$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: n2PKI5lt1x0S0l6W5tKk+ZYxFPrRnpn/dYqrqj483gM= Subject key identifier: 40:D8:A8:E7:89:E0:75:A7:FE:1C:41:0F:98:1E:A7:D8:09:9D:E6:9C Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 55EC83E252816E838077BBB9E67112333FED81C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 01A8 Signing time: Fri 05 Sep 2025 08:50:49 +0000 Manifest this update: Fri 05 Sep 2025 08:45:49 +0000 Manifest next update: Mon 08 Sep 2025 15:45:49 +0000 Files and hashes: 1: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: HIT+/5abDlD8C8ozTbmiLLl0AA4gSAMSQu6nsXfbHhE=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: 3IPWWkSr+CRIxbooLiHD2sYaMVl9ZCy+eS+fZpZLV/I=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 15:45:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:ec:83:e2:52:81:6e:83:80:77:bb:b9:e6:71:12:33:3f:ed:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Sep 5 08:45:49 2025 GMT Not After : Sep 8 15:45:49 2025 GMT Subject: CN=40D8A8E789E075A7FE1C410F981EA7D8099DE69C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:8a:da:f1:0b:07:2b:d9:56:e4:87:68:ac:cc: fe:c3:11:15:87:8a:0c:41:e5:33:74:4d:24:22:4c: 65:20:d8:c4:7c:94:a7:64:2c:53:58:d2:e0:16:1d: c0:b2:b3:0e:f0:9f:61:4c:16:cc:bb:fc:0d:93:8a: 8e:92:3b:2d:21:2c:85:31:fe:b6:66:db:46:1f:f4: 41:db:09:40:35:30:f7:ee:bd:b2:2b:81:3d:4e:fa: e4:56:0b:a4:a0:60:58:d2:a3:31:48:68:9d:08:4b: 7b:9e:d7:f5:e9:1a:d4:4f:d4:a7:c4:b1:0f:11:16: 42:5e:bd:10:b1:ff:98:16:a0:3d:b8:e4:3f:3f:26: 60:1a:35:4c:d8:0f:91:f5:0c:4e:6f:18:98:e3:26: 30:c1:f3:f5:2b:b6:b8:c4:1d:cd:d1:96:74:5f:5c: b1:61:83:f8:9a:07:bc:59:d0:3d:94:33:cc:9b:ef: 50:2b:2d:a6:bf:23:43:66:45:f7:2a:ae:ba:2d:6e: b2:88:54:48:3e:a1:96:ac:64:be:e7:98:83:a2:65: 44:51:c0:b2:20:bb:bf:2c:d9:f2:54:87:52:7f:9d: 66:17:ea:5e:d1:e5:71:4a:a3:05:e6:a6:90:57:47: 53:c5:92:78:6e:0e:b5:40:90:1c:aa:52:5f:f8:78: 3c:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:D8:A8:E7:89:E0:75:A7:FE:1C:41:0F:98:1E:A7:D8:09:9D:E6:9C X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:a4:68:79:52:d6:3c:d2:9a:74:8e:51:0a:22:66:f8:86:9f: c9:30:8c:e3:0b:38:6d:2e:50:a4:2a:55:ef:65:c5:17:9a:2d: a7:95:6f:46:95:8d:02:ba:6b:c3:d6:9f:77:57:3a:fd:07:e9: 27:52:a4:db:2e:b2:b7:8e:7e:6d:6a:27:69:3e:7f:4c:9e:e4: b5:0c:d3:0a:81:8c:bf:8f:2f:d0:b9:f2:45:06:fa:c9:0c:2b: 7d:8b:f6:44:b7:c3:e0:91:2a:43:b4:82:72:84:22:fa:57:9b: 23:27:d6:39:ee:1f:00:01:d5:aa:77:cc:51:03:15:71:08:f2: 3c:54:eb:fd:34:34:0e:a1:11:45:2e:c9:e5:ff:24:37:a8:11: 55:3d:45:de:10:95:46:49:e9:26:ac:9a:cc:5e:5b:5a:2b:ee: 3f:49:31:d1:ea:bc:6d:37:19:2e:58:ab:ca:5f:ea:07:ad:20: 59:20:c6:d9:af:fa:f3:f3:0c:6c:8b:f4:50:f2:11:46:65:60: 5e:bc:4b:58:22:ed:d8:26:d1:24:e3:c5:7f:f2:87:4e:66:88: c5:f3:7d:4f:b0:66:7f:f3:0f:23:15:35:42:0c:e1:a8:d1:94: b9:96:08:4c:95:6b:3d:90:a3:af:28:82:50:cc:34:7d:01:a3: a5:2d:fd:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeyD4lKBboOAd7u55nESMz/tgcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA5MDUwODQ1NDlaFw0yNTA5MDgxNTQ1NDlaMDMxMTAvBgNV BAMTKDQwRDhBOEU3ODlFMDc1QTdGRTFDNDEwRjk4MUVBN0Q4MDk5REU2OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnitrxCwcr2Vbkh2iszP7DERWH igxB5TN0TSQiTGUg2MR8lKdkLFNY0uAWHcCysw7wn2FMFsy7/A2Tio6SOy0hLIUx /rZm20Yf9EHbCUA1MPfuvbIrgT1O+uRWC6SgYFjSozFIaJ0IS3ue1/XpGtRP1KfE sQ8RFkJevRCx/5gWoD245D8/JmAaNUzYD5H1DE5vGJjjJjDB8/UrtrjEHc3RlnRf XLFhg/iaB7xZ0D2UM8yb71ArLaa/I0NmRfcqrrotbrKIVEg+oZasZL7nmIOiZURR wLIgu78s2fJUh1J/nWYX6l7R5XFKowXmppBXR1PFknhuDrVAkByqUl/4eDzXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQNio54ngdaf+HEEPmB6n2Amd5pwwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMWkaHlS1jzSmnSOUQoiZviGn8kwjOMLOG0u UKQqVe9lxReaLaeVb0aVjQK6a8PWn3dXOv0H6SdSpNsusreOfm1qJ2k+f0ye5LUM 0wqBjL+PL9C58kUG+skMK32L9kS3w+CRKkO0gnKEIvpXmyMn1jnuHwAB1ap3zFED FXEI8jxU6/00NA6hEUUuyeX/JDeoEVU9Rd4QlUZJ6SasmsxeW1or7j9JMdHqvG03 GS5Yq8pf6getIFkgxtmv+vPzDGyL9FDyEUZlYF68S1gi7dgm0STjxX/yh05miMXz fU+wZn/zDyMVNUIM4ajRlLmWCEyVaz2Qo68oglDMNH0Bo6Ut/b8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:29:13 2025 by rpki-client