$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: mPmLZbI6rAAEGkSbAMw1VpciUW4SC3LpvAZsgdgxTas= Subject key identifier: 16:02:81:CC:63:4E:87:E2:1C:BC:F0:F7:72:81:89:57:ED:E0:FD:10 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 17E8261D3F6C9643A5D99DFAE8FC5FF21EB95EB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 0189 Signing time: Sun 29 Jun 2025 16:20:48 +0000 Manifest this update: Sun 29 Jun 2025 16:15:48 +0000 Manifest next update: Wed 02 Jul 2025 20:48:48 +0000 Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 2: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 3: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: Y4BM0KQmwe36l7JKTPc1C8hHByt5mDdplQ7eJrg/I70=) 4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:e8:26:1d:3f:6c:96:43:a5:d9:9d:fa:e8:fc:5f:f2:1e:b9:5e:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Jun 29 16:15:48 2025 GMT Not After : Jul 2 20:48:48 2025 GMT Subject: CN=160281CC634E87E21CBCF0F772818957EDE0FD10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:92:48:11:4a:19:d0:72:1f:b8:0d:bf:00:60: 27:94:d7:c5:2f:e2:ea:a6:6e:2b:5e:92:e6:3e:73: 82:0f:2b:51:06:00:98:2a:8e:3e:31:c7:e1:e8:f4: f5:fd:10:11:c0:ce:87:fb:5a:88:31:a3:fa:93:74: a6:41:7c:67:5f:08:cf:c0:ca:04:e4:5a:d9:00:03: b0:7d:22:a4:2b:57:7d:bb:bd:26:8a:73:3a:72:90: 0e:cf:53:dd:97:88:8c:8a:e5:78:ce:58:73:89:55: f7:43:e9:28:d9:6d:00:32:60:0d:94:fb:94:3a:ca: ed:90:71:8e:fa:95:a8:5d:8d:7c:81:d9:ef:02:2e: 39:69:3f:51:76:e2:ca:2e:40:4c:3c:fb:d8:b0:ae: ad:44:ed:5a:fc:eb:fe:9f:57:26:4c:96:7c:7e:d2: bc:9f:0e:da:64:85:58:6f:1c:f6:fa:72:9b:2b:0f: de:e6:c4:52:d9:17:07:54:15:e9:48:fb:7d:6f:6d: 61:83:3d:63:c1:e4:5c:d6:0b:bc:b0:fa:c6:39:89: f6:84:3f:7e:1b:41:db:39:d0:85:d3:20:46:3f:61: d9:71:b6:e7:eb:30:56:56:43:6a:98:c9:bd:7c:51: 31:59:4f:86:74:a0:df:3e:00:37:21:4b:be:29:42: 09:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:81:CC:63:4E:87:E2:1C:BC:F0:F7:72:81:89:57:ED:E0:FD:10 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:33:61:8a:29:57:86:c3:d3:c4:ef:44:f7:9d:8c:ae:ea:f5: e5:fe:1b:8c:6f:b1:b6:4f:4a:58:56:47:9f:fc:e5:fa:6b:4a: 32:54:18:ed:50:10:81:16:43:ef:d3:23:9d:29:66:1d:b4:68: 5d:17:22:17:5a:6a:30:08:65:a0:4b:d6:1a:90:30:b5:94:fd: 9c:23:bf:46:a4:55:57:fe:64:0e:90:b1:73:f6:81:89:5a:b7: 49:fe:46:4a:3a:51:e4:36:ab:67:04:89:00:f7:21:6e:6e:5c: 32:90:40:e9:63:c2:d0:62:32:2a:49:59:18:9a:ce:3b:49:a3: 34:3d:15:e9:f3:4f:3a:9a:d8:26:28:e6:b0:a7:cb:4c:9a:0e: b6:62:79:8f:16:5a:bb:51:f1:ac:30:10:41:a2:a5:9a:5d:4b: c8:1c:1d:01:50:90:b7:8d:3a:e1:f6:09:c8:d7:aa:a5:c3:fc: cf:e6:6e:01:0a:0f:72:a0:88:c1:89:63:e2:c6:e9:a4:27:cd: 54:c3:88:bd:a2:0e:d5:25:d7:44:00:4d:71:5e:31:45:a5:e5: 22:5d:cb:df:8f:a9:e2:4e:17:21:cf:f4:e4:f7:a7:ef:f5:73: 65:5f:13:e6:49:6b:55:b8:fb:45:c9:26:47:1b:6e:15:4f:45: 0b:59:48:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+gmHT9slkOl2Z366Pxf8h65XrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA2MjkxNjE1NDhaFw0yNTA3MDIyMDQ4NDhaMDMxMTAvBgNV BAMTKDE2MDI4MUNDNjM0RTg3RTIxQ0JDRjBGNzcyODE4OTU3RURFMEZEMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKkkgRShnQch+4Db8AYCeU18Uv 4uqmbitekuY+c4IPK1EGAJgqjj4xx+Ho9PX9EBHAzof7Wogxo/qTdKZBfGdfCM/A ygTkWtkAA7B9IqQrV327vSaKczpykA7PU92XiIyK5XjOWHOJVfdD6SjZbQAyYA2U +5Q6yu2QcY76lahdjXyB2e8CLjlpP1F24souQEw8+9iwrq1E7Vr86/6fVyZMlnx+ 0ryfDtpkhVhvHPb6cpsrD97mxFLZFwdUFelI+31vbWGDPWPB5FzWC7yw+sY5ifaE P34bQds50IXTIEY/YdlxtufrMFZWQ2qYyb18UTFZT4Z0oN8+ADchS74pQgllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgKBzGNOh+IcvPD3coGJV+3g/RAwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFszYYopV4bD08TvRPedjK7q9eX+G4xvsbZP SlhWR5/85fprSjJUGO1QEIEWQ+/TI50pZh20aF0XIhdaajAIZaBL1hqQMLWU/Zwj v0akVVf+ZA6QsXP2gYlat0n+Rko6UeQ2q2cEiQD3IW5uXDKQQOljwtBiMipJWRia zjtJozQ9FenzTzqa2CYo5rCny0yaDrZieY8WWrtR8awwEEGipZpdS8gcHQFQkLeN OuH2CcjXqqXD/M/mbgEKD3KgiMGJY+LG6aQnzVTDiL2iDtUl10QATXFeMUWl5SJd y9+PqeJOFyHP9OT3p+/1c2VfE+ZJa1W4+0XJJkcbbhVPRQtZSCE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:31:19 2025 by rpki-client