$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: n26KzH+RZ8vfg8HNJ2BF44qM0Re6HQg2rdRJevH22yc= Subject key identifier: 27:1B:61:05:5D:06:5E:05:F7:23:AC:C2:C7:A0:B8:5F:3C:8B:CC:41 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 6B8DF6F667E7A91B9AD3286DE85C2E05FEE5DC91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 026F Signing time: Tue 24 Mar 2026 22:11:26 +0000 Manifest this update: Tue 24 Mar 2026 22:06:26 +0000 Manifest next update: Sat 28 Mar 2026 02:22:26 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: InGQY3MZTXdBzVl9f/6b6mok5SVj3un8F20uI5Xn2z0=) 3: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: nuuyjiIaMsg5DNr8i7VVkqU2J4NRntSC/PsI5T4Q7Zg=) 4: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=) 5: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 6: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 7: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 8: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 9: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:22:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:8d:f6:f6:67:e7:a9:1b:9a:d3:28:6d:e8:5c:2e:05:fe:e5:dc:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Mar 24 22:06:26 2026 GMT Not After : Mar 28 02:22:26 2026 GMT Subject: CN=271B61055D065E05F723ACC2C7A0B85F3C8BCC41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c2:a1:f4:3b:04:c9:49:4f:c3:ea:93:db:cc: 4d:0c:48:5d:65:aa:3e:83:14:08:fa:28:7d:92:58: 47:2c:83:13:a9:30:c0:5f:5d:77:27:dc:d0:78:24: 39:80:37:11:07:99:8e:3f:01:79:bc:bd:c7:d5:90: 4e:74:70:b9:2f:b3:35:12:7e:2f:d8:48:ad:e6:26: bd:49:4a:a8:61:09:c5:3e:c4:3f:f7:c1:a8:fb:ad: 47:e3:7b:9a:ef:5e:05:ce:ed:07:5a:d5:94:a0:9e: 86:bc:12:cf:cb:e6:bf:cf:12:4d:48:74:9a:11:29: a5:c6:dc:22:c3:12:5f:80:0f:08:66:24:f2:2c:58: 04:26:eb:b1:af:98:99:5b:67:db:6c:82:2b:0c:a9: 7d:78:c8:cd:ae:8c:f3:f0:d3:39:f9:07:94:07:87: b6:10:78:d2:d4:01:a6:9b:21:fa:03:d1:9f:ed:35: 22:29:6d:ec:58:df:23:e3:f6:f7:42:4f:d7:4f:fa: 00:a0:e8:b6:29:e3:58:ac:66:3c:54:cb:d6:12:ee: b4:41:0b:c5:a5:76:21:9c:28:2a:86:18:c7:a5:bd: 40:27:6e:b0:6d:13:0a:17:3f:71:be:b9:1b:b5:6d: b3:83:38:52:36:fe:29:bd:fc:80:9b:d2:73:7b:29: 83:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1B:61:05:5D:06:5E:05:F7:23:AC:C2:C7:A0:B8:5F:3C:8B:CC:41 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:52:57:66:1e:6e:6f:94:50:f6:a5:13:60:26:22:5b:52:11: 57:aa:ff:83:48:87:38:ba:8f:e5:6a:0a:d6:52:98:b4:c8:95: a2:36:97:7a:13:41:f6:31:7a:9c:99:a2:cd:df:1f:e4:5f:2c: ad:7e:fc:74:0a:7e:df:4f:06:67:fa:03:19:41:db:2d:67:90: f9:43:a8:d0:b5:b2:3e:ac:f4:71:c3:ff:1f:e4:39:f6:67:6a: dc:62:76:21:ff:a4:68:a7:3d:4c:2f:d1:1c:7b:e2:b5:ef:57: 20:8c:93:4a:e6:d0:8e:67:fc:35:5f:20:d0:cf:c6:0e:1f:44: 28:0c:4b:6c:da:cb:06:40:0c:da:28:07:58:8b:08:db:2a:9d: 16:f9:b5:8e:fb:2e:49:d5:26:12:76:36:60:9f:bd:be:0b:74: 73:24:6a:c4:ef:92:fc:0b:63:15:0a:87:d8:75:27:77:87:ab: c8:7e:91:64:d5:a2:b1:d3:7b:b2:1c:ff:84:f3:10:52:1d:dc: 44:9c:15:6a:ad:f8:c9:9e:6e:e2:36:98:d1:af:2f:62:ef:33: 79:c3:99:da:3a:a5:a6:92:35:c4:0e:66:e7:50:8c:3f:89:50: ee:4c:7f:69:f8:96:c7:1d:71:e5:ae:69:4c:05:ec:9a:73:dd: d1:08:06:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa4329mfnqRua0yht6FwuBf7l3JEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjAzMjQyMjA2MjZaFw0yNjAzMjgwMjIyMjZaMDMxMTAvBgNV BAMTKDI3MUI2MTA1NUQwNjVFMDVGNzIzQUNDMkM3QTBCODVGM0M4QkNDNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfwqH0OwTJSU/D6pPbzE0MSF1l qj6DFAj6KH2SWEcsgxOpMMBfXXcn3NB4JDmANxEHmY4/AXm8vcfVkE50cLkvszUS fi/YSK3mJr1JSqhhCcU+xD/3waj7rUfje5rvXgXO7Qda1ZSgnoa8Es/L5r/PEk1I dJoRKaXG3CLDEl+ADwhmJPIsWAQm67GvmJlbZ9tsgisMqX14yM2ujPPw0zn5B5QH h7YQeNLUAaabIfoD0Z/tNSIpbexY3yPj9vdCT9dP+gCg6LYp41isZjxUy9YS7rRB C8WldiGcKCqGGMelvUAnbrBtEwoXP3G+uRu1bbODOFI2/im9/ICb0nN7KYM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJxthBV0GXgX3I6zCx6C4XzyLzEEwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD1SV2Yebm+UUPalE2AmIltSEVeq/4NIhzi6 j+VqCtZSmLTIlaI2l3oTQfYxepyZos3fH+RfLK1+/HQKft9PBmf6AxlB2y1nkPlD qNC1sj6s9HHD/x/kOfZnatxidiH/pGinPUwv0Rx74rXvVyCMk0rm0I5n/DVfINDP xg4fRCgMS2zaywZADNooB1iLCNsqnRb5tY77LknVJhJ2NmCfvb4LdHMkasTvkvwL YxUKh9h1J3eHq8h+kWTVorHTe7Ic/4TzEFId3EScFWqt+MmebuI2mNGvL2LvM3nD mdo6paaSNcQOZudQjD+JUO5Mf2n4lscdceWuaUwF7Jpz3dEIBlw= -----END CERTIFICATE-----Generated at Wed Mar 25 04:28:46 2026 by rpki-client