$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: JrgX1YPCqPUfgVKZtPrcE86UaD0In+Hm0KNYOcHTz7s= Subject key identifier: A9:8A:3E:40:57:CF:17:32:79:01:65:3F:1F:73:E5:80:D1:29:44:A4 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 6120ED71DD96D4661333A3AA2C19A2CB701050A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: E6 Signing time: Sat 07 Mar 2026 21:41:03 +0000 Manifest this update: Sat 07 Mar 2026 21:36:03 +0000 Manifest next update: Tue 10 Mar 2026 21:51:03 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: g49PUz2f2iYSq6x6j5iJkONkrpxlBCH9AaSK+J6crGg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:20:ed:71:dd:96:d4:66:13:33:a3:aa:2c:19:a2:cb:70:10:50:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Mar 7 21:36:03 2026 GMT Not After : Mar 10 21:51:03 2026 GMT Subject: CN=A98A3E4057CF17327901653F1F73E580D12944A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3d:8a:2f:cc:b6:0c:42:a9:1c:6e:d5:3a:12: eb:a1:62:7d:a5:c1:ae:ed:f3:8f:c0:73:a0:3c:11: b9:a5:7b:81:52:0f:a6:e1:19:c1:b1:5a:12:43:64: 1c:4a:60:9b:b0:ea:4d:79:bf:76:2c:6d:3b:cb:27: 57:68:73:ea:2b:f6:9c:9f:63:fa:ca:89:5b:c1:04: 46:a9:72:34:e3:0a:bc:14:5e:91:ee:91:52:12:4b: 8c:38:31:b8:6e:81:2e:56:3b:41:f5:92:e9:4a:6d: f1:a3:4d:d8:28:40:71:77:a3:dc:c5:70:fb:56:20: ef:05:1b:b5:af:5b:d6:33:0d:55:48:a4:74:f1:52: f0:09:70:0a:22:ef:ea:4c:6f:df:ce:40:21:06:8a: 93:a4:24:bf:5d:1d:c8:65:61:dd:17:5a:7d:3b:3a: f0:c5:7a:44:81:b5:b3:c2:11:e8:b5:ac:05:e0:2c: 61:9e:b7:8d:2b:3a:b3:14:46:c8:91:da:36:df:61: 67:d2:0d:70:74:76:81:b4:22:1f:8f:17:a4:11:c0: 14:27:09:a0:a3:cd:28:1e:42:04:69:06:86:74:64: df:76:1e:21:d0:56:93:36:75:5e:41:39:d8:f8:c2: 1c:5c:d5:8b:5a:b9:db:db:95:04:5f:c4:54:af:27: 64:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:8A:3E:40:57:CF:17:32:79:01:65:3F:1F:73:E5:80:D1:29:44:A4 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:1b:b7:0d:e4:a0:e2:dd:76:75:3e:01:55:d1:23:85:e1:16: 87:0e:87:62:b8:c8:dc:7a:e0:f4:95:87:0d:0f:e4:ee:23:e8: a0:22:96:0c:67:08:1a:c3:34:2b:f2:a5:c6:64:96:42:da:ab: 75:e6:fa:6b:50:78:46:de:fa:92:89:da:c6:fa:7d:36:e4:7d: 0e:25:63:b5:6b:f7:10:43:9a:a0:1a:ba:51:6c:d1:66:95:66: 3b:b7:f8:4b:46:07:d6:36:18:a0:54:33:2c:07:40:55:72:dc: 2a:03:4c:7d:0e:5d:45:2a:f2:71:ba:c8:83:56:11:2e:5e:ad: 73:8b:50:b9:91:53:d9:d5:25:b0:4d:31:aa:a2:c7:b6:bf:72: ab:62:cc:72:56:8a:6e:ab:6f:cf:fb:6f:95:a7:f0:e6:11:fe: 69:39:91:91:a3:d9:36:5b:2e:94:40:f2:47:8b:e2:f0:64:39: e5:02:4b:61:a7:cc:2c:21:e3:f7:c6:4c:41:db:36:67:40:fb: d8:16:f1:02:37:c2:d8:e5:16:e7:e4:eb:85:3a:7f:9b:32:bf: 56:3d:48:31:c7:9b:8f:35:2f:85:6c:c1:99:d8:00:de:59:bd: de:8f:2b:49:45:c1:e4:8f:4f:6c:48:52:fc:8f:2b:a6:71:59: dd:7a:ca:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSDtcd2W1GYTM6OqLBmiy3AQUKQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNjAzMDcyMTM2MDNaFw0yNjAzMTAyMTUxMDNaMDMxMTAvBgNV BAMTKEE5OEEzRTQwNTdDRjE3MzI3OTAxNjUzRjFGNzNFNTgwRDEyOTQ0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTPYovzLYMQqkcbtU6EuuhYn2l wa7t84/Ac6A8Ebmle4FSD6bhGcGxWhJDZBxKYJuw6k15v3YsbTvLJ1doc+or9pyf Y/rKiVvBBEapcjTjCrwUXpHukVISS4w4MbhugS5WO0H1kulKbfGjTdgoQHF3o9zF cPtWIO8FG7WvW9YzDVVIpHTxUvAJcAoi7+pMb9/OQCEGipOkJL9dHchlYd0XWn07 OvDFekSBtbPCEei1rAXgLGGet40rOrMURsiR2jbfYWfSDXB0doG0Ih+PF6QRwBQn CaCjzSgeQgRpBoZ0ZN92HiHQVpM2dV5BOdj4whxc1YtaudvblQRfxFSvJ2SxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqYo+QFfPFzJ5AWU/H3PlgNEpRKQwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADwbtw3koOLddnU+AVXRI4XhFocOh2K4yNx6 4PSVhw0P5O4j6KAilgxnCBrDNCvypcZklkLaq3Xm+mtQeEbe+pKJ2sb6fTbkfQ4l Y7Vr9xBDmqAaulFs0WaVZju3+EtGB9Y2GKBUMywHQFVy3CoDTH0OXUUq8nG6yINW ES5erXOLULmRU9nVJbBNMaqix7a/cqtizHJWim6rb8/7b5Wn8OYR/mk5kZGj2TZb LpRA8keL4vBkOeUCS2GnzCwh4/fGTEHbNmdA+9gW8QI3wtjlFufk64U6f5syv1Y9 SDHHm481L4VswZnYAN5Zvd6PK0lFweSPT2xIUvyPK6ZxWd16yqU= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:29 2026 by rpki-client