$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: qbw/U8YdcaQaWava1GRkocoXuYBTUQ3s2LPQKOHceyE= Subject key identifier: E7:3E:62:84:51:7C:F8:DC:F7:A0:FD:08:15:91:57:4E:04:2F:F6:D0 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 35F9D5AD49CFDEA9EE4DF904CF667FD2444286EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 0451 Signing time: Sat 28 Jun 2025 02:31:05 +0000 Manifest this update: Sat 28 Jun 2025 02:26:05 +0000 Manifest next update: Tue 01 Jul 2025 05:45:05 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: 3YXBeTPQt+Blr7tAYuESpihvBFV9JKlNQz4UPnXFX6A=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: fjti2zZDd2Jz+7nPc14h5otfjfafJnlczFnVy0pDBsA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:45:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:f9:d5:ad:49:cf:de:a9:ee:4d:f9:04:cf:66:7f:d2:44:42:86:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Jun 28 02:26:05 2025 GMT Not After : Jul 1 05:45:05 2025 GMT Subject: CN=E73E6284517CF8DCF7A0FD081591574E042FF6D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:15:a0:75:9f:6d:46:f7:18:37:10:6b:0a:ae: b1:dd:b7:90:13:59:66:22:c9:8b:e3:05:2d:9f:29: 9b:e7:67:d0:99:e1:92:20:e6:45:e9:b5:a8:48:60: db:e1:aa:ce:e3:05:2a:4b:d6:9e:57:e7:42:64:1c: 43:4c:4f:23:42:77:7a:64:5d:41:a9:ff:6c:91:74: 91:bf:11:1f:80:e1:19:af:74:48:cc:91:07:7f:a6: 67:94:b0:db:ed:ca:e6:50:22:df:25:62:f3:7a:ef: be:63:b5:4b:07:ab:38:2f:77:07:c8:e3:ea:ad:32: 3d:d5:47:df:ef:8e:97:e1:f6:50:80:7b:00:ca:d3: a9:5a:20:80:01:77:14:44:80:6c:2d:c4:59:c2:b6: 09:ba:93:50:9f:f5:8f:c5:59:59:52:ea:ff:5e:79: a4:65:2f:6b:6c:d8:5b:65:18:d4:11:59:b6:49:5d: 75:28:4c:20:28:e1:ff:c0:5d:85:44:87:62:24:13: 9c:50:fe:82:14:c9:63:a1:21:e5:01:9c:b8:ef:aa: ee:73:c0:7e:12:30:03:1a:dc:e3:77:d6:d1:cb:be: 7d:ca:6f:e5:10:25:a0:95:b0:0f:c0:6a:2d:9b:a0: 94:3e:42:77:aa:b8:e0:be:3e:4d:56:aa:45:8f:ca: 11:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3E:62:84:51:7C:F8:DC:F7:A0:FD:08:15:91:57:4E:04:2F:F6:D0 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3a:0d:8f:03:4b:c3:24:18:af:32:47:6f:3d:4e:cd:fd:1b: ca:b6:3e:73:9e:dd:9d:4d:38:e7:5a:f6:27:a0:cf:c3:c6:21: 61:1a:2a:43:eb:d9:ec:af:12:3e:d2:c6:67:c0:07:7b:21:b9: 52:48:a7:95:6d:c9:70:41:ff:87:67:de:7d:b8:09:fc:05:23: 04:83:71:4e:0c:b3:9d:cb:7c:cb:b3:74:b9:77:ba:9a:10:e4: 0d:b0:50:ea:87:71:99:bf:db:f4:6f:db:e4:8c:df:22:46:b7: 36:06:8e:d3:f5:9d:df:94:71:9e:65:da:c1:7d:38:35:c5:e2: 71:fc:20:ad:85:77:70:2f:26:3a:9c:c1:5a:2a:bd:0b:12:47: 23:fa:f2:cf:87:42:cf:f1:7c:2b:2e:d2:c3:f7:17:71:83:f4: 30:9c:9b:c5:ee:d1:98:dd:52:3a:ec:12:14:bd:96:48:25:b5: c7:ea:ea:27:05:d4:c8:20:6e:62:37:e2:cb:52:78:a8:99:15: a6:a5:72:7a:fa:ef:3e:f3:e8:2a:09:1e:85:57:a5:61:01:73: 39:c5:36:94:1f:e6:7e:b5:97:2c:13:1b:a2:35:f3:9a:31:c2: a5:b3:35:49:29:63:1d:2a:f6:c0:e3:49:25:25:a3:2c:da:6c: d2:c0:55:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNfnVrUnP3qnuTfkEz2Z/0kRChu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTA2MjgwMjI2MDVaFw0yNTA3MDEwNTQ1MDVaMDMxMTAvBgNV BAMTKEU3M0U2Mjg0NTE3Q0Y4RENGN0EwRkQwODE1OTE1NzRFMDQyRkY2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsFaB1n21G9xg3EGsKrrHdt5AT WWYiyYvjBS2fKZvnZ9CZ4ZIg5kXptahIYNvhqs7jBSpL1p5X50JkHENMTyNCd3pk XUGp/2yRdJG/ER+A4RmvdEjMkQd/pmeUsNvtyuZQIt8lYvN6775jtUsHqzgvdwfI 4+qtMj3VR9/vjpfh9lCAewDK06laIIABdxREgGwtxFnCtgm6k1Cf9Y/FWVlS6v9e eaRlL2ts2FtlGNQRWbZJXXUoTCAo4f/AXYVEh2IkE5xQ/oIUyWOhIeUBnLjvqu5z wH4SMAMa3ON31tHLvn3Kb+UQJaCVsA/Aai2boJQ+QnequOC+Pk1WqkWPyhHLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5z5ihFF8+Nz3oP0IFZFXTgQv9tAwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAA6DY8DS8MkGK8yR289Ts39G8q2PnOe3Z1N OOda9iegz8PGIWEaKkPr2eyvEj7SxmfAB3shuVJIp5VtyXBB/4dn3n24CfwFIwSD cU4Ms53LfMuzdLl3upoQ5A2wUOqHcZm/2/Rv2+SM3yJGtzYGjtP1nd+UcZ5l2sF9 ODXF4nH8IK2Fd3AvJjqcwVoqvQsSRyP68s+HQs/xfCsu0sP3F3GD9DCcm8Xu0Zjd UjrsEhS9lkgltcfq6icF1MggbmI34stSeKiZFaalcnr67z7z6CoJHoVXpWEBcznF NpQf5n61lywTG6I185oxwqWzNUkpYx0q9sDjSSUloyzabNLAVYM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:06 2025 by rpki-client