$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: o3O1j6vD9JPO4GHq8DGttA3ggA86N1q7yhcKX75ax/4= Subject key identifier: B4:C6:26:D7:BB:5B:AA:7C:D4:CB:09:00:AF:5A:14:F0:49:CC:CA:21 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 749D48B26133B5EC0BC690C68F2243BEAB91190C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 018B Signing time: Tue 29 Apr 2025 04:30:51 +0000 Manifest this update: Tue 29 Apr 2025 04:25:51 +0000 Manifest next update: Fri 02 May 2025 09:52:51 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: 4oNlKxKu8Hfz9rOf2jH0oejgJOZ0XodDyglRNIp3leM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 09:52:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:9d:48:b2:61:33:b5:ec:0b:c6:90:c6:8f:22:43:be:ab:91:19:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Apr 29 04:25:51 2025 GMT Not After : May 2 09:52:51 2025 GMT Subject: CN=B4C626D7BB5BAA7CD4CB0900AF5A14F049CCCA21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:e8:cf:87:d5:41:2d:c8:e0:ca:3a:4e:6c:cd: 63:c0:1d:48:b2:12:12:40:1b:02:8c:18:d6:e4:24: 64:4b:98:1e:af:73:d2:c5:62:18:14:2c:6c:8d:51: f4:73:eb:0c:b6:5f:5a:43:34:b5:5c:6a:73:3a:13: 77:47:a2:bd:6a:3d:ce:eb:94:e6:f8:67:db:2c:11: 16:67:9a:02:da:ff:5c:14:80:21:36:c7:10:6a:81: a0:1c:35:35:b5:98:6e:3e:e2:89:4c:ce:3b:07:d2: e3:10:96:3e:6d:9c:ba:c4:9b:06:36:55:f8:2b:22: b0:82:09:c9:b8:02:84:20:87:e2:e3:43:26:d5:03: 7e:4a:69:ab:97:48:93:82:38:e7:78:b9:ad:6e:64: 09:eb:ca:ad:09:39:82:c5:30:60:2b:ed:fc:97:bd: 6d:73:87:d1:9b:e3:c3:20:7f:89:ee:a9:ff:36:20: f3:e8:f3:15:25:e7:82:de:20:fa:d2:14:f2:59:b4: 3f:00:54:94:fc:03:d4:72:33:73:c7:c8:c2:1f:4c: 0e:71:08:82:27:3c:b9:4a:57:49:e0:7f:3b:54:7c: 16:77:67:e6:6d:b6:bc:bd:5e:01:ed:19:a7:b6:85: a1:78:5e:a5:41:e6:18:0c:f8:71:5a:2c:d2:a8:fb: 4e:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:C6:26:D7:BB:5B:AA:7C:D4:CB:09:00:AF:5A:14:F0:49:CC:CA:21 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:dd:f5:f9:77:f2:fd:d4:3f:72:e3:90:d7:15:19:da:34:1b: 93:46:97:16:b5:0f:4a:a4:b3:a2:f8:d1:e1:2a:ac:f7:83:a3: 25:fd:ba:85:0e:c7:bf:17:3c:af:21:98:4b:3a:7f:8e:02:b8: 7d:5d:ba:7c:d2:f9:61:e8:ff:a4:7d:ca:10:94:88:90:21:79: d0:8c:47:00:6e:a5:db:e5:0c:c0:9b:aa:1c:3a:2e:54:a1:14: 04:ae:c9:52:23:84:d3:a0:78:02:27:19:af:8d:fb:d4:38:ef: 3d:bf:e9:1d:8a:a0:fc:f0:d6:85:a8:c8:94:f6:43:3e:db:1f: b3:0e:e7:f0:cd:4e:9f:5d:0e:fc:50:a9:98:60:5e:47:ed:3f: ba:03:40:9f:d2:e3:b1:de:cb:72:94:6e:f2:af:ef:82:da:bf: c0:d4:55:d9:b1:4c:54:a2:df:33:2c:6e:b3:cd:0c:46:87:e8: 1f:ac:a2:84:c5:da:d6:61:9b:42:ad:2c:d3:db:c0:4e:b7:c8: 97:51:7d:71:e3:ba:59:7a:a7:a7:8a:29:6e:bc:20:4f:66:bf: 88:07:7c:29:d5:0b:87:58:c4:de:7d:89:b4:35:3f:23:44:87: d9:9e:3c:27:00:1b:e5:46:dd:70:cc:bd:5d:b1:e6:15:50:43: aa:ad:19:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJ1IsmEztewLxpDGjyJDvquRGQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA0MjkwNDI1NTFaFw0yNTA1MDIwOTUyNTFaMDMxMTAvBgNV BAMTKEI0QzYyNkQ3QkI1QkFBN0NENENCMDkwMEFGNUExNEYwNDlDQ0NBMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6M+H1UEtyODKOk5szWPAHUiy EhJAGwKMGNbkJGRLmB6vc9LFYhgULGyNUfRz6wy2X1pDNLVcanM6E3dHor1qPc7r lOb4Z9ssERZnmgLa/1wUgCE2xxBqgaAcNTW1mG4+4olMzjsH0uMQlj5tnLrEmwY2 VfgrIrCCCcm4AoQgh+LjQybVA35KaauXSJOCOOd4ua1uZAnryq0JOYLFMGAr7fyX vW1zh9Gb48Mgf4nuqf82IPPo8xUl54LeIPrSFPJZtD8AVJT8A9RyM3PHyMIfTA5x CIInPLlKV0ngfztUfBZ3Z+Zttry9XgHtGae2haF4XqVB5hgM+HFaLNKo+069AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtMYm17tbqnzUywkAr1oU8EnMyiEwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXd9fl38v3UP3LjkNcVGdo0G5NGlxa1D0qk s6L40eEqrPeDoyX9uoUOx78XPK8hmEs6f44CuH1dunzS+WHo/6R9yhCUiJAhedCM RwBupdvlDMCbqhw6LlShFASuyVIjhNOgeAInGa+N+9Q47z2/6R2KoPzw1oWoyJT2 Qz7bH7MO5/DNTp9dDvxQqZhgXkftP7oDQJ/S47Hey3KUbvKv74Lav8DUVdmxTFSi 3zMsbrPNDEaH6B+sooTF2tZhm0KtLNPbwE63yJdRfXHjull6p6eKKW68IE9mv4gH fCnVC4dYxN59ibQ1PyNEh9mePCcAG+VG3XDMvV2x5hVQQ6qtGVQ= -----END CERTIFICATE-----Generated at Tue Apr 29 20:28:44 2025 by rpki-client