$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: YIwgtqHJFTQbWlKXxRnpYt+kCdWWSYcEz9zpAz3Jpus= Subject key identifier: FE:B9:2C:7C:60:07:9F:AD:87:70:AC:95:E6:2F:65:B0:80:92:87:26 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 1C57DBDA4DA796C0F8F87A5F9D007FE59BA50AC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 019A Signing time: Tue 05 Aug 2025 09:30:49 +0000 Manifest this update: Tue 05 Aug 2025 09:25:49 +0000 Manifest next update: Fri 08 Aug 2025 13:08:49 +0000 Files and hashes: 1: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: i1mwVyDrPFgpCruI4ly+UxAOzxFiES9Anm6RAp6BmgI=) 2: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 4: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 13:08:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:57:db:da:4d:a7:96:c0:f8:f8:7a:5f:9d:00:7f:e5:9b:a5:0a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Aug 5 09:25:49 2025 GMT Not After : Aug 8 13:08:49 2025 GMT Subject: CN=FEB92C7C60079FAD8770AC95E62F65B080928726 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:c9:a4:7a:bc:1a:a7:ff:c7:d2:25:c8:9d:50: 1f:b3:96:22:98:23:dd:65:e6:89:ae:11:f8:e4:6a: a9:a6:4f:77:1a:de:83:58:72:cf:a0:e1:55:d4:2f: 72:06:8c:ce:2a:7e:61:e6:96:b0:a0:30:3b:a9:09: cc:2c:31:62:5b:76:68:95:3a:4b:0e:b5:58:5b:94: 1d:3e:2b:a2:f5:f8:a0:01:44:91:40:15:c2:2d:ed: 88:54:33:2e:a4:61:14:c6:27:55:e9:47:f1:12:38: 2d:2d:81:f7:38:c4:65:59:92:ad:26:b5:1c:a8:f6: c9:d6:3f:b6:e0:c6:f0:09:02:87:e0:d5:69:a0:cc: 21:4e:21:a0:30:73:74:58:d1:f3:a5:51:34:85:04: bb:76:f7:2d:64:b3:99:f7:78:c5:61:27:89:68:7e: 3e:bd:f4:95:88:13:7c:5d:b4:2c:16:16:9f:da:54: f5:3b:92:a2:25:be:79:44:e0:83:30:81:af:cb:5d: a4:e3:c3:0d:0d:5b:88:46:a6:f3:f1:38:61:4d:64: 7e:29:a9:af:40:93:6d:a4:de:25:cd:79:11:c3:ef: 30:85:a9:9f:dd:f1:37:3f:ed:c2:98:a1:b4:6c:68: d8:35:76:16:ed:a2:3d:ac:42:67:f7:1b:27:2b:c7: d8:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B9:2C:7C:60:07:9F:AD:87:70:AC:95:E6:2F:65:B0:80:92:87:26 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:b3:61:cf:d7:e6:14:68:f5:a5:d2:d2:18:d5:0d:17:37:fc: ad:c9:7c:db:40:ee:34:46:31:fa:27:ff:e0:ac:d9:fa:ad:5a: b0:92:ed:83:4c:ca:c6:1e:70:bf:0f:d9:f8:f2:d7:3d:d5:8e: 17:49:e1:14:69:88:96:6a:05:41:07:0a:6f:f0:4e:1b:1a:83: ab:9f:cd:00:95:bb:c1:c4:aa:51:02:4d:ce:87:63:f6:06:c1: c9:f5:4a:40:08:96:a1:68:d5:f8:6a:a9:c1:9f:f8:89:73:1f: 2c:19:4c:39:ff:14:f6:41:56:fa:23:91:5b:0b:ff:fb:e0:25: 5f:71:23:b5:77:d4:67:2c:b1:d4:42:79:b8:7d:77:d1:57:8c: 52:c6:a4:2e:ce:f5:e8:f6:a4:a3:a8:7f:33:1c:2a:9b:8d:9e: 0e:f6:df:0f:99:c7:62:83:13:2a:55:82:c5:37:a4:14:8d:c2: 36:d0:e3:c9:11:b8:68:76:22:e9:9d:bc:41:a9:e5:c0:12:b8: 70:b0:52:a5:38:31:de:f6:80:a5:af:19:83:88:7f:f4:01:d5: ac:62:01:67:bf:44:af:3d:9b:cd:ea:1d:bd:9e:19:63:d3:5b: 32:e7:83:96:85:58:d1:de:1e:d3:9b:53:ed:c1:27:93:ea:53: 62:01:5e:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFfb2k2nlsD4+HpfnQB/5ZulCsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA4MDUwOTI1NDlaFw0yNTA4MDgxMzA4NDlaMDMxMTAvBgNV BAMTKEZFQjkyQzdDNjAwNzlGQUQ4NzcwQUM5NUU2MkY2NUIwODA5Mjg3MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTyaR6vBqn/8fSJcidUB+zliKY I91l5omuEfjkaqmmT3ca3oNYcs+g4VXUL3IGjM4qfmHmlrCgMDupCcwsMWJbdmiV OksOtVhblB0+K6L1+KABRJFAFcIt7YhUMy6kYRTGJ1XpR/ESOC0tgfc4xGVZkq0m tRyo9snWP7bgxvAJAofg1WmgzCFOIaAwc3RY0fOlUTSFBLt29y1ks5n3eMVhJ4lo fj699JWIE3xdtCwWFp/aVPU7kqIlvnlE4IMwga/LXaTjww0NW4hGpvPxOGFNZH4p qa9Ak22k3iXNeRHD7zCFqZ/d8Tc/7cKYobRsaNg1dhbtoj2sQmf3Gycrx9iZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rksfGAHn62HcKyV5i9lsICShyYwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqzYc/X5hRo9aXS0hjVDRc3/K3JfNtA7jRG Mfon/+Cs2fqtWrCS7YNMysYecL8P2fjy1z3VjhdJ4RRpiJZqBUEHCm/wThsag6uf zQCVu8HEqlECTc6HY/YGwcn1SkAIlqFo1fhqqcGf+IlzHywZTDn/FPZBVvojkVsL //vgJV9xI7V31GcssdRCebh9d9FXjFLGpC7O9ej2pKOofzMcKpuNng723w+Zx2KD EypVgsU3pBSNwjbQ48kRuGh2IumdvEGp5cASuHCwUqU4Md72gKWvGYOIf/QB1axi AWe/RK89m83qHb2eGWPTWzLng5aFWNHeHtObU+3BJ5PqU2IBXoU= -----END CERTIFICATE-----Generated at Thu Aug 7 11:13:06 2025 by rpki-client