$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: OikTPM5/lGK8ciqFe5Wou6gVexr5iogb0qAmIg2HyoE= Subject key identifier: F4:9D:53:22:D8:63:3D:EE:EF:41:35:F8:FA:D8:CE:50:0F:EB:B2:98 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 7008E8671ADF23BDACEDA02FC49894AEEF347546 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0228 Signing time: Tue 28 Oct 2025 14:01:17 +0000 Manifest this update: Tue 28 Oct 2025 13:56:17 +0000 Manifest next update: Fri 31 Oct 2025 21:39:17 +0000 Files and hashes: 1: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: DjpfQ/bXG6h6fddqGyGO1PJ+mC9Z61auZFZRebeDaHw=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 31 Oct 2025 21:39:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:08:e8:67:1a:df:23:bd:ac:ed:a0:2f:c4:98:94:ae:ef:34:75:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Oct 28 13:56:17 2025 GMT Not After : Oct 31 21:39:17 2025 GMT Subject: CN=F49D5322D8633DEEEF4135F8FAD8CE500FEBB298 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:16:9a:da:df:a7:c1:66:76:b0:0b:91:71:b0: 1f:9b:13:9d:cd:ab:db:02:a4:c2:9e:97:53:86:c6: da:f4:18:61:a6:21:f8:3a:39:6f:5e:ed:80:d9:d3: 78:29:91:48:57:e8:dc:ff:1f:0a:a6:f6:c5:66:cd: bd:cf:95:33:c8:5e:b9:a7:01:6e:d2:e2:e5:7d:5f: 62:10:b9:26:2a:55:29:ed:b3:3c:de:72:66:37:3e: ba:01:ec:42:d8:bf:0b:2c:2f:43:b1:76:1b:14:28: 7e:9d:5e:5b:2f:27:4b:7b:13:1e:e4:0c:be:4c:00: 9d:47:cb:9b:89:ed:65:81:1f:b0:16:22:a1:b2:4c: 19:71:ec:78:fd:d9:e9:b2:03:2a:94:99:28:36:75: d7:36:0d:db:0a:8b:8b:fd:a8:f7:16:b5:e1:f3:ec: 1d:d8:3a:8a:78:ad:4e:c1:c1:ba:98:fa:03:75:8b: 49:04:d6:8e:f3:c6:87:3f:e8:cb:f9:9b:7a:f6:bf: 0f:f0:13:7d:0c:ac:ed:20:6a:2f:8d:3c:61:86:91: 30:84:01:25:03:04:b3:49:11:23:46:db:43:8f:20: b8:3e:a5:7f:05:3c:8c:4d:3d:04:76:95:64:96:60: 03:be:68:5b:28:28:cd:fe:27:12:59:58:da:1f:a7: 6b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9D:53:22:D8:63:3D:EE:EF:41:35:F8:FA:D8:CE:50:0F:EB:B2:98 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:6c:03:e3:49:c1:ee:33:3b:1d:dc:ff:bc:6e:4d:9a:9d:0e: 02:bf:b4:99:e3:8a:76:9f:0b:98:6a:e9:12:b5:3f:13:bb:98: 40:09:11:4e:da:d8:b3:ea:58:d6:9b:eb:4f:70:d2:e0:d6:0c: 69:29:3e:91:32:2a:4c:d6:56:cc:8d:d7:a1:0e:09:aa:7f:42: 7a:97:ce:f2:00:2f:bb:f1:4b:21:17:43:4f:6f:b6:29:c8:23: 25:c4:eb:5e:1e:f3:09:da:73:94:89:3c:63:82:51:90:5d:cd: 87:06:3b:cc:e4:d9:a9:d2:13:9f:94:91:0a:78:9f:44:7a:05: 8c:05:3e:d8:1b:5e:09:9c:31:0d:e8:d7:1b:2c:65:6b:15:01: 98:02:e2:af:f2:27:58:62:2a:1b:27:dc:ac:a9:f1:a2:a2:e0: 91:b5:94:82:a4:f9:07:0a:a4:20:c4:53:89:2e:e2:cf:e2:af: cc:1e:d8:da:df:aa:8f:6f:bf:d3:65:78:33:bd:11:ad:3e:6b: 63:ad:db:43:93:bf:54:cf:a8:db:24:fd:43:05:d9:d8:63:57: 53:2d:00:49:f2:78:2b:16:fc:8f:cf:0f:8d:d6:61:b5:a2:3f: d6:e4:a0:2a:ad:81:bd:12:8d:ce:19:94:a9:a4:1e:d8:77:46: 0d:f9:4e:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAjoZxrfI72s7aAvxJiUru80dUYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTEwMjgxMzU2MTdaFw0yNTEwMzEyMTM5MTdaMDMxMTAvBgNV BAMTKEY0OUQ1MzIyRDg2MzNERUVFRjQxMzVGOEZBRDhDRTUwMEZFQkIyOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbFpra36fBZnawC5FxsB+bE53N q9sCpMKel1OGxtr0GGGmIfg6OW9e7YDZ03gpkUhX6Nz/Hwqm9sVmzb3PlTPIXrmn AW7S4uV9X2IQuSYqVSntszzecmY3ProB7ELYvwssL0OxdhsUKH6dXlsvJ0t7Ex7k DL5MAJ1Hy5uJ7WWBH7AWIqGyTBlx7Hj92emyAyqUmSg2ddc2DdsKi4v9qPcWteHz 7B3YOop4rU7BwbqY+gN1i0kE1o7zxoc/6Mv5m3r2vw/wE30MrO0gai+NPGGGkTCE ASUDBLNJESNG20OPILg+pX8FPIxNPQR2lWSWYAO+aFsoKM3+JxJZWNofp2s5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9J1TIthjPe7vQTX4+tjOUA/rspgwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKFsA+NJwe4zOx3c/7xuTZqdDgK/tJnjinaf C5hq6RK1PxO7mEAJEU7a2LPqWNab609w0uDWDGkpPpEyKkzWVsyN16EOCap/QnqX zvIAL7vxSyEXQ09vtinIIyXE614e8wnac5SJPGOCUZBdzYcGO8zk2anSE5+UkQp4 n0R6BYwFPtgbXgmcMQ3o1xssZWsVAZgC4q/yJ1hiKhsn3Kyp8aKi4JG1lIKk+QcK pCDEU4ku4s/ir8we2Nrfqo9vv9NleDO9Ea0+a2Ot20OTv1TPqNsk/UMF2dhjV1Mt AEnyeCsW/I/PD43WYbWiP9bkoCqtgb0Sjc4ZlKmkHth3Rg35Tlg= -----END CERTIFICATE-----Generated at Wed Oct 29 11:26:10 2025 by rpki-client