$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: W7e4PemlG28hB9Vc/mDt2mFrIosYG2yB4oOK1103FSk= Subject key identifier: D5:49:2A:17:AA:0F:FB:21:EF:CB:0C:74:D8:E9:38:71:7A:A6:47:FB Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 3FC8C60F6C0D2D25FE8DD2E0DF04AE3BEC2D92D9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 045B Signing time: Sat 19 Jul 2025 22:40:42 +0000 Manifest this update: Sat 19 Jul 2025 22:35:42 +0000 Manifest next update: Wed 23 Jul 2025 01:31:42 +0000 Files and hashes: 1: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 2: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: AQc1y5RGgAR8muXwflkFE5kM2PkCWj7KSK5DNHBwI/U=) 3: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: 3YXBeTPQt+Blr7tAYuESpihvBFV9JKlNQz4UPnXFX6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:31:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:c8:c6:0f:6c:0d:2d:25:fe:8d:d2:e0:df:04:ae:3b:ec:2d:92:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Jul 19 22:35:42 2025 GMT Not After : Jul 23 01:31:42 2025 GMT Subject: CN=D5492A17AA0FFB21EFCB0C74D8E938717AA647FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2f:15:b2:70:0c:ab:0b:8e:e9:8e:54:8c:0a: 90:78:f0:3d:70:bf:54:e4:78:58:f5:b2:d8:cc:00: 70:c9:d5:2b:6c:6c:17:c9:a2:b1:e3:18:ae:69:97: 0b:9d:52:fe:e5:2a:24:b0:97:24:57:b7:89:78:38: 79:f3:68:f8:53:ff:cc:6c:69:d5:b4:fc:c0:18:d2: f0:4c:ea:9f:c5:33:6d:76:79:91:40:f0:a2:35:c4: 56:b2:a7:9e:7f:26:23:55:dc:00:d3:21:93:a3:64: f9:62:44:72:89:a8:f6:13:27:28:f9:d8:fc:b4:5d: b7:69:0a:d7:c2:2d:c0:19:38:4e:42:72:47:3a:5c: 27:d7:b5:83:54:39:86:77:ce:2e:24:6f:29:7b:d2: c1:5d:ed:94:ff:27:ad:8d:bd:81:f4:c7:32:99:75: 40:af:1a:01:e5:6e:d4:95:11:d0:e1:0a:c0:24:79: 17:aa:d7:96:56:a6:a3:2d:91:02:a7:da:79:0d:41: 19:df:1f:a3:04:9d:2e:58:13:37:e5:05:35:33:c3: 76:c6:a1:bf:dd:b0:1c:12:65:a3:c4:33:2b:fb:4d: 41:da:fd:8b:48:10:ee:3f:cd:49:c9:d6:a6:a5:77: cf:da:9c:c5:d4:30:45:c3:88:d6:6d:9e:3f:6c:9a: 0b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:49:2A:17:AA:0F:FB:21:EF:CB:0C:74:D8:E9:38:71:7A:A6:47:FB X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6b:4f:48:f4:a0:7f:d4:7f:f1:ec:14:dc:f9:12:76:cf:96: 93:2f:01:f4:bc:24:c2:ba:40:8d:3d:61:10:96:1e:94:cf:8f: d3:ed:5f:fa:ae:53:c3:bf:34:59:17:60:e0:0d:35:2d:cb:b7: b3:21:7e:23:25:61:6c:e3:97:df:b7:b5:a1:21:32:9e:63:ac: c7:73:e3:8f:ca:c7:4d:a9:6b:ab:c1:8b:a3:53:9b:30:6f:4d: 6e:a4:26:6e:ff:b2:78:4d:3c:3a:21:67:44:9f:a9:7d:9b:06: 02:2a:bc:b8:38:1b:25:d3:bc:ce:7e:0c:06:1c:d6:83:40:1e: 15:6a:3a:98:27:ef:07:b3:b2:e7:ee:06:fd:e6:ee:07:3b:41: 7e:a1:8d:79:58:bb:db:0e:46:a9:a2:ee:09:8e:1b:bf:66:85: 35:76:f0:db:61:63:18:7e:50:9c:e5:72:c9:6c:5a:77:d1:4a: dd:29:87:77:cc:61:11:73:a1:e8:c8:63:64:15:6c:7d:c0:41: fb:36:1f:c7:ad:4d:74:29:14:8a:1b:e7:4c:83:6a:a3:bc:45: 8d:d6:58:c4:25:6b:a7:4e:8a:2d:34:ee:d5:9c:fa:54:eb:3e: 7f:7d:20:98:17:ea:c0:75:9c:e4:71:3f:35:9f:ee:4e:52:23: eb:85:73:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP8jGD2wNLSX+jdLg3wSuO+wtktkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTA3MTkyMjM1NDJaFw0yNTA3MjMwMTMxNDJaMDMxMTAvBgNV BAMTKEQ1NDkyQTE3QUEwRkZCMjFFRkNCMEM3NEQ4RTkzODcxN0FBNjQ3RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLxWycAyrC47pjlSMCpB48D1w v1TkeFj1stjMAHDJ1StsbBfJorHjGK5plwudUv7lKiSwlyRXt4l4OHnzaPhT/8xs adW0/MAY0vBM6p/FM212eZFA8KI1xFayp55/JiNV3ADTIZOjZPliRHKJqPYTJyj5 2Py0XbdpCtfCLcAZOE5Cckc6XCfXtYNUOYZ3zi4kbyl70sFd7ZT/J62NvYH0xzKZ dUCvGgHlbtSVEdDhCsAkeReq15ZWpqMtkQKn2nkNQRnfH6MEnS5YEzflBTUzw3bG ob/dsBwSZaPEMyv7TUHa/YtIEO4/zUnJ1qald8/anMXUMEXDiNZtnj9smgtTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1UkqF6oP+yHvywx02Ok4cXqmR/swHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5rT0j0oH/Uf/HsFNz5EnbPlpMvAfS8JMK6 QI09YRCWHpTPj9PtX/quU8O/NFkXYOANNS3Lt7MhfiMlYWzjl9+3taEhMp5jrMdz 44/Kx02pa6vBi6NTmzBvTW6kJm7/snhNPDohZ0SfqX2bBgIqvLg4GyXTvM5+DAYc 1oNAHhVqOpgn7wezsufuBv3m7gc7QX6hjXlYu9sORqmi7gmOG79mhTV28NthYxh+ UJzlcslsWnfRSt0ph3fMYRFzoejIY2QVbH3AQfs2H8etTXQpFIob50yDaqO8RY3W WMQla6dOii007tWc+lTrPn99IJgX6sB1nORxPzWf7k5SI+uFcyI= -----END CERTIFICATE-----Generated at Mon Jul 21 06:48:26 2025 by rpki-client