$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: 0x4yLRLoi8qD7kW+fdQWmVRZ9XHtlRQbc/zDG3WbcIQ= Subject key identifier: D0:E8:04:61:68:08:77:AF:02:FF:46:40:EB:E7:B8:52:CF:19:22:C0 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 1A2A90C044A33A0A91718EE81EEFD4382EB73C2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 21:00:50 +0000 Manifest this update: Fri 22 Aug 2025 20:55:50 +0000 Manifest next update: Tue 26 Aug 2025 04:24:50 +0000 Files and hashes: 1: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: B/krsEjEo6dD0XGBk5IvKHVwREoRHEa3ZU4Iftzgaxk=) 2: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 3: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 04:24:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:90:c0:44:a3:3a:0a:91:71:8e:e8:1e:ef:d4:38:2e:b7:3c:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Aug 22 20:55:50 2025 GMT Not After : Aug 26 04:24:50 2025 GMT Subject: CN=D0E80461680877AF02FF4640EBE7B852CF1922C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:53:6d:d0:e7:1d:6e:76:cc:a2:19:78:0a:19: f2:2b:58:c2:c4:8b:9f:ac:30:e8:3a:ee:cc:0b:46: 8b:82:d5:dc:6f:54:85:48:a6:f7:2b:67:2d:e9:c4: a8:c2:96:6c:04:4f:83:4c:b8:3b:68:25:95:6a:5c: f8:7e:50:24:46:8f:d5:e4:49:d4:63:ae:30:b8:fb: b5:7d:dd:23:ca:f2:86:ab:0c:57:27:25:3f:bf:d6: 03:88:77:d0:58:10:7c:ee:5b:42:b3:4b:89:a4:0f: 8a:c4:4f:15:aa:45:59:2b:e2:03:a2:92:72:7f:41: dd:e4:01:18:61:92:22:a0:0b:32:65:0d:1f:d6:88: 13:d1:6a:eb:8a:21:28:3a:45:bb:b7:57:bf:46:9b: 95:f3:34:08:9b:55:02:4e:21:81:7a:4a:f1:e0:62: 73:1d:4d:bd:5e:16:eb:9b:64:94:92:05:a4:99:f5: 9f:a6:11:3f:27:89:f3:94:31:70:9b:53:b7:3a:96: df:11:bd:57:7f:fe:6c:28:00:ff:22:59:39:28:85: e1:b0:92:f4:8e:44:ce:3f:47:73:f8:7d:89:16:3d: 55:6a:07:02:5e:29:fd:eb:a9:30:ff:37:98:ec:ec: a3:66:d2:ba:b6:9f:94:2f:4d:b7:d5:b9:ef:14:a4: 08:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:04:61:68:08:77:AF:02:FF:46:40:EB:E7:B8:52:CF:19:22:C0 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:31:7d:29:a8:2d:00:c1:69:6b:4f:18:25:00:16:33:99:24: e2:5e:1d:05:0d:e8:7f:81:0c:53:fa:4a:13:71:e3:68:87:ce: 73:ed:03:60:9b:04:d8:46:3d:b7:cc:d2:48:8f:fe:55:1d:a3: 50:66:01:36:6b:54:3a:c3:ec:9e:04:d3:57:d8:d3:27:e7:9b: a7:64:6a:1a:03:fd:81:63:fb:c5:0b:42:93:fc:d6:e9:58:8a: e3:d2:df:c9:5c:13:7c:b0:a3:26:2c:66:04:ba:aa:76:dd:a0: aa:4d:18:4a:e2:22:5c:9f:6c:7d:4a:5e:11:1b:39:de:64:7b: 8d:5b:8e:f7:24:f2:cd:e0:ca:06:b5:9e:4f:69:3a:df:75:40: 47:cf:30:88:c4:6a:10:b0:48:39:a3:44:11:52:05:24:67:30: 53:d2:97:26:c0:1e:68:30:3d:fa:10:2c:e6:4a:91:14:58:c0: aa:27:e7:44:94:99:14:fe:c0:fa:84:6a:03:6a:40:aa:1e:7f: d3:97:6c:0d:5d:3b:cc:7b:d2:f2:49:f0:54:f1:9f:76:d6:e3: 0e:7f:cf:31:67:07:86:e2:df:56:c1:43:ef:3e:e1:b4:93:fb: 44:8c:a6:86:25:17:a2:ec:12:57:84:2d:27:24:df:14:ee:08: cb:44:41:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGiqQwESjOgqRcY7oHu/UOC63PC4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA4MjIyMDU1NTBaFw0yNTA4MjYwNDI0NTBaMDMxMTAvBgNV BAMTKEQwRTgwNDYxNjgwODc3QUYwMkZGNDY0MEVCRTdCODUyQ0YxOTIyQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsU23Q5x1udsyiGXgKGfIrWMLE i5+sMOg67swLRouC1dxvVIVIpvcrZy3pxKjClmwET4NMuDtoJZVqXPh+UCRGj9Xk SdRjrjC4+7V93SPK8oarDFcnJT+/1gOId9BYEHzuW0KzS4mkD4rETxWqRVkr4gOi knJ/Qd3kARhhkiKgCzJlDR/WiBPRauuKISg6Rbu3V79Gm5XzNAibVQJOIYF6SvHg YnMdTb1eFuubZJSSBaSZ9Z+mET8nifOUMXCbU7c6lt8RvVd//mwoAP8iWTkoheGw kvSORM4/R3P4fYkWPVVqBwJeKf3rqTD/N5js7KNm0rq2n5QvTbfVue8UpAhPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0OgEYWgId68C/0ZA6+e4Us8ZIsAwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgxfSmoLQDBaWtPGCUAFjOZJOJeHQUN6H+B DFP6ShNx42iHznPtA2CbBNhGPbfM0kiP/lUdo1BmATZrVDrD7J4E01fY0yfnm6dk ahoD/YFj+8ULQpP81ulYiuPS38lcE3ywoyYsZgS6qnbdoKpNGEriIlyfbH1KXhEb Od5ke41bjvck8s3gyga1nk9pOt91QEfPMIjEahCwSDmjRBFSBSRnMFPSlybAHmgw PfoQLOZKkRRYwKon50SUmRT+wPqEagNqQKoef9OXbA1dO8x70vJJ8FTxn3bW4w5/ zzFnB4bi31bBQ+8+4bST+0SMpoYlF6LsEleELSck3xTuCMtEQUA= -----END CERTIFICATE-----Generated at Sat Aug 23 15:39:00 2025 by rpki-client