:06:06:3d:8c:f0:5c:f8:d9:0c:5d:3a:b6:fd:d4: ac:e0:06:d0:6b:05:7d:67:d9:28:00:83:c4:e8:51:42:74:a1: ac:6d:d8:b8:47:e9:61:69:d4:cd:54:f7:29:dc:3a:ab:b6:05: 23:3b:b4:01:7c:42:bc:38:83:01:62:26:cd:b4:a4:64:41:73: b2:ec:cb:38:af:e4:de:76:06:68:7f:e6:0a:91:45:fd:60:6d: 20:38:e9:5f:25:9a:a7:8f:1a:fa:cb:ec:a4:30:49:23:3e:a4: 5f:f4:4d:64:de:5c:e2:57:33:a4:00:bf:a2:db:95:2f:7c:b5: ec:5a:33:cf:e7:38:58:30:91:85:9b:d5:62:e2:01:b8:8c:8a: 68:1f:37:91:eb:a2:45:73:cd:20:c3:42:2c:d9:29:ae:31:91: ed:61:f5:17:3a:83:4f:cd:9d:d7:34:3c:e7:a8:3c:64:e2:5a: 21:4c:ad:91:ff:b4:cf:01:93:5b:9c:c1:14:37:84:76:2f:ef: 11:8c:2e:56:1c:3c:49:d1:fb:79:f5:fa:f0:6c:18:dd:3f:f5: 6c:02:26:0d:5b:77:cc:72:41:98:f2:09:2b:93:00:a8:a9:cf: 73:9b:1f:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2s4yMKAev7MonK5SmzEdG5f2/AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA2MjkwMjU2MTZaFw0yNTA3MDIwOTE0MTZaMDMxMTAvBgNV BAMTKDkxRkZEOTg4RjEyQUU5RjQ1NzExRkIxNkIxQTk0QUE2MjdEOUYyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNthtltSTzp4cNxoXtNK14xzec 3hvEzRkjg105EHoE+j6tTNHFr/wwE+21nZY375ivkZT216W9YRe7iaMGzQEiTsfH AZbKG8cXK5a25zhRAw1EjEnOtVF+psbbQAwJxV/qhUfmJUV121Iyq5o6ioIfUqm+ RO07rwUOXe8/QrNWj8Gr4ONqTMvJpPb5pOHLWjYIZfiUjbRhsIqrPjVVY7ccybRR fwIQBX29QnwrhIb7UCuTQkNO3XGgQSj2c30k4hY9hnOq/X2XGMq4F4MJ094hWNe3 tuwAVH3dCFm94hhhIKLP2zgnj+lNzJFvf6kDb7fse28dMnxuCE6V6y50W5i7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkf/ZiPEq6fRXEfsWsalKpifZ8scwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9RuCbMPfLaf6o6xGuZY4f/9NDRXyUGBj2M 8Fz42QxdOrb91KzgBtBrBX1n2SgAg8ToUUJ0oaxt2LhH6WFp1M1U9yncOqu2BSM7 tAF8Qrw4gwFiJs20pGRBc7Lsyziv5N52Bmh/5gqRRf1gbSA46V8lmqePGvrL7KQw SSM+pF/0TWTeXOJXM6QAv6LblS98texaM8/nOFgwkYWb1WLiAbiMimgfN5HrokVz zSDDQizZKa4xke1h9Rc6g0/Nndc0POeoPGTiWiFMrZH/tM8Bk1ucwRQ3hHYv7xGM LlYcPEnR+3n1+vBsGN0/9WwCJg1bd8xyQZjyCSuTAKipz3ObH8k= -----END CERTIFICATE-----Generated at Sun Jun 29 23:36:07 2025 by rpki-client