$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: I3lyG7Rz5KmDDyRG05AlNkPWbZjByZMv0KslMeMnI0k= Subject key identifier: 27:63:2A:30:E0:EE:38:1D:81:04:AF:A7:6C:DF:68:2A:E6:63:E2:0E Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 0A7AB91EA2DDD015B16F24232575BBE5C62641B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01B0 Signing time: Mon 21 Jul 2025 01:30:51 +0000 Manifest this update: Mon 21 Jul 2025 01:25:51 +0000 Manifest next update: Thu 24 Jul 2025 04:28:51 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: MU6+DtY/fOV0McCa6LhBdQQ6Ni37u9I7w6maBZlqiHc=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:28:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:7a:b9:1e:a2:dd:d0:15:b1:6f:24:23:25:75:bb:e5:c6:26:41:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Jul 21 01:25:51 2025 GMT Not After : Jul 24 04:28:51 2025 GMT Subject: CN=27632A30E0EE381D8104AFA76CDF682AE663E20E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:de:1a:0f:d3:fa:e4:29:51:c8:a5:44:a0:e5: f8:ce:8d:d4:90:12:9f:d6:69:7c:ac:21:ad:4d:7c: 5c:1b:7a:bc:2a:bd:08:be:8c:c9:59:84:fc:7f:85: ee:36:be:9c:a5:4f:09:e3:60:34:84:1e:e8:70:62: e7:06:87:6b:76:aa:05:b5:38:9a:66:dc:cc:bd:19: bd:0b:0f:c3:e6:40:63:66:d0:5b:2f:6e:6e:2b:9c: 2b:b3:5a:c7:aa:48:16:58:36:a8:c2:bb:6a:c8:f1: 6f:09:38:5e:e1:44:c8:10:26:cd:19:f3:7f:54:10: bb:2d:11:d9:21:c7:c7:71:2e:c8:a9:75:b3:80:bf: 50:d0:ae:d0:17:21:ea:24:f8:cf:90:09:8b:3d:d7: ab:17:92:92:a5:db:69:73:13:85:34:db:4f:58:ff: 0c:11:68:f3:ce:63:0e:41:6f:ea:4e:a3:6f:f4:ad: 28:53:85:fe:f6:c6:06:5a:5f:5f:eb:18:4a:e2:0d: 7b:42:cd:37:aa:52:51:5b:35:15:10:78:f5:f9:37: e8:01:04:6a:97:da:e3:21:9d:7d:30:84:b2:74:d9: 97:e3:19:63:8c:15:2d:df:86:28:b3:46:b5:aa:22: a4:7a:47:41:bb:79:80:d3:4b:a4:5d:04:08:b7:2e: 3f:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:63:2A:30:E0:EE:38:1D:81:04:AF:A7:6C:DF:68:2A:E6:63:E2:0E X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:fd:cf:9c:ed:50:02:91:90:28:1c:e5:1e:e5:0d:41:7b:27: a9:fc:f9:dd:da:8c:ae:61:1c:75:29:bc:06:35:7f:29:79:5d: 0f:e0:b2:04:25:a4:3b:3e:e8:40:9e:ea:52:68:0d:25:6f:45: 3c:f2:70:dd:ed:cf:d3:59:cb:2c:1e:81:d2:4f:da:7a:cc:ef: 4a:08:b5:f9:8d:96:7d:83:b8:2c:5c:f7:df:ca:c7:b1:5a:57: b5:dd:f3:39:0a:a3:9a:ee:88:08:99:20:c4:e0:5f:5f:eb:7d: 34:56:fb:14:16:ef:9a:14:7e:28:39:e5:06:fd:d3:06:9d:ca: 55:99:ee:57:cd:dd:e6:ab:5c:75:53:ad:d5:d0:78:6c:d6:df: 44:76:4f:b6:1b:c5:da:3d:8c:d6:2c:ee:4d:da:97:11:c6:01: 13:49:e1:5e:a5:b4:b1:8b:b9:6c:ba:60:b2:05:44:d9:f7:4a: ac:62:6c:36:25:82:46:f1:5b:0b:5d:1d:78:a5:0e:2f:a1:69: c4:12:64:97:a5:0d:22:2f:59:53:5e:07:be:7f:73:8b:f7:41: 09:bf:af:55:df:eb:2d:33:f5:4f:42:cd:5d:77:6a:2b:5b:b0: 05:bb:45:e6:06:c5:fc:92:70:3b:02:f0:dd:6b:30:4c:c8:6f: bc:58:03:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCnq5HqLd0BWxbyQjJXW75cYmQbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA3MjEwMTI1NTFaFw0yNTA3MjQwNDI4NTFaMDMxMTAvBgNV BAMTKDI3NjMyQTMwRTBFRTM4MUQ4MTA0QUZBNzZDREY2ODJBRTY2M0UyMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC63hoP0/rkKVHIpUSg5fjOjdSQ Ep/WaXysIa1NfFwberwqvQi+jMlZhPx/he42vpylTwnjYDSEHuhwYucGh2t2qgW1 OJpm3My9Gb0LD8PmQGNm0Fsvbm4rnCuzWseqSBZYNqjCu2rI8W8JOF7hRMgQJs0Z 839UELstEdkhx8dxLsipdbOAv1DQrtAXIeok+M+QCYs916sXkpKl22lzE4U0209Y /wwRaPPOYw5Bb+pOo2/0rShThf72xgZaX1/rGEriDXtCzTeqUlFbNRUQePX5N+gB BGqX2uMhnX0whLJ02ZfjGWOMFS3fhiizRrWqIqR6R0G7eYDTS6RdBAi3Lj/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2MqMODuOB2BBK+nbN9oKuZj4g4wHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIX9z5ztUAKRkCgc5R7lDUF7J6n8+d3ajK5h HHUpvAY1fyl5XQ/gsgQlpDs+6ECe6lJoDSVvRTzycN3tz9NZyywegdJP2nrM70oI tfmNln2DuCxc99/Kx7FaV7Xd8zkKo5ruiAiZIMTgX1/rfTRW+xQW75oUfig55Qb9 0wadylWZ7lfN3earXHVTrdXQeGzW30R2T7Ybxdo9jNYs7k3alxHGARNJ4V6ltLGL uWy6YLIFRNn3SqxibDYlgkbxWwtdHXilDi+hacQSZJelDSIvWVNeB75/c4v3QQm/ r1Xf6y0z9U9CzV13aitbsAW7ReYGxfyScDsC8N1rMEzIb7xYA1U= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:57 2025 by rpki-client