$ rpki-client -vvf repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft File: 957CC5B55223EC29F2E71324C678334C4348BE02.mft (raw, json) Hash identifier: hpMRz3sQqNcnXHBUHwm7+LJrX1Cx3bH88sCkzUomvd0= Subject key identifier: 2F:28:D2:AD:B5:5B:A2:1A:FE:E9:69:ED:51:C7:B1:0C:B0:06:0B:32 Authority key identifier: 95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 Certificate issuer: /CN=957CC5B55223EC29F2E71324C678334C4348BE02 Certificate serial: 43458E6F75E9A79DB90BF841866A14D35CE3E92D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft Manifest number: 0180 Signing time: Fri 04 Apr 2025 16:10:51 +0000 Manifest this update: Fri 04 Apr 2025 16:05:51 +0000 Manifest next update: Mon 07 Apr 2025 22:32:51 +0000 Files and hashes: 1: 957CC5B55223EC29F2E71324C678334C4348BE02.crl (hash: ULD0ihcgduQoVWKpgLUAnrfpAWPg/9FjEC5u6/s3Xec=) 2: 3130332e3134372e3131362e302f32332d3234203d3e203137373639.roa (hash: gpKP80eZFgz1Xe+59VM+E5nhQuUU0t/9JV7P0fWMBTY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:45:8e:6f:75:e9:a7:9d:b9:0b:f8:41:86:6a:14:d3:5c:e3:e9:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=957CC5B55223EC29F2E71324C678334C4348BE02 Validity Not Before: Apr 4 16:05:51 2025 GMT Not After : Apr 7 22:32:51 2025 GMT Subject: CN=2F28D2ADB55BA21AFEE969ED51C7B10CB0060B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:25:23:c7:62:cd:c5:d3:e0:09:8c:2f:2a:ec: 41:fd:f0:ec:99:eb:30:1c:f2:be:76:03:44:7f:bf: 6f:32:b4:9e:0d:ac:93:de:8f:f2:2a:28:87:f5:00: a4:02:47:bd:df:37:10:9d:54:b7:fd:b9:34:02:cb: 53:aa:11:c4:ad:a4:be:8a:df:4d:34:5b:89:b1:bf: 0b:be:7b:cc:8a:38:72:b8:86:b5:de:e1:ba:b8:8d: 39:d6:50:f1:ee:7e:f9:eb:5c:24:f7:68:65:b7:8d: 36:d6:c3:99:9d:5e:ca:94:74:88:bb:82:f2:e9:e8: 31:ef:16:e5:9d:ad:c2:99:85:89:ef:91:09:06:ad: cf:83:02:16:e2:b4:01:9d:94:03:b6:74:0b:b9:8b: 24:7d:37:94:59:e2:e1:b4:2d:62:ba:14:4e:08:33: 26:87:9e:0d:79:34:21:ef:96:48:8a:e7:b0:2f:fe: 16:0e:9d:c3:22:70:17:b7:8e:25:73:37:e1:11:c5: 3e:cc:7c:77:a7:bd:dc:5c:f6:03:64:e4:d6:de:da: 12:2a:f9:ec:9a:64:f2:c2:83:9f:73:a3:92:a7:0e: fe:a2:b0:aa:1c:27:d2:69:81:39:e1:81:85:e2:47: a4:3b:62:f2:5c:b0:df:20:e3:30:44:87:d2:c7:8c: d6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:28:D2:AD:B5:5B:A2:1A:FE:E9:69:ED:51:C7:B1:0C:B0:06:0B:32 X509v3 Authority Key Identifier: keyid:95:7C:C5:B5:52:23:EC:29:F2:E7:13:24:C6:78:33:4C:43:48:BE:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/957CC5B55223EC29F2E71324C678334C4348BE02.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a78c06-1d6e-43b6-bf30-860cebddfb32/0/957CC5B55223EC29F2E71324C678334C4348BE02.