$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: SRYSdbAK/BT9ESGROjaruGfw7p8zmX/+kiH8FInoZ7Y= Subject key identifier: 0E:67:28:D9:52:35:4C:A5:54:95:B5:76:FE:18:31:BE:61:14:A1:90 Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 3CEFE84EAE86437E0BB9517976B022BD99615578 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 0279 Signing time: Thu 16 Apr 2026 09:11:28 +0000 Manifest this update: Thu 16 Apr 2026 09:06:28 +0000 Manifest next update: Sun 19 Apr 2026 20:31:28 +0000 Files and hashes: 1: 3130332e3136342e36382e302f32342d3234203d3e20313534343130.roa (hash: InGQY3MZTXdBzVl9f/6b6mok5SVj3un8F20uI5Xn2z0=) 2: 3130332e3136342e36382e302f32332d3233203d3e20323135373237.roa (hash: mY/gedfST1aVTT2whoYkCrdSLWtVr5yC5xbhzMtOrsM=) 3: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 0V++vp92hNCIFYG550YB/yE4XMO9oRZJXstb8V8vA9I=) 4: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: iI+Z6KrcPNEbDiIjc9lS2DIuyyGwAe3ilWzYO11lZ3o=) 5: 3130332e3136342e36392e302f32342d3234203d3e20323135373237.roa (hash: 5aRMs2raTlQ/7fe2rrGKXXPoFPxV2dQEYvCfa+0572Y=) 6: 3130332e3136342e36392e302f32342d3234203d3e20313534343130.roa (hash: BggS2kwrF1wot9/y3zRY32YXHPw5qTZ25TRQLtufFRk=) 7: 3130332e3136342e36382e302f32332d3233203d3e20313534343130.roa (hash: 35nS32yJTNLhbcgUZmALVqr3JvPHwEeFfQkvwvwc4sA=) 8: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: D5EruEMit+jANRTBuPrhAc2MqZX5nMCDLQgAY2TccB4=) 9: 3130332e3136342e36382e302f32342d3234203d3e20323135373237.roa (hash: B5kMPqKnAyjQ7h4n9e2QNS1tW3EwmLswU7gtO5Y0Xds=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ef:e8:4e:ae:86:43:7e:0b:b9:51:79:76:b0:22:bd:99:61:55:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Apr 16 09:06:28 2026 GMT Not After : Apr 19 20:31:28 2026 GMT Subject: CN=0E6728D952354CA55495B576FE1831BE6114A190 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:43:ce:e3:4f:f5:02:c8:a7:1f:8f:5d:80:bc: b2:e4:ec:62:c7:f5:84:68:00:11:fd:49:f1:6f:06: a8:63:3b:77:47:d0:29:b6:6d:ab:04:92:e9:b3:97: 4d:da:76:d4:0e:aa:f1:9a:9d:3c:cf:06:29:21:9d: 8e:8f:9b:2e:80:07:dd:fd:57:7c:ab:e0:32:6f:fc: d2:01:ac:ab:31:e6:ac:ec:26:b4:16:78:14:61:f8: 7c:34:32:22:1c:14:1b:ce:6c:19:24:31:d9:16:6f: 6b:dc:e1:f8:43:b5:85:c6:30:33:43:81:7a:ea:4d: ca:a2:ee:2f:ee:16:39:15:ce:dc:69:ef:17:29:cf: 5b:9c:ff:04:b2:d5:76:ca:c3:e1:66:f8:92:a5:a6: c3:9c:3c:b0:64:3b:d0:c4:59:64:45:42:99:9d:49: 05:4e:0e:9f:5a:ae:32:67:68:0a:64:61:2b:a2:b1: 