$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: 9lRyjx2dPKUYHF9P/q7druo/EhEqFhsgCukjgdw4wow= Subject key identifier: 2B:D0:11:97:A9:F0:C0:43:47:C8:00:F8:E9:B3:DE:BF:FE:69:4A:EC Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 041218F609EB7E9B223A1F2541E5F67F7C0DCE2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 020A Signing time: Thu 21 Aug 2025 13:51:15 +0000 Manifest this update: Thu 21 Aug 2025 13:46:15 +0000 Manifest next update: Sun 24 Aug 2025 19:24:15 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 3: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: QUCadA3SPP/wh9RgC9ddTHZilc1U7hLWLgxlQgkj5Dg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:24:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:12:18:f6:09:eb:7e:9b:22:3a:1f:25:41:e5:f6:7f:7c:0d:ce:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Aug 21 13:46:15 2025 GMT Not After : Aug 24 19:24:15 2025 GMT Subject: CN=2BD01197A9F0C04347C800F8E9B3DEBFFE694AEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:34:d7:72:84:28:56:d3:6b:96:53:53:a8:98: da:4d:0f:9d:b0:82:86:e7:1d:79:22:eb:1d:fe:cb: 65:80:bc:d0:bd:3a:a3:38:1d:d3:ba:9b:c8:13:56: 55:fe:ef:33:ba:cf:9a:d4:ad:36:0c:85:fe:59:6d: 81:e6:bf:23:7f:d1:4c:8d:2c:0a:51:14:1a:48:76: 49:16:4f:1b:7e:6b:78:99:22:23:80:2f:9d:52:06: dd:ec:39:71:71:75:10:d5:c1:51:79:a6:6a:3a:13: 6b:43:1b:fb:86:32:38:84:64:d1:30:2b:8f:f8:e9: 77:d8:c3:92:f0:f7:24:34:b1:b6:d3:b9:5b:de:1e: e6:f2:a8:1a:dd:f1:76:89:53:c7:7c:2f:93:28:bd: c8:50:f1:da:b7:96:59:0d:04:1b:5e:53:3f:96:9b: 91:46:6a:31:31:6e:a8:e1:49:26:46:7f:77:ef:20: 30:19:3c:39:30:bb:62:72:9a:9e:73:47:0c:9b:60: bb:90:62:1f:75:9a:17:e1:d2:2d:38:92:2c:77:e0: 8f:ff:1d:4d:0a:de:f7:d1:da:02:a0:f0:da:aa:28: 40:e5:a1:7f:0d:60:94:5f:39:b2:bc:eb:15:fd:9b: 00:3f:4d:38:bd:9b:ba:42:60:13:00:49:6d:64:5e: 6c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D0:11:97:A9:F0:C0:43:47:C8:00:F8:E9:B3:DE:BF:FE:69:4A:EC X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:d9:9c:86:64:9c:6a:70:38:fb:61:3e:84:1b:63:d5:6d:84: 7e:6b:5e:cd:a2:f7:f7:32:b1:e2:69:67:28:07:c9:c3:bf:ef: bb:ab:e0:4a:6f:5c:36:2d:f7:2e:11:8b:c7:fa:b7:08:67:c8: 97:3d:09:5c:ca:01:5e:35:4d:e3:c0:1b:0e:aa:e2:fc:cf:1a: 61:bd:75:76:6f:ef:4e:88:31:85:49:e4:55:2a:2c:6a:bd:1e: a6:79:5b:1f:e2:ea:68:a9:12:f9:09:2b:af:a4:06:8e:21:8b: c6:3f:6f:fa:30:90:24:48:df:51:68:b5:68:57:49:a0:1d:4f: 7b:6c:43:d1:40:e6:52:3d:d0:2a:4d:3a:82:b4:5a:b1:ad:6e: 42:87:65:41:53:a4:13:34:0d:81:7c:9c:f2:c3:78:1d:c4:9e: ca:43:f4:b3:6b:55:45:33:28:8e:f4:a2:f4:b0:18:44:67:cb: 29:f2:4b:c9:5f:64:2f:81:03:2d:b9:3d:f9:c2:ae:73:6e:37: b3:1d:06:c2:e5:af:5b:89:d1:e1:87:1f:ca:94:61:aa:8e:a4: ea:ca:c5:20:f3:dd:34:6f:d5:b0:51:96:86:d8:c9:1d:fb:3b: 8b:e0:37:fd:b8:eb:02:31:68:c1:09:12:7f:6b:c8:3d:76:7a: 25:2a:43:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBBIY9gnrfpsiOh8lQeX2f3wNziowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA4MjExMzQ2MTVaFw0yNTA4MjQxOTI0MTVaMDMxMTAvBgNV BAMTKDJCRDAxMTk3QTlGMEMwNDM0N0M4MDBGOEU5QjNERUJGRkU2OTRBRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCNNdyhChW02uWU1OomNpND52w gobnHXki6x3+y2WAvNC9OqM4HdO6m8gTVlX+7zO6z5rUrTYMhf5ZbYHmvyN/0UyN LApRFBpIdkkWTxt+a3iZIiOAL51SBt3sOXFxdRDVwVF5pmo6E2tDG/uGMjiEZNEw K4/46XfYw5Lw9yQ0sbbTuVveHubyqBrd8XaJU8d8L5MovchQ8dq3llkNBBteUz+W m5FGajExbqjhSSZGf3fvIDAZPDkwu2Jymp5zRwybYLuQYh91mhfh0i04kix34I// HU0K3vfR2gKg8NqqKEDloX8NYJRfObK86xX9mwA/TTi9m7pCYBMASW1kXmyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9ARl6nwwENHyAD46bPev/5pSuwwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbZnIZknGpwOPthPoQbY9VthH5rXs2i9/cy seJpZygHycO/77ur4EpvXDYt9y4Ri8f6twhnyJc9CVzKAV41TePAGw6q4vzPGmG9 dXZv706IMYVJ5FUqLGq9HqZ5Wx/i6mipEvkJK6+kBo4hi8Y/b/owkCRI31FotWhX SaAdT3tsQ9FA5lI90CpNOoK0WrGtbkKHZUFTpBM0DYF8nPLDeB3EnspD9LNrVUUz KI70ovSwGERnyynyS8lfZC+BAy25PfnCrnNuN7MdBsLlr1uJ0eGHH8qUYaqOpOrK xSDz3TRv1bBRlobYyR37O4vgN/246wIxaMEJEn9ryD12eiUqQy4= -----END CERTIFICATE-----Generated at Sat Aug 23 16:55:06 2025 by rpki-client