$ rpki-client -vvf repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft File: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft (raw, json) Hash identifier: Bg6kcQcfqkGpt2ViiA+tjAW5E03jVrGvX7FltpBHLNU= Subject key identifier: 11:4F:09:E7:55:69:73:88:79:45:CC:6B:30:A3:92:4F:CD:E6:C6:87 Authority key identifier: 31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D Certificate issuer: /CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Certificate serial: 7DD1772ABE7CD2BCB4FE6ACBDA7821318C9E90E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft Manifest number: 97 Signing time: Sat 30 Aug 2025 13:01:55 +0000 Manifest this update: Sat 30 Aug 2025 12:56:55 +0000 Manifest next update: Tue 02 Sep 2025 15:46:55 +0000 Files and hashes: 1: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl (hash: XyEGiDwx299jbGAUlTR4zEqam/Cc3kauoVB7oNEtcCY=) 2: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 8c6wILZx8DuCL6PHpfE6A2+8YPuPEhrlv7dD3qJR3mQ=) 3: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: yVwxFDu5QrQ2T1+WLHNp8JACowsZOzdgNvDquhZexvY=) 4: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: yI21TQhgzhyCtoyvgeWwpQGfBfqGzJmTftAUrnTEbC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 02 Sep 2025 02:27:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:d1:77:2a:be:7c:d2:bc:b4:fe:6a:cb:da:78:21:31:8c:9e:90:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Validity Not Before: Aug 30 12:56:55 2025 GMT Not After : Sep 2 15:46:55 2025 GMT Subject: CN=114F09E7556973887945CC6B30A3924FCDE6C687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:c2:96:5b:cf:01:86:cd:50:b5:ee:ca:70: 81:f6:9e:db:fe:96:2d:08:e1:98:6f:25:43:f2:43: ed:4d:9d:81:bd:5b:1a:d6:6b:39:1c:dc:7c:0b:b7: 6e:2f:09:cb:32:a3:eb:ca:b0:46:c1:28:88:3d:28: 2d:3c:12:0c:0d:25:50:d3:94:9b:33:1f:41:86:39: 93:88:d8:f0:a0:b5:17:74:f0:5a:fa:cc:8e:37:6d: d4:24:80:e5:20:0c:2e:51:56:12:83:0e:7b:e5:c7: 6a:ef:74:c8:dc:93:ae:5f:64:fc:08:63:05:63:0b: 38:9b:da:7e:bb:6c:5b:3e:c2:6f:61:af:84:98:3f: e4:69:94:cd:64:13:18:1e:0a:d4:f0:bb:4e:5b:10: cc:20:cb:1f:a7:0b:ae:03:c3:74:20:a6:5a:10:7b: d6:59:60:96:68:3f:0c:75:86:fd:33:a0:7b:e1:bf: e8:c1:0f:78:d8:64:06:ee:f0:41:47:1d:60:60:00: ed:83:2e:b7:1d:d8:fe:95:29:46:67:a0:c3:88:52: e8:a0:8e:55:dc:a1:88:82:e8:37:04:97:f5:19:90: 69:24:43:87:0b:cd:a4:51:b3:08:fc:80:a9:57:4d: fa:1b:7d:3d:6e:93:13:1b:30:d4:45:b7:29:29:ff: 25:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:4F:09:E7:55:69:73:88:79:45:CC:6B:30:A3:92:4F:CD:E6:C6:87 X509v3 Authority Key Identifier: keyid:31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:ee:71:49:2a:42:ee:e7:55:e2:c7:29:8c:11:75:fe:02:23: 65:55:cc:b5:37:77:ca:e2:3d:6e:91:15:27:8d:36:0f:e1:61: 0c:92:c5:fe:84:8a:71:51:99:7a:8c:de:cc:25:ae:8b:ed:7e: 4e:3c:5d:7b:86:4b:1e:90:2b:37:ba:27:07:1a:1e:7e:60:96: c5:2c:95:22:91:56:20:d5:74:82:f5:46:8f:22:31:27:57:1c: 5d:cd:4e:be:76:94:98:02:23:a7:57:63:93:39:44:b0:e4:f2: d0:c3:d1:09:cd:22:88:44:a2:95:55:af:be:69:4e:62:c1:9c: 16:e6:f9:88:d1:34:51:53:ea:c8:f5:ed:1f:45:2f:55:07:dc: 1d:4e:c7:ba:60:bf:04:ff:28:49:40:ea:4b:6c:33:b2:a9:6f: 0d:2d:bb:c3:e0:07:e1:50:67:fa:5d:c1:fb:60:0b:69:9a:bf: c6:65:19:3f:15:60:94:2b:20:2b:70:91:f0:2f:ff:45:2e:ab: bf:67:69:42:e0:61:06:16:f8:f5:49:ee:d2:87:6a:7a:bf:c3: 8c:c3:4b:bc:1c:5e:b9:b1:2d:37:63:9c:95:98:a6:3c:71:06: 2e:1e:4a:62:a6:74:b9:45:27:ef:85:d4:5c:86:07:3b:c7:3f: 51:d9:4d:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfdF3Kr580ry0/mrL2nghMYyekOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTND NzVDMEUyRDAeFw0yNTA4MzAxMjU2NTVaFw0yNTA5MDIxNTQ2NTVaMDMxMTAvBgNV BAMTKDExNEYwOUU3NTU2OTczODg3OTQ1Q0M2QjMwQTM5MjRGQ0RFNkM2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L8KWW88Bhs1Qte7KcIH2ntv+ li0I4ZhvJUPyQ+1NnYG9WxrWazkc3HwLt24vCcsyo+vKsEbBKIg9KC08EgwNJVDT lJszH0GGOZOI2PCgtRd08Fr6zI43bdQkgOUgDC5RVhKDDnvlx2rvdMjck65fZPwI YwVjCzib2n67bFs+wm9hr4SYP+RplM1kExgeCtTwu05bEMwgyx+nC64Dw3QgploQ e9ZZYJZoPwx1hv0zoHvhv+jBD3jYZAbu8EFHHWBgAO2DLrcd2P6VKUZnoMOIUuig jlXcoYiC6DcEl/UZkGkkQ4cLzaRRswj8gKlXTfobfT1ukxMbMNRFtykp/yWpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEU8J51Vpc4h5RcxrMKOST83mxocwHwYDVR0j BBgwFoAUMVe5vm82mhyjhzj/1k1hE8dcDi0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGZiNzhhOS1jZDY4LTQ0ZmQtODVhYS02YzZiMDhjYjIzNDYvMC8zMTU3QjlCRTZG MzY5QTFDQTM4NzM4RkZENjRENjExM0M3NUMwRTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTNDNzVD MEUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYx MTNDNzVDMEUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANnucUkqQu7nVeLHKYwRdf4CI2VVzLU3d8ri PW6RFSeNNg/hYQySxf6EinFRmXqM3swlrovtfk48XXuGSx6QKze6JwcaHn5glsUs lSKRViDVdIL1Ro8iMSdXHF3NTr52lJgCI6dXY5M5RLDk8tDD0QnNIohEopVVr75p TmLBnBbm+YjRNFFT6sj17R9FL1UH3B1Ox7pgvwT/KElA6ktsM7Kpbw0tu8PgB+FQ Z/pdwftgC2mav8ZlGT8VYJQrICtwkfAv/0Uuq79naULgYQYW+PVJ7tKHanq/w4zD S7wcXrmxLTdjnJWYpjxxBi4eSmKmdLlFJ++F1FyGBzvHP1HZTZA= -----END CERTIFICATE-----Generated at Sun Aug 31 23:34:50 2025 by rpki-client