$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: NFeNeWNXiHCeaDiHS651yrqaiNgRDj44cpXrdaa+SxI= Subject key identifier: 99:22:59:88:5F:2B:7F:33:CE:37:8B:47:E6:58:05:6F:83:3E:9C:4E Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 5945824D298B3F47E8497E57CB0FF6BAB02989BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 019B Signing time: Tue 03 Jun 2025 23:30:53 +0000 Manifest this update: Tue 03 Jun 2025 23:25:53 +0000 Manifest next update: Sat 07 Jun 2025 07:01:53 +0000 Files and hashes: 1: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) 2: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: qnqHa/bpGDP8l0Xi6AwGp88xBYiiTJ1w8Pe4VXCD/Kg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 07:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:45:82:4d:29:8b:3f:47:e8:49:7e:57:cb:0f:f6:ba:b0:29:89:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Jun 3 23:25:53 2025 GMT Not After : Jun 7 07:01:53 2025 GMT Subject: CN=992259885F2B7F33CE378B47E658056F833E9C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:da:52:01:18:34:07:d3:76:23:32:f7:60:cc: ab:ef:35:09:0f:3c:b7:99:4a:7d:09:b5:35:0a:4d: 01:b9:00:0d:da:aa:71:74:38:2c:68:51:27:da:35: e0:0a:a9:b6:9a:25:e4:88:b9:de:94:1c:b7:49:13: 01:a1:e2:dc:7a:6c:fd:44:9c:61:1a:9c:76:ee:88: bc:8b:60:97:80:6b:21:ee:8f:4f:8b:f1:18:3f:fa: 6a:5f:c4:88:1c:53:97:22:16:98:ce:64:43:a2:96: 9e:af:35:9c:a4:0e:82:cb:cd:c7:09:b3:69:f4:a6: b3:4e:dc:b9:5b:c4:93:48:06:0a:cb:0d:78:09:ff: b0:3d:cf:76:7b:0f:92:00:8e:99:05:36:1c:e2:4a: 82:91:cb:1a:c4:bb:69:6b:32:8c:56:9c:44:5f:f9: 99:3c:f6:24:34:3f:48:86:2d:ca:f3:e9:d3:80:e3: 5b:d1:a8:83:8a:18:58:06:d8:a1:e1:47:2f:de:55: ee:80:e0:db:58:93:c8:48:e0:ae:83:a1:c7:b2:3a: 87:ea:ae:c2:21:55:b4:8d:ab:9a:1c:f2:eb:86:07: 92:0b:63:1b:14:7d:d2:87:b5:7d:6c:f7:25:b1:6d: d7:d9:fa:af:03:49:7f:d7:25:bf:67:c5:87:00:a6: a6:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:22:59:88:5F:2B:7F:33:CE:37:8B:47:E6:58:05:6F:83:3E:9C:4E X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:b8:3e:3a:05:38:57:d4:f0:dd:2b:8d:46:3d:89:e2:bc:3d: 74:5e:ba:20:ac:98:1c:bf:a1:8b:94:05:69:8b:56:38:43:8d: 63:07:f6:cd:70:b9:17:c9:bd:56:0f:f3:32:d2:34:e6:e4:23: a9:3b:50:32:5e:28:37:89:ba:e8:64:61:30:b4:0a:e1:ac:99: 06:28:cc:3c:ce:55:93:d6:ec:a4:62:a2:7c:c4:08:90:06:1a: 19:90:ce:af:64:03:b0:51:32:d7:37:5b:7a:6b:8a:d4:da:73: 97:47:02:d9:38:39:09:47:8f:84:cd:94:d8:da:38:4e:9c:c6: 3b:a5:c3:82:55:83:91:b8:5d:f6:36:2e:8f:34:1b:67:3a:49: 33:94:e0:d7:97:00:61:f8:5e:cf:64:ed:5f:62:63:27:f7:a3: 06:a0:66:4c:9b:29:09:61:bc:6d:b6:bf:42:6c:7a:34:fa:90: 2c:fc:87:54:ad:06:cc:ca:aa:b5:9c:fe:16:6e:64:86:2d:fc: 00:de:d7:97:64:93:87:92:77:61:52:af:a3:58:58:b6:78:bd: 15:cc:b9:28:8d:3c:7c:a8:6d:a0:5b:67:ec:d6:7f:8d:06:52: a8:35:36:b0:af:22:0f:04:4b:25:f9:69:dd:e8:23:ad:c1:4e: 3b:7e:d8:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUWCTSmLP0foSX5Xyw/2urApib8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA2MDMyMzI1NTNaFw0yNTA2MDcwNzAxNTNaMDMxMTAvBgNV BAMTKDk5MjI1OTg4NUYyQjdGMzNDRTM3OEI0N0U2NTgwNTZGODMzRTlDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV2lIBGDQH03YjMvdgzKvvNQkP PLeZSn0JtTUKTQG5AA3aqnF0OCxoUSfaNeAKqbaaJeSIud6UHLdJEwGh4tx6bP1E nGEanHbuiLyLYJeAayHuj0+L8Rg/+mpfxIgcU5ciFpjOZEOilp6vNZykDoLLzccJ s2n0prNO3LlbxJNIBgrLDXgJ/7A9z3Z7D5IAjpkFNhziSoKRyxrEu2lrMoxWnERf +Zk89iQ0P0iGLcrz6dOA41vRqIOKGFgG2KHhRy/eVe6A4NtYk8hI4K6DoceyOofq rsIhVbSNq5oc8uuGB5ILYxsUfdKHtX1s9yWxbdfZ+q8DSX/XJb9nxYcApqaJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmSJZiF8rfzPON4tH5lgFb4M+nE4wHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB+4PjoFOFfU8N0rjUY9ieK8PXReuiCsmBy/ oYuUBWmLVjhDjWMH9s1wuRfJvVYP8zLSNObkI6k7UDJeKDeJuuhkYTC0CuGsmQYo zDzOVZPW7KRionzECJAGGhmQzq9kA7BRMtc3W3pritTac5dHAtk4OQlHj4TNlNja OE6cxjulw4JVg5G4XfY2Lo80G2c6STOU4NeXAGH4Xs9k7V9iYyf3owagZkybKQlh vG22v0JsejT6kCz8h1StBszKqrWc/hZuZIYt/ADe15dkk4eSd2FSr6NYWLZ4vRXM uSiNPHyobaBbZ+zWf40GUqg1NrCvIg8ESyX5ad3oI63BTjt+2Pg= -----END CERTIFICATE-----Generated at Thu Jun 5 18:30:00 2025 by rpki-client