$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: 2u16bauV13g+oshwkSkUFkeHfr0Px96kFU1Q2kyVqmg= Subject key identifier: 39:6C:78:58:04:8D:80:12:B3:1B:40:46:6E:C4:C6:DA:78:D1:52:8E Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 058CBA79C1ABFBE96599EBF127C2342D4AF0C92E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01DB Signing time: Wed 07 May 2025 11:51:14 +0000 Manifest this update: Wed 07 May 2025 11:46:14 +0000 Manifest next update: Sat 10 May 2025 21:07:14 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: Q6wpkZBVvzfS0dmUXP956R+Qz6OpdQzbnduAlgq7Gp0=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 21:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:8c:ba:79:c1:ab:fb:e9:65:99:eb:f1:27:c2:34:2d:4a:f0:c9:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: May 7 11:46:14 2025 GMT Not After : May 10 21:07:14 2025 GMT Subject: CN=396C7858048D8012B31B40466EC4C6DA78D1528E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:4f:f4:a4:d4:44:68:a7:55:f2:0e:33:c6: df:13:d1:f1:06:16:41:2a:99:28:a0:2e:cc:86:d5: a8:6c:2e:5c:ca:18:53:3d:d0:0f:00:36:cb:c5:0d: 6d:f5:44:b5:7c:f8:da:3e:7c:97:94:a8:e4:2a:5c: 7c:3a:d4:8b:43:cc:5a:aa:a6:93:a5:0c:12:75:79: 9c:64:b2:72:a6:ad:68:ec:5b:c3:52:80:d3:a1:86: 3c:c4:80:59:a1:71:72:95:92:94:43:0a:bb:79:8c: 16:03:2e:13:b1:a6:88:ab:7b:96:0c:3d:6f:30:ff: 38:81:6c:6f:5c:e6:e4:eb:70:91:ee:3d:7c:74:83: 5a:51:e5:a0:27:5b:f7:91:4a:20:88:09:ef:8a:37: 21:42:9a:1a:c9:56:e3:9f:ce:d0:b3:08:82:70:e4: b5:d7:12:98:96:09:38:2d:f8:c9:18:46:c6:4d:e5: 69:a5:f0:1f:af:0e:13:bc:90:fb:43:2f:84:53:da: 28:13:e4:cd:4f:be:91:79:37:6a:20:a7:43:3d:fa: d8:84:e1:30:27:2d:43:91:9a:81:01:38:25:14:73: e9:1b:44:a9:0d:44:10:38:aa:a2:4d:32:42:15:a5: 0a:8a:2b:aa:b7:8d:c4:47:9f:2b:b9:62:1e:1b:8e: cc:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6C:78:58:04:8D:80:12:B3:1B:40:46:6E:C4:C6:DA:78:D1:52:8E X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:0c:71:ad:ca:30:11:f1:14:03:86:3f:3b:22:ed:01:6b:0b: 0e:03:99:86:49:3b:25:fb:e7:0c:e4:de:17:1d:bd:0f:89:51: 90:f7:bb:70:2f:96:5d:d0:b8:93:14:75:51:01:27:bf:24:56: 8d:8f:c8:f5:3e:45:f3:79:0f:ba:8f:da:50:be:fb:8a:39:d4: 74:28:eb:1a:3a:28:79:5e:d7:60:09:79:4f:28:6b:c6:09:49: 50:b5:57:23:a2:7b:44:47:de:7f:33:09:fb:65:03:c1:5a:27: 22:62:a3:25:49:df:8a:6f:df:21:3b:dc:90:a6:11:d7:32:57: 65:f0:38:2a:ce:c1:83:53:4b:83:f5:cb:6e:45:bd:3b:46:7f: 90:ab:85:00:2a:cb:86:a9:d2:4a:62:4b:41:2e:60:b9:bb:bc: be:53:1b:82:bf:57:b7:8c:89:a3:0c:67:b3:b4:96:c8:88:57: 97:c0:56:f3:a3:e6:17:01:61:45:0e:47:d0:63:42:b1:90:a3: b4:50:e4:98:7c:67:b1:6b:fa:df:54:d6:c6:e0:6f:9c:4f:c4: 3f:87:99:2e:b7:68:af:d8:aa:a2:18:6e:38:a6:c2:f5:5a:1e: 18:02:a5:5f:c5:7a:4f:d5:60:03:d4:f6:c1:f4:5e:01:c9:3c: 37:1c:da:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYy6ecGr++llmevxJ8I0LUrwyS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA1MDcxMTQ2MTRaFw0yNTA1MTAyMTA3MTRaMDMxMTAvBgNV BAMTKDM5NkM3ODU4MDQ4RDgwMTJCMzFCNDA0NjZFQzRDNkRBNzhEMTUyOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1D0/0pNREaKdV8g4zxt8T0fEG FkEqmSigLsyG1ahsLlzKGFM90A8ANsvFDW31RLV8+No+fJeUqOQqXHw61ItDzFqq ppOlDBJ1eZxksnKmrWjsW8NSgNOhhjzEgFmhcXKVkpRDCrt5jBYDLhOxpoire5YM PW8w/ziBbG9c5uTrcJHuPXx0g1pR5aAnW/eRSiCICe+KNyFCmhrJVuOfztCzCIJw 5LXXEpiWCTgt+MkYRsZN5Wml8B+vDhO8kPtDL4RT2igT5M1PvpF5N2ogp0M9+tiE 4TAnLUORmoEBOCUUc+kbRKkNRBA4qqJNMkIVpQqKK6q3jcRHnyu5Yh4bjswfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOWx4WASNgBKzG0BGbsTG2njRUo4wHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQMca3KMBHxFAOGPzsi7QFrCw4DmYZJOyX7 5wzk3hcdvQ+JUZD3u3Avll3QuJMUdVEBJ78kVo2PyPU+RfN5D7qP2lC++4o51HQo 6xo6KHle12AJeU8oa8YJSVC1VyOie0RH3n8zCftlA8FaJyJioyVJ34pv3yE73JCm EdcyV2XwOCrOwYNTS4P1y25FvTtGf5CrhQAqy4ap0kpiS0EuYLm7vL5TG4K/V7eM iaMMZ7O0lsiIV5fAVvOj5hcBYUUOR9BjQrGQo7RQ5Jh8Z7Fr+t9U1sbgb5xPxD+H mS63aK/YqqIYbjimwvVaHhgCpV/Fek/VYAPU9sH0XgHJPDcc2vY= -----END CERTIFICATE-----Generated at Fri May 9 04:04:34 2025 by rpki-client