$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: swQA99rNUI2w/WFrZxyAKVs+GBc0enFOBRUpwNtTED4= Subject key identifier: 69:C7:B9:EF:1B:32:40:92:F7:5C:78:D1:3E:06:3F:18:84:56:65:05 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 15F9F97DD9F8FBCBC419F79DF053313E02323367 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 0168 Signing time: Wed 16 Apr 2025 13:50:47 +0000 Manifest this update: Wed 16 Apr 2025 13:45:47 +0000 Manifest next update: Sat 19 Apr 2025 19:38:47 +0000 Files and hashes: 1: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) 2: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: bqRyd3tXLFfOFdSQSlwEK43HufCD4xjz9CsIntfABDw=) 3: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 4: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 19:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:f9:f9:7d:d9:f8:fb:cb:c4:19:f7:9d:f0:53:31:3e:02:32:33:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Apr 16 13:45:47 2025 GMT Not After : Apr 19 19:38:47 2025 GMT Subject: CN=69C7B9EF1B324092F75C78D13E063F1884566505 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:c4:ec:7b:d8:03:01:cf:e3:95:2c:ec:35:2d: 5e:46:69:e9:96:e7:24:26:cd:d3:92:9f:1b:53:01: 39:0b:53:dc:c2:90:01:77:74:1a:09:93:2e:d5:cc: 30:89:e4:69:76:14:c6:1e:48:05:a3:36:af:f5:d9: 95:92:6e:a3:76:5b:22:74:69:92:69:f8:95:5f:a4: b8:87:ab:ac:2e:d6:84:c7:d0:69:79:5c:ed:c0:55: ce:57:2c:c7:ea:b3:6b:72:d7:d7:cf:de:86:d7:5b: d2:b3:e5:4f:4d:4f:d6:18:57:a4:12:2e:88:ef:d3: 77:df:8a:42:3f:56:b0:d7:9e:69:97:49:34:d4:28: 28:2b:00:66:a1:56:f8:8e:6b:7e:9a:5d:fb:2c:d3: ea:68:51:63:ae:a6:57:bd:03:14:a1:50:e0:9e:da: 98:c7:77:2f:e4:bd:7e:15:11:3b:f7:1b:8a:40:41: 15:30:75:67:0d:1a:7f:59:1a:e0:70:77:7c:92:e0: dd:3e:1c:35:12:3c:fa:08:6b:53:81:b2:12:21:34: 79:4b:b3:53:14:9e:d4:41:33:9a:b8:41:47:54:71: b3:6e:31:97:f2:00:62:1b:f7:9a:98:a6:dd:1e:f1: 90:2e:f2:71:d7:64:78:fb:8c:23:5c:96:5c:8b:af: 97:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:C7:B9:EF:1B:32:40:92:F7:5C:78:D1:3E:06:3F:18:84:56:65:05 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d4:fa:14:62:d4:0b:60:32:a8:ff:61:3a:07:ac:8c:c5:3c: 1d:50:a5:e7:ec:1a:41:d4:31:2a:f2:94:5f:ae:80:1e:fb:14: 1f:d8:e1:25:ad:a8:31:4a:b3:c4:39:2e:7b:ac:81:29:87:f3: b4:5c:8c:6a:d4:e2:fb:61:a3:27:4c:fd:bb:3d:61:64:89:38: b7:74:26:53:82:0d:99:62:03:a3:e3:99:ff:a4:0c:1e:37:cd: 38:56:be:5b:9e:95:b1:77:3d:30:6a:7b:08:28:d0:3a:20:c6: 56:d6:27:5f:3d:5f:59:0f:b4:bb:ef:c2:bb:77:2c:84:ea:b4: 28:5a:0d:71:39:52:c3:6e:84:ea:37:08:29:87:a4:ea:f1:58: a6:1f:b5:1e:46:08:ce:83:bf:5e:a6:93:df:66:99:d9:86:87: ab:bd:46:0f:cc:78:74:e2:d5:c6:9c:c4:67:b0:c1:18:9c:38: ce:d9:91:a5:81:3d:eb:ed:e1:41:04:17:ee:dd:ea:f0:cf:a4: e0:86:44:7e:11:99:00:f7:1d:ae:b4:61:18:1e:54:68:e5:8f: 71:98:1e:96:e4:90:08:5c:d9:2f:42:c1:03:38:50:36:20:69: 89:08:c3:91:75:3a:c3:90:f7:25:bd:b4:3a:5c:e4:06:ea:4d: 1d:11:37:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFfn5fdn4+8vEGfed8FMxPgIyM2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA0MTYxMzQ1NDdaFw0yNTA0MTkxOTM4NDdaMDMxMTAvBgNV BAMTKDY5QzdCOUVGMUIzMjQwOTJGNzVDNzhEMTNFMDYzRjE4ODQ1NjY1MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaxOx72AMBz+OVLOw1LV5GaemW 5yQmzdOSnxtTATkLU9zCkAF3dBoJky7VzDCJ5Gl2FMYeSAWjNq/12ZWSbqN2WyJ0 aZJp+JVfpLiHq6wu1oTH0Gl5XO3AVc5XLMfqs2ty19fP3obXW9Kz5U9NT9YYV6QS Lojv03ffikI/VrDXnmmXSTTUKCgrAGahVviOa36aXfss0+poUWOuple9AxShUOCe 2pjHdy/kvX4VETv3G4pAQRUwdWcNGn9ZGuBwd3yS4N0+HDUSPPoIa1OBshIhNHlL s1MUntRBM5q4QUdUcbNuMZfyAGIb95qYpt0e8ZAu8nHXZHj7jCNcllyLr5cnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUace57xsyQJL3XHjRPgY/GIRWZQUwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjU+hRi1AtgMqj/YToHrIzFPB1QpefsGkHU MSrylF+ugB77FB/Y4SWtqDFKs8Q5LnusgSmH87RcjGrU4vthoydM/bs9YWSJOLd0 JlOCDZliA6Pjmf+kDB43zThWvluelbF3PTBqewgo0DogxlbWJ189X1kPtLvvwrt3 LITqtChaDXE5UsNuhOo3CCmHpOrxWKYftR5GCM6Dv16mk99mmdmGh6u9Rg/MeHTi 1cacxGewwRicOM7ZkaWBPevt4UEEF+7d6vDPpOCGRH4RmQD3Ha60YRgeVGjlj3GY HpbkkAhc2S9CwQM4UDYgaYkIw5F1OsOQ9yW9tDpc5AbqTR0RN4M= -----END CERTIFICATE-----Generated at Thu Apr 17 09:01:57 2025 by rpki-client