$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: TvminYukbmSTGEJ8AVR71qpFbk8bJ68+kaZo+ZJLTUM= Subject key identifier: 63:C4:87:E6:5F:B1:AC:C1:D0:A9:5C:E2:21:FF:F4:D2:A5:4A:8B:AD Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 30B1D76F88900EEA3E432539600A2F08FFA6877E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: AF Signing time: Mon 03 Nov 2025 21:40:54 +0000 Manifest this update: Mon 03 Nov 2025 21:35:54 +0000 Manifest next update: Fri 07 Nov 2025 02:50:54 +0000 Files and hashes: 1: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: tNOgG2zbo4rk7vkcvxy94pE58ixU4CLLGKoHr7HWBKk=) 2: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: zq3XUtWUMp0zXLqS/h6fSXmJ9nW393TzFtoUHHHWKlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 02:50:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:b1:d7:6f:88:90:0e:ea:3e:43:25:39:60:0a:2f:08:ff:a6:87:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Nov 3 21:35:54 2025 GMT Not After : Nov 7 02:50:54 2025 GMT Subject: CN=63C487E65FB1ACC1D0A95CE221FFF4D2A54A8BAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:b4:55:c0:3a:5e:62:94:17:05:5e:ea:07: 1f:9d:a4:38:59:45:22:c8:3d:67:5c:d6:da:63:eb: ea:1d:b5:34:b6:91:2f:0e:58:ab:ab:82:31:61:f8: 54:d1:8e:8d:aa:a2:8b:b6:0f:0f:6f:bf:15:f8:58: a4:7b:78:c9:51:ae:25:9b:c4:11:82:75:d4:54:73: 27:01:d7:26:63:c2:a4:a2:c6:49:a8:0f:89:b3:d6: ea:75:5d:ca:7b:4e:4b:01:c6:c7:10:fc:d7:37:d0: 45:00:39:24:35:62:71:5d:14:42:5c:29:df:26:68: f8:d9:91:8f:7e:d5:47:ed:7b:f9:e8:3f:bd:1e:57: 12:72:3c:df:04:01:62:18:f5:71:6c:a8:7b:2c:da: e2:67:84:bf:35:0f:3f:4b:3a:35:3f:c9:e0:ee:f0: 14:76:09:9a:24:0b:e2:c3:04:74:69:c1:6b:59:de: 28:07:fb:ef:e1:36:27:39:d9:56:49:1b:04:4c:64: d8:a6:a2:e8:db:7c:ce:c0:d6:5d:aa:9d:85:37:68: 82:12:25:2d:06:4b:e1:41:39:02:15:ae:45:f0:28: 1d:85:74:8c:ca:08:ca:e2:9e:fc:37:70:c9:6c:b3: a8:68:2c:b2:7f:cb:78:76:be:fe:8b:e6:30:25:8a: 3f:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:C4:87:E6:5F:B1:AC:C1:D0:A9:5C:E2:21:FF:F4:D2:A5:4A:8B:AD X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:33:9e:a7:96:8b:d3:3c:0b:2b:f5:f2:d0:e5:2c:4e:3b:22: 8a:55:91:ed:41:5c:91:cf:67:a7:80:44:df:04:7b:06:d9:48: fe:b3:e5:c9:94:65:05:81:9e:46:cb:1a:47:0c:18:90:ad:4b: 45:7d:d4:0a:1e:24:0d:fe:d2:63:b6:56:df:bc:0b:8e:d9:aa: e2:d0:81:1a:75:3a:37:67:e9:57:14:7a:c4:c4:6f:ee:c0:c5: c9:9c:d0:ca:10:d1:ca:f7:7a:24:04:80:f7:fd:29:cb:38:a1: b6:4a:4a:27:e6:a7:17:02:48:44:1b:2b:69:b1:d0:01:ed:20: ce:ab:99:9c:72:89:4a:51:e1:b2:63:e9:8a:83:ce:67:94:0a: 5a:b8:6e:13:eb:e4:fc:ff:19:24:6f:4b:e3:fa:6a:76:07:90: 3a:d0:35:4f:06:25:3f:6c:3f:8f:63:af:8c:8b:05:f5:84:b2: 4d:6c:43:54:91:cf:05:13:b7:f8:72:6a:39:7f:02:98:0f:72: 9e:34:80:2d:86:e4:4e:05:1c:bb:1d:c5:3c:3f:09:a0:ad:2b: b7:1c:e7:4c:1d:fc:0a:2d:89:75:62:2e:43:67:ed:f0:bb:ed: 90:f5:29:a9:10:95:31:76:c4:24:12:99:68:39:0b:3a:a4:06: 98:ff:bb:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMLHXb4iQDuo+QyU5YAovCP+mh34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTExMDMyMTM1NTRaFw0yNTExMDcwMjUwNTRaMDMxMTAvBgNV BAMTKDYzQzQ4N0U2NUZCMUFDQzFEMEE5NUNFMjIxRkZGNEQyQTU0QThCQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3bRVwDpeYpQXBV7qBx+dpDhZ RSLIPWdc1tpj6+odtTS2kS8OWKurgjFh+FTRjo2qoou2Dw9vvxX4WKR7eMlRriWb xBGCddRUcycB1yZjwqSixkmoD4mz1up1Xcp7TksBxscQ/Nc30EUAOSQ1YnFdFEJc Kd8maPjZkY9+1Ufte/noP70eVxJyPN8EAWIY9XFsqHss2uJnhL81Dz9LOjU/yeDu 8BR2CZokC+LDBHRpwWtZ3igH++/hNic52VZJGwRMZNimoujbfM7A1l2qnYU3aIIS JS0GS+FBOQIVrkXwKB2FdIzKCMrinvw3cMlss6hoLLJ/y3h2vv6L5jAlij+BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY8SH5l+xrMHQqVziIf/00qVKi60wHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIznqeWi9M8Cyv18tDlLE47IopVke1BXJHP Z6eARN8EewbZSP6z5cmUZQWBnkbLGkcMGJCtS0V91AoeJA3+0mO2Vt+8C47ZquLQ gRp1Ojdn6VcUesTEb+7Axcmc0MoQ0cr3eiQEgPf9Kcs4obZKSifmpxcCSEQbK2mx 0AHtIM6rmZxyiUpR4bJj6YqDzmeUClq4bhPr5Pz/GSRvS+P6anYHkDrQNU8GJT9s P49jr4yLBfWEsk1sQ1SRzwUTt/hyajl/ApgPcp40gC2G5E4FHLsdxTw/CaCtK7cc 50wd/AotiXViLkNn7fC77ZD1KakQlTF2xCQSmWg5CzqkBpj/u3U= -----END CERTIFICATE-----Generated at Thu Nov 6 03:27:50 2025 by rpki-client