$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: 3WHBkx+Z2weEURfrWVw2HARsnMrJH8cE5O010RNTt50= Subject key identifier: 88:A7:74:93:EE:CB:68:C9:9C:84:A7:3F:B5:79:62:41:DB:D8:03:9E Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 45796CE9511EBB06E80A1479E13E8CE32A0B1C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 01F2 Signing time: Thu 04 Sep 2025 22:02:18 +0000 Manifest this update: Thu 04 Sep 2025 21:57:18 +0000 Manifest next update: Mon 08 Sep 2025 07:09:18 +0000 Files and hashes: 1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) 2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: lpSwfmAmKL23RbErKtEZj4srMqeOQng2UqSoQbv0+GE=) 3: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: neX2tLgfDvryO6hpQ0n6Z+ZRV27sYV8J0l3kxkqXqWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 07:09:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:79:6c:e9:51:1e:bb:06:e8:0a:14:79:e1:3e:8c:e3:2a:0b:1c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Sep 4 21:57:18 2025 GMT Not After : Sep 8 07:09:18 2025 GMT Subject: CN=88A77493EECB68C99C84A73FB5796241DBD8039E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:98:9f:ce:fb:1c:da:71:56:b9:92:1a:af:ab: 36:d2:44:02:2b:9e:5b:a2:c2:ad:d5:eb:2d:e5:b9: a2:d8:a8:88:8e:4a:f8:c0:2b:c0:5c:73:e7:8f:f1: 65:9e:0e:8d:98:e0:e1:fd:7f:65:13:de:a9:6f:3e: 27:9b:3a:3f:3a:e6:a7:84:de:79:a5:33:b7:e9:64: 36:07:95:5f:b7:5b:40:a1:64:3c:1c:16:16:15:24: fb:ec:ed:d4:6b:ce:7a:fe:11:b7:a8:0b:e6:88:bd: 1d:55:3b:11:9f:c9:be:07:5a:f4:2a:c0:3d:00:1c: 8e:f1:51:d6:13:0c:ec:a9:f2:f8:e5:6b:f4:b8:cc: 3d:ac:9d:c1:57:79:0b:a1:d0:19:c4:f0:74:ca:e2: 24:26:e6:bc:59:3b:5d:fe:f9:f7:31:fa:bd:b7:48: 80:b6:0e:b6:b5:46:71:99:76:a8:20:bf:26:dc:b7: 8a:b8:f8:59:a3:55:7c:3e:aa:1d:c8:0e:ae:31:b0: 5d:26:57:35:c3:c7:ce:7b:7f:3f:28:86:b0:fc:7e: 62:82:1b:52:07:e0:8e:26:85:b3:3e:3c:f5:84:26: df:40:c5:de:56:06:17:cb:50:41:ad:0d:35:8c:ec: 79:25:8e:1c:9e:d7:60:db:d5:38:ee:7f:04:84:3c: 0f:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A7:74:93:EE:CB:68:C9:9C:84:A7:3F:B5:79:62:41:DB:D8:03:9E X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:b3:99:f7:bb:a0:6d:8a:f3:0d:76:b8:9e:9d:0d:a6:b4:51: 9e:bf:c0:54:92:bf:0a:68:d8:e2:90:f8:9f:c1:b7:0e:30:0a: 54:31:cf:29:9c:ec:f1:b4:45:84:b5:cd:59:36:59:21:3e:da: e5:7d:5d:ef:ec:a7:d2:f9:b5:b1:01:2b:f2:a8:fd:b2:d4:25: 85:d0:1a:26:56:37:35:03:6b:9a:36:24:71:17:65:a2:7e:f6: 01:8d:fe:99:62:77:63:c2:bb:af:7e:98:d9:3c:32:40:54:c5: 07:42:e5:f7:e9:25:bf:f1:de:80:35:6d:61:71:07:01:6d:55: 8f:81:52:1c:77:12:cc:19:a0:5c:39:38:5e:04:c3:21:80:64: 13:7d:fc:10:9f:d6:78:b3:1e:7f:6f:4f:61:c0:1f:b9:4f:02: f8:64:e6:b2:36:12:04:5d:c8:58:ad:74:38:f7:db:8b:9c:7c: 32:13:c5:19:1d:e0:4d:8b:67:48:10:a9:d3:6b:8c:2c:8d:e3: 38:65:12:93:61:15:56:7c:37:fe:45:a4:0f:c9:53:b9:63:a3: fd:a5:93:9e:7b:3f:48:cd:f8:6e:b3:63:76:c0:5a:7f:5e:af: 20:a4:c3:08:09:4f:09:d6:5f:29:20:94:3e:b9:52:51:35:fd: 03:4d:61:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURXls6VEeuwboChR54T6M4yoLHCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTA5MDQyMTU3MThaFw0yNTA5MDgwNzA5MThaMDMxMTAvBgNV BAMTKDg4QTc3NDkzRUVDQjY4Qzk5Qzg0QTczRkI1Nzk2MjQxREJEODAzOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1mJ/O+xzacVa5khqvqzbSRAIr nluiwq3V6y3luaLYqIiOSvjAK8Bcc+eP8WWeDo2Y4OH9f2UT3qlvPiebOj865qeE 3nmlM7fpZDYHlV+3W0ChZDwcFhYVJPvs7dRrznr+EbeoC+aIvR1VOxGfyb4HWvQq wD0AHI7xUdYTDOyp8vjla/S4zD2sncFXeQuh0BnE8HTK4iQm5rxZO13++fcx+r23 SIC2Dra1RnGZdqggvybct4q4+FmjVXw+qh3IDq4xsF0mVzXDx857fz8ohrD8fmKC G1IH4I4mhbM+PPWEJt9Axd5WBhfLUEGtDTWM7Hkljhye12Db1TjufwSEPA/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiKd0k+7LaMmchKc/tXliQdvYA54wHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALezmfe7oG2K8w12uJ6dDaa0UZ6/wFSSvwpo 2OKQ+J/Btw4wClQxzymc7PG0RYS1zVk2WSE+2uV9Xe/sp9L5tbEBK/Ko/bLUJYXQ GiZWNzUDa5o2JHEXZaJ+9gGN/plid2PCu69+mNk8MkBUxQdC5ffpJb/x3oA1bWFx BwFtVY+BUhx3EswZoFw5OF4EwyGAZBN9/BCf1nizHn9vT2HAH7lPAvhk5rI2EgRd yFitdDj324ucfDITxRkd4E2LZ0gQqdNrjCyN4zhlEpNhFVZ8N/5FpA/JU7ljo/2l k557P0jN+G6zY3bAWn9eryCkwwgJTwnWXykglD65UlE1/QNNYcw= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:31 2025 by rpki-client