$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: 237Q6DpS2Tz/fH4CRVX4IQn9fwEzKln6P1FcWcuC/p4= Subject key identifier: 01:AE:E8:51:96:1E:35:ED:05:67:25:C8:39:52:5E:14:AA:5B:D1:12 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 41A4B703BCD70302CAD2530A8A7366A37E08F111 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01E0 Signing time: Mon 03 Nov 2025 16:40:52 +0000 Manifest this update: Mon 03 Nov 2025 16:35:52 +0000 Manifest next update: Fri 07 Nov 2025 00:10:52 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: K5JuhnUgcEIX+L6xW9lpNYysifiC51e+OW0ncDigIkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 00:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a4:b7:03:bc:d7:03:02:ca:d2:53:0a:8a:73:66:a3:7e:08:f1:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Nov 3 16:35:52 2025 GMT Not After : Nov 7 00:10:52 2025 GMT Subject: CN=01AEE851961E35ED056725C839525E14AA5BD112 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:57:5d:87:ba:15:b8:ce:2d:3a:9a:23:28:fd: aa:b0:34:9a:34:11:2c:8d:90:cd:1b:45:80:0f:ab: 7f:2c:66:53:cc:75:1f:f8:33:38:c2:7d:0b:d6:b1: b7:1b:c1:21:31:39:58:9b:85:ce:27:7a:db:3f:11: 64:65:00:a7:22:cf:b0:c9:98:ee:4b:62:ba:b8:45: b0:96:7a:4e:c5:e3:ff:05:b2:0a:da:52:aa:5c:00: 56:e4:25:96:33:d3:40:4c:7f:00:83:85:aa:4d:35: 69:45:df:8c:5a:42:2f:81:82:4e:b9:1d:57:d5:62: 48:3e:e4:8e:7c:b1:27:07:df:9f:58:2c:e0:80:66: 03:d1:55:34:8e:1f:2b:4a:f1:a1:80:16:db:91:48: d6:bc:6a:6a:62:ff:9f:08:a4:5f:79:da:05:03:cd: 42:04:81:0e:d4:fa:43:c5:27:0c:3f:2c:15:64:4d: f4:95:7a:62:7c:f1:8d:3a:5e:fa:48:87:13:62:f3: b0:cf:ac:41:86:17:fa:de:e6:1d:32:77:f6:00:ed: 10:e7:2d:3b:3a:9d:04:b5:2f:e7:bd:97:e8:ea:fb: 90:61:12:12:02:80:50:5d:ec:1b:dc:57:ee:28:34: fb:3c:8d:1b:22:ff:0d:b7:70:d9:3c:c0:9a:27:68: 63:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:AE:E8:51:96:1E:35:ED:05:67:25:C8:39:52:5E:14:AA:5B:D1:12 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:93:ab:07:88:75:63:04:c6:83:f2:95:8a:2f:7e:9f:c0:38: e6:a8:0d:5e:c6:ba:9c:c9:f8:ee:4c:8a:9f:85:f0:18:23:da: 95:fd:c2:4e:cb:08:5a:bf:f3:66:36:8a:c1:fb:7f:09:1e:fb: 6d:64:17:d4:4b:42:19:cf:d2:e3:e7:e9:b3:12:4f:c1:4f:33: c3:9d:17:85:83:d6:df:9f:04:d3:71:dd:00:09:38:88:90:ef: 75:fe:6b:e2:9f:3e:0c:23:28:d4:76:1b:1c:d6:f6:2b:db:87: df:bc:b4:40:f3:b5:bf:77:ea:9c:8a:2a:55:95:09:e7:1f:ab: e3:47:d7:1f:a4:d8:5f:f2:f8:7d:dd:5c:8d:d5:f0:c8:bc:68: 35:fe:30:9e:fc:6d:7c:b0:5a:a7:ed:75:7d:18:12:7e:69:27: 0e:10:14:30:c9:4c:71:a1:52:04:6c:9f:f1:b5:15:f0:f2:bc: 11:93:62:07:ce:8c:35:95:60:33:44:68:3e:37:c9:b5:cb:01: f0:9f:64:9a:18:21:ef:36:43:62:45:16:03:4a:c4:e4:50:65: 07:10:0b:bf:6d:99:14:83:6b:e2:f1:ca:19:43:47:92:d1:ff: 77:a5:41:80:c9:93:bb:7a:34:aa:20:d6:1e:9f:13:1a:6e:d1: 0b:7c:7f:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQaS3A7zXAwLK0lMKinNmo34I8REwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTExMDMxNjM1NTJaFw0yNTExMDcwMDEwNTJaMDMxMTAvBgNV BAMTKDAxQUVFODUxOTYxRTM1RUQwNTY3MjVDODM5NTI1RTE0QUE1QkQxMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyV12HuhW4zi06miMo/aqwNJo0 ESyNkM0bRYAPq38sZlPMdR/4MzjCfQvWsbcbwSExOVibhc4nets/EWRlAKciz7DJ mO5LYrq4RbCWek7F4/8FsgraUqpcAFbkJZYz00BMfwCDhapNNWlF34xaQi+Bgk65 HVfVYkg+5I58sScH359YLOCAZgPRVTSOHytK8aGAFtuRSNa8ampi/58IpF952gUD zUIEgQ7U+kPFJww/LBVkTfSVemJ88Y06XvpIhxNi87DPrEGGF/re5h0yd/YA7RDn LTs6nQS1L+e9l+jq+5BhEhICgFBd7BvcV+4oNPs8jRsi/w23cNk8wJonaGMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAa7oUZYeNe0FZyXIOVJeFKpb0RIwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJeTqweIdWMExoPylYovfp/AOOaoDV7GupzJ +O5Mip+F8Bgj2pX9wk7LCFq/82Y2isH7fwke+21kF9RLQhnP0uPn6bMST8FPM8Od F4WD1t+fBNNx3QAJOIiQ73X+a+KfPgwjKNR2GxzW9ivbh9+8tEDztb936pyKKlWV Cecfq+NH1x+k2F/y+H3dXI3V8Mi8aDX+MJ78bXywWqftdX0YEn5pJw4QFDDJTHGh UgRsn/G1FfDyvBGTYgfOjDWVYDNEaD43ybXLAfCfZJoYIe82Q2JFFgNKxORQZQcQ C79tmRSDa+LxyhlDR5LR/3elQYDJk7t6NKog1h6fExpu0Qt8fzc= -----END CERTIFICATE-----Generated at Wed Nov 5 08:53:34 2025 by rpki-client