$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: 5O1TJrZ660RGjfHPI3VvDgM0osJGiQOGIn7qQOTSs2A= Subject key identifier: 2B:46:96:20:62:A5:BF:B0:89:38:86:7C:1F:2A:C6:56:34:32:D5:DC Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 3D2537FC30EF8B45BA76358EB42107C9CC696DD1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01CC Signing time: Fri 04 Apr 2025 01:11:13 +0000 Manifest this update: Fri 04 Apr 2025 01:06:13 +0000 Manifest next update: Mon 07 Apr 2025 02:31:13 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: 6MhiGjELvbopd6f/clIwlGi5aHRpqh3yAi89Ocx9VSQ=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 02:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:25:37:fc:30:ef:8b:45:ba:76:35:8e:b4:21:07:c9:cc:69:6d:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Apr 4 01:06:13 2025 GMT Not After : Apr 7 02:31:13 2025 GMT Subject: CN=2B46962062A5BFB08938867C1F2AC6563432D5DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:14:53:0e:88:c1:c8:ce:9e:73:05:4e:10: 42:3f:b9:fa:fa:f2:be:61:59:6e:8c:53:5d:de:ce: 47:d7:f4:72:00:16:5b:af:28:61:ab:41:0b:54:34: e5:f0:b4:fd:57:af:a2:d1:3b:4a:ea:bd:b3:e8:f2: f4:65:f6:2f:e5:38:15:d9:f7:4d:65:dd:b8:b6:11: 1e:0e:07:cf:c7:43:9b:ec:0b:fa:b9:57:d3:62:3e: 57:47:b2:5e:e7:a5:56:3b:05:38:5f:63:7c:a4:10: ed:19:59:70:ff:5e:a1:a0:2a:c5:a9:09:1d:1a:03: a3:bb:e7:2b:ce:a9:2e:7b:ff:f6:21:09:d0:03:bb: 45:60:85:40:19:a1:cd:54:0b:02:1f:1a:58:33:5b: fb:9d:04:ce:e5:e1:76:f8:e5:5c:b5:61:b0:97:a0: b9:ae:3c:db:dd:c1:f3:fb:ad:2d:74:ed:88:9a:fb: 3d:ec:3e:03:a4:a8:0b:64:e3:54:dd:51:6e:76:bb: dd:4d:2d:85:3a:c6:66:cb:ca:c9:f6:73:af:af:d7: cc:64:5a:f0:76:3b:35:ce:3e:88:c6:08:07:47:75: 87:e8:a7:48:a0:b0:5b:b9:01:6d:1f:38:03:8c:cc: e6:82:2d:71:f8:b5:5c:27:17:72:e7:26:ac:a9:a9: 8c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:46:96:20:62:A5:BF:B0:89:38:86:7C:1F:2A:C6:56:34:32:D5:DC X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:20:88:09:51:66:df:2d:dd:a1:ce:bc:b6:8f:bd:37:eb:0f: 02:99:ee:a0:06:a7:e1:71:e8:82:fa:8e:bd:9b:21:49:d2:20: 3f:1b:6d:f3:8b:b3:0a:b4:10:31:c3:4a:bd:9d:dc:33:52:60: 2d:e8:90:c9:31:b2:44:b3:c9:f2:bf:f9:1e:4d:f6:e6:bd:5d: 4f:a6:ab:83:e4:7b:eb:6b:ce:38:9c:74:59:72:04:7c:07:c6: 5f:c5:e2:2c:02:42:38:44:75:3a:28:d7:02:16:6a:a6:58:80: fa:69:d2:61:d7:2d:76:0d:e3:71:3d:76:3e:dc:98:47:9a:5b: 0c:83:09:04:86:b1:3f:4f:9c:f6:76:84:1b:bf:ab:4c:ff:b0: 45:94:98:ad:b7:7a:e8:25:d4:71:0b:fd:e7:52:d4:c8:f1:2f: fb:e6:10:aa:e9:44:9d:94:a5:00:95:db:2e:d2:b0:5a:bd:7e: 01:44:59:7a:7c:b8:1a:fa:6c:4a:5e:4d:17:ae:1e:f7:63:02: 9b:bd:74:89:6a:3c:ed:a4:da:c9:5d:e8:80:dd:82:63:97:69: ac:81:ae:ed:51:1d:7f:3f:ed:0c:8b:fb:25:3b:3a:39:86:a5: c4:f0:48:cb:d7:19:c4:47:83:44:f0:ad:6e:56:e4:36:37:61: d0:eb:c7:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSU3/DDvi0W6djWOtCEHycxpbdEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA0MDQwMTA2MTNaFw0yNTA0MDcwMjMxMTNaMDMxMTAvBgNV BAMTKDJCNDY5NjIwNjJBNUJGQjA4OTM4ODY3QzFGMkFDNjU2MzQzMkQ1REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtRRTDojByM6ecwVOEEI/ufr6 8r5hWW6MU13ezkfX9HIAFluvKGGrQQtUNOXwtP1Xr6LRO0rqvbPo8vRl9i/lOBXZ 901l3bi2ER4OB8/HQ5vsC/q5V9NiPldHsl7npVY7BThfY3ykEO0ZWXD/XqGgKsWp CR0aA6O75yvOqS57//YhCdADu0VghUAZoc1UCwIfGlgzW/udBM7l4Xb45Vy1YbCX oLmuPNvdwfP7rS107Yia+z3sPgOkqAtk41TdUW52u91NLYU6xmbLysn2c6+v18xk WvB2OzXOPojGCAdHdYfop0igsFu5AW0fOAOMzOaCLXH4tVwnF3LnJqypqYx5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK0aWIGKlv7CJOIZ8HyrGVjQy1dwwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADAgiAlRZt8t3aHOvLaPvTfrDwKZ7qAGp+Fx 6IL6jr2bIUnSID8bbfOLswq0EDHDSr2d3DNSYC3okMkxskSzyfK/+R5N9ua9XU+m q4Pke+trzjicdFlyBHwHxl/F4iwCQjhEdToo1wIWaqZYgPpp0mHXLXYN43E9dj7c mEeaWwyDCQSGsT9PnPZ2hBu/q0z/sEWUmK23eugl1HEL/edS1MjxL/vmEKrpRJ2U pQCV2y7SsFq9fgFEWXp8uBr6bEpeTReuHvdjApu9dIlqPO2k2sld6IDdgmOXaayB ru1RHX8/7QyL+yU7OjmGpcTwSMvXGcRHg0TwrW5W5DY3YdDrxwg= -----END CERTIFICATE-----Generated at Sat Apr 5 19:08:45 2025 by rpki-client