53:d9:4e:4b:80:d4:1c:d5:de:cd:ee:7a:10:88:9b: ab:a8:56:ed:9c:cf:12:12:69:8c:7f:11:07:18:7e: ac:f8:a5:91:7b:13:c6:2f:d0:9b:a0:aa:b8:94:a9: c5:87:e1:61:07:7f:4e:c9:11:2f:73:a8:28:cf:61: ef:e3:c6:98:1c:2d:ed:3c:9a:5b:37:0b:56:26:ad: a0:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:67:28:D9:52:35:4C:A5:54:95:B5:76:FE:18:31:BE:61:14:A1:90 X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:c6:c9:97:8f:57:e5:9c:1b:46:ac:a8:55:63:2d:b9:44:b5: a1:6a:65:29:72:2f:0f:32:4f:e3:f6:74:29:3f:81:7c:21:49: e0:66:e3:aa:dc:96:74:a0:21:d9:db:52:a1:4d:1d:c4:35:1c: de:10:3f:66:36:09:15:ea:99:72:42:eb:99:9b:d3:a8:98:23: 35:c5:90:ec:39:59:3b:96:2d:fa:5a:20:ab:a8:81:b8:a5:cc: f6:d7:81:9b:22:d1:3e:3a:65:3f:0d:18:e1:9b:d9:e2:75:7b: 34:ed:cb:28:2b:d9:64:f7:a4:77:1e:5c:a9:8d:cb:64:d1:66: e2:27:39:d4:a5:ee:9e:12:b3:51:84:99:32:dd:8d:cd:4a:56: a9:aa:ec:85:1f:3f:9b:f3:78:0a:fd:11:c0:a2:29:d7:27:4a: c2:e5:6f:98:c7:8d:6e:bd:1c:eb:8c:92:90:e2:cd:2c:b7:3c: aa:f2:5b:47:8b:a7:c9:fc:ac:4e:12:e5:75:5e:4a:b2:b9:80: 46:67:b6:10:bc:28:f2:5d:1c:82:75:27:ad:25:a1:d0:d2:0a: f6:0f:92:21:b1:93:d4:56:6f:ed:cb:2a:65:2e:08:e4:05:24: e4:b0:4c:0d:1b:43:83:de:0a:dd:14:39:99:12:5b:f4:d6:83: 8b:64:05:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPO/oTq6GQ34LuVF5drAivZlhVXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNjA0MTYwOTA2MjhaFw0yNjA0MTkyMDMxMjhaMDMxMTAvBgNV BAMTKDBFNjcyOEQ5NTIzNTRDQTU1NDk1QjU3NkZFMTgzMUJFNjExNEExOTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ87jT/UCyKcfj12AvLLk7GLH 9YRoABH9SfFvBqhjO3dH0Cm2basEkumzl03adtQOqvGanTzPBikhnY6Pmy6AB939 V3yr4DJv/NIBrKsx5qzsJrQWeBRh+Hw0MiIcFBvObBkkMdkWb2vc4fhDtYXGMDND gXrqTcqi7i/uFjkVztxp7xcpz1uc/wSy1XbKw+Fm+JKlpsOcPLBkO9DEWWRFQpmd SQVODp9arjJnaApkYSuisVPZTkuA1BzV3s3uehCIm6uoVu2czxISaYx/EQcYfqz4 pZF7E8Yv0JugqriUqcWH4WEHf07JES9zqCjPYe/jxpgcLe08mls3C1YmraD9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDmco2VI1TKVUlbV2/hgxvmEUoZAwHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXGyZePV+WcG0asqFVjLblEtaFqZSlyLw8y T+P2dCk/gXwhSeBm46rclnSgIdnbUqFNHcQ1HN4QP2Y2CRXqmXJC65mb06iYIzXF kOw5WTuWLfpaIKuogbilzPbXgZsi0T46ZT8NGOGb2eJ1ezTtyygr2WT3pHceXKmN y2TRZuInOdSl7p4Ss1GEmTLdjc1KVqmq7IUfP5vzeAr9EcCiKdcnSsLlb5jHjW69 HOuMkpDizSy3PKryW0eLp8n8rE4S5XVeSrK5gEZnthC8KPJdHIJ1J60lodDSCvYP kiGxk9RWb+3LKmUuCOQFJOSwTA0bQ4PeCt0UOZkSW/TWg4tkBRQ= -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:13 2026 by rpki-client