$ rpki-client -vvf repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft File: 157E8817E413B3A8B2866190AD82151E868B1FA7.mft (raw, json) Hash identifier: 8vCaw7q8JaUxmElGpnBBRuYi1UIDD3HuhnvnwM/3y38= Subject key identifier: 7C:3F:58:47:5C:35:1A:F0:40:73:F1:49:6C:41:B0:01:0D:BB:F9:94 Authority key identifier: 15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 Certificate issuer: /CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Certificate serial: 6870B6919F3E6569CF541E3EA38A44181C288A8B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft Manifest number: 01B8 Signing time: Sun 27 Apr 2025 23:02:10 +0000 Manifest this update: Sun 27 Apr 2025 22:57:10 +0000 Manifest next update: Thu 01 May 2025 09:32:10 +0000 Files and hashes: 1: 157E8817E413B3A8B2866190AD82151E868B1FA7.crl (hash: PvgGvkujbT1pqovI2hxxsfAa3iuqp3ntWND3wP6A3YA=) 2: 323030313a6466363a353330303a3a2f34382d3438203d3e20313439373130.roa (hash: +plvagJTEWEKvn5SZaftcn0qBGmFNqSMLPgdfy0xJAc=) 3: 3130332e3132312e3139362e302f32342d3234203d3e20313439373130.roa (hash: wLJhuvg5cB3B041BJhH14/dahrjMuNKBOMiBv1ZxMUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:70:b6:91:9f:3e:65:69:cf:54:1e:3e:a3:8a:44:18:1c:28:8a:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157E8817E413B3A8B2866190AD82151E868B1FA7 Validity Not Before: Apr 27 22:57:10 2025 GMT Not After : May 1 09:32:10 2025 GMT Subject: CN=7C3F58475C351AF04073F1496C41B0010DBBF994 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:58:c2:6f:dc:37:d1:7a:f4:b8:e4:c1:97:25: 38:ce:69:c8:4e:33:52:58:d8:df:14:bd:ca:9f:ac: 33:88:f1:c7:3c:38:eb:2e:df:24:65:27:15:00:90: 52:94:d6:bd:ac:ae:f1:50:7d:78:04:e9:e2:47:2c: d4:7b:f8:9c:7b:e3:01:06:a9:49:86:29:2f:bd:09: ca:28:e6:ea:2c:38:a0:ca:13:e5:2b:84:a1:65:1d: df:9b:72:a8:c3:2f:4e:1d:7a:e9:55:fd:ff:23:13: 0c:52:2d:b4:11:c0:5a:09:fd:ef:38:2d:6d:89:55: 65:4f:6d:91:49:54:35:ef:8d:93:8b:86:2a:c0:01: d1:fb:ce:0e:29:53:d5:11:24:77:e6:dd:e5:01:c0: b7:1a:c8:ca:76:74:01:f2:06:2b:4e:0e:c1:b2:61: b1:88:ea:5c:8d:1d:ca:14:11:63:f8:72:bb:fa:70: 16:d6:34:c2:a4:6a:b5:6b:1d:0a:a1:4e:e3:c1:bc: 52:13:90:10:e3:c6:81:30:32:3a:b0:1e:7f:98:1c: 7e:17:4b:b0:a7:9c:88:6e:ca:3a:62:7b:f5:56:62: 33:ac:2e:41:a4:27:9e:56:af:02:e3:c0:c6:f9:d7: 75:44:96:54:96:fa:43:6e:39:2e:b9:65:cf:7f:5b: 90:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:3F:58:47:5C:35:1A:F0:40:73:F1:49:6C:41:B0:01:0D:BB:F9:94 X509v3 Authority Key Identifier: