$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: RCuQ5Gd/+OqK5VfAHh+MXf4SvH9qUaN27CyRxRCinTs= Subject key identifier: 85:6F:8F:1F:C8:1F:1B:B8:9A:2A:2F:D0:E0:9E:BC:C3:00:43:C3:5A Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 071BD56C30492115453E1F76DDFA5BCBDEAED55A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01B9 Signing time: Sun 10 Aug 2025 00:50:52 +0000 Manifest this update: Sun 10 Aug 2025 00:45:52 +0000 Manifest next update: Wed 13 Aug 2025 03:12:52 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: HSOOMwykdSsopD7Le65+fJS4qEuKEBul6XohdtVpzw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 03:12:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:1b:d5:6c:30:49:21:15:45:3e:1f:76:dd:fa:5b:cb:de:ae:d5:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Aug 10 00:45:52 2025 GMT Not After : Aug 13 03:12:52 2025 GMT Subject: CN=856F8F1FC81F1BB89A2A2FD0E09EBCC30043C35A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:56:fa:53:b1:fa:16:7f:77:d7:29:c3:44:d4: 0d:49:9d:3d:e3:7e:4f:08:3d:dd:14:35:8a:f9:70: 02:5b:67:b2:b5:72:ec:b3:84:16:f8:9f:f8:df:9f: 3a:57:3f:34:9b:df:fa:92:b0:f1:ac:5e:5b:c3:63: bf:6e:b4:3e:04:64:c5:fc:b8:8b:cd:02:2c:c6:30: 95:58:9b:62:c3:86:5a:b5:48:e2:c0:04:c9:95:83: 3d:95:97:3c:96:3e:a2:0b:1c:e4:91:7c:f2:a2:07: 16:98:6f:8e:84:75:7a:b8:20:8e:f8:3a:7e:a7:b9: c8:3a:ab:b1:ca:0d:f3:ae:e0:ed:da:13:f2:96:b0: 9e:8d:cb:7d:77:81:34:52:ac:64:5f:ab:6c:96:8e: fc:67:0f:92:83:67:6f:a1:e4:d4:2c:aa:ce:c0:d3: b3:41:5a:5b:1e:ca:36:12:36:ec:8a:67:99:44:93: 67:8a:50:1c:70:03:37:53:10:c2:1b:85:2b:b0:91: 4e:8d:58:5d:31:1c:35:e8:2a:b5:87:e9:2d:7b:e3: 00:9c:90:71:01:bc:13:5b:6f:79:50:da:b8:9b:d3: bc:55:f0:9e:14:57:9d:ba:a7:99:7a:ab:db:ad:21: 01:f6:36:1d:d6:a0:1f:38:8d:e3:10:7d:a2:ea:d8: 78:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:8F:1F:C8:1F:1B:B8:9A:2A:2F:D0:E0:9E:BC:C3:00:43:C3:5A X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:cc:70:32:a4:5f:bf:1b:e4:f6:23:ef:c3:43:54:90:84:ed: 6e:7d:52:e4:69:6e:0f:b8:fb:83:4b:0e:69:e2:8d:da:72:05: 55:86:5d:f6:d2:ee:03:b8:cc:11:58:49:6e:2e:40:ad:7f:d4: 3e:ed:57:de:de:84:a2:d0:c2:7c:3a:12:51:08:d9:82:36:71: 2d:77:c6:c1:8c:4a:3a:19:f6:6a:09:b3:c9:7f:cf:19:57:11: f1:bb:24:31:19:bc:85:66:14:cc:07:79:f9:f9:ff:97:b7:47: 3f:70:bc:d4:eb:18:b9:e3:4e:ea:bd:38:a2:a8:b0:6c:92:f6: 7e:af:1c:a5:b2:e5:b2:6a:ed:f0:9a:4d:f0:7d:98:b6:cd:17: 61:eb:1d:ec:9d:db:6b:f4:2d:dc:21:78:71:7b:bd:a0:5e:da: 78:0a:1e:b0:fd:75:b3:0d:2d:66:26:9b:b8:c1:82:d6:5a:35: bf:fa:31:c2:f7:4a:76:44:ec:d0:bd:0f:e2:c6:60:54:6a:79: 89:fb:48:68:cc:13:2e:11:d8:35:bd:f2:8e:d3:40:6a:e1:2a: 9e:23:be:69:54:5c:d7:9d:e0:38:e6:48:b5:5e:5e:34:1d:2d: 11:48:2a:ca:ed:07:8b:4b:0d:e6:33:93:c9:16:a8:27:71:42: fb:b9:c7:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBxvVbDBJIRVFPh923fpby96u1VowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA4MTAwMDQ1NTJaFw0yNTA4MTMwMzEyNTJaMDMxMTAvBgNV BAMTKDg1NkY4RjFGQzgxRjFCQjg5QTJBMkZEMEUwOUVCQ0MzMDA0M0MzNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VvpTsfoWf3fXKcNE1A1JnT3j fk8IPd0UNYr5cAJbZ7K1cuyzhBb4n/jfnzpXPzSb3/qSsPGsXlvDY79utD4EZMX8 uIvNAizGMJVYm2LDhlq1SOLABMmVgz2VlzyWPqILHOSRfPKiBxaYb46EdXq4II74 On6nucg6q7HKDfOu4O3aE/KWsJ6Ny313gTRSrGRfq2yWjvxnD5KDZ2+h5NQsqs7A 07NBWlseyjYSNuyKZ5lEk2eKUBxwAzdTEMIbhSuwkU6NWF0xHDXoKrWH6S174wCc kHEBvBNbb3lQ2rib07xV8J4UV526p5l6q9utIQH2Nh3WoB84jeMQfaLq2HgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhW+PH8gfG7iaKi/Q4J68wwBDw1owHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKnMcDKkX78b5PYj78NDVJCE7W59UuRpbg+4 +4NLDmnijdpyBVWGXfbS7gO4zBFYSW4uQK1/1D7tV97ehKLQwnw6ElEI2YI2cS13 xsGMSjoZ9moJs8l/zxlXEfG7JDEZvIVmFMwHefn5/5e3Rz9wvNTrGLnjTuq9OKKo sGyS9n6vHKWy5bJq7fCaTfB9mLbNF2HrHeyd22v0LdwheHF7vaBe2ngKHrD9dbMN LWYmm7jBgtZaNb/6McL3SnZE7NC9D+LGYFRqeYn7SGjMEy4R2DW98o7TQGrhKp4j vmlUXNed4DjmSLVeXjQdLRFIKsrtB4tLDeYzk8kWqCdxQvu5x1Y= -----END CERTIFICATE-----Generated at Sun Aug 10 10:41:57 2025 by rpki-client