$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: WldCbO01FNio7iUQEosT9MBV5FaU6eARz2bsiCIu81k= Subject key identifier: 37:CA:87:16:62:2D:34:1D:27:98:73:9A:A6:AA:32:A3:5F:79:E5:D9 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 7047431EE5C4E23DE6CE89C60DA4FA5741F4F000 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: EE Signing time: Wed 25 Mar 2026 11:41:01 +0000 Manifest this update: Wed 25 Mar 2026 11:36:01 +0000 Manifest next update: Sat 28 Mar 2026 18:28:01 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: FtZlw0EXu4pnry3UPAAirQ9n7KkMqVeR0X9YQ+63bkg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:28:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:47:43:1e:e5:c4:e2:3d:e6:ce:89:c6:0d:a4:fa:57:41:f4:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Mar 25 11:36:01 2026 GMT Not After : Mar 28 18:28:01 2026 GMT Subject: CN=37CA8716622D341D2798739AA6AA32A35F79E5D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:98:45:8b:50:30:1b:fc:1b:51:f0:7c:91:fd: 53:3a:af:23:ec:03:38:f1:a3:29:8b:65:c8:69:7f: f8:c9:02:9c:f8:1a:99:8a:f4:62:a5:83:f3:aa:76: d8:77:1f:6e:b5:a7:74:67:97:96:1b:f2:eb:58:e9: c1:78:4c:dc:ab:26:ed:51:71:06:8e:37:21:27:c4: 7b:30:80:eb:56:b8:b9:e6:ca:6f:d9:c4:13:61:59: 35:8d:e0:c0:6e:5d:80:5d:78:86:df:b6:ea:1f:8f: 8f:66:70:da:81:07:4e:b4:ed:06:96:56:51:b6:9a: db:93:f6:01:9f:fe:0c:2f:1c:4a:c1:30:8a:43:ca: 33:ba:93:bc:99:46:2d:fd:bb:de:01:73:07:2b:01: f0:72:d1:0e:26:fe:c9:8c:0e:1c:3d:df:ee:91:8b: 46:be:84:fb:8f:6e:51:07:1a:49:38:32:30:fb:d1: a9:7a:c5:2e:d9:9b:c7:92:3c:3b:81:8e:a4:3c:aa: 7f:67:a2:db:74:79:55:d6:01:25:a7:49:12:60:5b: 6d:78:93:04:7f:50:5c:f5:c4:a4:4a:54:86:be:ea: 1e:1c:fa:2d:ea:e5:59:30:1f:ab:40:71:f8:23:85: 25:09:99:23:2b:80:31:94:03:b9:29:5e:05:46:17: ec:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:CA:87:16:62:2D:34:1D:27:98:73:9A:A6:AA:32:A3:5F:79:E5:D9 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e9:d2:4e:e8:b6:c4:fa:2f:7d:4b:e5:7c:b7:88:c7:f9:f5:ce: 52:67:5e:61:32:4d:ad:7d:f8:a5:75:1a:7b:81:43:39:09:77: 12:a2:29:9a:6e:a4:62:64:d9:a4:c9:b3:20:20:25:62:85:d5: d9:e7:4f:01:b3:a0:2f:ed:66:ae:4d:2a:93:da:be:51:6f:1f: 60:4e:8d:29:d1:99:f4:54:a4:de:70:0d:bd:4c:fc:85:77:ee: c0:e2:87:02:fb:8a:e9:77:9d:e6:45:95:85:a4:26:69:f8:bf: 1d:ff:ec:e4:96:37:e3:1e:db:95:42:3f:24:bc:9a:f4:7d:b8: 96:72:7a:ca:82:bd:b7:c7:9e:17:6d:23:6d:0b:ea:0a:18:9a: aa:4b:ea:ea:ec:e8:0b:14:8d:f6:05:f8:0f:36:cf:2c:c1:f8: f6:74:91:71:e6:86:6c:f3:f2:8a:1d:29:cc:b0:fe:d0:da:d2: 72:31:ea:71:a1:bf:c5:00:1c:1c:d9:a3:af:27:b3:c9:06:db: e9:1e:b2:b8:6e:f7:47:99:f2:83:f6:14:2e:b0:02:25:04:ea: 92:26:5a:07:68:e6:d1:bd:2d:6b:5c:c0:35:dd:b2:30:6b:ff: 1e:64:3d:51:b0:2a:f8:67:90:d1:09:6c:d3:eb:8c:47:6e:33: 34:13:ba:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcEdDHuXE4j3mzonGDaT6V0H08AAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNjAzMjUxMTM2MDFaFw0yNjAzMjgxODI4MDFaMDMxMTAvBgNV BAMTKDM3Q0E4NzE2NjIyRDM0MUQyNzk4NzM5QUE2QUEzMkEzNUY3OUU1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomEWLUDAb/BtR8HyR/VM6ryPs AzjxoymLZchpf/jJApz4GpmK9GKlg/Oqdth3H261p3Rnl5Yb8utY6cF4TNyrJu1R cQaONyEnxHswgOtWuLnmym/ZxBNhWTWN4MBuXYBdeIbftuofj49mcNqBB0607QaW VlG2mtuT9gGf/gwvHErBMIpDyjO6k7yZRi39u94BcwcrAfBy0Q4m/smMDhw93+6R i0a+hPuPblEHGkk4MjD70al6xS7Zm8eSPDuBjqQ8qn9nott0eVXWASWnSRJgW214 kwR/UFz1xKRKVIa+6h4c+i3q5VkwH6tAcfgjhSUJmSMrgDGUA7kpXgVGF+zVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN8qHFmItNB0nmHOapqoyo1955dkwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOnSTui2xPovfUvlfLeIx/n1zlJnXmEyTa19 +KV1GnuBQzkJdxKiKZpupGJk2aTJsyAgJWKF1dnnTwGzoC/tZq5NKpPavlFvH2BO jSnRmfRUpN5wDb1M/IV37sDihwL7iul3neZFlYWkJmn4vx3/7OSWN+Me25VCPyS8 mvR9uJZyesqCvbfHnhdtI20L6goYmqpL6urs6AsUjfYF+A82zyzB+PZ0kXHmhmzz 8oodKcyw/tDa0nIx6nGhv8UAHBzZo68ns8kG2+kesrhu90eZ8oP2FC6wAiUE6pIm Wgdo5tG9LWtcwDXdsjBr/x5kPVGwKvhnkNEJbNPrjEduMzQTunY= -----END CERTIFICATE-----Generated at Thu Mar 26 15:58:26 2026 by rpki-client