$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: GDVeufKbzd3Yg7s3XbJQ7BGL86jSroVb6QEWccNZHhw= Subject key identifier: B9:12:25:DC:D8:7B:ED:B5:71:42:14:B9:01:E1:74:BE:A4:6A:8B:85 Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 6E804E62A0635DF39E24BAAF59473ACC874E5A01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: E3 Signing time: Sun 01 Mar 2026 04:01:01 +0000 Manifest this update: Sun 01 Mar 2026 03:56:01 +0000 Manifest next update: Wed 04 Mar 2026 13:54:01 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: KiXmCp2shKiUam4T7vWDBvr95/uKZjgKK8MJ+bpx5GU=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:54:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:80:4e:62:a0:63:5d:f3:9e:24:ba:af:59:47:3a:cc:87:4e:5a:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Mar 1 03:56:01 2026 GMT Not After : Mar 4 13:54:01 2026 GMT Subject: CN=B91225DCD87BEDB5714214B901E174BEA46A8B85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:69:b2:8c:38:16:a0:40:0c:65:46:50:eb:00: a1:35:4e:06:e0:db:07:75:92:52:0c:c2:ce:33:19: 0a:fc:13:b5:d5:92:87:f2:1d:e7:c2:35:e3:a0:9e: a9:75:f0:bb:a5:48:bc:5c:04:18:39:7b:f6:bc:83: 6c:5b:f4:45:65:45:d1:80:14:e6:e8:f3:aa:3c:00: 4b:83:ad:84:a9:68:06:a9:f2:48:0e:43:34:7d:07: e9:2b:e4:21:6e:05:e2:ba:e5:6b:9a:49:7d:8b:8f: 06:bc:73:cb:d7:66:80:3d:64:76:ab:02:1b:03:26: e9:52:d8:4c:4a:01:3c:04:36:ff:a8:bd:16:5c:54: be:64:4b:3b:22:27:52:bf:3f:7f:73:d5:7c:80:47: 5d:6c:a4:ab:68:29:a7:53:e1:a5:db:e7:4c:c6:1e: b5:91:c3:db:54:e1:3c:ba:2a:cd:ce:37:c2:52:6d: fd:94:ca:8e:1c:82:6a:d7:00:77:50:82:f7:a4:24: fa:63:7f:5e:ea:67:5a:e1:21:1d:fc:00:00:d4:01: d1:ef:83:68:b9:58:0b:61:17:1e:95:6c:fd:1a:47: 11:c2:8b:86:af:e9:61:6c:67:0d:5b:69:6f:6e:e9: bd:47:14:d5:c6:b0:7c:38:de:1d:78:35:d9:69:93: 1d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:12:25:DC:D8:7B:ED:B5:71:42:14:B9:01:E1:74:BE:A4:6A:8B:85 X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d4:75:3c:6d:ee:7f:11:33:e8:ef:06:11:10:78:76:5b:e4: 76:02:c8:4f:35:5a:45:03:69:e2:67:78:f3:bc:07:71:af:4e: 22:a4:00:ff:61:16:29:79:79:4b:2e:40:db:a0:29:16:81:3b: e4:39:2a:0d:fa:65:b6:09:91:2a:47:0d:3c:2c:a2:11:92:03: 4f:73:02:fa:6a:45:fe:98:43:c9:fc:23:24:b2:24:04:e5:43: 30:30:38:b1:fd:07:2b:23:c4:11:87:36:f4:78:57:ae:49:c4: be:3a:38:8b:6c:13:a2:91:14:ad:e9:ee:b2:7e:6f:f4:e1:3c: 42:1e:0e:15:06:9c:ef:0c:7b:40:3a:99:ce:00:a4:eb:f5:26: 65:3e:2f:36:18:f3:e5:7d:0f:c7:91:9d:a3:02:5f:85:84:b1: 90:a4:12:e4:ff:b0:97:0f:50:7c:cd:0b:b3:a2:e1:0e:11:22: 90:99:f8:a0:4f:75:5a:9d:02:00:98:4d:5d:3f:6b:e7:6d:ee: e2:6c:7f:6e:9c:54:22:6c:80:bf:6f:df:9a:c4:f1:d9:37:25: 83:52:d3:9d:c1:a5:cd:65:ce:c7:4a:06:4f:1b:6b:33:b9:ff: 4b:85:99:b9:aa:22:f2:a5:69:61:95:ff:7f:29:a0:8b:58:2b: e8:ef:f9:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboBOYqBjXfOeJLqvWUc6zIdOWgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNjAzMDEwMzU2MDFaFw0yNjAzMDQxMzU0MDFaMDMxMTAvBgNV BAMTKEI5MTIyNURDRDg3QkVEQjU3MTQyMTRCOTAxRTE3NEJFQTQ2QThCODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+abKMOBagQAxlRlDrAKE1Tgbg 2wd1klIMws4zGQr8E7XVkofyHefCNeOgnql18LulSLxcBBg5e/a8g2xb9EVlRdGA FObo86o8AEuDrYSpaAap8kgOQzR9B+kr5CFuBeK65WuaSX2Ljwa8c8vXZoA9ZHar AhsDJulS2ExKATwENv+ovRZcVL5kSzsiJ1K/P39z1XyAR11spKtoKadT4aXb50zG HrWRw9tU4Ty6Ks3ON8JSbf2Uyo4cgmrXAHdQgvekJPpjf17qZ1rhIR38AADUAdHv g2i5WAthFx6VbP0aRxHCi4av6WFsZw1baW9u6b1HFNXGsHw43h14Ndlpkx0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuRIl3Nh77bVxQhS5AeF0vqRqi4UwHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnUdTxt7n8RM+jvBhEQeHZb5HYCyE81WkUD aeJnePO8B3GvTiKkAP9hFil5eUsuQNugKRaBO+Q5Kg36ZbYJkSpHDTwsohGSA09z AvpqRf6YQ8n8IySyJATlQzAwOLH9BysjxBGHNvR4V65JxL46OItsE6KRFK3p7rJ+ b/ThPEIeDhUGnO8Me0A6mc4ApOv1JmU+LzYY8+V9D8eRnaMCX4WEsZCkEuT/sJcP UHzNC7Oi4Q4RIpCZ+KBPdVqdAgCYTV0/a+dt7uJsf26cVCJsgL9v35rE8dk3JYNS 053Bpc1lzsdKBk8bazO5/0uFmbmqIvKlaWGV/38poItYK+jv+Zc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:14:09 2026 by rpki-client