$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: Kw7ft0dHhJVTXzRoD0N66u3LP4S4sM0wnZbLlTv9XbI= Subject key identifier: C9:AF:37:90:FF:B6:30:FA:D8:A7:C1:45:7E:02:44:D5:7E:3D:62:00 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 2712C07DD97A9D9620DC7FF44ABA5C0E4CEB92B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 046A Signing time: Fri 22 Aug 2025 18:50:48 +0000 Manifest this update: Fri 22 Aug 2025 18:45:48 +0000 Manifest next update: Tue 26 Aug 2025 03:36:48 +0000 Files and hashes: 1: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: 3YXBeTPQt+Blr7tAYuESpihvBFV9JKlNQz4UPnXFX6A=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: hOzgT7dwZcHAf5zAqAEVjCmaYjBBmxwSfQ+WU/SCZfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:36:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:12:c0:7d:d9:7a:9d:96:20:dc:7f:f4:4a:ba:5c:0e:4c:eb:92:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Aug 22 18:45:48 2025 GMT Not After : Aug 26 03:36:48 2025 GMT Subject: CN=C9AF3790FFB630FAD8A7C1457E0244D57E3D6200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d2:3e:f7:cb:c6:2b:8e:6f:d1:8e:50:95:aa: ae:8b:e9:d9:b2:02:c4:e3:c9:11:5d:44:da:37:98: 71:0a:32:f6:b1:c6:ec:e7:0b:db:17:b2:f6:ae:c5: 3f:3e:de:70:df:30:99:86:b9:00:0e:b3:0a:25:47: f2:a7:b6:f3:ba:1a:a7:e6:b1:ab:ef:b9:62:c7:95: 62:9f:7c:17:0e:79:f7:1d:a4:2d:72:91:79:b6:54: 2e:67:dd:81:ee:76:a0:59:88:f4:ab:a2:43:90:48: b5:db:82:8b:9c:f7:fc:9b:de:d1:20:d9:aa:b2:28: d9:3c:8a:a4:45:ee:9b:75:06:7a:c6:59:2f:48:8c: 1c:98:42:b1:15:ea:7c:75:7c:08:4a:4c:87:ca:42: ef:f7:5c:59:21:73:e5:50:85:36:52:c8:0d:b6:7a: ce:3f:3d:66:73:27:8e:87:29:25:f4:96:75:51:2e: 26:13:e2:f6:29:df:22:16:80:ea:87:4d:11:2f:c1: a1:d3:82:4f:42:d0:0f:e3:85:04:4f:d9:8b:40:63: 51:c1:0c:da:52:c2:4a:26:bd:ef:61:4b:bc:ba:f8: 2d:80:c4:c6:49:b6:86:b4:d1:8a:61:1b:ca:37:26: 7f:c6:e5:ec:64:9f:3c:ff:9d:4e:3a:0a:75:46:07: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:AF:37:90:FF:B6:30:FA:D8:A7:C1:45:7E:02:44:D5:7E:3D:62:00 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:85:76:1f:2a:bd:05:73:ff:33:20:52:82:cd:7a:4c:57:0f: fe:6d:3b:11:d0:90:88:6a:b8:ad:a4:c1:a5:7f:ab:76:ce:1f: 59:9a:72:17:8a:5d:d4:cb:1c:1a:3f:de:29:ca:58:18:38:83: 5b:f0:40:fa:6c:0b:f7:71:28:c0:8b:1c:80:68:a5:94:33:85: 8f:dc:fc:36:07:a7:56:4d:e7:b5:06:7d:0c:f7:e7:85:f2:49: ab:bc:06:95:9f:2c:df:4a:9d:c8:9b:93:09:31:66:0b:7c:c5: 2f:82:de:70:a8:89:74:e3:ec:83:5e:a2:2e:de:13:c1:ca:8e: 0a:e2:bc:40:59:69:f7:b1:d1:14:37:c7:81:a5:6c:fe:53:94: 92:97:ef:23:41:20:8e:cf:70:fc:d4:cd:0d:e3:ef:36:78:ad: 99:46:d5:52:a4:07:96:43:33:0b:ff:31:cd:8d:96:c2:31:b5: 7c:58:eb:77:e6:cf:0a:b7:cb:e9:6e:75:e7:63:75:32:21:58: 6d:14:12:91:ef:a4:96:e4:67:91:bf:0f:c7:db:12:f3:6f:4b: dc:4b:e9:17:62:f6:8d:f8:62:8e:41:8f:fb:9a:cf:18:03:7c: 16:6a:89:75:a7:0f:78:73:1c:d0:c4:4c:60:ae:03:ee:64:30: d7:af:8f:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJxLAfdl6nZYg3H/0SrpcDkzrkrIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTA4MjIxODQ1NDhaFw0yNTA4MjYwMzM2NDhaMDMxMTAvBgNV BAMTKEM5QUYzNzkwRkZCNjMwRkFEOEE3QzE0NTdFMDI0NEQ1N0UzRDYyMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70j73y8Yrjm/RjlCVqq6L6dmy AsTjyRFdRNo3mHEKMvaxxuznC9sXsvauxT8+3nDfMJmGuQAOswolR/KntvO6Gqfm savvuWLHlWKffBcOefcdpC1ykXm2VC5n3YHudqBZiPSrokOQSLXbgouc9/yb3tEg 2aqyKNk8iqRF7pt1BnrGWS9IjByYQrEV6nx1fAhKTIfKQu/3XFkhc+VQhTZSyA22 es4/PWZzJ46HKSX0lnVRLiYT4vYp3yIWgOqHTREvwaHTgk9C0A/jhQRP2YtAY1HB DNpSwkomve9hS7y6+C2AxMZJtoa00YphG8o3Jn/G5exknzz/nU46CnVGBz0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUya83kP+2MPrYp8FFfgJE1X49YgAwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGFdh8qvQVz/zMgUoLNekxXD/5tOxHQkIhq uK2kwaV/q3bOH1macheKXdTLHBo/3inKWBg4g1vwQPpsC/dxKMCLHIBopZQzhY/c /DYHp1ZN57UGfQz354XySau8BpWfLN9KncibkwkxZgt8xS+C3nCoiXTj7INeoi7e E8HKjgrivEBZafex0RQ3x4GlbP5TlJKX7yNBII7PcPzUzQ3j7zZ4rZlG1VKkB5ZD Mwv/Mc2NlsIxtXxY63fmzwq3y+ludedjdTIhWG0UEpHvpJbkZ5G/D8fbEvNvS9xL 6Rdi9o34Yo5Bj/uazxgDfBZqiXWnD3hzHNDETGCuA+5kMNevj/Q= -----END CERTIFICATE-----Generated at Sat Aug 23 21:42:22 2025 by rpki-client