$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: xrbw7/1QZ6lMjk2Iw2Qu27Vu95+ft6iXnkIaS//VGzw= Subject key identifier: 1D:F3:E0:76:92:99:A2:24:82:BB:B7:E8:D2:62:4B:0A:97:86:E7:92 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 45C15B2455C4A75FE14A714EAE7D2C0803D1C3E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 0192 Signing time: Sat 19 Jul 2025 17:00:48 +0000 Manifest this update: Sat 19 Jul 2025 16:55:48 +0000 Manifest next update: Tue 22 Jul 2025 22:35:48 +0000 Files and hashes: 1: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=) 2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: 45ikTpIMQyhcN8lkB77kl9eFDpk/ar6UNWbDgzlzOCw=) 3: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 22:35:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:c1:5b:24:55:c4:a7:5f:e1:4a:71:4e:ae:7d:2c:08:03:d1:c3:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Jul 19 16:55:48 2025 GMT Not After : Jul 22 22:35:48 2025 GMT Subject: CN=1DF3E0769299A22482BBB7E8D2624B0A9786E792 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:68:c1:40:b2:02:ef:ad:ef:df:0b:f3:c4:3d: 4a:7e:db:4f:09:a9:d7:19:10:e2:50:b7:59:f2:9a: 48:8d:d6:5f:9c:b3:ac:21:dd:4d:74:c1:12:20:71: c3:12:2b:17:dc:85:45:2d:ee:36:c0:83:76:88:bf: 04:b2:d2:74:74:a6:80:a8:af:6e:99:aa:11:bb:c1: 63:3f:df:d0:8f:27:51:f2:f7:88:83:ca:11:3f:0e: 9d:0b:76:13:d2:25:7f:e4:76:bd:68:17:74:0d:a2: f4:38:d2:f4:58:b3:8c:4d:29:41:c1:94:82:51:8c: e0:03:ae:e7:7f:0d:9e:d3:13:bc:f8:1c:2a:83:f8: 22:74:c0:5d:87:3b:ed:c5:1f:4a:63:46:d7:64:31: 47:9a:eb:82:2e:04:06:e1:77:bf:73:9c:13:18:2b: b0:b1:54:25:cf:cf:22:ea:8b:02:da:55:3b:9c:43: 51:52:48:8b:e0:e9:76:3e:c8:f4:50:98:4b:b3:a7: 53:7a:7f:53:71:b5:46:61:89:73:d9:32:b7:d6:d5: ab:1b:45:2b:d4:b3:0e:0b:67:08:5d:84:28:a0:ee: f6:f0:24:7f:99:4e:a2:03:87:11:21:b7:96:ad:d1: f6:9a:e5:70:48:4c:7a:b9:b8:2e:62:69:96:64:67: e5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:F3:E0:76:92:99:A2:24:82:BB:B7:E8:D2:62:4B:0A:97:86:E7:92 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:f6:aa:09:5a:fc:c6:09:b0:8a:66:ec:1f:31:44:6d:16:4c: f8:df:fa:54:4b:4d:7d:59:97:0a:2a:0b:2f:1d:6a:a8:ba:fc: 48:fa:f1:2c:6f:12:e1:3b:15:8b:0a:a0:37:da:5a:42:e3:11: d8:1e:c5:fa:6b:4e:09:20:38:b5:10:fe:80:96:a5:32:b7:4e: bd:2b:ea:74:f6:8c:5c:65:59:af:9c:7b:2e:a9:2e:7a:9a:ae: f4:ac:8a:5d:b8:c1:8d:68:06:51:1d:96:93:a3:d0:7b:7d:5b: 2b:fe:66:db:a9:ba:52:ff:16:83:11:08:d3:6e:bd:ea:78:d3: d6:1e:a6:6a:2f:95:e9:41:25:10:1d:58:89:61:75:2e:d0:36: 74:10:54:1a:5c:7c:18:da:3c:ad:52:cc:56:8e:c2:3e:c1:c9: c8:aa:9e:4a:1c:0b:68:a1:91:08:83:f6:c3:db:72:e6:2c:5d: dd:94:37:c2:16:4f:17:25:0f:b7:e3:a9:0f:1a:7a:71:58:32: 7f:dc:f8:84:a3:0d:95:3b:f5:02:72:4d:8e:23:09:f6:22:ec: c8:a3:4f:e6:ea:f0:9c:ab:e2:7f:8c:7b:c8:42:f7:5e:b3:97: 00:fc:62:d6:71:25:68:e2:8f:b9:20:82:fb:11:5a:cc:57:d9: 92:7b:17:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURcFbJFXEp1/hSnFOrn0sCAPRw+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA3MTkxNjU1NDhaFw0yNTA3MjIyMjM1NDhaMDMxMTAvBgNV BAMTKDFERjNFMDc2OTI5OUEyMjQ4MkJCQjdFOEQyNjI0QjBBOTc4NkU3OTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHaMFAsgLvre/fC/PEPUp+208J qdcZEOJQt1nymkiN1l+cs6wh3U10wRIgccMSKxfchUUt7jbAg3aIvwSy0nR0poCo r26ZqhG7wWM/39CPJ1Hy94iDyhE/Dp0LdhPSJX/kdr1oF3QNovQ40vRYs4xNKUHB lIJRjOADrud/DZ7TE7z4HCqD+CJ0wF2HO+3FH0pjRtdkMUea64IuBAbhd79znBMY K7CxVCXPzyLqiwLaVTucQ1FSSIvg6XY+yPRQmEuzp1N6f1NxtUZhiXPZMrfW1asb RSvUsw4LZwhdhCig7vbwJH+ZTqIDhxEht5at0faa5XBITHq5uC5iaZZkZ+XrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHfPgdpKZoiSCu7fo0mJLCpeG55IwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACn2qgla/MYJsIpm7B8xRG0WTPjf+lRLTX1Z lwoqCy8daqi6/Ej68SxvEuE7FYsKoDfaWkLjEdgexfprTgkgOLUQ/oCWpTK3Tr0r 6nT2jFxlWa+cey6pLnqarvSsil24wY1oBlEdlpOj0Ht9Wyv+ZtupulL/FoMRCNNu vep409YepmovlelBJRAdWIlhdS7QNnQQVBpcfBjaPK1SzFaOwj7ByciqnkocC2ih kQiD9sPbcuYsXd2UN8IWTxclD7fjqQ8aenFYMn/c+ISjDZU79QJyTY4jCfYi7Mij T+bq8Jyr4n+Me8hC916zlwD8YtZxJWjij7kggvsRWsxX2ZJ7F+w= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:47 2025 by rpki-client