$ rpki-client -vvf repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft File: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft (raw, json) Hash identifier: ykaudsPHSCRpDWZcLw5PJD7w/z8BCtNq7aTaavo46HI= Subject key identifier: F3:15:70:72:EE:63:7D:2F:DB:F2:00:2C:87:AD:12:18:3C:E3:9E:8F Authority key identifier: 15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D Certificate issuer: /CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Certificate serial: 32E9CD41257AD910B6CDAE1330EEB46E15B47C1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft Manifest number: 01D5 Signing time: Thu 24 Apr 2025 06:41:14 +0000 Manifest this update: Thu 24 Apr 2025 06:36:14 +0000 Manifest next update: Sun 27 Apr 2025 18:16:14 +0000 Files and hashes: 1: 3130332e3136342e36392e302f32342d3234203d3e20313439343039.roa (hash: 5QM/JvrrdrcJn8om672slx53F1dYb7s2fji858A5oXY=) 2: 157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl (hash: VyDaI1M6uc2WMnf7oWXx3tcLn9ajXS11CdYlZOdvLTU=) 3: 3130332e3136342e36382e302f32342d3234203d3e20313439343039.roa (hash: cUkI2R3JO2gQ9nm4tDMmxUk21C75l0D2xIC/jejXp/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 08:44:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:e9:cd:41:25:7a:d9:10:b6:cd:ae:13:30:ee:b4:6e:15:b4:7c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157A25D171E1AD2FAB695F49BDC2555755B6ED7D Validity Not Before: Apr 24 06:36:14 2025 GMT Not After : Apr 27 18:16:14 2025 GMT Subject: CN=F3157072EE637D2FDBF2002C87AD12183CE39E8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0a:3d:44:3e:2d:77:8e:04:11:58:e9:92:8e: 67:4b:df:f2:fe:9c:90:fb:3c:51:23:ff:6b:24:27: 35:6a:22:d5:2c:0f:76:33:f8:5d:a0:34:62:a9:fa: 7a:ff:eb:33:45:c8:9b:b8:f3:18:82:03:e0:2c:74: 11:bc:83:a9:f7:90:52:7a:cf:ca:ee:29:9e:eb:7e: 83:33:09:0a:db:0b:dd:46:5b:24:e6:4b:9d:d1:f4: 86:80:8d:21:e2:e1:6f:90:d2:06:2d:4a:b0:3e:59: 54:f6:46:67:97:7e:4c:e4:d7:7b:bb:99:02:7d:f7: dc:ff:89:16:9e:29:58:57:7b:82:17:84:ba:87:0f: f2:c9:71:58:73:b5:6c:e6:51:c1:05:e8:ef:c0:cd: dd:87:90:e8:71:94:0e:f1:d6:84:46:4b:28:3d:c4: 8d:23:7d:fb:22:d8:b6:96:12:76:80:f5:ff:8c:1f: ae:c9:b1:ad:f9:de:15:45:4d:ba:93:39:ad:9c:da: 6f:d6:8b:2a:4c:d7:0a:37:08:5d:62:68:63:c7:c3: 63:a5:b9:21:ad:d0:f4:72:8b:d2:e6:47:a1:81:6b: 67:6e:d3:37:3a:91:94:bc:f5:9a:81:f3:fb:ee:53: cb:48:b7:2b:cb:c5:16:1b:ab:10:48:3b:2e:96:c1: 06:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:15:70:72:EE:63:7D:2F:DB:F2:00:2C:87:AD:12:18:3C:E3:9E:8F X509v3 Authority Key Identifier: