$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: Q7PpcOUetVL7+7xH5Znu9fvkCeiYcIkzLlHdFkIS9oU= Subject key identifier: F8:5D:31:0E:56:DA:29:F8:20:DB:41:97:79:2A:86:9C:D3:1C:8E:9C Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 1900EB8C0703C98D9588C364CA8D018F799892B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 01C5 Signing time: Thu 04 Sep 2025 08:50:51 +0000 Manifest this update: Thu 04 Sep 2025 08:45:51 +0000 Manifest next update: Sun 07 Sep 2025 12:01:51 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: xFrydW5OQNm3prF4GmzJMOK/sCmMhWIY/EgbMnXuY44=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: sKfx76+Sncyrs9mYumqkFI6ie1K7xxqfJijMwgYJ3J8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 12:01:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:00:eb:8c:07:03:c9:8d:95:88:c3:64:ca:8d:01:8f:79:98:92:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Sep 4 08:45:51 2025 GMT Not After : Sep 7 12:01:51 2025 GMT Subject: CN=F85D310E56DA29F820DB4197792A869CD31C8E9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:43:58:d5:c5:c6:3c:b7:33:a5:71:3c:2a: cd:34:08:74:2b:4b:3e:48:61:c1:02:b1:f2:fa:b8: 30:43:90:ac:a5:51:90:5b:17:d8:37:b0:31:c0:d4: 59:73:c8:b3:e2:5a:13:83:19:46:db:7c:ae:65:1d: 3b:da:57:fb:66:1d:60:ee:9b:76:9d:3a:50:9a:89: 96:35:fa:c1:94:9b:2d:01:ac:12:f3:93:83:e5:10: c9:12:aa:e1:33:96:38:be:f8:94:eb:44:21:9d:06: 27:d6:50:9e:4e:e5:1c:b8:d4:2d:c9:ac:fe:5e:33: 6b:91:bb:89:79:11:1b:46:1b:63:d3:7a:a7:c4:0a: f7:cc:d7:e7:6f:e9:29:d5:55:54:50:6a:79:6f:3c: f8:03:a7:c4:33:f0:c1:dc:e5:b0:d8:5c:e4:6f:3d: ea:f9:f1:4f:0f:84:db:68:f8:74:d5:4f:ce:fe:3c: 61:13:5b:e6:6e:3b:6a:36:ae:2a:a8:63:37:00:cc: 3a:5c:06:f5:1d:fa:e7:ae:6d:60:39:c7:af:6a:35: 10:f4:aa:a0:c0:9d:45:df:b4:32:ad:d9:fe:fa:58: f3:ec:d4:ee:1a:3a:e1:75:4d:c3:cd:be:d4:c8:66: e2:4c:c7:3f:0e:69:33:a1:bf:8f:ce:84:76:4c:f9: dc:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:5D:31:0E:56:DA:29:F8:20:DB:41:97:79:2A:86:9C:D3:1C:8E:9C X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:af:3c:7c:81:47:c9:2c:f8:ab:c2:4d:f0:a6:6e:5c:d8:63: fb:c5:0b:32:3f:6e:aa:9c:ac:75:a7:7e:29:47:bc:83:e9:b1: 8d:19:c7:05:e8:c6:d6:6c:ca:38:7e:a4:51:0c:2c:b6:52:ae: 2f:50:c2:f8:87:00:98:be:8c:e9:73:57:e2:32:72:11:f1:f8: 14:ca:1d:61:e0:67:ac:fe:e8:9c:aa:d5:68:2a:fa:ca:d5:f5: 96:0f:6e:30:ae:49:77:cb:20:a2:df:13:7f:aa:f1:05:ea:4d: df:e5:30:25:3d:d9:8e:65:78:0b:a5:5d:1c:43:28:ad:e7:02: 8d:c2:df:89:50:2d:a2:89:e6:4f:cc:87:bf:16:a4:f8:46:b5: be:b9:65:a7:bd:f7:a7:05:fc:3a:4a:d0:23:93:ab:fe:58:e0: 1c:de:b3:86:01:70:1b:22:e6:0e:b4:7f:ac:6f:91:b7:fa:ac: 17:3a:4c:49:cc:46:29:b4:38:f5:b7:d0:93:1b:fb:c0:39:f3: 2d:01:d8:6a:af:13:4f:62:91:4e:0e:66:4a:96:9b:62:33:5e: 33:13:ba:84:52:1c:41:d4:31:30:4f:a9:e1:87:84:e1:74:08: 22:12:98:d5:fa:06:bc:89:54:fd:77:72:5e:d4:88:5b:f0:0e: 89:1a:db:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGQDrjAcDyY2ViMNkyo0Bj3mYkrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA5MDQwODQ1NTFaFw0yNTA5MDcxMjAxNTFaMDMxMTAvBgNV BAMTKEY4NUQzMTBFNTZEQTI5RjgyMERCNDE5Nzc5MkE4NjlDRDMxQzhFOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1ENY1cXGPLczpXE8Ks00CHQr Sz5IYcECsfL6uDBDkKylUZBbF9g3sDHA1FlzyLPiWhODGUbbfK5lHTvaV/tmHWDu m3adOlCaiZY1+sGUmy0BrBLzk4PlEMkSquEzlji++JTrRCGdBifWUJ5O5Ry41C3J rP5eM2uRu4l5ERtGG2PTeqfECvfM1+dv6SnVVVRQanlvPPgDp8Qz8MHc5bDYXORv Per58U8PhNto+HTVT87+PGETW+ZuO2o2riqoYzcAzDpcBvUd+ueubWA5x69qNRD0 qqDAnUXftDKt2f76WPPs1O4aOuF1TcPNvtTIZuJMxz8OaTOhv4/OhHZM+dwtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+F0xDlbaKfgg20GXeSqGnNMcjpwwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACqvPHyBR8ks+KvCTfCmblzYY/vFCzI/bqqc rHWnfilHvIPpsY0ZxwXoxtZsyjh+pFEMLLZSri9QwviHAJi+jOlzV+IychHx+BTK HWHgZ6z+6Jyq1Wgq+srV9ZYPbjCuSXfLIKLfE3+q8QXqTd/lMCU92Y5leAulXRxD KK3nAo3C34lQLaKJ5k/Mh78WpPhGtb65Zae996cF/DpK0COTq/5Y4Bzes4YBcBsi 5g60f6xvkbf6rBc6TEnMRim0OPW30JMb+8A58y0B2GqvE09ikU4OZkqWm2IzXjMT uoRSHEHUMTBPqeGHhOF0CCISmNX6BryJVP13cl7UiFvwDoka21o= -----END CERTIFICATE-----Generated at Fri Sep 5 10:29:32 2025 by rpki-client