$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: jMfAfdQh29aA6AgLEpHmhLAQFNPPbuWMS6Jl5/VV77c= Subject key identifier: 9C:D9:E0:FC:89:34:F5:2B:97:E6:37:B3:16:03:E7:30:92:D0:07:C5 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 5C07AC1C190F6D198950FF36847C9D33F3F74066 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 0170 Signing time: Sun 04 May 2025 02:50:48 +0000 Manifest this update: Sun 04 May 2025 02:45:48 +0000 Manifest next update: Wed 07 May 2025 06:24:48 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 2: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=) 4: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: 5ux4uNVv9iS8rU0y3vZIdo7y0TARKhLj7qYMGc9rfwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 06:24:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:07:ac:1c:19:0f:6d:19:89:50:ff:36:84:7c:9d:33:f3:f7:40:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: May 4 02:45:48 2025 GMT Not After : May 7 06:24:48 2025 GMT Subject: CN=9CD9E0FC8934F52B97E637B31603E73092D007C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:83:86:e0:7a:58:08:ec:e3:13:ec:c3:90:11: 02:6c:33:0b:c2:c3:f0:64:8f:d4:79:b3:c8:b1:e3: 24:97:81:b3:55:d3:25:84:77:bf:12:7f:f9:4a:1a: ce:10:ae:19:27:cc:8a:03:cc:72:51:40:a4:bc:5e: fe:70:6e:2e:c5:d5:de:b8:a2:f7:d4:8d:d6:8e:61: 08:a2:7e:fd:db:7b:07:49:f4:db:3e:16:e9:ff:42: de:b2:6e:2b:46:c0:ca:7b:1f:6d:40:3c:f8:91:95: 8e:41:00:ab:94:37:86:23:ef:b4:f9:1b:d9:92:d2: 11:78:87:3f:2f:e5:64:0e:c5:15:ba:ab:b8:0a:82: 4e:97:1e:d7:c2:5e:f5:f9:90:f9:32:0f:23:f4:06: 84:57:a9:c8:f8:f7:0c:23:9b:4e:43:c3:29:1c:be: fb:e3:a9:49:8d:db:fa:d3:60:f7:24:9a:73:d4:e1: 09:43:18:5e:04:34:f4:c4:43:ee:fa:c6:01:f7:96: 8a:7b:02:c6:8a:94:10:a8:d9:66:af:b1:f3:94:be: cb:cf:47:3d:3f:ac:40:0e:82:40:33:77:60:95:82: b7:2f:b5:29:7e:d0:3a:09:d8:3b:cf:37:2a:9b:bd: 5e:d0:ef:5e:ad:91:c0:a3:72:6f:5a:05:b8:6f:05: dd:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:D9:E0:FC:89:34:F5:2B:97:E6:37:B3:16:03:E7:30:92:D0:07:C5 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:12:c6:aa:e7:ab:b9:91:88:0c:6a:74:60:53:c0:4d:84:d2: df:08:4e:4a:ec:e4:91:17:a5:9d:9a:26:31:96:22:c3:f1:87: 85:73:19:51:4f:8f:f0:15:8b:02:c8:7b:d9:00:d8:e6:81:9a: 69:f5:7b:a8:83:d8:8a:66:36:9f:15:09:1d:f7:b5:c2:7b:25: 21:af:30:7d:ff:08:50:bf:34:d0:d5:d1:29:04:9d:d8:77:d5: 59:6c:31:4f:d5:4d:23:0a:3e:b9:3b:d6:e2:72:29:1c:53:15: 46:16:9a:a7:e9:0b:00:6d:2a:4c:16:46:2a:d8:14:75:65:ef: 67:e1:06:54:0c:a2:f8:40:65:a2:58:4c:8c:b7:04:f7:8c:b8: 3a:ae:11:87:a8:6a:3d:dd:b8:37:cb:fe:fd:07:c0:c9:f5:65: 8f:cc:f5:2d:11:b7:ae:0d:cd:d6:70:2c:f8:30:6c:3b:08:9a: 19:24:52:4b:f9:7b:a8:aa:b1:a7:02:4d:39:d8:30:ae:68:47: b4:0c:44:6b:5b:c2:50:f8:56:f0:7f:3f:be:31:9f:b3:b1:2f: a3:fc:d0:be:49:27:44:36:88:32:b9:d6:04:ab:aa:f9:e3:bf: b8:64:6e:46:59:a9:49:e0:03:f6:a6:63:78:4d:d2:6c:6d:6e: ab:9a:54:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXAesHBkPbRmJUP82hHydM/P3QGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA1MDQwMjQ1NDhaFw0yNTA1MDcwNjI0NDhaMDMxMTAvBgNV BAMTKDlDRDlFMEZDODkzNEY1MkI5N0U2MzdCMzE2MDNFNzMwOTJEMDA3QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpg4bgelgI7OMT7MOQEQJsMwvC w/Bkj9R5s8ix4ySXgbNV0yWEd78Sf/lKGs4QrhknzIoDzHJRQKS8Xv5wbi7F1d64 ovfUjdaOYQiifv3bewdJ9Ns+Fun/Qt6ybitGwMp7H21APPiRlY5BAKuUN4Yj77T5 G9mS0hF4hz8v5WQOxRW6q7gKgk6XHtfCXvX5kPkyDyP0BoRXqcj49wwjm05Dwykc vvvjqUmN2/rTYPckmnPU4QlDGF4ENPTEQ+76xgH3lop7AsaKlBCo2WavsfOUvsvP Rz0/rEAOgkAzd2CVgrcvtSl+0DoJ2DvPNyqbvV7Q716tkcCjcm9aBbhvBd3dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnNng/Ik09SuX5jezFgPnMJLQB8UwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8Sxqrnq7mRiAxqdGBTwE2E0t8ITkrs5JEX pZ2aJjGWIsPxh4VzGVFPj/AViwLIe9kA2OaBmmn1e6iD2IpmNp8VCR33tcJ7JSGv MH3/CFC/NNDV0SkEndh31VlsMU/VTSMKPrk71uJyKRxTFUYWmqfpCwBtKkwWRirY FHVl72fhBlQMovhAZaJYTIy3BPeMuDquEYeoaj3duDfL/v0HwMn1ZY/M9S0Rt64N zdZwLPgwbDsImhkkUkv5e6iqsacCTTnYMK5oR7QMRGtbwlD4VvB/P74xn7OxL6P8 0L5JJ0Q2iDK51gSrqvnjv7hkbkZZqUngA/amY3hN0mxtbquaVD8= -----END CERTIFICATE-----Generated at Tue May 6 20:57:25 2025 by rpki-client