$ rpki-client -vvf repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft File: E7953AD51AF5D89FB7129E253DEEFE8072247264.mft (raw, json) Hash identifier: gBkAYf/oDFJPBZN8qBxZ6Kxa+UM2beSylOXTaI9JX4I= Subject key identifier: 71:A3:EA:A0:52:0E:87:B8:7C:83:30:AA:AD:E5:CA:AA:38:FE:96:E0 Authority key identifier: E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 Certificate issuer: /CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Certificate serial: 40D84713F63AD230DA5AB85369542BE724F5F784 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject info access: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft Manifest number: 017E Signing time: Wed 04 Jun 2025 15:10:48 +0000 Manifest this update: Wed 04 Jun 2025 15:05:48 +0000 Manifest next update: Sat 07 Jun 2025 20:19:48 +0000 Files and hashes: 1: E7953AD51AF5D89FB7129E253DEEFE8072247264.crl (hash: I4zU0ls6/iX8PP4xLnuA9zPjPxheclUlhpJfGb4Vano=) 2: 3130332e36362e36322e302f32332d3233203d3e20313339393832.roa (hash: ger7ltUWbyKwit5+swZoRp1ZO4W5QfPhZgQRPBeXVYU=) 3: 3130332e36362e36332e302f32342d3234203d3e20313339393832.roa (hash: UUOYfIANelvEQMydr1JsVsIw/7HhzVESddIEljhzU2s=) 4: 3130332e36362e36322e302f32342d3234203d3e20313339393832.roa (hash: 7ZTClwFz0yYPDkfktwRLSUt65sufEyaWgca0v68B7Co=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 20:19:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:d8:47:13:f6:3a:d2:30:da:5a:b8:53:69:54:2b:e7:24:f5:f7:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7953AD51AF5D89FB7129E253DEEFE8072247264 Validity Not Before: Jun 4 15:05:48 2025 GMT Not After : Jun 7 20:19:48 2025 GMT Subject: CN=71A3EAA0520E87B87C8330AAADE5CAAA38FE96E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d1:7c:a9:86:20:f4:60:3a:25:ea:43:b3:7a: f5:26:e2:b7:13:bc:65:1d:bb:0c:ba:51:e1:cb:f4: 8f:5c:85:2f:fb:75:88:8f:44:9f:a9:9c:7e:28:83: 5f:cc:19:8b:87:78:9c:6d:90:32:ed:d4:75:df:39: 9f:ab:71:4f:f9:d3:37:63:c2:fe:2c:29:fb:10:0f: e8:04:5c:26:1c:a0:33:da:bb:2f:ec:7b:7f:cb:b4: a2:b2:78:bc:6a:55:84:d4:0e:22:51:45:65:42:f4: 42:b5:d4:bc:ca:c5:17:fc:4d:50:ed:9d:8c:28:2b: 9d:5f:9b:b1:01:e1:3c:95:a2:44:61:10:98:61:71: 80:4d:e1:22:9c:65:f1:49:21:fd:e0:dc:55:d8:49: d6:07:2c:65:eb:86:1e:e0:a4:03:41:de:84:fb:4e: 21:de:69:81:d6:22:30:0d:bb:50:23:57:e4:2a:af: c2:58:39:c6:e9:29:28:41:a9:5c:93:69:2c:82:21: f9:f1:95:10:92:e4:83:72:09:18:3c:8f:38:f2:6b: 7a:c2:ec:fe:59:77:06:7e:d0:e8:48:54:d1:89:e3: 30:cd:7d:7a:5e:3f:f7:6a:b5:dc:11:d8:3c:ee:e8: 2f:d2:be:b1:d0:1d:cc:d7:fc:84:80:8f:5d:2c:d7: 33:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:A3:EA:A0:52:0E:87:B8:7C:83:30:AA:AD:E5:CA:AA:38:FE:96:E0 X509v3 Authority Key Identifier: keyid:E7:95:3A:D5:1A:F5:D8:9F:B7:12:9E:25:3D:EE:FE:80:72:24:72:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7953AD51AF5D89FB7129E253DEEFE8072247264.