keyid:15:7A:25:D1:71:E1:AD:2F:AB:69:5F:49:BD:C2:55:57:55:B6:ED:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3db6b3bc-fa65-49f3-af61-0d5dc39334a1/0/157A25D171E1AD2FAB695F49BDC2555755B6ED7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:13:92:be:89:aa:46:2b:db:96:6a:3f:2e:57:8e:8b:20:ef: 3a:cd:c1:4c:46:6b:63:4d:41:c8:13:bf:79:e2:39:3a:09:86: fa:a4:45:50:ee:06:eb:d8:07:a2:18:6f:a1:36:fe:4e:92:24: 53:c0:14:b9:ad:5e:32:9d:e7:82:5d:a0:83:a7:07:c2:6a:76: a8:02:9b:7b:38:31:91:86:25:24:98:23:88:26:65:72:4e:16: 79:79:de:33:4f:43:3b:b6:be:0f:ff:26:fa:47:25:94:71:6c: 41:c7:3e:38:83:53:6e:87:5e:4f:ff:8c:12:b1:b4:98:47:fc: 0f:06:54:9a:f2:68:2e:0f:a7:7c:98:bf:81:86:29:5d:b5:2b: e9:42:ef:9a:7f:ed:5f:d5:17:7c:b4:a3:c4:0d:57:b1:aa:b0: 29:07:a2:bd:4d:9f:08:8d:a5:0e:91:e7:b3:35:d9:21:c5:8c: 9d:58:59:40:73:d8:a1:71:e3:dd:47:7f:0d:e4:3e:6b:4f:fe: f3:8b:92:60:80:f9:e0:e1:14:64:e2:41:f3:6c:e9:4a:14:16: 8c:68:fd:c8:f0:13:6b:82:ce:45:2b:2b:ff:91:d5:6d:9d:11: b3:ad:ea:e1:6c:e8:a5:ec:18:94:c5:3c:bc:7d:29:23:4c:56: 53:06:3e:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMunNQSV62RC2za4TMO60bhW0fBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1 NUI2RUQ3RDAeFw0yNTA0MjQwNjM2MTRaFw0yNTA0MjcxODE2MTRaMDMxMTAvBgNV BAMTKEYzMTU3MDcyRUU2MzdEMkZEQkYyMDAyQzg3QUQxMjE4M0NFMzlFOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOCj1EPi13jgQRWOmSjmdL3/L+ nJD7PFEj/2skJzVqItUsD3Yz+F2gNGKp+nr/6zNFyJu48xiCA+AsdBG8g6n3kFJ6 z8ruKZ7rfoMzCQrbC91GWyTmS53R9IaAjSHi4W+Q0gYtSrA+WVT2RmeXfkzk13u7 mQJ999z/iRaeKVhXe4IXhLqHD/LJcVhztWzmUcEF6O/Azd2HkOhxlA7x1oRGSyg9 xI0jffsi2LaWEnaA9f+MH67Jsa353hVFTbqTOa2c2m/WiypM1wo3CF1iaGPHw2Ol uSGt0PRyi9LmR6GBa2du0zc6kZS89ZqB8/vuU8tItyvLxRYbqxBIOy6WwQaTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8xVwcu5jfS/b8gAsh60SGDzjno8wHwYDVR0j BBgwFoAUFXol0XHhrS+raV9JvcJVV1W27X0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZGI2YjNiYy1mYTY1LTQ5ZjMtYWY2MS0wZDVkYzM5MzM0YTEvMC8xNTdBMjVEMTcx RTFBRDJGQUI2OTVGNDlCREMyNTU1NzU1QjZFRDdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1NTc1NUI2 RUQ3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2RiNmIzYmMtZmE2NS00OWYzLWFm NjEtMGQ1ZGMzOTMzNGExLzAvMTU3QTI1RDE3MUUxQUQyRkFCNjk1RjQ5QkRDMjU1 NTc1NUI2RUQ3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4Tkr6JqkYr25ZqPy5Xjosg7zrNwUxGa2NN QcgTv3niOToJhvqkRVDuBuvYB6IYb6E2/k6SJFPAFLmtXjKd54JdoIOnB8JqdqgC m3s4MZGGJSSYI4gmZXJOFnl53jNPQzu2vg//JvpHJZRxbEHHPjiDU26HXk//jBKx tJhH/A8GVJryaC4Pp3yYv4GGKV21K+lC75p/7V/VF3y0o8QNV7GqsCkHor1NnwiN pQ6R57M12SHFjJ1YWUBz2KFx491Hfw3kPmtP/vOLkmCA+eDhFGTiQfNs6UoUFoxo /cjwE2uCzkUrK/+R1W2dEbOt6uFs6KXsGJTFPLx9KSNMVlMGPm0= -----END CERTIFICATE-----Generated at Thu Apr 24 09:03:02 2025 by rpki-client on console.sobornost.net