$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: H3dNemmYDSEy+P3nJFcwkRKfObOCPWalNZ1qDXgZ8qI= Subject key identifier: 29:A4:E8:EE:59:48:6E:B4:00:B6:C6:63:33:63:5E:19:1E:99:1E:91 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 58803050A85B443C76EC19E28BA90180E733C712 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01E7 Signing time: Wed 04 Jun 2025 04:11:15 +0000 Manifest this update: Wed 04 Jun 2025 04:06:15 +0000 Manifest next update: Sat 07 Jun 2025 07:46:15 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: pBLHFkhTGJm23MnzWW/Cxkr2HKgensRoGkdKKVFYzfY=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:80:30:50:a8:5b:44:3c:76:ec:19:e2:8b:a9:01:80:e7:33:c7:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Jun 4 04:06:15 2025 GMT Not After : Jun 7 07:46:15 2025 GMT Subject: CN=29A4E8EE59486EB400B6C66333635E191E991E91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b7:47:e1:04:36:5d:b8:56:3a:fb:88:29:7c: 24:91:87:c2:35:73:a7:22:89:0d:85:a1:3c:8c:6a: 82:ea:f8:68:f4:50:fc:43:9c:fc:5e:ab:cf:64:5d: 0d:fb:65:08:31:2e:16:aa:04:e5:d0:a2:98:25:3f: 0e:4e:13:d6:e4:7a:95:d2:50:8b:14:c3:c3:a2:4b: 03:7d:ae:23:a2:25:0c:42:65:ec:27:7d:33:a5:de: 29:b1:0e:20:fc:d9:72:42:ed:9b:53:0c:bc:50:7b: 9c:a8:90:d1:4b:9e:1f:3c:a0:6c:1f:47:ff:76:dc: ff:b3:02:f0:5a:09:b9:99:73:ce:f9:07:7d:9a:0c: b0:ce:51:13:a1:8f:c9:da:0b:83:d0:db:63:dd:c3: 1d:de:eb:7b:16:23:d9:fb:b7:00:35:fd:9d:ae:22: 56:9c:a2:58:30:f0:95:f6:c7:37:61:4e:78:bd:a2: d6:fc:12:8f:39:85:09:65:cc:f1:0d:0d:72:dd:fa: 84:6e:b8:d6:31:e0:d7:a3:a4:85:7b:65:6f:7d:e9: 1a:5f:89:76:16:8e:d4:4e:48:ec:bd:f4:4e:7a:93: 57:8c:c7:e9:a6:d9:af:58:b2:6a:6e:83:38:5d:81: da:df:fc:62:dc:10:1c:08:8b:95:fe:84:57:8a:23: bf:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:A4:E8:EE:59:48:6E:B4:00:B6:C6:63:33:63:5E:19:1E:99:1E:91 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:b9:cb:4b:c4:b5:21:08:2c:4a:f9:51:b7:cf:53:e3:7e:39: 44:d1:4b:55:63:ff:c4:80:23:d6:8d:f6:49:84:5a:2b:74:73: 20:a0:ee:29:8c:4a:69:48:ce:48:f0:33:92:c2:c3:79:35:70: e5:6d:f9:67:5c:35:ef:d7:da:56:02:e1:9c:c4:52:c6:a6:53: 35:41:70:22:3e:b9:ef:9c:5f:da:d7:27:65:ce:19:8c:bd:76: 17:c8:ad:70:52:14:af:23:7f:a5:28:4a:db:b0:75:ba:23:b7: d6:e0:c3:32:44:7b:a6:fd:ba:a2:dd:12:36:53:04:80:12:0b: 8f:30:ae:a5:2f:40:83:43:1c:67:e3:30:ae:c6:20:7d:6a:13: 62:20:33:03:1a:66:8f:88:e8:b2:ce:a8:68:4c:5d:60:28:61: c6:ae:27:08:8e:4d:8c:06:11:77:d4:36:f6:44:0d:66:98:9c: 8f:4b:13:67:14:dc:7a:8f:0e:a2:b3:19:60:30:8c:2d:e8:1c: f6:26:d2:b8:e8:38:1a:6a:cd:0a:9f:a8:d3:0e:24:c5:26:de: 79:dd:1f:9e:57:4e:b5:aa:b1:5e:de:37:c2:1d:5e:3e:a9:67: 47:64:48:10:ef:a7:a1:18:3b:fc:c6:85:49:f5:c2:92:d9:e2: d2:74:98:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIAwUKhbRDx27Bnii6kBgOczxxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA2MDQwNDA2MTVaFw0yNTA2MDcwNzQ2MTVaMDMxMTAvBgNV BAMTKDI5QTRFOEVFNTk0ODZFQjQwMEI2QzY2MzMzNjM1RTE5MUU5OTFFOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0t0fhBDZduFY6+4gpfCSRh8I1 c6ciiQ2FoTyMaoLq+Gj0UPxDnPxeq89kXQ37ZQgxLhaqBOXQopglPw5OE9bkepXS UIsUw8OiSwN9riOiJQxCZewnfTOl3imxDiD82XJC7ZtTDLxQe5yokNFLnh88oGwf R/923P+zAvBaCbmZc875B32aDLDOUROhj8naC4PQ22Pdwx3e63sWI9n7twA1/Z2u Ilacolgw8JX2xzdhTni9otb8Eo85hQllzPENDXLd+oRuuNYx4NejpIV7ZW996Rpf iXYWjtROSOy99E56k1eMx+mm2a9Ysmpugzhdgdrf/GLcEBwIi5X+hFeKI7/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKaTo7llIbrQAtsZjM2NeGR6ZHpEwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKS5y0vEtSEILEr5UbfPU+N+OUTRS1Vj/8SA I9aN9kmEWit0cyCg7imMSmlIzkjwM5LCw3k1cOVt+WdcNe/X2lYC4ZzEUsamUzVB cCI+ue+cX9rXJ2XOGYy9dhfIrXBSFK8jf6UoStuwdbojt9bgwzJEe6b9uqLdEjZT BIASC48wrqUvQINDHGfjMK7GIH1qE2IgMwMaZo+I6LLOqGhMXWAoYcauJwiOTYwG EXfUNvZEDWaYnI9LE2cU3HqPDqKzGWAwjC3oHPYm0rjoOBpqzQqfqNMOJMUm3nnd H55XTrWqsV7eN8IdXj6pZ0dkSBDvp6EYO/zGhUn1wpLZ4tJ0mGY= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:44 2025 by rpki-client