$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: Udypu2Gnp7ibfMTd7elZItxZty+fzB71aie8beHQ/s4= Subject key identifier: 64:0D:53:02:4F:FA:57:FD:28:DF:D0:3D:82:45:0B:7A:D0:1F:10:96 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 56EB60225241AC827A8990B9963CB46B5B82EE5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 01CA Signing time: Fri 06 Jun 2025 06:22:17 +0000 Manifest this update: Fri 06 Jun 2025 06:17:17 +0000 Manifest next update: Mon 09 Jun 2025 07:27:17 +0000 Files and hashes: 1: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: rNLqRmMNZTksg8jsARkpIXyWuwJW13j37HznXuFYvJQ=) 2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg=) 3: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 07:27:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:eb:60:22:52:41:ac:82:7a:89:90:b9:96:3c:b4:6b:5b:82:ee:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Jun 6 06:17:17 2025 GMT Not After : Jun 9 07:27:17 2025 GMT Subject: CN=640D53024FFA57FD28DFD03D82450B7AD01F1096 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:bf:dd:e2:20:18:47:61:e5:3c:e3:4d:b0:2a: b2:75:a1:79:ff:d4:e8:ea:85:f4:fa:2d:7b:8a:9c: 2a:d2:46:85:ec:f5:7e:48:44:43:89:23:98:55:56: 0d:ef:e1:32:92:9a:f2:0e:67:e1:bd:c1:02:e7:3c: 2f:d7:dc:32:0f:c4:c0:09:05:5f:f1:f9:90:2f:9f: 82:3e:41:a3:34:1d:06:be:e4:de:b2:a0:ac:a2:1c: f1:a1:93:f1:e9:e5:5a:bb:72:25:95:04:7a:63:08: 15:c0:32:b7:52:26:50:79:cb:89:70:3d:fc:b5:e1: f4:92:17:85:e8:6d:f5:51:8a:e8:77:11:e5:d8:df: 81:b2:cd:92:3b:f0:a3:ef:b8:df:f8:29:87:55:d0: 1a:e6:0d:52:d5:6b:5d:ea:43:42:57:21:fc:d1:a4: b7:03:8f:be:34:df:7a:b4:a5:3c:f9:23:86:36:25: a2:00:1f:c1:b2:9f:ce:dd:cb:1b:bb:06:f7:87:77: 93:ae:8d:d6:5e:fa:5f:9e:78:28:24:73:79:ee:7a: b8:89:9e:33:c1:d2:69:e0:b6:97:00:1c:07:8f:11: 26:17:0f:7f:63:fa:62:bf:61:bc:e6:92:22:59:37: f0:da:62:e7:09:a8:57:44:f7:d8:6e:7d:c3:05:ce: 6a:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:0D:53:02:4F:FA:57:FD:28:DF:D0:3D:82:45:0B:7A:D0:1F:10:96 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:5f:c2:3f:bd:e0:25:04:4f:8a:40:76:f7:51:e5:cc:da:d8: 98:94:a4:d0:b6:e6:b0:4d:fc:1d:c9:6b:f8:85:c3:69:19:c4: ab:ab:e1:c1:e9:6e:00:71:b5:67:4c:8c:9c:1a:c2:52:8e:fb: ef:fe:3c:f1:e8:c1:0f:13:f5:23:14:63:a5:95:9b:85:ad:e9: 22:ae:09:b8:d5:d6:9d:1f:8b:5e:16:94:5f:6f:df:3a:c6:6d: 7c:34:f2:29:b6:f4:b0:97:9c:95:91:22:7a:cb:a8:26:65:b5: 57:5a:47:21:38:3c:97:98:d1:93:ed:df:b3:6b:d4:68:e8:24: 09:c4:99:df:6b:80:95:62:74:14:17:13:0d:e9:b3:fc:a2:a9: 9c:81:ab:25:36:e9:66:ed:88:02:ca:d8:37:68:74:bb:86:ce: 0d:02:b9:7d:1d:c9:ab:75:05:f4:43:12:d3:26:5a:92:d2:9c: 90:3b:cc:7f:c9:9c:57:1a:4f:ae:ef:87:d7:1e:d9:ae:1d:bf: 8e:29:6a:79:31:03:69:f9:bd:34:a5:5b:9b:1a:52:f8:eb:cb: 77:38:11:16:b9:51:96:d1:a3:df:51:54:6f:17:d2:45:4a:39: dc:9f:21:c4:3a:66:26:55:83:59:2c:ba:a3:0a:70:8a:a0:8c: 86:d7:ab:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVutgIlJBrIJ6iZC5ljy0a1uC7lwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTA2MDYwNjE3MTdaFw0yNTA2MDkwNzI3MTdaMDMxMTAvBgNV BAMTKDY0MEQ1MzAyNEZGQTU3RkQyOERGRDAzRDgyNDUwQjdBRDAxRjEwOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDov93iIBhHYeU8402wKrJ1oXn/ 1OjqhfT6LXuKnCrSRoXs9X5IREOJI5hVVg3v4TKSmvIOZ+G9wQLnPC/X3DIPxMAJ BV/x+ZAvn4I+QaM0HQa+5N6yoKyiHPGhk/Hp5Vq7ciWVBHpjCBXAMrdSJlB5y4lw Pfy14fSSF4XobfVRiuh3EeXY34GyzZI78KPvuN/4KYdV0BrmDVLVa13qQ0JXIfzR pLcDj74033q0pTz5I4Y2JaIAH8Gyn87dyxu7BveHd5OujdZe+l+eeCgkc3nueriJ njPB0mngtpcAHAePESYXD39j+mK/YbzmkiJZN/DaYucJqFdE99hufcMFzmorAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZA1TAk/6V/0o39A9gkULetAfEJYwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBfwj+94CUET4pAdvdR5cza2JiUpNC25rBN /B3Ja/iFw2kZxKur4cHpbgBxtWdMjJwawlKO++/+PPHowQ8T9SMUY6WVm4Wt6SKu CbjV1p0fi14WlF9v3zrGbXw08im29LCXnJWRInrLqCZltVdaRyE4PJeY0ZPt37Nr 1GjoJAnEmd9rgJVidBQXEw3ps/yiqZyBqyU26WbtiALK2DdodLuGzg0CuX0dyat1 BfRDEtMmWpLSnJA7zH/JnFcaT67vh9ce2a4dv44pankxA2n5vTSlW5saUvjry3c4 ERa5UZbRo99RVG8X0kVKOdyfIcQ6ZiZVg1ksuqMKcIqgjIbXq/w= -----END CERTIFICATE-----Generated at Sun Jun 8 04:00:54 2025 by rpki-client