$ rpki-client -vvf repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft File: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft (raw, json) Hash identifier: f37YP6kARdZVtFIBp9075Zdqs+qFcJ/McucQoEk5wOg= Subject key identifier: 4A:42:87:48:37:4A:FF:79:3B:8F:5D:BB:AC:40:32:EC:19:4A:10:7E Authority key identifier: 9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 Certificate issuer: /CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Certificate serial: 23FF21036A0A50FB186D7D8F8F3B6DB700CD36C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft Manifest number: 87 Signing time: Tue 05 Aug 2025 20:40:56 +0000 Manifest this update: Tue 05 Aug 2025 20:35:56 +0000 Manifest next update: Sat 09 Aug 2025 02:15:56 +0000 Files and hashes: 1: 323030313a6466343a353534303a3a2f34382d3438203d3e20313533313232.roa (hash: llXvyGLPDurj6bmSYN1tz+/ct/cQR7nz/GjhVW22jnQ=) 2: 9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl (hash: TSuAf+KLsrU1Svj3VjHNUY8k4diZCLLJ8VLDjTShPgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:15:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:ff:21:03:6a:0a:50:fb:18:6d:7d:8f:8f:3b:6d:b7:00:cd:36:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AFE573FE3290DFBE2E64FACEC24DC7BDD161076 Validity Not Before: Aug 5 20:35:56 2025 GMT Not After : Aug 9 02:15:56 2025 GMT Subject: CN=4A428748374AFF793B8F5DBBAC4032EC194A107E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:72:40:f1:bf:ab:c4:fc:3e:de:5e:7d:9d:e0: ad:8b:57:8b:2b:b2:76:d1:e0:04:a8:53:02:24:d0: cc:50:fc:8e:b2:ce:6a:fa:35:cf:86:d1:f4:37:81: ef:10:47:33:a9:e2:99:31:ec:cd:59:a9:51:7b:8e: 60:b0:5f:c7:fd:a4:4d:6c:57:bf:79:e0:24:eb:c8: 3c:4d:f3:af:ea:8a:fe:f9:d0:6a:a6:bf:b5:06:ff: 66:96:a9:7b:0b:72:f9:5f:6f:5e:2d:4f:d4:b3:80: 0d:c6:3a:d5:3c:64:d0:26:cf:9b:57:13:08:03:c6: 4b:80:c7:b0:25:df:fb:3d:fb:20:8c:34:e3:0c:99: 2b:b3:c4:4f:21:e6:11:27:93:79:1b:82:f2:ae:6d: 1a:27:fd:e7:c2:f2:72:68:da:97:8d:89:e6:32:c7: fa:44:90:01:8c:2c:56:a5:4c:75:fd:08:0b:95:c4: 23:2a:ca:ce:10:b4:38:6b:9a:1d:6b:bd:88:8a:55: 61:ee:f0:3a:35:44:dc:e8:28:10:8b:88:0f:70:6d: e7:00:7d:84:9d:84:cb:c5:9d:2c:ff:d4:15:2a:58: 97:5b:3e:f9:08:57:0f:df:23:2b:b3:25:0f:db:39: 40:d0:4b:14:15:94:54:cf:db:c6:4d:2c:f9:d1:6f: 7c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:42:87:48:37:4A:FF:79:3B:8F:5D:BB:AC:40:32:EC:19:4A:10:7E X509v3 Authority Key Identifier: keyid:9A:FE:57:3F:E3:29:0D:FB:E2:E6:4F:AC:EC:24:DC:7B:DD:16:10:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d22f649-9968-495d-bdf1-7d76256daad5/1/9AFE573FE3290DFBE2E64FACEC24DC7BDD161076.