$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: lAlyENas3Wnw5LKSTONU34eOqmqB/Ev0guKRlBE2LXQ= Subject key identifier: 25:80:41:51:B1:67:97:92:9A:1C:24:DE:D3:89:97:CE:35:AB:22:31 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 31D69395A31F3A85CF227AF93BA7F804959F4738 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 019A Signing time: Wed 19 Feb 2025 10:02:10 +0000 Manifest this update: Wed 19 Feb 2025 09:57:10 +0000 Manifest next update: Sat 22 Feb 2025 20:27:10 +0000 Files and hashes: 1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: +plvagJTEWEKvn5SZaftcn0qBGmFNqSMLPgdfy0xJAc=) 2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg=) 3: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: ld8FvdmhZsW+u4S0Kz7cLfZOEjp2c4fiFrxrTH9HB54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 22 Feb 2025 20:27:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:d6:93:95:a3:1f:3a:85:cf:22:7a:f9:3b:a7:f8:04:95:9f:47:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Feb 19 09:57:10 2025 GMT Not After : Feb 22 20:27:10 2025 GMT Subject: CN=25804151B16797929A1C24DED38997CE35AB2231 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:f8:dc:62:17:bc:18:81:55:9f:de:26:76:f0: c7:d8:54:44:0f:fb:dd:d1:ec:bd:f3:ac:ff:b5:fc: 1e:8c:03:3f:67:ff:2b:f5:d9:9d:8e:de:f2:da:cc: 95:a5:dd:b3:4a:3e:6e:1b:95:b3:f5:58:16:ea:dc: 87:a7:44:b1:8b:1b:4c:2f:eb:94:6c:45:e2:77:e6: 2c:3f:a7:52:c0:e7:84:ee:71:4f:38:bd:58:22:5e: b3:ba:01:b7:03:10:5c:8e:1b:4b:9b:54:d1:0d:31: 7e:c0:90:c9:e8:54:77:90:75:e3:f6:54:7a:aa:6e: c3:3d:99:ad:76:37:2e:44:5e:de:e8:11:3d:b8:3b: 12:1f:81:c1:2b:9d:29:39:30:6e:c4:cd:16:26:8f: d6:d9:51:a2:29:5e:48:20:dc:69:95:9b:65:c9:e0: 7e:e2:f1:d3:60:cd:e2:f4:fc:30:34:f9:e8:30:4e: 21:d4:57:96:26:b4:76:e9:9a:1a:60:ce:01:59:fb: c3:d3:69:82:87:2f:0d:3d:d3:5d:73:fd:ad:7a:90: f8:32:ef:9a:7e:30:99:7a:90:83:43:f9:eb:e5:00: 2f:30:2b:0c:9f:44:45:6f:09:7e:27:9e:5e:cd:40: 95:e6:75:eb:d9:f0:65:5d:a7:83:40:3d:b5:0c:08: f3:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:80:41:51:B1:67:97:92:9A:1C:24:DE:D3:89:97:CE:35:AB:22:31 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:84:bf:96:25:f9:97:cd:19:dc:5b:ca:00:a3:98:4a:06:96: ac:73:38:33:55:c8:75:d1:02:60:f4:4e:13:46:3d:ee:2e:4f: 25:de:e4:dc:15:96:76:0c:c3:0e:75:df:64:50:59:3a:a3:83: 31:cd:b7:86:4f:af:98:4d:45:4a:2f:df:08:bc:d2:6c:3e:12: 26:c2:32:e9:95:fe:9b:8c:3e:68:ca:00:02:44:42:22:4f:fb: 6a:89:63:1b:d1:ba:7d:1b:b5:97:c7:a4:00:e1:41:bc:98:74: 05:55:33:fd:9e:9a:9b:89:3c:35:46:81:db:87:03:49:4a:87: b8:24:c3:bf:05:68:26:c6:80:37:60:25:9b:21:17:c6:50:72: 10:08:2e:d7:e2:70:f4:b1:83:f9:ba:c0:bd:e7:0f:30:39:49: 82:74:70:81:a5:7b:0c:f7:f7:d1:37:9b:b5:65:ac:62:c7:11: cf:09:18:21:cf:fc:12:80:e7:34:e7:39:e8:11:9d:91:c0:c6: 14:7b:2d:81:79:fc:a1:ce:45:85:3e:03:08:96:c4:0c:55:a6: f3:89:cf:89:55:a2:d7:0d:15:8f:76:54:15:9d:cf:95:90:b8: 28:49:44:a9:b0:0a:5d:ea:6a:75:1c:e8:87:c5:fe:f1:a7:dd: 28:98:9b:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMdaTlaMfOoXPInr5O6f4BJWfRzgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTAyMTkwOTU3MTBaFw0yNTAyMjIyMDI3MTBaMDMxMTAvBgNV BAMTKDI1ODA0MTUxQjE2Nzk3OTI5QTFDMjRERUQzODk5N0NFMzVBQjIyMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo+NxiF7wYgVWf3iZ28MfYVEQP +93R7L3zrP+1/B6MAz9n/yv12Z2O3vLazJWl3bNKPm4blbP1WBbq3IenRLGLG0wv 65RsReJ35iw/p1LA54TucU84vVgiXrO6AbcDEFyOG0ubVNENMX7AkMnoVHeQdeP2 VHqqbsM9ma12Ny5EXt7oET24OxIfgcErnSk5MG7EzRYmj9bZUaIpXkgg3GmVm2XJ 4H7i8dNgzeL0/DA0+egwTiHUV5YmtHbpmhpgzgFZ+8PTaYKHLw09011z/a16kPgy 75p+MJl6kIND+evlAC8wKwyfREVvCX4nnl7NQJXmdevZ8GVdp4NAPbUMCPPvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJYBBUbFnl5KaHCTe04mXzjWrIjEwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqEv5Yl+ZfNGdxbygCjmEoGlqxzODNVyHXR AmD0ThNGPe4uTyXe5NwVlnYMww5132RQWTqjgzHNt4ZPr5hNRUov3wi80mw+EibC MumV/puMPmjKAAJEQiJP+2qJYxvRun0btZfHpADhQbyYdAVVM/2empuJPDVGgduH A0lKh7gkw78FaCbGgDdgJZshF8ZQchAILtficPSxg/m6wL3nDzA5SYJ0cIGlewz3 99E3m7VlrGLHEc8JGCHP/BKA5zTnOegRnZHAxhR7LYF5/KHORYU+AwiWxAxVpvOJ z4lVotcNFY92VBWdz5WQuChJRKmwCl3qanUc6IfF/vGn3SiYm9M= -----END CERTIFICATE-----Generated at Wed Feb 19 22:11:05 2025 by rpki-client