keyid:15:7E:88:17:E4:13:B3:A8:B2:86:61:90:AD:82:15:1E:86:8B:1F:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157E8817E413B3A8B2866190AD82151E868B1FA7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/83cd60b2-0f57-4fc5-bc62-1d9b6c48fcf0/0/157E8817E413B3A8B2866190AD82151E868B1FA7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d7:9d:18:ac:06:03:4f:98:cc:51:d8:c2:f0:18:5d:c1:a4: 71:78:b5:b5:53:ec:eb:c0:46:7a:b8:aa:fa:27:8a:e2:e1:0d: f2:27:52:11:a9:b3:5d:e1:13:81:02:2b:05:33:14:d1:83:c1: 4a:3d:b8:f4:54:64:48:43:99:be:a1:6c:9a:40:58:92:a1:3b: 1b:ab:93:a2:26:4d:93:a2:03:a2:6c:64:92:1f:41:82:08:c8: 42:7a:cd:8a:cb:b9:20:82:3d:57:1f:94:15:97:79:a3:70:08: 6e:1d:57:12:e7:19:02:7a:3e:11:cf:8e:9c:15:9d:66:37:e2: 8e:0a:6c:32:8d:ab:da:07:45:49:1a:d3:48:0a:45:fa:61:86: ac:65:d3:e1:83:f0:1c:aa:e6:7f:0b:8c:98:d8:29:6a:80:25: 2a:30:ea:3c:91:d8:d4:c2:7b:66:52:d5:8d:19:f3:3a:2b:75: 7b:08:ee:68:7b:57:16:98:3d:d2:39:32:92:90:06:43:6e:13: b4:05:66:90:cc:11:ed:8c:30:a5:76:aa:ee:42:63:dc:f8:07: d1:c2:24:54:e8:f3:9f:cd:bb:48:30:f4:3c:e4:8e:35:0b:0c: 1a:ac:fd:45:74:49:75:1e:b2:bb:c1:e5:10:8a:1e:7d:5d:41: 5c:c5:32:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaHC2kZ8+ZWnPVB4+o4pEGBwoioswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4 NjhCMUZBNzAeFw0yNTA0MjcyMjU3MTBaFw0yNTA1MDEwOTMyMTBaMDMxMTAvBgNV BAMTKDdDM0Y1ODQ3NUMzNTFBRjA0MDczRjE0OTZDNDFCMDAxMERCQkY5OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBWMJv3DfRevS45MGXJTjOachO M1JY2N8UvcqfrDOI8cc8OOsu3yRlJxUAkFKU1r2srvFQfXgE6eJHLNR7+Jx74wEG qUmGKS+9Ccoo5uosOKDKE+UrhKFlHd+bcqjDL04deulV/f8jEwxSLbQRwFoJ/e84 LW2JVWVPbZFJVDXvjZOLhirAAdH7zg4pU9URJHfm3eUBwLcayMp2dAHyBitODsGy YbGI6lyNHcoUEWP4crv6cBbWNMKkarVrHQqhTuPBvFITkBDjxoEwMjqwHn+YHH4X S7CnnIhuyjpie/VWYjOsLkGkJ55WrwLjwMb513VEllSW+kNuOS65Zc9/W5BHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfD9YR1w1GvBAc/FJbEGwAQ27+ZQwHwYDVR0j BBgwFoAUFX6IF+QTs6iyhmGQrYIVHoaLH6cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 M2NkNjBiMi0wZjU3LTRmYzUtYmM2Mi0xZDliNmM0OGZjZjAvMC8xNTdFODgxN0U0 MTNCM0E4QjI4NjYxOTBBRDgyMTUxRTg2OEIxRkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1MUU4NjhC MUZBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODNjZDYwYjItMGY1Ny00ZmM1LWJj NjItMWQ5YjZjNDhmY2YwLzAvMTU3RTg4MTdFNDEzQjNBOEIyODY2MTkwQUQ4MjE1 MUU4NjhCMUZBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzXnRisBgNPmMxR2MLwGF3BpHF4tbVT7OvA Rnq4qvoniuLhDfInUhGps13hE4ECKwUzFNGDwUo9uPRUZEhDmb6hbJpAWJKhOxur k6ImTZOiA6JsZJIfQYIIyEJ6zYrLuSCCPVcflBWXeaNwCG4dVxLnGQJ6PhHPjpwV nWY34o4KbDKNq9oHRUka00gKRfphhqxl0+GD8Byq5n8LjJjYKWqAJSow6jyR2NTC e2ZS1Y0Z8zordXsI7mh7VxaYPdI5MpKQBkNuE7QFZpDMEe2MMKV2qu5CY9z4B9HC JFTo85/Nu0gw9DzkjjULDBqs/UV0SXUesrvB5RCKHn1dQVzFMgI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:32:49 2025 by rpki-client