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aba90944-656d-4aa7-9173-591280833f81/0/E7953AD51AF5D89FB7129E253DEEFE8072247264.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:8f:9b:99:c6:e3:b2:bf:b9:cc:74:73:4e:20:8c:49:9e:f3: 41:59:1c:b4:61:5e:14:60:92:77:ce:ef:d3:98:b3:c1:9f:86: 3e:f2:18:f8:0f:ba:44:37:f1:9c:4e:68:e8:11:9d:de:63:ea: 29:ac:50:48:40:4b:6c:0f:02:67:f7:77:af:f3:eb:f8:ce:ec: dd:ec:94:df:db:6d:b2:3c:14:fa:a1:c8:0d:9e:23:73:c4:cf: 5b:b2:8b:0c:83:e4:66:38:af:4d:d3:ef:f3:96:9c:3b:5a:5a: 19:08:da:7c:26:86:4a:87:1c:c9:ed:85:83:bb:4e:46:00:3b: 10:e9:b5:39:5c:0f:8c:2f:32:d0:6f:05:95:36:c5:97:89:a3: 47:0a:81:84:41:c2:1e:00:41:c1:a0:47:b9:57:23:c2:29:4f: 04:3b:8a:8e:92:5b:c4:be:c3:09:25:c8:90:cd:b1:ba:fd:b5: 67:92:16:d1:d0:f5:78:44:b9:c0:90:39:43:12:bf:41:6a:49: 85:2e:13:92:d5:43:ad:68:98:4c:09:1b:30:aa:2c:b4:99:bc: 43:fe:bd:81:97:b5:03:9d:75:34:a3:5f:76:9d:5b:12:d7:68: 08:cc:7b:c9:0a:93:0e:17:e4:5b:da:00:a2:75:db:7c:52:50: e3:1a:e2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQNhHE/Y60jDaWrhTaVQr5yT194QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3 MjI0NzI2NDAeFw0yNTA2MDQxNTA1NDhaFw0yNTA2MDcyMDE5NDhaMDMxMTAvBgNV BAMTKDcxQTNFQUEwNTIwRTg3Qjg3QzgzMzBBQUFERTVDQUFBMzhGRTk2RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0XyphiD0YDol6kOzevUm4rcT vGUduwy6UeHL9I9chS/7dYiPRJ+pnH4og1/MGYuHeJxtkDLt1HXfOZ+rcU/50zdj wv4sKfsQD+gEXCYcoDPauy/se3/LtKKyeLxqVYTUDiJRRWVC9EK11LzKxRf8TVDt nYwoK51fm7EB4TyVokRhEJhhcYBN4SKcZfFJIf3g3FXYSdYHLGXrhh7gpANB3oT7 TiHeaYHWIjANu1AjV+Qqr8JYOcbpKShBqVyTaSyCIfnxlRCS5INyCRg8jzjya3rC 7P5ZdwZ+0OhIVNGJ4zDNfXpeP/dqtdwR2Dzu6C/SvrHQHczX/ISAj10s1zPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcaPqoFIOh7h8gzCqreXKqjj+luAwHwYDVR0j BBgwFoAU55U61Rr12J+3Ep4lPe7+gHIkcmQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YmE5MDk0NC02NTZkLTRhYTctOTE3My01OTEyODA4MzNmODEvMC9FNzk1M0FENTFB RjVEODlGQjcxMjlFMjUzREVFRkU4MDcyMjQ3MjY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZFODA3MjI0 NzI2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWJhOTA5NDQtNjU2ZC00YWE3LTkx NzMtNTkxMjgwODMzZjgxLzAvRTc5NTNBRDUxQUY1RDg5RkI3MTI5RTI1M0RFRUZF ODA3MjI0NzI2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2Pm5nG47K/ucx0c04gjEme80FZHLRhXhRg knfO79OYs8Gfhj7yGPgPukQ38ZxOaOgRnd5j6imsUEhAS2wPAmf3d6/z6/jO7N3s lN/bbbI8FPqhyA2eI3PEz1uyiwyD5GY4r03T7/OWnDtaWhkI2nwmhkqHHMnthYO7 TkYAOxDptTlcD4wvMtBvBZU2xZeJo0cKgYRBwh4AQcGgR7lXI8IpTwQ7io6SW8S+ wwklyJDNsbr9tWeSFtHQ9XhEucCQOUMSv0FqSYUuE5LVQ61omEwJGzCqLLSZvEP+ vYGXtQOddTSjX3adWxLXaAjMe8kKkw4X5FvaAKJ123xSUOMa4vA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:26:32 2025 by rpki-client