$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: /fMegL1P0BrJ/n/nIZIpcLwxzyK+qyf/UKNZIIijWLM= Subject key identifier: 83:2A:2C:34:1B:83:6C:BF:B4:84:36:3D:A9:26:EC:48:51:D5:63:9F Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 78D0453BA1FD6EF616915DDDE6CA6C340B7B6DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 95 Signing time: Sat 06 Sep 2025 18:10:54 +0000 Manifest this update: Sat 06 Sep 2025 18:05:54 +0000 Manifest next update: Tue 09 Sep 2025 18:27:54 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: IYb0XsY8HGw8mE4tET4uDj4xlAxuhOYXs22yAItNwKM=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:27:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:d0:45:3b:a1:fd:6e:f6:16:91:5d:dd:e6:ca:6c:34:0b:7b:6d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Sep 6 18:05:54 2025 GMT Not After : Sep 9 18:27:54 2025 GMT Subject: CN=832A2C341B836CBFB484363DA926EC4851D5639F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:93:03:cf:b3:36:dc:e4:73:1e:71:70:42:c9: 79:44:c2:6e:c2:5f:4a:50:87:ee:bc:75:5c:f5:b3: 0e:83:36:93:97:4a:9e:b5:3d:73:08:14:41:9b:7e: 61:61:aa:6c:09:75:13:c9:d0:91:30:1f:3f:67:f1: fc:4f:53:0e:26:55:44:e8:8d:c8:a6:b7:47:72:f8: 94:6b:2a:24:08:21:ee:e5:ff:58:06:21:63:b1:b5: ef:72:1c:c6:1b:d7:86:b0:02:23:a9:14:70:c7:c7: 57:33:b6:97:fa:07:af:24:36:9b:1b:6d:80:1b:fa: 38:b9:70:e1:00:60:d8:5e:cd:b1:35:83:b8:a8:16: a5:28:4f:5c:0e:0f:8b:66:a9:6d:ff:8c:4b:19:93: d0:74:ff:7c:0c:15:c1:da:93:3a:ab:42:72:14:34: f7:b8:aa:86:0e:7a:97:b1:13:4e:a0:29:7b:9b:63: 39:c2:e5:68:2a:a8:c7:b9:9c:dd:40:c4:0d:5b:97: 51:10:eb:86:cf:05:0c:d7:f6:cb:84:b3:cb:1d:58: 06:5e:e6:84:33:25:11:e2:7c:13:42:a3:da:4a:ff: c0:61:b7:5f:79:94:75:9e:4d:ba:68:c1:86:93:18: 00:d7:98:ac:f3:bc:f2:c5:8f:35:c9:8d:78:11:b6: 7c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2A:2C:34:1B:83:6C:BF:B4:84:36:3D:A9:26:EC:48:51:D5:63:9F X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f3:09:e2:50:11:8c:2c:b8:8e:d2:62:51:b2:3a:1b:9e:ca: 69:68:ef:78:96:ee:62:70:02:ef:19:53:5e:d0:01:ed:2a:1f: 80:d2:ca:d1:39:b6:5c:b3:3e:9f:62:13:11:19:26:76:5f:8b: 4a:f5:66:52:27:9f:7a:99:c2:47:a3:7b:ee:88:6d:42:8b:fa: 62:95:fb:f5:9e:c8:e0:a1:cc:fc:0b:d4:a2:c7:26:22:d5:be: 79:ad:61:92:86:e3:a1:30:f8:e8:a9:26:15:58:f7:fa:39:c4: 17:6d:02:e0:b0:a4:9c:43:cc:ae:6d:ec:fe:31:bf:dc:31:4a: c4:57:03:7a:e9:55:98:29:be:70:6a:58:a6:b2:7d:15:63:87: 1c:cc:75:2c:42:b4:98:c2:15:78:dd:39:d3:74:2f:38:de:56: 8d:f7:bb:ce:1e:15:af:57:89:27:00:9f:02:0b:45:92:96:de: fc:1a:cf:0f:4b:47:32:0f:f6:ab:ed:44:33:93:00:30:6f:95: 99:6b:08:db:83:ed:ef:cd:55:de:74:db:41:3c:38:f2:09:28: 86:0d:c2:32:1e:a8:98:3b:45:3f:cb:65:33:2a:6c:da:cd:bd: 52:40:f0:53:56:cd:42:46:3b:12:7b:6e:d0:3b:71:50:1a:be: c9:99:c9:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeNBFO6H9bvYWkV3d5spsNAt7bccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA5MDYxODA1NTRaFw0yNTA5MDkxODI3NTRaMDMxMTAvBgNV BAMTKDgzMkEyQzM0MUI4MzZDQkZCNDg0MzYzREE5MjZFQzQ4NTFENTYzOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCokwPPszbc5HMecXBCyXlEwm7C X0pQh+68dVz1sw6DNpOXSp61PXMIFEGbfmFhqmwJdRPJ0JEwHz9n8fxPUw4mVUTo jcimt0dy+JRrKiQIIe7l/1gGIWOxte9yHMYb14awAiOpFHDHx1cztpf6B68kNpsb bYAb+ji5cOEAYNhezbE1g7ioFqUoT1wOD4tmqW3/jEsZk9B0/3wMFcHakzqrQnIU NPe4qoYOepexE06gKXubYznC5WgqqMe5nN1AxA1bl1EQ64bPBQzX9suEs8sdWAZe 5oQzJRHifBNCo9pK/8Bht195lHWeTbpowYaTGADXmKzzvPLFjzXJjXgRtnyXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgyosNBuDbL+0hDY9qSbsSFHVY58wHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7zCeJQEYwsuI7SYlGyOhueymlo73iW7mJw Au8ZU17QAe0qH4DSytE5tlyzPp9iExEZJnZfi0r1ZlInn3qZwkeje+6IbUKL+mKV +/WeyOChzPwL1KLHJiLVvnmtYZKG46Ew+OipJhVY9/o5xBdtAuCwpJxDzK5t7P4x v9wxSsRXA3rpVZgpvnBqWKayfRVjhxzMdSxCtJjCFXjdOdN0LzjeVo33u84eFa9X iScAnwILRZKW3vwazw9LRzIP9qvtRDOTADBvlZlrCNuD7e/NVd5020E8OPIJKIYN wjIeqJg7RT/LZTMqbNrNvVJA8FNWzUJGOxJ7btA7cVAavsmZyd4= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client