$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: Bcp11NjEeGOf8IA7QnS25ZZhz6SU/JSuA4y+8PX95/c= Subject key identifier: AA:E5:EF:3A:E4:E0:23:B7:59:D5:CF:19:7A:EA:88:3D:1E:93:CE:07 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 0FB7D87A6FC97C23E812B29BD0AD8547E40B6241 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 8E Signing time: Thu 21 Aug 2025 10:40:55 +0000 Manifest this update: Thu 21 Aug 2025 10:35:55 +0000 Manifest next update: Sun 24 Aug 2025 19:32:55 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: TytrnKkFPs82DKbeCfZOkvLKGYTOpgeGKR+aXOKc2K8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:32:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b7:d8:7a:6f:c9:7c:23:e8:12:b2:9b:d0:ad:85:47:e4:0b:62:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Aug 21 10:35:55 2025 GMT Not After : Aug 24 19:32:55 2025 GMT Subject: CN=AAE5EF3AE4E023B759D5CF197AEA883D1E93CE07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:ef:90:81:54:7d:70:33:fc:7f:1b:d8:d2:ad: 4e:60:17:1e:18:09:b7:f6:6c:b2:66:08:29:a2:2d: 65:5d:1a:22:80:98:9e:f8:e1:6c:6c:17:8a:0e:fb: 92:9a:22:30:c5:59:fc:3b:a6:3f:f5:8d:b0:da:e7: cb:da:9e:c9:26:30:f2:3e:07:5d:61:1e:47:f2:58: 91:bc:19:b1:71:20:8d:61:9c:2c:7b:3e:67:4a:20: 91:5c:30:f9:84:f9:e2:72:e5:6d:15:5c:77:64:c6: 78:c3:a8:d5:ef:11:a5:1f:f5:4d:b1:91:99:e6:4e: 7f:c6:13:da:28:82:05:b1:c1:df:56:f4:06:4f:90: 1f:39:d0:75:76:b4:ac:9b:25:81:6a:77:f0:b6:8f: a8:01:53:17:13:9a:c1:42:e2:04:82:b1:79:d9:7d: 83:28:b1:e6:3a:f0:9f:8c:1e:df:e7:f2:be:fe:91: 3e:24:6b:3c:9e:4c:f4:39:05:7b:72:09:14:78:c9: a7:b1:38:84:d2:9d:d5:1a:c5:4a:9d:06:ee:63:19: 75:72:57:f6:59:46:66:1d:aa:b6:0c:21:13:be:f0: 10:de:d0:e3:d9:c3:c3:f9:56:f1:df:24:45:b6:43: a2:2b:a9:bb:93:d6:c0:b9:d8:46:62:8f:7d:98:b8: c6:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E5:EF:3A:E4:E0:23:B7:59:D5:CF:19:7A:EA:88:3D:1E:93:CE:07 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:6e:06:8c:78:f9:fd:52:b6:14:1b:c2:ef:39:66:f0:fd: b8:ef:1e:f5:71:e1:18:96:a8:ec:ce:84:c2:f8:bd:e6:2b:56: 93:02:f5:6f:27:91:7d:e3:6f:b2:30:12:eb:3a:8d:18:eb:95: a8:6d:f4:a0:49:7d:f0:c1:39:77:86:82:b5:11:c4:3f:5f:e6: 4b:82:df:69:64:ee:a3:eb:b9:09:64:7d:50:f2:fd:3e:cd:e5: d6:70:a5:3b:e9:4b:26:5c:29:fa:93:0c:4b:82:fe:a9:9f:3f: 12:ae:0a:0d:fa:4b:f3:79:01:13:87:4e:72:9b:dd:ea:b2:b3: 39:5d:a4:bf:91:be:05:f8:9b:3e:ff:af:ca:73:04:aa:47:a5: b8:d5:8b:22:91:12:c4:18:6d:10:c1:9f:a4:3a:27:80:c9:35: 33:63:26:bf:2d:d5:2e:10:20:2f:4f:fb:aa:70:c6:16:30:f0: 73:0d:04:bf:87:6a:9f:c3:64:d6:63:17:59:21:bb:59:d6:74: b5:33:fb:81:fa:62:fd:04:66:7d:2a:36:80:69:ef:1e:59:c0: 95:62:4f:55:f3:da:a5:10:67:40:8c:03:b9:b9:82:a1:b0:e2: f8:76:18:11:69:49:aa:5e:b2:2e:cd:b5:1d:9a:a3:2b:94:b4: 40:1e:3d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7fYem/JfCPoErKb0K2FR+QLYkEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA4MjExMDM1NTVaFw0yNTA4MjQxOTMyNTVaMDMxMTAvBgNV BAMTKEFBRTVFRjNBRTRFMDIzQjc1OUQ1Q0YxOTdBRUE4ODNEMUU5M0NFMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB75CBVH1wM/x/G9jSrU5gFx4Y Cbf2bLJmCCmiLWVdGiKAmJ744WxsF4oO+5KaIjDFWfw7pj/1jbDa58vanskmMPI+ B11hHkfyWJG8GbFxII1hnCx7PmdKIJFcMPmE+eJy5W0VXHdkxnjDqNXvEaUf9U2x kZnmTn/GE9ooggWxwd9W9AZPkB850HV2tKybJYFqd/C2j6gBUxcTmsFC4gSCsXnZ fYMoseY68J+MHt/n8r7+kT4kazyeTPQ5BXtyCRR4yaexOITSndUaxUqdBu5jGXVy V/ZZRmYdqrYMIRO+8BDe0OPZw8P5VvHfJEW2Q6IrqbuT1sC52EZij32YuMYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUquXvOuTgI7dZ1c8ZeuqIPR6TzgcwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMBbgaMePn9UrYUG8LvOWbw/bjvHvVx4RiW qOzOhML4veYrVpMC9W8nkX3jb7IwEus6jRjrlaht9KBJffDBOXeGgrURxD9f5kuC 32lk7qPruQlkfVDy/T7N5dZwpTvpSyZcKfqTDEuC/qmfPxKuCg36S/N5AROHTnKb 3eqyszldpL+RvgX4mz7/r8pzBKpHpbjViyKREsQYbRDBn6Q6J4DJNTNjJr8t1S4Q IC9P+6pwxhYw8HMNBL+Hap/DZNZjF1khu1nWdLUz+4H6Yv0EZn0qNoBp7x5ZwJVi T1Xz2qUQZ0CMA7m5gqGw4vh2GBFpSapesi7NtR2aoyuUtEAePY4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:28:01 2025 by rpki-client