$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: 3MfXmvV0yY77NOw+A9tG4IsQJSHJtLIJi0vyVSPRc7k= Subject key identifier: A3:C5:29:28:80:EC:04:BC:7C:D4:6B:44:81:DB:A2:13:EA:32:7C:77 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 2AC3ADC3D37C4749709D27EA4431F06AD04D7F68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: FA Signing time: Wed 22 Apr 2026 05:01:03 +0000 Manifest this update: Wed 22 Apr 2026 04:56:03 +0000 Manifest next update: Sat 25 Apr 2026 05:46:03 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: QogDAaxz44bafVvx0aq23SDCP3slvvxb/OFQeSf5dwc=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 05:46:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c3:ad:c3:d3:7c:47:49:70:9d:27:ea:44:31:f0:6a:d0:4d:7f:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Apr 22 04:56:03 2026 GMT Not After : Apr 25 05:46:03 2026 GMT Subject: CN=A3C5292880EC04BC7CD46B4481DBA213EA327C77 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:58:87:b2:ed:23:75:8b:ef:c1:df:8d:11:f6: a4:b6:db:94:50:5f:fe:2d:ce:42:0d:bb:22:a8:81: 85:36:4e:d7:27:75:2a:69:7b:51:45:a7:45:43:3a: 75:1f:9b:b4:9c:12:d3:2c:3f:6f:dc:91:be:c0:03: c5:e6:20:52:da:f4:14:cf:87:ba:ef:a9:46:c3:93: 9d:73:f6:99:e8:b6:0b:eb:2d:7b:50:15:bb:61:71: eb:1d:ab:51:31:0c:64:1f:c3:96:c5:92:86:59:4f: 11:d5:38:12:33:6b:46:f9:22:35:43:7e:01:19:c5: 40:3c:72:5a:6a:6f:bb:24:13:e8:bb:35:98:9a:5c: 16:85:17:8c:ed:d7:27:5d:b6:a9:8c:26:31:5f:b0: 45:69:24:82:53:47:29:4a:07:b2:55:3e:e9:e9:97: aa:68:a4:87:ff:c1:a9:d6:ca:a1:88:0d:cb:3c:11: f9:6e:49:af:20:6d:5b:a2:d4:d6:bf:f5:99:a0:4e: 0d:9c:cf:9d:95:ec:f6:36:85:6f:44:17:2a:ee:08: 53:85:71:b3:be:5a:88:14:fd:92:87:c2:2c:ad:31: 82:92:7b:f3:39:57:c2:43:26:a7:bc:82:4c:6b:78: ae:ee:83:56:5f:ee:57:4a:38:2f:f4:26:db:07:77: d5:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:C5:29:28:80:EC:04:BC:7C:D4:6B:44:81:DB:A2:13:EA:32:7C:77 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:f3:76:96:34:d6:77:bc:bc:96:1b:32:84:87:77:f4:f1:b9: f9:e4:1f:33:e8:f7:2e:6c:b2:8e:99:a6:b0:1c:98:fc:ea:24: 0d:92:f4:cd:51:2a:d7:1d:b3:b8:e6:1b:3f:10:7f:d3:ec:bd: de:fe:26:11:b1:7d:b2:02:fa:be:7d:db:e4:e0:1c:ee:84:fb: ab:b1:31:cb:89:2f:c8:cf:1e:2c:1f:2f:d4:ff:50:a4:f8:fe: b8:f9:22:20:61:12:87:f7:64:af:e1:fa:a6:6a:b2:ee:a0:21: 8f:47:09:0a:93:bc:9b:a9:7c:33:a9:d6:87:7b:49:d6:c2:d9: cf:e7:89:11:64:1c:8a:c8:87:6a:2e:55:3f:19:a3:2b:6b:bd: 4c:74:ea:41:f7:26:d8:00:2b:a4:95:72:f6:f6:a2:fb:64:eb: 7a:b7:8c:b7:42:b7:4d:70:5a:1f:0d:ef:be:af:41:4f:09:1b: c9:da:19:6d:9e:00:e3:7a:95:9e:e1:07:c3:22:c8:80:6e:6d: e0:26:07:83:39:8e:0b:f8:8c:f0:70:fe:86:ca:d9:c5:c1:40: b6:9e:49:55:3f:9e:2b:9e:8c:6f:14:09:23:d6:9f:cf:7e:86: 57:8c:cb:4c:9e:0b:54:1f:2d:d5:e9:69:8b:28:81:76:1d:04: b6:8d:c6:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsOtw9N8R0lwnSfqRDHwatBNf2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNjA0MjIwNDU2MDNaFw0yNjA0MjUwNTQ2MDNaMDMxMTAvBgNV BAMTKEEzQzUyOTI4ODBFQzA0QkM3Q0Q0NkI0NDgxREJBMjEzRUEzMjdDNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGWIey7SN1i+/B340R9qS225RQ X/4tzkINuyKogYU2TtcndSppe1FFp0VDOnUfm7ScEtMsP2/ckb7AA8XmIFLa9BTP h7rvqUbDk51z9pnotgvrLXtQFbthcesdq1ExDGQfw5bFkoZZTxHVOBIza0b5IjVD fgEZxUA8clpqb7skE+i7NZiaXBaFF4zt1yddtqmMJjFfsEVpJIJTRylKB7JVPunp l6popIf/wanWyqGIDcs8EfluSa8gbVui1Na/9ZmgTg2cz52V7PY2hW9EFyruCFOF cbO+WogU/ZKHwiytMYKSe/M5V8JDJqe8gkxreK7ug1Zf7ldKOC/0JtsHd9VZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo8UpKIDsBLx81GtEgduiE+oyfHcwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHzdpY01ne8vJYbMoSHd/TxufnkHzPo9y5s so6ZprAcmPzqJA2S9M1RKtcds7jmGz8Qf9Psvd7+JhGxfbIC+r592+TgHO6E+6ux McuJL8jPHiwfL9T/UKT4/rj5IiBhEof3ZK/h+qZqsu6gIY9HCQqTvJupfDOp1od7 SdbC2c/niRFkHIrIh2ouVT8ZoytrvUx06kH3JtgAK6SVcvb2ovtk63q3jLdCt01w Wh8N776vQU8JG8naGW2eAON6lZ7hB8MiyIBubeAmB4M5jgv4jPBw/obK2cXBQLae SVU/niuejG8UCSPWn89+hleMy0yeC1QfLdXpaYsogXYdBLaNxr0= -----END CERTIFICATE-----Generated at Wed Apr 22 09:58:23 2026 by rpki-client