$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: yNe/l37KqcQhJHeyQcM+qOhYdyT9eqOm7S+un2vOPn8= Subject key identifier: F8:29:2A:7C:65:8C:D5:DE:6D:B7:1E:11:61:0B:44:F4:16:EA:D1:EB Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 4B15A083FE4CDC50B07200DF1195947145E49376 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01BB Signing time: Sun 19 Oct 2025 01:40:50 +0000 Manifest this update: Sun 19 Oct 2025 01:35:50 +0000 Manifest next update: Wed 22 Oct 2025 05:48:50 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: fgkB28cHC6QyL2v287z3dLR4WjPFoEDbNQWI5So/bHE=) 3: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 05:48:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:15:a0:83:fe:4c:dc:50:b0:72:00:df:11:95:94:71:45:e4:93:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Oct 19 01:35:50 2025 GMT Not After : Oct 22 05:48:50 2025 GMT Subject: CN=F8292A7C658CD5DE6DB71E11610B44F416EAD1EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:61:12:c5:29:d3:ec:ae:1c:46:d0:ec:39:a2: ec:8d:4c:a7:23:77:db:5e:c3:9d:33:08:e5:0c:85: d1:01:b7:9d:b7:91:3f:53:7a:44:8b:93:44:e2:32: ec:88:1f:e0:ad:62:98:f6:17:c8:35:03:2a:b1:16: 40:68:5a:f8:60:88:de:80:e5:15:35:bb:dd:08:e7: 61:ba:2a:ad:7e:3c:5d:93:25:5c:14:2a:22:03:66: e6:2f:60:38:48:42:d1:03:ca:fe:8a:ad:cf:1d:0c: 95:71:7a:42:66:b8:91:c2:46:9f:fc:e8:86:9a:3e: cf:f7:cf:55:bf:7e:dc:5e:a0:de:3e:f3:d4:81:1a: 5d:8f:15:72:f3:4c:b1:6f:88:8e:e5:fd:32:59:a5: 64:f2:0d:7b:5c:c3:e6:59:00:16:16:a8:0e:fd:62: 09:e4:9c:9d:07:cc:7a:91:4c:47:81:81:39:b4:17: 35:35:da:96:da:29:18:fb:e9:fb:52:b5:5b:27:67: b7:b9:a6:5f:b7:8f:13:71:bd:1f:1a:8e:96:bb:5c: e9:aa:ae:53:e7:ea:7d:d6:b9:11:99:e4:89:19:76: 50:a8:17:a2:ee:f9:6d:13:fd:bf:ee:a1:a2:67:32: 84:ea:e7:80:58:83:7b:c5:a8:ac:04:e7:28:fd:ca: 34:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:29:2A:7C:65:8C:D5:DE:6D:B7:1E:11:61:0B:44:F4:16:EA:D1:EB X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6c:70:0d:d0:57:51:99:21:69:54:08:71:7a:c9:03:70:f7: 5e:d9:11:21:ba:56:c2:22:5e:2b:fd:96:79:d7:c9:5d:f0:14: ba:3c:9a:ce:88:c4:8a:3f:48:59:e0:74:d2:67:c1:cb:c7:b7: 6d:8e:21:ff:b5:99:fc:73:a3:1d:53:bc:b6:f2:c0:09:e6:84: 9f:9f:1a:1d:25:19:08:47:ec:b3:b6:61:61:a6:9f:76:78:ad: 16:7d:0d:59:66:8e:56:24:8d:89:96:0f:fb:72:f5:26:1f:74: 2f:5b:d0:0f:da:8c:21:1e:49:55:0d:50:39:64:89:02:77:ff: 0e:b2:39:1a:d3:94:29:3b:fb:28:0c:db:16:2e:5c:c8:c3:72: 52:dd:c2:be:9b:9d:c3:5d:db:43:ad:93:62:e4:cd:36:f3:dc: 82:83:88:2d:a0:cc:2c:52:e2:72:dc:37:05:aa:1e:90:5a:dd: 88:7a:c1:36:32:bf:c2:33:bb:25:56:af:2a:29:2e:56:ce:85: dd:8a:77:9d:da:f6:26:0c:b6:2a:29:97:75:ac:f3:6b:ba:31: 2a:c7:74:e4:84:31:d9:8e:16:50:fb:5f:44:69:26:84:2f:06: 08:06:80:8b:2b:bf:03:ac:cd:a9:ce:27:db:fb:74:6d:41:f4: ed:05:3d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSxWgg/5M3FCwcgDfEZWUcUXkk3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTEwMTkwMTM1NTBaFw0yNTEwMjIwNTQ4NTBaMDMxMTAvBgNV BAMTKEY4MjkyQTdDNjU4Q0Q1REU2REI3MUUxMTYxMEI0NEY0MTZFQUQxRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoYRLFKdPsrhxG0Ow5ouyNTKcj d9tew50zCOUMhdEBt523kT9TekSLk0TiMuyIH+CtYpj2F8g1AyqxFkBoWvhgiN6A 5RU1u90I52G6Kq1+PF2TJVwUKiIDZuYvYDhIQtEDyv6Krc8dDJVxekJmuJHCRp/8 6IaaPs/3z1W/ftxeoN4+89SBGl2PFXLzTLFviI7l/TJZpWTyDXtcw+ZZABYWqA79 YgnknJ0HzHqRTEeBgTm0FzU12pbaKRj76ftStVsnZ7e5pl+3jxNxvR8ajpa7XOmq rlPn6n3WuRGZ5IkZdlCoF6Lu+W0T/b/uoaJnMoTq54BYg3vFqKwE5yj9yjQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+CkqfGWM1d5ttx4RYQtE9Bbq0eswHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBscA3QV1GZIWlUCHF6yQNw917ZESG6VsIi Xiv9lnnXyV3wFLo8ms6IxIo/SFngdNJnwcvHt22OIf+1mfxzox1TvLbywAnmhJ+f Gh0lGQhH7LO2YWGmn3Z4rRZ9DVlmjlYkjYmWD/ty9SYfdC9b0A/ajCEeSVUNUDlk iQJ3/w6yORrTlCk7+ygM2xYuXMjDclLdwr6bncNd20Otk2LkzTbz3IKDiC2gzCxS 4nLcNwWqHpBa3Yh6wTYyv8IzuyVWryopLlbOhd2Kd53a9iYMtiopl3Ws82u6MSrH dOSEMdmOFlD7X0RpJoQvBggGgIsrvwOszanOJ9v7dG1B9O0FPcM= -----END CERTIFICATE-----Generated at Mon Oct 20 12:01:52 2025 by rpki-client