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:b2:2e:98:da:08:10:6e:f7:c3:a6:7c:63:d2:57:be:b0:3e: 3a:44:de:af:8f:56:11:19:2b:f9:32:33:ea:d0:7c:27:f6:25: e9:c6:c4:d7:bc:14:32:fc:a0:4b:b2:ad:b4:7b:6b:0c:21:31: 76:25:e7:25:74:83:1e:91:67:5e:24:4b:d9:c2:9a:da:f8:3f: 0b:f5:a6:ee:9c:cc:d7:cb:61:e2:1c:6e:3e:0e:81:f0:ad:47: 02:11:a7:9e:37:81:de:a3:8a:8b:98:a3:62:27:90:fe:09:eb: 11:6f:6d:d2:83:0e:0a:93:c7:e5:28:c6:fc:7d:32:aa:ae:b8: a6:23:7a:44:3b:f1:e4:a5:e5:14:3d:c5:7f:eb:62:cd:2d:92: 7f:b4:14:e6:e9:ad:64:26:c2:7e:02:0d:63:15:e3:e0:1c:7a: d9:26:fc:6a:3a:e4:5c:7f:20:0c:b4:f7:eb:88:c7:49:c4:d1: 02:d2:45:ee:2d:f2:0d:97:2c:58:f8:9f:3a:a1:41:ec:33:2c: 9c:0b:3a:e8:6a:c8:7a:b6:9e:c9:e1:e5:d8:37:d7:ea:58:5b: e7:c0:0f:a1:17:fb:f6:4f:30:23:a8:ab:37:36:3c:84:91:4a: 47:18:79:32:c3:15:07:0e:e0:d5:44:37:3e:9b:12:35:3e:2e: c7:c9:94:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/8hA2oKUPsYbX2PjztttwDNNsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JE RDE2MTA3NjAeFw0yNTA4MDUyMDM1NTZaFw0yNTA4MDkwMjE1NTZaMDMxMTAvBgNV BAMTKDRBNDI4NzQ4Mzc0QUZGNzkzQjhGNURCQkFDNDAzMkVDMTk0QTEwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCickDxv6vE/D7eXn2d4K2LV4sr snbR4ASoUwIk0MxQ/I6yzmr6Nc+G0fQ3ge8QRzOp4pkx7M1ZqVF7jmCwX8f9pE1s V7954CTryDxN86/qiv750Gqmv7UG/2aWqXsLcvlfb14tT9SzgA3GOtU8ZNAmz5tX EwgDxkuAx7Al3/s9+yCMNOMMmSuzxE8h5hEnk3kbgvKubRon/efC8nJo2peNieYy x/pEkAGMLFalTHX9CAuVxCMqys4QtDhrmh1rvYiKVWHu8Do1RNzoKBCLiA9wbecA fYSdhMvFnSz/1BUqWJdbPvkIVw/fIyuzJQ/bOUDQSxQVlFTP28ZNLPnRb3xbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkKHSDdK/3k7j127rEAy7BlKEH4wHwYDVR0j BBgwFoAUmv5XP+MpDfvi5k+s7CTce90WEHYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDIyZjY0OS05OTY4LTQ5NWQtYmRmMS03ZDc2MjU2ZGFhZDUvMS85QUZFNTczRkUz MjkwREZCRTJFNjRGQUNFQzI0REM3QkREMTYxMDc2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERDN0JERDE2 MTA3Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyMmY2NDktOTk2OC00OTVkLWJk ZjEtN2Q3NjI1NmRhYWQ1LzEvOUFGRTU3M0ZFMzI5MERGQkUyRTY0RkFDRUMyNERD N0JERDE2MTA3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOyLpjaCBBu98OmfGPSV76wPjpE3q+PVhEZ K/kyM+rQfCf2JenGxNe8FDL8oEuyrbR7awwhMXYl5yV0gx6RZ14kS9nCmtr4Pwv1 pu6czNfLYeIcbj4OgfCtRwIRp543gd6jiouYo2InkP4J6xFvbdKDDgqTx+Uoxvx9 MqquuKYjekQ78eSl5RQ9xX/rYs0tkn+0FObprWQmwn4CDWMV4+Acetkm/Go65Fx/ IAy09+uIx0nE0QLSRe4t8g2XLFj4nzqhQewzLJwLOuhqyHq2nsnh5dg31+pYW+fA D6EX+/ZPMCOoqzc2PISRSkcYeTLDFQcO4NVENz6bEjU+LsfJlJ0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:56 2025 by rpki-client