$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: PkgmY7mGI8q5PKgMRDsk5Qn3GG1cjEgT5I3dGV3R9pg= Subject key identifier: 0C:10:2B:36:A8:B7:B5:5C:4E:4F:3C:3D:67:E1:47:2C:7D:99:9F:0C Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 34B0109AED8F58B26C2AD18D983CEF57C233D1E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0211 Signing time: Sat 06 Sep 2025 18:11:17 +0000 Manifest this update: Sat 06 Sep 2025 18:06:17 +0000 Manifest next update: Tue 09 Sep 2025 20:36:17 +0000 Files and hashes: 1: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: nvmrTm+QubWw64nP1C3KkSDcRToChgzAc8H0OBKtRuI=) 2: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:b0:10:9a:ed:8f:58:b2:6c:2a:d1:8d:98:3c:ef:57:c2:33:d1:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Sep 6 18:06:17 2025 GMT Not After : Sep 9 20:36:17 2025 GMT Subject: CN=0C102B36A8B7B55C4E4F3C3D67E1472C7D999F0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:7c:1b:a7:e7:a8:21:a1:6e:6c:7a:34:70:73: 46:38:04:2e:3c:47:34:5d:e3:61:48:b7:4f:f5:66: 95:97:5d:ab:e2:0d:ac:94:45:f3:ba:82:02:a4:a0: f9:72:cb:82:ec:49:e2:fc:8b:b7:db:f5:bf:f9:fa: 10:e5:a7:48:98:e2:56:b5:c8:a4:b9:94:ba:6b:01: da:e6:6d:79:2e:04:a0:95:b9:67:d4:11:c9:49:9f: cb:04:f4:70:58:cf:57:4b:bb:d6:ef:a5:06:36:56: ca:39:49:79:dd:ef:04:fb:fe:69:7a:4a:8b:68:45: 18:e0:3c:3e:54:dd:9b:4c:b1:1c:4f:44:03:fb:78: df:01:59:82:41:02:bd:8f:6b:2f:b0:18:d9:5b:3c: f5:77:c4:84:2f:ee:b5:39:95:58:72:51:c5:c3:ae: 65:68:4e:87:13:4c:a6:33:d5:04:39:0c:21:8c:23: 71:99:6d:36:45:0b:56:79:11:e5:54:2f:98:be:01: 04:5a:5a:c4:99:62:4d:24:45:3b:e6:86:c0:4f:2b: 6f:34:c0:03:bc:0a:33:59:a3:dd:a2:a3:f4:f9:74: 18:2c:77:47:f1:eb:f0:72:2a:77:1c:d3:fc:51:60: e1:b9:4f:b2:29:b9:28:50:72:b1:c0:aa:b6:f4:52: 98:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:10:2B:36:A8:B7:B5:5C:4E:4F:3C:3D:67:E1:47:2C:7D:99:9F:0C X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:14:59:93:bb:86:19:1f:5a:c0:d3:83:2b:1c:dd:63:8b:51: 75:d8:c6:fd:05:c6:f6:cf:39:fb:45:82:ea:66:fd:20:64:7b: a0:05:5e:83:aa:9a:0b:62:05:ce:c2:67:38:ea:a8:3d:ff:4d: 0a:1a:8e:e3:28:50:bb:98:2e:52:4e:8a:33:d9:b4:3e:bd:65: 1d:4f:f9:8f:7f:2c:56:7f:fd:80:46:1a:2e:d3:ad:aa:28:0d: a9:27:d5:fc:f9:9b:af:70:da:93:41:f1:da:37:31:3d:23:b9: 23:bf:ec:dd:4c:cf:7f:bd:cf:b6:21:21:ea:52:d7:a4:c2:83: 23:7b:88:b2:c8:77:cb:b1:a4:a1:1c:b6:8a:98:97:ae:40:a8: ff:1b:5a:97:69:34:7f:00:a8:f5:82:cf:e2:8f:73:0c:72:d8: a3:44:a4:df:b7:ad:36:58:0b:02:9b:92:01:2e:d7:ac:33:79: 8a:57:f5:02:ae:87:ff:ee:a8:e7:dd:18:17:41:92:64:a6:89: 15:44:e8:9f:32:65:2b:6c:f8:0b:de:87:d6:22:ca:4a:f5:49: 13:b6:11:ac:0e:eb:c9:92:82:84:1f:05:77:06:39:ce:b3:9a: 9d:d6:2f:22:22:ca:78:5f:fa:93:4f:72:d9:47:0b:85:41:bb: 8d:98:85:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNLAQmu2PWLJsKtGNmDzvV8Iz0ekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA5MDYxODA2MTdaFw0yNTA5MDkyMDM2MTdaMDMxMTAvBgNV BAMTKDBDMTAyQjM2QThCN0I1NUM0RTRGM0MzRDY3RTE0NzJDN0Q5OTlGMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPfBun56ghoW5sejRwc0Y4BC48 RzRd42FIt0/1ZpWXXaviDayURfO6ggKkoPlyy4LsSeL8i7fb9b/5+hDlp0iY4la1 yKS5lLprAdrmbXkuBKCVuWfUEclJn8sE9HBYz1dLu9bvpQY2Vso5SXnd7wT7/ml6 SotoRRjgPD5U3ZtMsRxPRAP7eN8BWYJBAr2Pay+wGNlbPPV3xIQv7rU5lVhyUcXD rmVoTocTTKYz1QQ5DCGMI3GZbTZFC1Z5EeVUL5i+AQRaWsSZYk0kRTvmhsBPK280 wAO8CjNZo92io/T5dBgsd0fx6/ByKncc0/xRYOG5T7IpuShQcrHAqrb0UphBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBArNqi3tVxOTzw9Z+FHLH2ZnwwwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHoUWZO7hhkfWsDTgysc3WOLUXXYxv0FxvbP OftFgupm/SBke6AFXoOqmgtiBc7CZzjqqD3/TQoajuMoULuYLlJOijPZtD69ZR1P +Y9/LFZ//YBGGi7TraooDakn1fz5m69w2pNB8do3MT0juSO/7N1Mz3+9z7YhIepS 16TCgyN7iLLId8uxpKEctoqYl65AqP8bWpdpNH8AqPWCz+KPcwxy2KNEpN+3rTZY CwKbkgEu16wzeYpX9QKuh//uqOfdGBdBkmSmiRVE6J8yZSts+Aveh9Yiykr1SRO2 EawO68mSgoQfBXcGOc6zmp3WLyIiynhf+pNPctlHC4VBu42YhUg= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:43 2025 by rpki-client