$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: OkgP19l6JrWkX5uJRbf409WDDJ3fPr2QHII6Z9vHMGI= Subject key identifier: BC:4C:BE:B5:74:90:F3:D9:62:7C:44:79:82:A6:B2:DD:10:3A:1F:EF Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 739C76F30098C6DB8EC2EE2EFED4E61AD2528E89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: A8 Signing time: Sat 18 Oct 2025 23:10:54 +0000 Manifest this update: Sat 18 Oct 2025 23:05:54 +0000 Manifest next update: Wed 22 Oct 2025 09:28:54 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: y1CoX4H1pyXsc6zQd2tEU4ElCU/SDPU9N/15IqdKDFU=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 09:28:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:9c:76:f3:00:98:c6:db:8e:c2:ee:2e:fe:d4:e6:1a:d2:52:8e:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Oct 18 23:05:54 2025 GMT Not After : Oct 22 09:28:54 2025 GMT Subject: CN=BC4CBEB57490F3D9627C447982A6B2DD103A1FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bc:3d:e5:14:e9:fb:d0:f6:50:55:f5:15:21: 70:b2:56:8b:52:97:bb:96:51:95:2c:0d:b9:85:7f: 92:aa:46:02:4e:06:40:5a:fd:29:64:f3:a7:b8:06: e2:12:97:b3:a0:12:05:04:0b:b5:10:b7:8b:cc:9f: 36:14:2c:a6:c3:ea:00:1a:6f:c7:ac:72:3e:d1:f1: 7f:8d:36:5e:3d:d1:68:54:52:43:06:bc:e2:8d:28: 0f:f7:e2:e1:3f:84:8c:e9:03:7d:ac:15:df:c5:29: 03:36:4f:d1:6c:0c:43:ae:d1:a9:93:36:0d:f0:e6: 66:88:ac:ea:50:e9:e2:2c:dc:5d:dd:0e:da:5a:38: 38:6a:4b:47:73:11:0d:9c:96:9b:22:06:32:f7:8d: 46:93:fd:9e:f6:4f:f3:66:72:26:b7:bd:6e:3f:f7: 0e:29:ea:12:ec:e2:53:22:0f:d6:94:4f:6a:16:f2: 6a:30:60:c6:1c:ca:b2:7a:c2:2b:18:3c:3b:2e:92: 36:15:c5:37:90:51:49:06:5c:67:fd:51:54:5b:2d: 74:d1:36:2a:15:94:42:92:8e:80:12:32:5b:82:5a: a9:f3:db:35:a3:cb:d2:d1:c2:35:3c:bc:d8:a9:d2: 6a:77:7b:b1:09:31:91:3f:09:ad:21:7a:60:fb:e6: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:4C:BE:B5:74:90:F3:D9:62:7C:44:79:82:A6:B2:DD:10:3A:1F:EF X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:76:6c:5d:ff:90:87:fd:2b:be:04:96:b0:07:94:9d:65:43: c3:41:90:39:f0:d0:62:ed:37:18:58:f0:9e:61:c8:2f:60:8b: 2d:07:6c:e8:ff:a5:99:7d:9a:7b:fc:6a:ce:8c:41:08:97:09: 7d:99:f0:98:99:3a:c2:c2:24:9a:4b:99:54:2c:ee:4a:ae:62: 64:29:0e:28:6f:d6:db:73:7a:d5:6d:91:68:d1:cd:7e:2e:f8: 53:81:5b:88:f9:bb:ea:61:f1:60:56:97:f3:81:a7:e0:ae:56: 87:2e:56:29:7a:5c:1a:6d:6d:ac:05:5a:60:42:6f:91:1f:41: eb:ab:21:99:e2:b9:50:4f:a0:10:0d:64:aa:1c:66:1b:79:87: 1f:0b:c5:3d:7d:11:71:48:7a:9a:cd:c0:50:e7:af:b9:67:e0: cd:18:ec:b6:9d:99:15:a0:b4:58:f5:51:af:c7:42:ac:e4:fe: d1:2c:4c:07:fe:55:bb:f7:f8:9f:df:21:55:75:6f:5c:bb:b3: 80:d6:63:29:e6:5b:5c:5b:07:59:41:24:a2:88:ea:0a:82:93: a8:50:23:0e:fa:94:90:00:4e:45:94:df:4f:4e:9a:0d:14:bb: 95:df:e3:1b:31:67:28:ea:9a:23:0d:ce:b2:8d:c7:d1:8d:bf: 68:88:d1:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc5x28wCYxtuOwu4u/tTmGtJSjokwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTEwMTgyMzA1NTRaFw0yNTEwMjIwOTI4NTRaMDMxMTAvBgNV BAMTKEJDNENCRUI1NzQ5MEYzRDk2MjdDNDQ3OTgyQTZCMkREMTAzQTFGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/vD3lFOn70PZQVfUVIXCyVotS l7uWUZUsDbmFf5KqRgJOBkBa/Slk86e4BuISl7OgEgUEC7UQt4vMnzYULKbD6gAa b8escj7R8X+NNl490WhUUkMGvOKNKA/34uE/hIzpA32sFd/FKQM2T9FsDEOu0amT Ng3w5maIrOpQ6eIs3F3dDtpaODhqS0dzEQ2clpsiBjL3jUaT/Z72T/Nmcia3vW4/ 9w4p6hLs4lMiD9aUT2oW8mowYMYcyrJ6wisYPDsukjYVxTeQUUkGXGf9UVRbLXTR NioVlEKSjoASMluCWqnz2zWjy9LRwjU8vNip0mp3e7EJMZE/Ca0hemD75nQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvEy+tXSQ89lifER5gqay3RA6H+8wHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx2bF3/kIf9K74ElrAHlJ1lQ8NBkDnw0GLt NxhY8J5hyC9giy0HbOj/pZl9mnv8as6MQQiXCX2Z8JiZOsLCJJpLmVQs7kquYmQp Dihv1ttzetVtkWjRzX4u+FOBW4j5u+ph8WBWl/OBp+CuVocuVil6XBptbawFWmBC b5EfQeurIZniuVBPoBANZKocZht5hx8LxT19EXFIeprNwFDnr7ln4M0Y7LadmRWg tFj1Ua/HQqzk/tEsTAf+Vbv3+J/fIVV1b1y7s4DWYynmW1xbB1lBJKKI6gqCk6hQ Iw76lJAATkWU309Omg0Uu5Xf4xsxZyjqmiMNzrKNx9GNv2iI0ec= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:27 2025 by rpki-client