$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: EQHtFXVdoHbh8qLmzxTsT0vwOvv/mNFtfNEnMaOvbhU= Subject key identifier: 9D:C0:94:76:31:05:68:75:51:A7:D3:4B:6B:89:72:1A:19:70:E2:A8 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 4CBA5E0A4B5C0F8FAEBDB72725F7316BCC4ED280 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0264 Signing time: Sun 01 Mar 2026 04:31:28 +0000 Manifest this update: Sun 01 Mar 2026 04:26:28 +0000 Manifest next update: Wed 04 Mar 2026 07:26:28 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 2: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 3: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: InGQY3MZTXdBzVl9f/6b6mok5SVj3un8F20uI5Xn2z0=) 5: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 6: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: 46YKkFrK4dfs0VfBcc4dq3lodFhgDplRU79uaP2W9Kk=) 7: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 8: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=) 9: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:26:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ba:5e:0a:4b:5c:0f:8f:ae:bd:b7:27:25:f7:31:6b:cc:4e:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Mar 1 04:26:28 2026 GMT Not After : Mar 4 07:26:28 2026 GMT Subject: CN=9DC094763105687551A7D34B6B89721A1970E2A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:23:0f:25:25:79:e9:db:52:ad:c7:91:ff:fe: 10:7a:7a:0b:cc:72:76:6f:a1:b4:73:fc:79:3b:41: 85:1e:d6:31:40:5e:73:f9:05:d1:59:e7:a2:65:ba: 37:eb:27:d2:04:c3:63:1e:c2:86:8a:bb:6d:a0:11: 5f:b9:f7:43:e9:bc:80:b4:c6:a1:10:29:9e:02:1f: 3d:a3:33:6f:7a:39:cd:97:bd:96:0c:8a:83:80:6f: b2:be:c3:e0:ec:ea:3b:a6:40:6d:e8:cf:01:b8:bd: 35:fe:68:fa:7f:ac:c0:ac:c3:da:d8:75:c7:3a:18: b8:b8:f3:c0:fc:76:f8:aa:f3:0b:30:fe:2d:65:0c: 7c:80:88:e2:e6:71:df:0d:9e:a6:71:0b:57:70:e3: 05:74:71:a8:40:d8:51:81:64:f9:15:8a:6d:3f:8f: 6f:e1:ed:da:11:cb:ef:f9:c0:90:cc:60:d0:1d:2a: 22:b8:80:c3:1a:1b:2d:df:88:85:aa:5e:c1:0c:b3: 2d:1c:5a:c3:26:ac:d4:b2:31:6d:0e:f5:e5:cb:aa: 0c:68:0e:0e:93:a5:da:d7:81:fb:ef:ed:15:8e:bc: a3:4a:c7:20:f8:96:20:49:f2:be:e0:b8:d2:53:37: 6c:96:49:d1:4d:6e:32:02:41:e5:99:f9:d0:a7:64: 8f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:C0:94:76:31:05:68:75:51:A7:D3:4B:6B:89:72:1A:19:70:E2:A8 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f4:3f:c0:72:33:3f:af:8b:0e:1e:5f:57:03:0d:01:78:2e: 2b:53:44:73:97:9f:ea:e5:2c:7d:26:87:8e:7a:1b:9e:94:e4: 07:5a:1e:62:45:c4:ef:92:46:7f:84:f9:d6:d7:16:b4:6f:3b: 48:a4:86:61:15:b4:cb:88:e1:1b:09:fe:7a:0d:27:2e:75:ef: 8e:29:e1:8c:72:01:45:49:9e:f4:9e:a8:97:84:88:37:9e:fe: 75:72:b7:31:db:06:c3:91:7f:dd:e7:65:b6:8a:96:ad:8e:29: 70:db:d3:21:9f:2f:81:4c:7b:9a:b7:4f:87:a1:15:1e:52:8f: d4:3e:82:56:3d:30:eb:86:5f:74:23:08:33:4f:43:ac:26:71: 94:7e:de:ca:02:5c:16:ba:44:68:08:ac:ee:77:f9:45:3b:04: 51:fa:ca:7b:62:9b:22:ba:46:4e:dc:09:61:52:85:05:66:26: d1:87:43:14:47:ba:8c:0c:45:b1:ea:94:14:58:39:db:2e:7d: 58:b9:00:fe:1e:2a:75:3e:fd:5d:e3:08:3f:7f:b5:de:0c:47: 35:b2:c0:de:b3:29:08:43:46:7a:d9:b9:dc:25:ac:07:00:ef: be:a6:7a:b6:20:21:96:39:08:e0:11:cc:6d:11:50:2a:dc:0a: 96:37:8d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTLpeCktcD4+uvbcnJfcxa8xO0oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjAzMDEwNDI2MjhaFw0yNjAzMDQwNzI2MjhaMDMxMTAvBgNV BAMTKDlEQzA5NDc2MzEwNTY4NzU1MUE3RDM0QjZCODk3MjFBMTk3MEUyQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnIw8lJXnp21Ktx5H//hB6egvM cnZvobRz/Hk7QYUe1jFAXnP5BdFZ56JlujfrJ9IEw2MewoaKu22gEV+590PpvIC0 xqEQKZ4CHz2jM296Oc2XvZYMioOAb7K+w+Ds6jumQG3ozwG4vTX+aPp/rMCsw9rY dcc6GLi488D8dviq8wsw/i1lDHyAiOLmcd8NnqZxC1dw4wV0cahA2FGBZPkVim0/ j2/h7doRy+/5wJDMYNAdKiK4gMMaGy3fiIWqXsEMsy0cWsMmrNSyMW0O9eXLqgxo Dg6TpdrXgfvv7RWOvKNKxyD4liBJ8r7guNJTN2yWSdFNbjICQeWZ+dCnZI+LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUncCUdjEFaHVRp9NLa4lyGhlw4qgwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP0P8ByMz+viw4eX1cDDQF4LitTRHOXn+rl LH0mh456G56U5AdaHmJFxO+SRn+E+dbXFrRvO0ikhmEVtMuI4RsJ/noNJy51744p 4YxyAUVJnvSeqJeEiDee/nVytzHbBsORf93nZbaKlq2OKXDb0yGfL4FMe5q3T4eh FR5Sj9Q+glY9MOuGX3QjCDNPQ6wmcZR+3soCXBa6RGgIrO53+UU7BFH6yntimyK6 Rk7cCWFShQVmJtGHQxRHuowMRbHqlBRYOdsufVi5AP4eKnU+/V3jCD9/td4MRzWy wN6zKQhDRnrZudwlrAcA776merYgIZY5COARzG0RUCrcCpY3jX4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:52:43 2026 by rpki-client