$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: b9oK81HwYd+HJrSsd8lWUFOfqTB0OXCbV/52fb16OUk= Subject key identifier: 4E:88:60:AE:87:5B:82:5B:14:F6:AE:4F:D2:44:1C:50:7A:14:51:4E Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: E58D747F2FC4842D84E54DAA4BEAD148F94EAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 80 Signing time: Sun 20 Jul 2025 15:20:52 +0000 Manifest this update: Sun 20 Jul 2025 15:15:52 +0000 Manifest next update: Thu 24 Jul 2025 01:02:52 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: X6WL+j6BruDmKBfwz3HieEHiT85CkhuSRSxuhpf6xy0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:02:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e5:8d:74:7f:2f:c4:84:2d:84:e5:4d:aa:4b:ea:d1:48:f9:4e:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Jul 20 15:15:52 2025 GMT Not After : Jul 24 01:02:52 2025 GMT Subject: CN=4E8860AE875B825B14F6AE4FD2441C507A14514E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:bc:a3:49:c3:df:0e:f0:05:55:9d:8e:b8:ab: af:89:53:67:10:8a:31:40:d6:7f:08:66:3a:f1:8b: 79:9e:f1:bc:e2:b9:05:c9:18:e9:36:65:61:e1:b7: 76:4a:b1:2c:24:79:fc:c4:2c:63:08:04:6c:f5:fe: 5d:79:ce:33:7a:ab:04:34:7f:e5:ed:16:4b:47:d5: ba:bf:63:a4:1d:cd:34:44:a4:4d:89:fb:7e:a5:ed: 19:66:af:b7:92:a7:42:d6:03:1c:f6:e7:68:1e:bc: 49:98:e7:1d:e7:a2:0b:86:e7:7f:20:08:e6:91:02: 10:18:3e:eb:71:01:4a:0d:04:9a:8e:9f:0f:56:bd: bc:46:7c:b5:94:b4:28:b4:3c:30:df:b9:bc:e0:97: 29:7b:0f:5e:04:a6:bb:58:2e:78:0b:e0:f1:e1:1c: 7c:84:05:48:9a:c7:f1:3d:40:a2:92:d7:e5:1c:f6: 00:52:a1:be:67:34:f6:dd:70:f2:e6:8e:0f:62:3d: 21:56:fa:fd:38:06:53:87:86:91:7e:61:5d:9d:94: 44:60:7b:11:58:3d:dd:91:57:93:d0:07:a1:0a:af: 39:ac:44:db:51:0b:5f:4d:e1:ad:c3:3e:8f:9e:b8: 46:f2:98:20:15:69:ee:99:26:4c:84:8b:5d:a4:68: 0c:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:88:60:AE:87:5B:82:5B:14:F6:AE:4F:D2:44:1C:50:7A:14:51:4E X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e1:9c:7d:2b:8b:f5:af:64:6f:82:81:ce:e1:12:a3:07:2c: a6:bb:c1:8a:0f:cc:16:f0:7b:fd:a7:34:8e:7d:1c:d5:6b:95: 75:eb:e0:ee:11:46:df:29:5b:a8:4a:dc:0a:79:81:cd:72:41: 0b:b2:af:bc:87:65:9f:06:f8:51:6d:d1:f9:df:bf:37:ca:8b: a0:b1:75:70:e7:02:ce:53:0a:12:5c:29:5f:54:32:2c:a6:81: 08:82:31:1e:d8:28:3f:82:71:5c:df:8f:21:ea:6c:ad:b5:95: 33:a9:ee:45:51:18:2d:05:a5:d2:e7:25:11:a9:6d:e9:f1:ec: 18:f5:84:cd:bc:3e:cb:0d:a7:ef:4c:a5:9d:df:c9:b0:31:ac: 8f:76:79:bd:b2:cb:12:e4:23:5a:d7:38:fd:11:3a:c3:be:34: f0:a1:39:24:de:5f:00:fb:75:0e:63:3b:ca:64:0d:bc:06:a6: 6e:5b:7b:02:4e:a3:9b:4c:11:af:b5:3f:6b:b9:24:f2:de:b7: 71:30:48:19:02:4e:20:32:aa:54:06:d2:e3:50:4e:e2:c5:7d: b4:a3:15:57:20:5f:22:bf:7e:4a:78:43:9f:20:6f:de:f9:d1: 44:ec:b9:08:4a:ef:31:e0:18:7a:1d:e8:83:6d:c4:4f:fe:40: d4:8f:00:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOWNdH8vxIQthOVNqkvq0Uj5TqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA3MjAxNTE1NTJaFw0yNTA3MjQwMTAyNTJaMDMxMTAvBgNV BAMTKDRFODg2MEFFODc1QjgyNUIxNEY2QUU0RkQyNDQxQzUwN0ExNDUxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtvKNJw98O8AVVnY64q6+JU2cQ ijFA1n8IZjrxi3me8bziuQXJGOk2ZWHht3ZKsSwkefzELGMIBGz1/l15zjN6qwQ0 f+XtFktH1bq/Y6QdzTREpE2J+36l7Rlmr7eSp0LWAxz252gevEmY5x3noguG538g COaRAhAYPutxAUoNBJqOnw9WvbxGfLWUtCi0PDDfubzglyl7D14EprtYLngL4PHh HHyEBUiax/E9QKKS1+Uc9gBSob5nNPbdcPLmjg9iPSFW+v04BlOHhpF+YV2dlERg exFYPd2RV5PQB6EKrzmsRNtRC19N4a3DPo+euEbymCAVae6ZJkyEi12kaAwnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTohgrodbglsU9q5P0kQcUHoUUU4wHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvhnH0ri/WvZG+Cgc7hEqMHLKa7wYoPzBbw e/2nNI59HNVrlXXr4O4RRt8pW6hK3Ap5gc1yQQuyr7yHZZ8G+FFt0fnfvzfKi6Cx dXDnAs5TChJcKV9UMiymgQiCMR7YKD+CcVzfjyHqbK21lTOp7kVRGC0FpdLnJRGp benx7Bj1hM28PssNp+9MpZ3fybAxrI92eb2yyxLkI1rXOP0ROsO+NPChOSTeXwD7 dQ5jO8pkDbwGpm5bewJOo5tMEa+1P2u5JPLet3EwSBkCTiAyqlQG0uNQTuLFfbSj FVcgXyK/fkp4Q58gb9750UTsuQhK7zHgGHod6INtxE/+QNSPAJ0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:59 2025 by rpki-client