$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: KvgnabDiF2C3JQT+hkCNRy6XEcDNHNc8pP9iFqBRnfY= Subject key identifier: C1:E7:1C:64:33:11:5F:21:38:5C:1C:4A:7B:1C:77:6C:7C:3E:D3:35 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 3984258E383C4E312B9D2DFC4C0C587416613ECC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0224 Signing time: Sun 19 Oct 2025 08:11:16 +0000 Manifest this update: Sun 19 Oct 2025 08:06:16 +0000 Manifest next update: Wed 22 Oct 2025 19:09:16 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: 9SIHp0tj8EC6UzElMx/m8c4I1ZHxhpil4xzmw/zhB94=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 19:09:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:84:25:8e:38:3c:4e:31:2b:9d:2d:fc:4c:0c:58:74:16:61:3e:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Oct 19 08:06:16 2025 GMT Not After : Oct 22 19:09:16 2025 GMT Subject: CN=C1E71C6433115F21385C1C4A7B1C776C7C3ED335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:90:80:40:99:dc:1a:af:16:fd:d9:46:65:b6: b3:28:c8:95:27:38:9d:c1:6a:65:91:7d:52:c2:e7: 2a:42:80:25:ab:24:83:84:ab:59:fd:44:bf:a0:04: 06:21:bc:ae:8d:f4:18:05:32:21:8c:b2:cc:2c:ad: 83:00:8a:49:b9:0b:73:07:c4:99:53:63:6c:43:a5: 4c:d2:bb:60:e8:5f:54:e0:5a:59:a8:5b:6b:ae:f5: 68:cc:e8:90:e5:99:25:08:aa:b0:9a:cf:0f:9e:2d: 58:88:6d:9a:f1:93:ce:a6:41:37:87:e3:0b:92:ba: 4e:83:58:ea:92:c5:5b:d9:c7:c8:58:b0:b0:c5:2c: 78:21:74:f3:dd:4c:d5:01:5b:c1:21:02:1c:06:39: 93:3a:55:77:80:60:7f:63:8b:f8:87:56:f2:f2:ab: 21:16:a1:59:fa:f2:62:33:2d:19:aa:70:6d:6a:af: 7f:ea:9a:85:c2:3b:c7:22:af:66:52:fb:6d:34:0a: 74:4b:da:85:ce:34:ea:2e:02:a9:25:1b:6a:94:be: e8:44:86:1e:64:5e:9e:82:73:87:aa:70:05:26:cb: d8:66:5a:09:cf:f9:ea:cf:11:25:e9:83:eb:6b:bc: f0:6c:e5:98:48:db:35:e1:23:58:fe:71:d2:19:1a: 92:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:E7:1C:64:33:11:5F:21:38:5C:1C:4A:7B:1C:77:6C:7C:3E:D3:35 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:c1:83:e8:c5:e9:e2:eb:04:98:b2:ca:58:11:21:09:b5:03: 40:60:99:a8:35:8c:a5:15:db:31:6c:02:aa:47:de:0e:3c:8b: 12:2f:c4:e2:4f:2c:3c:74:65:db:13:15:3d:00:31:9a:a8:8a: 10:6c:de:2f:b2:75:08:81:83:49:dd:52:f8:2d:ed:f4:69:46: c5:c6:6c:39:19:64:d5:58:98:10:08:7a:7f:52:fd:9d:76:f4: f5:ca:36:ec:ba:7f:a9:b8:b3:ac:58:de:01:a2:81:51:12:df: 26:b3:30:de:07:1c:64:8d:67:0d:93:1a:ba:0a:04:0a:27:6d: ba:0e:b0:30:6f:64:13:5d:58:64:e9:f4:33:be:16:c3:d5:c6: 79:ba:4d:ce:53:d4:77:10:31:1b:90:d1:36:26:a0:08:80:de: 78:a5:df:1f:d2:25:c0:1f:ef:ac:8f:d2:25:73:5b:a6:29:4d: 6b:d0:38:d8:6b:28:55:04:8a:09:1a:c4:7a:b1:c5:fd:bd:fb: 4a:70:9e:ce:ac:07:45:1b:58:93:1b:fc:18:4b:f5:7c:ad:69: a2:7c:ab:88:69:ed:8c:b7:c2:33:17:7a:26:5c:56:54:ad:51: 18:4c:ef:92:14:3b:a8:cb:c0:91:e7:96:cd:5d:39:ef:8f:b4: 98:bf:86:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOYQljjg8TjErnS38TAxYdBZhPswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTEwMTkwODA2MTZaFw0yNTEwMjIxOTA5MTZaMDMxMTAvBgNV BAMTKEMxRTcxQzY0MzMxMTVGMjEzODVDMUM0QTdCMUM3NzZDN0MzRUQzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhkIBAmdwarxb92UZltrMoyJUn OJ3BamWRfVLC5ypCgCWrJIOEq1n9RL+gBAYhvK6N9BgFMiGMsswsrYMAikm5C3MH xJlTY2xDpUzSu2DoX1TgWlmoW2uu9WjM6JDlmSUIqrCazw+eLViIbZrxk86mQTeH 4wuSuk6DWOqSxVvZx8hYsLDFLHghdPPdTNUBW8EhAhwGOZM6VXeAYH9ji/iHVvLy qyEWoVn68mIzLRmqcG1qr3/qmoXCO8cir2ZS+200CnRL2oXONOouAqklG2qUvuhE hh5kXp6Cc4eqcAUmy9hmWgnP+erPESXpg+trvPBs5ZhI2zXhI1j+cdIZGpIHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUweccZDMRXyE4XBxKexx3bHw+0zUwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnBg+jF6eLrBJiyylgRIQm1A0Bgmag1jKUV 2zFsAqpH3g48ixIvxOJPLDx0ZdsTFT0AMZqoihBs3i+ydQiBg0ndUvgt7fRpRsXG bDkZZNVYmBAIen9S/Z129PXKNuy6f6m4s6xY3gGigVES3yazMN4HHGSNZw2TGroK BAonbboOsDBvZBNdWGTp9DO+FsPVxnm6Tc5T1HcQMRuQ0TYmoAiA3nil3x/SJcAf 76yP0iVzW6YpTWvQONhrKFUEigkaxHqxxf29+0pwns6sB0UbWJMb/BhL9XytaaJ8 q4hp7Yy3wjMXeiZcVlStURhM75IUO6jLwJHnls1dOe+PtJi/huA= -----END CERTIFICATE-----Generated at Mon Oct 20 20:40:36 2025 by rpki-client