$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: +lfqRsq8uErbC2wsX/0hG31SFS6WuNo5xMd/4lazYF8= Subject key identifier: 3D:E6:D3:63:38:CB:34:0D:0F:1E:01:BE:7C:C5:16:FA:CE:E7:BE:F4 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 5D85BC612B30B6B271F64BF0C26E884B7CB149D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 022A Signing time: Fri 17 Apr 2026 07:11:01 +0000 Manifest this update: Fri 17 Apr 2026 07:06:01 +0000 Manifest next update: Mon 20 Apr 2026 14:20:01 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: 8GEzza7UBZ5YwjeN+Zdv+VmmQmGufbFn61Qmcg+Jk2I=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:20:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:85:bc:61:2b:30:b6:b2:71:f6:4b:f0:c2:6e:88:4b:7c:b1:49:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Apr 17 07:06:01 2026 GMT Not After : Apr 20 14:20:01 2026 GMT Subject: CN=3DE6D36338CB340D0F1E01BE7CC516FACEE7BEF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:89:c0:4f:e1:1a:df:62:9f:a8:74:b0:c9:54: d5:ce:ff:15:f3:c4:8f:b9:68:74:83:54:d8:13:33: 9e:24:b7:c2:6e:7f:0b:c0:ed:c3:8f:89:fa:fc:dc: e3:fc:a0:76:6f:c1:7d:06:57:21:59:c1:0a:49:a3: d7:df:14:f5:be:17:de:1f:98:ef:39:7e:c9:11:b6: 97:0c:ca:b6:73:c1:97:fe:64:e6:05:cd:97:23:83: cd:08:db:f1:df:e6:8f:9d:77:78:08:2e:ac:0f:ec: c9:c8:db:cc:bd:9f:c5:2a:f7:bc:1b:76:eb:35:a9: e7:2e:04:34:70:80:67:80:dc:f3:af:57:a2:6d:9b: b7:ec:59:28:36:49:71:82:26:c8:a9:e6:c3:fd:01: 8b:8c:e7:6e:86:cc:7d:f8:85:2d:02:56:83:a4:32: 31:f1:f8:4f:fe:f9:70:88:9a:5c:aa:de:c6:1b:fe: 6f:b0:78:04:f6:ba:1c:87:43:49:9f:3e:60:1a:a1: fa:03:58:4a:64:6f:de:ed:01:2f:d1:e4:c3:67:96: 3f:51:a0:e2:26:53:76:d9:16:0c:a1:44:29:be:05: 9f:e1:e3:ec:ad:94:e6:d4:ea:8b:00:ae:21:0a:a2: c3:38:79:65:3d:59:4b:be:93:99:94:57:2f:8d:59: f9:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E6:D3:63:38:CB:34:0D:0F:1E:01:BE:7C:C5:16:FA:CE:E7:BE:F4 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:af:2c:1e:58:15:7a:30:c0:77:18:90:1d:08:0b:0e:d2:31: 60:54:21:af:cc:ca:dc:d5:80:96:f3:05:2e:db:78:68:b2:a3: fb:d7:96:b6:72:7d:db:81:c8:f8:81:39:6f:48:57:47:08:72: f9:c5:d3:c2:38:c7:97:51:dc:ba:9d:0d:b8:19:9c:50:72:fd: 4b:09:d4:16:ee:d5:34:aa:7b:95:e2:b0:06:42:ec:68:e2:4f: 56:f8:87:3e:8f:6b:27:47:be:e1:e1:88:a1:51:45:a7:21:9f: 48:de:fa:ee:99:a8:fc:92:9a:9d:62:3e:a1:a6:79:25:10:b4: e3:a0:69:2c:98:3f:57:fd:8e:fe:65:53:d9:e2:de:1b:fa:fa: 35:91:d9:ee:4d:bd:58:20:3f:88:b6:88:04:96:95:05:c6:75: 76:6b:d3:72:e8:4c:20:c2:78:7a:5f:72:62:18:18:0a:d7:03: 19:26:e6:a0:36:ae:3f:1e:f0:c8:ee:38:77:62:41:c8:51:5e: 25:ba:15:ff:74:45:72:b6:72:2f:80:65:da:c5:6d:92:de:9b: cd:41:52:6f:61:a5:6c:50:a4:2d:42:2e:d4:69:f6:dd:39:fa: 6e:54:d4:9b:8c:34:a3:7e:ba:d2:f3:a0:2a:d8:d7:48:40:fd: 57:00:9e:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYW8YSswtrJx9kvwwm6IS3yxSdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNjA0MTcwNzA2MDFaFw0yNjA0MjAxNDIwMDFaMDMxMTAvBgNV BAMTKDNERTZEMzYzMzhDQjM0MEQwRjFFMDFCRTdDQzUxNkZBQ0VFN0JFRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcicBP4RrfYp+odLDJVNXO/xXz xI+5aHSDVNgTM54kt8JufwvA7cOPifr83OP8oHZvwX0GVyFZwQpJo9ffFPW+F94f mO85fskRtpcMyrZzwZf+ZOYFzZcjg80I2/Hf5o+dd3gILqwP7MnI28y9n8Uq97wb dus1qecuBDRwgGeA3POvV6Jtm7fsWSg2SXGCJsip5sP9AYuM526GzH34hS0CVoOk MjHx+E/++XCImlyq3sYb/m+weAT2uhyHQ0mfPmAaofoDWEpkb97tAS/R5MNnlj9R oOImU3bZFgyhRCm+BZ/h4+ytlObU6osAriEKosM4eWU9WUu+k5mUVy+NWflnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPebTYzjLNA0PHgG+fMUW+s7nvvQwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmvLB5YFXowwHcYkB0ICw7SMWBUIa/MytzV gJbzBS7beGiyo/vXlrZyfduByPiBOW9IV0cIcvnF08I4x5dR3LqdDbgZnFBy/UsJ 1Bbu1TSqe5XisAZC7GjiT1b4hz6PaydHvuHhiKFRRachn0je+u6ZqPySmp1iPqGm eSUQtOOgaSyYP1f9jv5lU9ni3hv6+jWR2e5NvVggP4i2iASWlQXGdXZr03LoTCDC eHpfcmIYGArXAxkm5qA2rj8e8MjuOHdiQchRXiW6Ff90RXK2ci+AZdrFbZLem81B Um9hpWxQpC1CLtRp9t05+m5U1JuMNKN+utLzoCrY10hA/VcAnnA= -----END CERTIFICATE-----Generated at Fri Apr 17 19:30:42 2026 by rpki-client