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:99:f9:fa:63:5a:86:6f:4a:8d:9e:82:e6:c9:8c:d3:df:fb: ac:44:71:0e:dc:76:8a:89:e6:a8:30:15:f3:f4:dc:06:f0:6d: 43:cb:33:8c:70:62:b9:9a:4a:58:e5:88:8a:5c:68:d1:77:97: e7:8a:a6:3f:fe:30:3f:1f:c7:0b:e0:5d:ef:25:88:62:22:6d: 6c:86:c8:28:81:12:52:3e:e1:40:dc:ab:54:3a:cd:9f:fa:d6: a0:02:d5:0c:25:39:ae:f2:05:37:ea:3f:9f:7d:11:6d:ba:e7: dc:14:75:38:0e:df:35:ef:de:c0:2f:c3:76:fc:f1:f4:00:4b: 74:38:6d:f5:66:db:28:14:e8:75:ed:98:5f:96:f1:a2:22:ff: 55:db:bb:09:db:e4:06:e8:bf:16:ae:fa:30:b3:50:48:63:01: fd:9b:6a:ca:0c:46:24:7b:dc:6e:b7:f6:26:8b:b6:7c:ad:b7: da:b7:25:9e:63:ea:46:cf:d5:e9:ff:24:7a:a0:e2:32:0f:05: 1d:32:bb:03:96:62:4a:a4:b6:3f:ad:47:8d:85:39:4c:6f:e2: 29:f3:43:ac:11:ab:db:e4:0c:d1:bd:4a:90:20:64:ee:a7:70: 78:95:2a:03:ff:07:a0:30:64:53:b7:e7:b4:74:13:fe:22:1f: 80:c5:8b:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ0WOb3Xpp525C/hBhmoU01zj6S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0 MzQ4QkUwMjAeFw0yNTA0MDQxNjA1NTFaFw0yNTA0MDcyMjMyNTFaMDMxMTAvBgNV BAMTKDJGMjhEMkFEQjU1QkEyMUFGRUU5NjlFRDUxQzdCMTBDQjAwNjBCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6JSPHYs3F0+AJjC8q7EH98OyZ 6zAc8r52A0R/v28ytJ4NrJPej/IqKIf1AKQCR73fNxCdVLf9uTQCy1OqEcStpL6K 3000W4mxvwu+e8yKOHK4hrXe4bq4jTnWUPHufvnrXCT3aGW3jTbWw5mdXsqUdIi7 gvLp6DHvFuWdrcKZhYnvkQkGrc+DAhbitAGdlAO2dAu5iyR9N5RZ4uG0LWK6FE4I MyaHng15NCHvlkiK57Av/hYOncMicBe3jiVzN+ERxT7MfHenvdxc9gNk5Nbe2hIq +eyaZPLCg59zo5KnDv6isKocJ9JpgTnhgYXiR6Q7YvJcsN8g4zBEh9LHjNaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULyjSrbVbohr+6WntUcexDLAGCzIwHwYDVR0j BBgwFoAUlXzFtVIj7Cny5xMkxngzTENIvgIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE3OGMwNi0xZDZlLTQzYjYtYmYzMC04NjBjZWJkZGZiMzIvMC85NTdDQzVCNTUy MjNFQzI5RjJFNzEzMjRDNjc4MzM0QzQzNDhCRTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMzNEM0MzQ4 QkUwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhNzhjMDYtMWQ2ZS00M2I2LWJm MzAtODYwY2ViZGRmYjMyLzAvOTU3Q0M1QjU1MjIzRUMyOUYyRTcxMzI0QzY3ODMz NEM0MzQ4QkUwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOZ+fpjWoZvSo2egubJjNPf+6xEcQ7cdoqJ 5qgwFfP03AbwbUPLM4xwYrmaSljliIpcaNF3l+eKpj/+MD8fxwvgXe8liGIibWyG yCiBElI+4UDcq1Q6zZ/61qAC1QwlOa7yBTfqP599EW2659wUdTgO3zXv3sAvw3b8 8fQAS3Q4bfVm2ygU6HXtmF+W8aIi/1Xbuwnb5Abovxau+jCzUEhjAf2basoMRiR7 3G639iaLtnytt9q3JZ5j6kbP1en/JHqg4jIPBR0yuwOWYkqktj+tR42FOUxv4inz Q6wRq9vkDNG9SpAgZO6ncHiVKgP/B6AwZFO357R0E/4iH4DFiww= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:49 2025 by rpki-client