$ rpki-client -vvf repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft File: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft (raw, json) Hash identifier: 3tiAsUu8QS2BTZd2pVu1TR5awtiVWVfopUi0mcxLv+8= Subject key identifier: ED:33:A6:44:DD:45:4D:52:A6:30:19:69:87:E6:72:C9:C8:87:DA:34 Authority key identifier: 31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D Certificate issuer: /CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Certificate serial: 5388CD46B6C84F92AB9797EBCA6CAE619CBF3243 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft Manifest number: 8C Signing time: Tue 05 Aug 2025 16:01:54 +0000 Manifest this update: Tue 05 Aug 2025 15:56:54 +0000 Manifest next update: Fri 08 Aug 2025 19:38:54 +0000 Files and hashes: 1: 3136302e32322e3132382e302f32342d3234203d3e20313532383138.roa (hash: yI21TQhgzhyCtoyvgeWwpQGfBfqGzJmTftAUrnTEbC8=) 2: 3136302e32322e3132382e302f32332d3233203d3e20313532383138.roa (hash: yVwxFDu5QrQ2T1+WLHNp8JACowsZOzdgNvDquhZexvY=) 3: 3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl (hash: NE5Z2zzjfcnmWU1UX5SmSWJmhPr0QtChe4+5N2CWLZE=) 4: 3136302e32322e3132392e302f32342d3234203d3e20313532383138.roa (hash: 8c6wILZx8DuCL6PHpfE6A2+8YPuPEhrlv7dD3qJR3mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:88:cd:46:b6:c8:4f:92:ab:97:97:eb:ca:6c:ae:61:9c:bf:32:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3157B9BE6F369A1CA38738FFD64D6113C75C0E2D Validity Not Before: Aug 5 15:56:54 2025 GMT Not After : Aug 8 19:38:54 2025 GMT Subject: CN=ED33A644DD454D52A630196987E672C9C887DA34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c7:f4:fe:e2:0b:a8:d9:5d:8c:fa:e7:3d:bf: 75:3e:99:ef:94:52:9e:9a:2c:d9:29:97:c4:3d:b7: 62:b9:5b:ea:d1:5d:3e:72:0f:03:39:fd:10:7f:ca: f8:1d:1c:7c:d4:c8:76:1a:e5:cd:e2:27:95:81:d6: b8:15:51:f9:9f:87:42:52:f7:39:2d:de:38:6b:d8: bb:78:4a:14:3e:a4:69:3e:26:11:17:67:84:b9:72: a5:7d:7c:08:2f:0b:78:09:cb:35:d1:0d:92:06:78: 47:ba:98:91:83:d7:88:0d:db:ae:9b:10:cb:a4:95: 90:bc:5e:0b:62:96:9a:76:cb:1a:9b:39:00:f0:ab: 8d:c6:c9:5b:6c:05:56:d5:76:0c:97:fd:61:ec:e0: 1f:72:38:2f:28:78:ce:17:44:bb:58:df:a5:49:ff: e3:f3:24:d3:18:b9:6e:44:17:88:d2:f7:d6:43:40: fe:41:76:2a:6c:80:fb:c7:dd:67:f6:9a:c5:f8:f1: 1c:8f:31:f8:62:25:40:81:46:81:f4:65:09:3e:2c: d8:11:df:a7:5c:f7:15:96:f7:a7:8b:fc:7c:35:83: f1:34:1b:80:84:e3:f8:8b:d3:ce:dd:77:e9:b7:4f: 63:bf:97:f2:13:18:56:01:83:06:38:3d:52:65:ef: 17:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:33:A6:44:DD:45:4D:52:A6:30:19:69:87:E6:72:C9:C8:87:DA:34 X509v3 Authority Key Identifier: keyid:31:57:B9:BE:6F:36:9A:1C:A3:87:38:FF:D6:4D:61:13:C7:5C:0E:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/30fb78a9-cd68-44fd-85aa-6c6b08cb2346/0/3157B9BE6F369A1CA38738FFD64D6113C75C0E2D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:a4:f7:13:ff:79:98:40:4a:b7:86:e8:a4:32:3a:e1:e1:10: 19:a9:2c:f1:8c:42:46:c6:34:ce:3f:ac:f2:83:bd:8e:47:c2: 6a:6b:4c:70:cb:c8:10:9a:3f:9a:a8:1b:d2:0d:ff:98:fa:81: 37:f4:da:a3:35:55:79:a7:2f:11:2b:8c:35:f1:35:bf:4d:83: 08:8f:d1:d1:19:17:ef:c5:c3:61:d0:d0:ea:a8:97:9b:be:9e: c0:2a:68:e0:e9:b9:58:66:f3:ad:7a:37:83:35:31:c4:c8:9e: 39:00:f7:ba:3e:4b:c4:c5:01:f6:ed:77:d0:6e:9d:e8:db:07: a6:b1:0a:b9:59:f2:b0:5e:f8:c1:d4:c4:83:e1:8f:5c:81:6b: 18:8d:6b:9f:d3:ce:71:c8:39:b7:3f:cf:79:37:65:e7:25:f2: 56:02:32:a8:e3:c6:80:69:10:8f:ff:62:2b:d9:5c:4f:92:7d: b6:9f:c0:0a:fd:e1:1a:a7:9c:7e:0c:5e:b1:a0:c1:05:8d:7c: 87:63:8e:d0:17:52:3e:9f:03:2f:8d:6d:c7:c4:4c:6b:35:b2: f4:eb:86:2b:bd:de:f9:f3:9f:5b:eb:62:74:b7:0b:f1:76:54: 0b:55:99:c5:31:0a:40:d8:13:50:ad:15:7f:2e:e4:c3:67:d3: b1:e3:d8:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4jNRrbIT5Krl5frymyuYZy/MkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTND NzVDMEUyRDAeFw0yNTA4MDUxNTU2NTRaFw0yNTA4MDgxOTM4NTRaMDMxMTAvBgNV BAMTKEVEMzNBNjQ0REQ0NTRENTJBNjMwMTk2OTg3RTY3MkM5Qzg4N0RBMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+x/T+4guo2V2M+uc9v3U+me+U Up6aLNkpl8Q9t2K5W+rRXT5yDwM5/RB/yvgdHHzUyHYa5c3iJ5WB1rgVUfmfh0JS 9zkt3jhr2Lt4ShQ+pGk+JhEXZ4S5cqV9fAgvC3gJyzXRDZIGeEe6mJGD14gN266b EMuklZC8Xgtilpp2yxqbOQDwq43GyVtsBVbVdgyX/WHs4B9yOC8oeM4XRLtY36VJ /+PzJNMYuW5EF4jS99ZDQP5BdipsgPvH3Wf2msX48RyPMfhiJUCBRoH0ZQk+LNgR 36dc9xWW96eL/Hw1g/E0G4CE4/iL087dd+m3T2O/l/ITGFYBgwY4PVJl7xf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7TOmRN1FTVKmMBlph+ZyyciH2jQwHwYDVR0j BBgwFoAUMVe5vm82mhyjhzj/1k1hE8dcDi0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MGZiNzhhOS1jZDY4LTQ0ZmQtODVhYS02YzZiMDhjYjIzNDYvMC8zMTU3QjlCRTZG MzY5QTFDQTM4NzM4RkZENjRENjExM0M3NUMwRTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYxMTNDNzVD MEUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzBmYjc4YTktY2Q2OC00NGZkLTg1 YWEtNmM2YjA4Y2IyMzQ2LzAvMzE1N0I5QkU2RjM2OUExQ0EzODczOEZGRDY0RDYx MTNDNzVDMEUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqk9xP/eZhASreG6KQyOuHhEBmpLPGMQkbG NM4/rPKDvY5HwmprTHDLyBCaP5qoG9IN/5j6gTf02qM1VXmnLxErjDXxNb9NgwiP 0dEZF+/Fw2HQ0Oqol5u+nsAqaODpuVhm8616N4M1McTInjkA97o+S8TFAfbtd9Bu nejbB6axCrlZ8rBe+MHUxIPhj1yBaxiNa5/TznHIObc/z3k3Zecl8lYCMqjjxoBp EI//YivZXE+SfbafwAr94RqnnH4MXrGgwQWNfIdjjtAXUj6fAy+NbcfETGs1svTr hiu93vnzn1vrYnS3C/F2VAtVmcUxCkDYE1CtFX8u5MNn07Hj2H8= -----END CERTIFICATE-----Generated at Wed Aug 6 07:47:29 2025 by rpki-client