$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: g/RysYw4TMCFSqJFUljOxS4UpK76XQgZbZ5zfR2Ea7w= Subject key identifier: F6:79:9C:CF:BD:96:56:B0:4D:C9:3E:1B:3D:4B:DD:FD:2F:A6:FF:B0 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 686200F9DAA248BFE7631FDC9FF215533A49BEB3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 048B Signing time: Tue 04 Nov 2025 23:00:44 +0000 Manifest this update: Tue 04 Nov 2025 22:55:44 +0000 Manifest next update: Sat 08 Nov 2025 00:02:44 +0000 Files and hashes: 1: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 2: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: b0P/iDTU76xeNy+H+u2KcJ5yezEpicaQAolAOqhlz+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 08 Nov 2025 00:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:62:00:f9:da:a2:48:bf:e7:63:1f:dc:9f:f2:15:53:3a:49:be:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Nov 4 22:55:44 2025 GMT Not After : Nov 8 00:02:44 2025 GMT Subject: CN=F6799CCFBD9656B04DC93E1B3D4BDDFD2FA6FFB0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:a2:5f:ac:50:52:d8:54:d9:dc:f0:7e:5e:49: 30:4d:dc:d0:7a:c4:26:7f:09:d9:ce:99:51:75:9a: 6b:64:a2:06:1b:96:d5:c6:b6:b4:c7:c6:c0:dd:a8: f6:ef:07:5f:7d:e9:4c:75:08:81:73:91:c5:b2:bf: 90:6b:6f:5f:63:be:ba:42:aa:25:bb:ae:ae:73:29: 52:14:26:76:44:2b:98:f3:e2:64:b1:c6:ec:19:c7: 82:e0:72:9c:9b:d2:1f:f1:51:86:e3:3d:a7:69:5e: 2e:56:29:c6:2e:0d:6c:96:18:14:b3:2c:30:5f:02: 55:2c:43:e4:88:f6:c9:ff:31:f9:af:cd:d2:13:76: 87:d8:e4:d8:e3:07:20:0e:69:23:2c:dc:da:c3:00: 8a:1d:07:76:cd:9b:37:58:a3:75:a3:a3:61:cd:d0: 48:c3:f8:46:2f:a3:5a:46:6e:04:99:71:d7:d5:59: 88:8c:b5:42:74:04:76:3d:28:0f:40:36:eb:f7:f3: 37:c7:4b:dc:77:ab:93:1e:1e:87:3c:f2:49:c7:47: 37:07:35:31:ba:d9:d0:e6:72:5c:81:9a:32:17:79: 39:c7:30:8e:89:b3:cc:83:a0:fb:ac:63:9d:88:e7: 16:43:f0:e2:fc:6d:43:33:30:56:cd:36:3b:3e:02: 6a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:79:9C:CF:BD:96:56:B0:4D:C9:3E:1B:3D:4B:DD:FD:2F:A6:FF:B0 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:09:80:90:76:ed:1d:d0:ab:15:7a:8c:b4:ec:67:c3:c3:da: 99:3b:90:65:3e:85:34:e5:12:7f:8c:88:9b:18:6c:5f:44:6e: 34:7f:45:1b:f5:6b:57:5f:bf:f1:e3:1f:2e:4d:bb:87:94:2d: ee:d3:b4:a9:09:92:31:6d:aa:04:1f:f5:42:75:bd:3e:f8:55: 59:b2:9d:c5:e3:ee:f9:f5:eb:0f:d1:73:5c:46:91:cd:24:e6: ae:e4:84:f7:71:c3:7f:54:c3:14:2f:f7:45:f8:e0:a4:e0:0e: 4f:6e:8f:12:55:a1:35:4d:a1:5d:e0:34:7c:56:82:26:9b:3b: e3:8a:56:4d:fd:98:4a:54:58:ba:71:47:e6:98:f9:e3:b7:c3: 35:0d:a8:d3:56:22:65:04:aa:31:38:cd:60:f8:b0:a8:cf:16: 60:64:f9:87:c8:3f:35:da:30:5d:fd:be:24:ef:70:a3:4e:f4: b8:af:79:67:57:9d:d3:b0:fb:ad:43:80:47:50:1f:1b:ee:a3: 1f:4f:7e:5d:bc:b6:24:40:a5:ca:21:4e:92:58:c8:58:a7:e7: ba:27:d3:5a:3a:e0:ed:68:03:0b:83:3d:e9:be:89:66:32:d5: c1:7b:23:0c:39:85:8d:8f:99:5b:b7:8d:82:07:29:b8:b3:e0: 8a:7f:4f:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGIA+dqiSL/nYx/cn/IVUzpJvrMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNTExMDQyMjU1NDRaFw0yNTExMDgwMDAyNDRaMDMxMTAvBgNV BAMTKEY2Nzk5Q0NGQkQ5NjU2QjA0REM5M0UxQjNENEJEREZEMkZBNkZGQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOol+sUFLYVNnc8H5eSTBN3NB6 xCZ/CdnOmVF1mmtkogYbltXGtrTHxsDdqPbvB1996Ux1CIFzkcWyv5Brb19jvrpC qiW7rq5zKVIUJnZEK5jz4mSxxuwZx4Lgcpyb0h/xUYbjPadpXi5WKcYuDWyWGBSz LDBfAlUsQ+SI9sn/MfmvzdITdofY5NjjByAOaSMs3NrDAIodB3bNmzdYo3Wjo2HN 0EjD+EYvo1pGbgSZcdfVWYiMtUJ0BHY9KA9ANuv38zfHS9x3q5MeHoc88knHRzcH NTG62dDmclyBmjIXeTnHMI6Js8yDoPusY52I5xZD8OL8bUMzMFbNNjs+AmqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9nmcz72WVrBNyT4bPUvd/S+m/7AwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgJgJB27R3QqxV6jLTsZ8PD2pk7kGU+hTTl En+MiJsYbF9EbjR/RRv1a1dfv/HjHy5Nu4eULe7TtKkJkjFtqgQf9UJ1vT74VVmy ncXj7vn16w/Rc1xGkc0k5q7khPdxw39UwxQv90X44KTgDk9ujxJVoTVNoV3gNHxW giabO+OKVk39mEpUWLpxR+aY+eO3wzUNqNNWImUEqjE4zWD4sKjPFmBk+YfIPzXa MF39viTvcKNO9LiveWdXndOw+61DgEdQHxvuox9Pfl28tiRApcohTpJYyFin57on 01o64O1oAwuDPem+iWYy1cF7Iww5hY2PmVu3jYIHKbiz4Ip/T0M= -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:34 2025 by rpki-client