$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: jw5ZYYDgDSnbWhz4b/bAE2wcWJcS+v57MLyo2C5yAk8= Subject key identifier: 8A:73:80:9B:C9:9D:2F:68:52:71:CA:2B:36:03:5F:8D:78:56:3B:A9 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 488A01F21C6AC7DF1573F70148BA3C404FD78217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 0215 Signing time: Sun 01 Mar 2026 01:21:00 +0000 Manifest this update: Sun 01 Mar 2026 01:16:00 +0000 Manifest next update: Wed 04 Mar 2026 03:23:00 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: tIiCxOAIqv+lOhruNncfkoaF6HLakzjb0Z1/cyTU4/s=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:8a:01:f2:1c:6a:c7:df:15:73:f7:01:48:ba:3c:40:4f:d7:82:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Mar 1 01:16:00 2026 GMT Not After : Mar 4 03:23:00 2026 GMT Subject: CN=8A73809BC99D2F685271CA2B36035F8D78563BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:83:11:18:41:a5:66:57:84:7c:7a:1a:fc:cd: ee:d4:2b:91:3b:a8:7b:ad:18:23:8f:41:5d:df:6d: 4b:19:80:bc:f7:e1:f8:c6:9b:04:91:16:39:6c:14: cb:0c:34:b7:26:c4:eb:f1:3d:69:cb:b2:cb:be:e1: b6:e2:fb:20:85:b3:9c:7c:00:93:5b:38:0c:4d:eb: ad:58:52:a3:e3:ea:20:b7:39:04:eb:2d:80:87:46: 79:d5:3c:a4:f8:bf:f9:ec:de:1f:f8:f8:58:0d:1c: 3a:e0:c2:d4:c2:bc:56:b8:b5:be:2a:05:94:5c:15: ab:88:d3:26:be:80:4e:db:93:3d:7c:75:ee:50:bb: 3c:a9:1b:8b:10:f4:3d:44:cf:10:71:6d:c6:06:b2: 6a:15:cf:95:a7:20:02:50:be:89:2e:e7:76:5c:38: f5:8c:35:37:14:61:98:53:f8:7d:04:c5:b2:cf:27: 6f:bc:56:5b:58:85:fe:a8:3a:ef:b6:77:ce:84:a7: a5:13:d5:b7:4e:6b:ae:5f:79:48:a7:59:50:e4:f6: b4:42:83:4f:79:b9:30:5a:e9:ab:51:4a:fb:bd:1d: 16:b8:1f:56:7f:a1:26:77:b8:21:be:87:58:8e:4f: 40:a5:6c:60:f7:ba:3a:33:29:33:9f:73:65:67:ef: e9:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:73:80:9B:C9:9D:2F:68:52:71:CA:2B:36:03:5F:8D:78:56:3B:A9 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:bd:af:42:74:d8:ac:18:83:8c:3a:71:05:32:04:60:43:b4: 2a:c8:22:77:83:43:34:14:b6:81:9f:7e:e0:c2:f6:62:06:58: 3e:71:94:c5:1a:73:83:f8:8f:50:bb:ae:f3:d5:40:c9:66:b2: dd:33:e1:b9:9a:ab:2d:5e:22:f6:47:af:98:22:eb:45:eb:3f: 80:ab:7e:67:70:7f:4a:2e:d3:5d:75:d2:f8:e1:f8:52:d8:7b: 2e:37:c7:26:a6:4e:79:92:3a:76:86:ce:8f:fd:3e:06:28:ee: 86:83:9e:80:3d:ac:ca:04:88:55:d2:d4:84:24:5e:00:67:fe: 1e:99:e9:3f:93:47:7f:6d:8c:e7:cd:b1:25:7f:a7:59:34:23: f5:9d:b4:a7:02:d5:aa:bc:6d:ac:c9:da:25:05:66:af:b0:39: a3:6f:3d:a8:34:40:46:08:65:fe:25:60:7a:ba:96:1e:41:12: 12:30:4c:6d:c3:59:3c:b7:64:63:2d:c9:fa:0e:c1:3d:5b:ce: 45:2b:f7:37:d1:a4:7e:32:79:32:70:d0:d9:fb:07:62:ba:55: 23:39:b1:c3:81:5d:30:b1:3b:c7:1e:7c:04:dc:c1:f7:b0:c1: 84:25:6e:ec:fc:61:43:bb:f0:aa:5c:a3:5c:45:a8:a1:a0:01: bf:16:fa:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSIoB8hxqx98Vc/cBSLo8QE/XghcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNjAzMDEwMTE2MDBaFw0yNjAzMDQwMzIzMDBaMDMxMTAvBgNV BAMTKDhBNzM4MDlCQzk5RDJGNjg1MjcxQ0EyQjM2MDM1RjhENzg1NjNCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgxEYQaVmV4R8ehr8ze7UK5E7 qHutGCOPQV3fbUsZgLz34fjGmwSRFjlsFMsMNLcmxOvxPWnLssu+4bbi+yCFs5x8 AJNbOAxN661YUqPj6iC3OQTrLYCHRnnVPKT4v/ns3h/4+FgNHDrgwtTCvFa4tb4q BZRcFauI0ya+gE7bkz18de5QuzypG4sQ9D1EzxBxbcYGsmoVz5WnIAJQvoku53Zc OPWMNTcUYZhT+H0ExbLPJ2+8VltYhf6oOu+2d86Ep6UT1bdOa65feUinWVDk9rRC g095uTBa6atRSvu9HRa4H1Z/oSZ3uCG+h1iOT0ClbGD3ujozKTOfc2Vn7+ljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUinOAm8mdL2hSccorNgNfjXhWO6kwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABO9r0J02KwYg4w6cQUyBGBDtCrIIneDQzQU toGffuDC9mIGWD5xlMUac4P4j1C7rvPVQMlmst0z4bmaqy1eIvZHr5gi60XrP4Cr fmdwf0ou01110vjh+FLYey43xyamTnmSOnaGzo/9PgYo7oaDnoA9rMoEiFXS1IQk XgBn/h6Z6T+TR39tjOfNsSV/p1k0I/WdtKcC1aq8bazJ2iUFZq+wOaNvPag0QEYI Zf4lYHq6lh5BEhIwTG3DWTy3ZGMtyfoOwT1bzkUr9zfRpH4yeTJw0Nn7B2K6VSM5 scOBXTCxO8cefATcwfewwYQlbuz8YUO78Kpco1xFqKGgAb8W+go= -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:18 2026 by rpki-client