$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: 33I9ETbzAOByEH58nNKpNvTKULAXWruLVfulU6DP71Y= Subject key identifier: 15:E6:D7:0C:AC:5F:B8:00:67:89:6C:BD:B8:A0:3E:47:EE:4D:03:75 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 7DCC4DD5F66DA3BF9581434F9D18F438FD2341A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 01CF Signing time: Tue 17 Jun 2025 10:32:14 +0000 Manifest this update: Tue 17 Jun 2025 10:27:14 +0000 Manifest next update: Fri 20 Jun 2025 22:25:14 +0000 Files and hashes: 1: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: 2eKYMh+o40ipOAi8hjr+a/aFZYlLyRfS6uvyieWq8yI=) 2: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg=) 3: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: el6rf/o+GvqEZjQxOYAODvW1iMHMPvMLdnkJnOs9G+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:25:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:cc:4d:d5:f6:6d:a3:bf:95:81:43:4f:9d:18:f4:38:fd:23:41:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Jun 17 10:27:14 2025 GMT Not After : Jun 20 22:25:14 2025 GMT Subject: CN=15E6D70CAC5FB80067896CBDB8A03E47EE4D0375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:30:56:53:9f:07:cc:ea:91:9d:1f:73:dd:bc: 44:85:a3:95:79:f3:e7:e7:93:b0:0a:38:09:3c:d2: 85:27:70:0b:17:d2:57:c5:5a:e0:20:f0:3a:99:6a: 3f:9c:7e:b3:f3:07:71:91:97:ea:f8:b4:d6:6b:7e: 3b:bf:95:32:ab:36:9f:23:76:5f:bd:cd:3d:8e:60: 15:bc:1f:06:9f:8c:e6:64:4c:a9:fa:88:bc:5f:13: 9b:6c:4e:28:9d:44:32:c3:d9:d6:2f:bd:c6:2c:4b: 48:e8:4d:a8:8b:4f:73:d4:bd:5b:ab:27:4e:72:06: 29:ea:90:11:91:9d:13:cb:83:19:5c:26:69:9a:d4: 22:b0:68:70:92:5d:77:6d:81:cf:10:ff:7f:68:92: 54:9e:26:7a:49:61:b5:1c:bf:94:c6:1c:7f:e0:30: 4c:20:51:7a:b3:4d:eb:60:94:62:37:16:a6:c6:d0: 63:5e:fb:82:14:5d:f9:38:e2:38:1a:0a:d8:ab:a1: b1:b1:d9:13:f8:92:44:4b:eb:45:2e:18:42:3c:94: 34:fd:2b:32:2c:03:ae:66:c7:98:30:58:63:36:f6: 0b:34:eb:b9:8c:6b:a1:7c:11:82:ba:98:c4:1c:ed: bd:9a:08:54:0f:ae:53:5c:f8:ff:57:11:4b:eb:b8: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:E6:D7:0C:AC:5F:B8:00:67:89:6C:BD:B8:A0:3E:47:EE:4D:03:75 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:1f:59:36:d1:0e:0f:ea:b9:36:88:7f:6a:20:db:af:d7:c7: 77:d3:67:9a:25:0e:0e:fa:37:f3:51:fd:7b:94:7a:d2:2f:14: 40:13:30:ac:d3:ba:3f:7d:f1:b8:0f:54:c0:a2:75:86:aa:d4: 34:59:cd:38:ba:6e:66:63:c2:17:f0:0b:0c:cf:48:9f:66:ab: 80:45:6d:e6:1c:3e:74:27:b1:c3:06:ec:ef:b2:a6:cf:12:1d: 44:9b:b8:c1:e4:4d:c6:ae:0e:b0:3d:2c:98:97:f9:95:29:44: 7d:c7:e6:63:e6:dc:de:52:84:f6:14:8d:db:d4:e0:9c:8a:b7: 7f:8d:5b:65:f6:d6:79:63:6b:9e:17:6c:62:8e:fa:85:b0:69: 32:54:13:3e:f0:ff:c7:b7:5a:db:99:30:92:8d:24:d9:ea:f7: eb:fc:d7:eb:22:7d:9d:74:c1:36:a9:84:1b:da:2e:7e:70:fc: ad:9d:27:a7:4c:58:ab:31:d9:3d:b8:3c:71:1a:e4:34:d1:32: 06:73:96:09:db:6c:98:65:20:bf:07:f9:2d:31:73:51:71:af: 5d:86:a1:ce:8b:74:8e:fb:17:76:e2:5f:c0:20:b9:82:95:cc: a4:e7:99:93:a7:77:7c:20:b2:2a:29:3f:9f:f5:a1:82:0a:97: e8:ed:64:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfcxN1fZto7+VgUNPnRj0OP0jQaUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTA2MTcxMDI3MTRaFw0yNTA2MjAyMjI1MTRaMDMxMTAvBgNV BAMTKDE1RTZENzBDQUM1RkI4MDA2Nzg5NkNCREI4QTAzRTQ3RUU0RDAzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMFZTnwfM6pGdH3PdvESFo5V5 8+fnk7AKOAk80oUncAsX0lfFWuAg8DqZaj+cfrPzB3GRl+r4tNZrfju/lTKrNp8j dl+9zT2OYBW8HwafjOZkTKn6iLxfE5tsTiidRDLD2dYvvcYsS0joTaiLT3PUvVur J05yBinqkBGRnRPLgxlcJmma1CKwaHCSXXdtgc8Q/39oklSeJnpJYbUcv5TGHH/g MEwgUXqzTetglGI3FqbG0GNe+4IUXfk44jgaCtirobGx2RP4kkRL60UuGEI8lDT9 KzIsA65mx5gwWGM29gs067mMa6F8EYK6mMQc7b2aCFQPrlNc+P9XEUvruJbDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFebXDKxfuABniWy9uKA+R+5NA3UwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsfWTbRDg/quTaIf2og26/Xx3fTZ5olDg76 N/NR/XuUetIvFEATMKzTuj998bgPVMCidYaq1DRZzTi6bmZjwhfwCwzPSJ9mq4BF beYcPnQnscMG7O+yps8SHUSbuMHkTcauDrA9LJiX+ZUpRH3H5mPm3N5ShPYUjdvU 4JyKt3+NW2X21nlja54XbGKO+oWwaTJUEz7w/8e3WtuZMJKNJNnq9+v81+sifZ10 wTaphBvaLn5w/K2dJ6dMWKsx2T24PHEa5DTRMgZzlgnbbJhlIL8H+S0xc1Fxr12G oc6LdI77F3biX8AguYKVzKTnmZOnd3wgsiopP5/1oYIKl+jtZP8= -----END CERTIFICATE-----Generated at Wed Jun 18 05:23:46 2025 by rpki-client