$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: eBExgPLjVwx9u4yVTarxiL5GhBDnLgXvkWW7KSyV6Bo= Subject key identifier: 30:E3:19:DE:77:F2:B2:62:FF:7F:94:EA:4F:F7:35:B4:7D:34:75:C2 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 4728E391582554E20DD70454184B356867967237 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01D7 Signing time: Mon 28 Apr 2025 19:11:16 +0000 Manifest this update: Mon 28 Apr 2025 19:06:16 +0000 Manifest next update: Thu 01 May 2025 20:39:16 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: E/DNpz1rKahV6dY5B7B162OOBv0CaUHdRt41kPJLKtc=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 20:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:28:e3:91:58:25:54:e2:0d:d7:04:54:18:4b:35:68:67:96:72:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Apr 28 19:06:16 2025 GMT Not After : May 1 20:39:16 2025 GMT Subject: CN=30E319DE77F2B262FF7F94EA4FF735B47D3475C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:66:f2:cb:27:24:9f:97:c5:47:0f:ac:10: f6:66:c5:36:3d:97:be:65:02:2f:a4:52:f5:e8:28: 6d:c9:f8:19:e5:bc:4d:00:2f:0e:83:3d:2b:d9:72: d2:ac:5c:1e:5f:a7:0f:9c:28:eb:b1:fc:8c:c2:47: 5b:b9:52:d5:18:4c:64:0d:1b:20:57:ea:43:a3:ee: 19:4f:f3:ae:4a:f6:51:1b:bc:5d:5c:d8:62:6d:a5: 7f:f0:33:37:30:84:5f:47:b0:9c:ca:07:2d:2d:17: ad:b7:fb:d2:83:7c:3b:5b:99:38:08:fc:96:08:48: 4e:0a:8d:bc:a6:64:61:63:27:db:5f:a3:90:a4:c7: 9f:ba:05:8e:af:9e:75:ac:ec:b6:28:f2:b1:38:c3: 84:2c:bd:29:3a:48:4d:02:71:3b:d9:e6:72:f4:a3: e6:5d:c4:eb:31:f9:72:fa:ba:11:32:08:82:03:4c: ff:6c:6c:68:7b:6b:c8:f1:9a:fb:e4:23:b0:96:31: db:0e:cd:22:0e:e8:cd:a2:23:c8:16:5b:1b:a2:c3: be:bc:43:a6:90:c4:0b:4c:23:35:e4:8c:0b:8d:61: a0:16:a0:6b:19:54:14:e9:b9:fa:6a:a8:9e:dd:93: ec:12:cf:1e:14:cb:bd:cf:dc:28:c0:14:d1:c7:93: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E3:19:DE:77:F2:B2:62:FF:7F:94:EA:4F:F7:35:B4:7D:34:75:C2 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:a4:3a:27:7c:89:4e:20:ee:b2:f8:01:b3:4c:68:70:72:b4: 08:0c:8e:a0:05:10:30:54:bd:57:b3:b7:9c:d0:20:18:18:d0: b2:54:71:c4:e0:de:92:38:ca:36:7a:22:62:ff:96:32:6b:a1: 70:3e:1d:a6:ac:c9:b9:d1:d7:05:48:8e:b1:2e:5e:fe:d6:4d: 13:50:7c:52:5d:df:ab:84:cd:76:92:0d:79:cc:c4:c3:28:31: cd:32:c0:dd:05:02:9c:b5:1d:5f:23:81:1e:d8:c5:5e:54:55: e0:5f:8c:84:83:c6:8d:8c:44:67:4c:84:81:2d:3e:ee:40:ae: 98:7c:f3:09:18:5f:14:02:2b:59:ac:0b:68:60:6f:1f:92:61: 3d:73:19:7e:bd:76:dd:0e:20:39:75:f9:f6:f6:96:2a:91:4d: b4:05:11:fb:b7:95:ac:e3:93:96:09:38:ab:b2:3f:7f:be:58: bc:54:13:a6:67:4d:95:d8:7a:fe:53:67:4b:29:44:d2:28:9f: 10:8e:71:4d:c1:13:03:85:24:0b:a7:1f:52:8a:3f:ab:b6:a8: 78:f3:fa:38:ae:dd:dc:57:38:ab:8d:f5:a6:2f:da:26:5e:35: 6a:38:70:1a:56:94:bf:7a:aa:92:1d:c6:3e:d1:72:03:f7:7a: b0:71:35:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyjjkVglVOIN1wRUGEs1aGeWcjcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA0MjgxOTA2MTZaFw0yNTA1MDEyMDM5MTZaMDMxMTAvBgNV BAMTKDMwRTMxOURFNzdGMkIyNjJGRjdGOTRFQTRGRjczNUI0N0QzNDc1QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv2byyyckn5fFRw+sEPZmxTY9 l75lAi+kUvXoKG3J+BnlvE0ALw6DPSvZctKsXB5fpw+cKOux/IzCR1u5UtUYTGQN GyBX6kOj7hlP865K9lEbvF1c2GJtpX/wMzcwhF9HsJzKBy0tF623+9KDfDtbmTgI /JYISE4KjbymZGFjJ9tfo5Ckx5+6BY6vnnWs7LYo8rE4w4QsvSk6SE0CcTvZ5nL0 o+ZdxOsx+XL6uhEyCIIDTP9sbGh7a8jxmvvkI7CWMdsOzSIO6M2iI8gWWxuiw768 Q6aQxAtMIzXkjAuNYaAWoGsZVBTpufpqqJ7dk+wSzx4Uy73P3CjAFNHHk5tlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOMZ3nfysmL/f5TqT/c1tH00dcIwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALakOid8iU4g7rL4AbNMaHBytAgMjqAFEDBU vVezt5zQIBgY0LJUccTg3pI4yjZ6ImL/ljJroXA+HaasybnR1wVIjrEuXv7WTRNQ fFJd36uEzXaSDXnMxMMoMc0ywN0FApy1HV8jgR7YxV5UVeBfjISDxo2MRGdMhIEt Pu5Arph88wkYXxQCK1msC2hgbx+SYT1zGX69dt0OIDl1+fb2liqRTbQFEfu3lazj k5YJOKuyP3++WLxUE6ZnTZXYev5TZ0spRNIonxCOcU3BEwOFJAunH1KKP6u2qHjz +jiu3dxXOKuN9aYv2iZeNWo4cBpWlL96qpIdxj7RcgP3erBxNaU= -----END CERTIFICATE-----Generated at Wed Apr 30 05:35:18 2025 by rpki-client