$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: +JSxH1nWFetwf6nlq9HLo6h2n5VKNd88223nViSz3CI= Subject key identifier: 11:CD:B5:17:9C:46:A1:CD:AD:40:77:B7:87:6C:0D:D9:DD:F7:2D:8E Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 0F4B7146CEF6AB478C0FD45876EE79ECC9B69A54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 0470 Signing time: Fri 05 Sep 2025 12:20:43 +0000 Manifest this update: Fri 05 Sep 2025 12:15:43 +0000 Manifest next update: Mon 08 Sep 2025 19:27:43 +0000 Files and hashes: 1: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: /lwXTT4PNlLfSIBEiAmQkmIChcnUaY0O8AsQw+i+sFo=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 3: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: 3YXBeTPQt+Blr7tAYuESpihvBFV9JKlNQz4UPnXFX6A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 19:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4b:71:46:ce:f6:ab:47:8c:0f:d4:58:76:ee:79:ec:c9:b6:9a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Sep 5 12:15:43 2025 GMT Not After : Sep 8 19:27:43 2025 GMT Subject: CN=11CDB5179C46A1CDAD4077B7876C0DD9DDF72D8E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1b:dd:5e:6f:de:3d:c0:b0:e3:11:65:d6:bb: 43:b9:91:b2:95:67:ec:33:51:b1:fe:3a:50:5b:34: 4f:fc:2a:d4:05:98:31:56:02:bb:14:ab:8d:f9:84: 9c:84:67:50:43:5b:60:cc:a2:3c:72:f6:23:26:69: 69:6d:9d:31:d1:9f:17:4f:2f:8e:e4:eb:80:95:d8: dd:ed:5e:d1:53:7c:25:3e:e1:86:b2:5e:7e:19:52: bc:87:b6:98:6d:18:92:9f:c3:30:42:da:33:57:f9: 60:2b:f7:ce:cd:d7:eb:43:f5:9f:8c:c8:5c:5e:42: 95:04:5e:f1:89:7e:d1:59:07:2c:1e:d3:17:25:d4: a9:60:3c:38:78:d3:e4:39:5a:5d:ed:63:cb:98:eb: 9c:88:0b:29:19:a8:08:02:8d:57:03:36:33:18:c9: 42:d0:13:7d:51:95:06:42:41:b7:4f:66:81:65:e1: f2:50:e9:7f:d9:12:d6:40:a5:5a:72:07:8f:11:47: 1c:f0:80:0e:00:e3:28:b0:6f:81:2f:88:75:b4:39: ed:5e:b7:20:23:3c:87:68:1e:3b:70:3d:36:cc:fb: 2b:3d:55:50:5b:2f:4d:f3:f7:5c:c1:a1:97:01:fb: 45:48:fc:0c:81:ed:2b:59:b1:ee:cd:e9:82:b8:de: 44:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:CD:B5:17:9C:46:A1:CD:AD:40:77:B7:87:6C:0D:D9:DD:F7:2D:8E X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5a:ba:e0:79:48:61:66:ee:a4:a8:fd:7d:7a:de:6f:c9:0d: 83:ea:42:35:d6:9d:d2:2c:66:d7:86:83:c3:9a:c1:1c:a6:70: da:19:be:4c:70:c3:31:2a:f7:64:15:80:73:b7:bb:99:d7:e0: dc:80:b2:ce:be:37:81:18:8c:92:95:53:54:bb:18:0d:15:19: 43:3b:8f:0f:cc:72:c9:b2:35:ab:73:b2:41:9e:bf:69:47:48: c8:4b:67:3c:01:c7:db:77:67:d6:6a:91:af:d3:4e:2f:4b:d4: 8a:9d:12:98:48:51:6a:e0:cc:96:3c:8e:28:73:ed:d0:cd:4c: 2c:66:ce:6d:02:f2:e1:ad:89:f0:43:2f:6a:c6:40:cd:04:ae: ca:f8:ba:ff:61:67:95:85:a3:77:40:0d:f4:40:a7:e5:ef:28: 68:e4:1e:19:0f:bf:ac:5a:21:a4:f6:c8:69:24:46:a3:1d:08: 52:52:e8:e9:7d:76:38:fc:cf:b3:1b:36:42:d6:01:86:af:c8: 20:e9:30:da:fd:02:a3:ea:2e:97:c0:37:41:f4:b1:6d:80:98: 88:a6:55:5b:9f:2e:b8:8a:25:10:5f:6d:b6:b9:60:d4:88:d9: 98:2c:f3:fe:09:d2:99:aa:b5:a0:92:ce:af:20:9a:c9:fd:0c: 70:a9:6e:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD0txRs72q0eMD9RYdu557Mm2mlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTA5MDUxMjE1NDNaFw0yNTA5MDgxOTI3NDNaMDMxMTAvBgNV BAMTKDExQ0RCNTE3OUM0NkExQ0RBRDQwNzdCNzg3NkMwREQ5RERGNzJEOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5G91eb949wLDjEWXWu0O5kbKV Z+wzUbH+OlBbNE/8KtQFmDFWArsUq435hJyEZ1BDW2DMojxy9iMmaWltnTHRnxdP L47k64CV2N3tXtFTfCU+4YayXn4ZUryHtphtGJKfwzBC2jNX+WAr987N1+tD9Z+M yFxeQpUEXvGJftFZBywe0xcl1KlgPDh40+Q5Wl3tY8uY65yICykZqAgCjVcDNjMY yULQE31RlQZCQbdPZoFl4fJQ6X/ZEtZApVpyB48RRxzwgA4A4yiwb4EviHW0Oe1e tyAjPIdoHjtwPTbM+ys9VVBbL03z91zBoZcB+0VI/AyB7StZse7N6YK43kSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEc21F5xGoc2tQHe3h2wN2d33LY4wHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZauuB5SGFm7qSo/X163m/JDYPqQjXWndIs ZteGg8OawRymcNoZvkxwwzEq92QVgHO3u5nX4NyAss6+N4EYjJKVU1S7GA0VGUM7 jw/McsmyNatzskGev2lHSMhLZzwBx9t3Z9Zqka/TTi9L1IqdEphIUWrgzJY8jihz 7dDNTCxmzm0C8uGtifBDL2rGQM0Ersr4uv9hZ5WFo3dADfRAp+XvKGjkHhkPv6xa IaT2yGkkRqMdCFJS6Ol9djj8z7MbNkLWAYavyCDpMNr9AqPqLpfAN0H0sW2AmIim VVufLriKJRBfbba5YNSI2Zgs8/4J0pmqtaCSzq8gmsn9DHCpbrg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:35:16 2025 by rpki-client