$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft File: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json) Hash identifier: ZVQ3S0yrVD63PWG+dvYmCM4nQvo9ZAM6g/Myr6ci0Jk= Subject key identifier: 95:5D:C2:D5:AA:46:B3:FE:C2:D0:09:36:8C:97:94:9C:B5:01:BA:43 Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC Certificate issuer: /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Certificate serial: 295DB5F09D0C565B538ABFF7E3DA0E4129BCC73C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject info access: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft Manifest number: 03D7 Signing time: Wed 05 Nov 2025 10:48:45 +0000 Manifest this update: Wed 05 Nov 2025 10:43:45 +0000 Manifest next update: Thu 06 Nov 2025 11:33:45 +0000 Files and hashes: 1: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: wZpa/GAw/+LZ/5VD3LkDlyxUo6eY0mnlaZ6P5jMgauk=) 2: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: VzgTFP3K3ygUqjqoPkC7s7tjeyqTHVnjgq3zWGYCRKg=) 3: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: XBT+G1DQ9/F6v2XQZcRxw+M4rvuykMlUtUtQD6DlGXU=) 4: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: Ndg1bmsRuBSL7CF5QQzZOGIFLYIHMSUM05PGM6gpt7I=) 5: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: f/uHdRx9VZqoZk3nqfnUiYoyLo18xCMnrIDjbbMrTto=) 6: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: krBHbmd4sRl8JcYmJ0wVMDOObzdDKjBrVYgk8C/d6iU=) 7: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: jS7uDPReOddZwVCAwtZ435utMhttXzVf5ZdMVbhKurY=) 8: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: Chrj9m4BrE2U2pfcWlFNBSg+oO8sOSxTQ6ekpt4BV7I=) 9: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: EWyx31GnzeEa34YdlCfOKBBLtKjLerW7tETk3ztfEgw=) 10: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: SPGV8cz23OXVtY1/WBtsxbxXhYFhmyQwGc0AQ879Tzo=) 11: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: tEG9JFKiDdsjMGlGAtGF9ff7/fO0QNV3vFqHY+f6qAc=) Validation: OK Signature path: rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 11:33:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:5d:b5:f0:9d:0c:56:5b:53:8a:bf:f7:e3:da:0e:41:29:bc:c7:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9121C330000, serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC Validity Not Before: Nov 5 10:43:45 2025 GMT Not After : Nov 6 11:33:45 2025 GMT Subject: CN=955DC2D5AA46B3FEC2D009368C97949CB501BA43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:14:70:77:50:73:ec:fc:ce:8c:19:cf:4d:09: fa:98:7d:a0:7b:06:97:1e:54:ab:3d:bf:85:c7:ed: 59:ea:05:55:56:bf:9a:e6:89:44:07:c8:c7:3d:6f: 3d:ea:6b:72:27:af:c5:7d:c0:87:90:30:d3:3a:35: fa:1b:f9:4e:7e:58:13:91:7b:d5:3b:e1:75:2b:74: 2b:d0:72:88:75:5e:f2:03:87:6c:16:d5:3f:3b:ba: 74:81:50:6f:fd:87:e3:47:4c:03:48:8f:ae:f6:35: 79:d3:12:b0:05:7b:41:88:ff:ae:34:20:25:92:25: 06:8a:b9:c5:74:8f:88:8b:40:96:0d:8b:33:2b:bd: 31:7f:74:09:ef:f2:c5:e8:53:2f:d4:4f:13:d7:bf: f0:1a:4f:36:3e:65:84:88:53:e8:ab:99:7a:7e:2f: 83:41:32:0a:f0:75:37:fe:90:0a:66:f6:a8:14:da: 5f:17:e2:4c:a5:a2:3a:89:82:7e:ed:44:8c:2a:c4: 75:cc:b2:6a:b3:85:d8:ae:8c:3e:16:21:f1:29:25: 77:3e:04:ee:45:03:f2:e5:07:f7:0b:08:ac:e7:a1: c7:10:d6:33:8a:f9:6c:2c:18:3c:cc:9c:cc:f2:c1: c7:a0:ef:47:78:b0:3d:2d:00:88:3c:6f:3f:97:12: e2:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:5D:C2:D5:AA:46:B3:FE:C2:D0:09:36:8C:97:94:9C:B5:01:BA:43 X509v3 Authority Key Identifier: keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer Subject Information Access: Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:6f:0f:f3:7e:2e:73:d3:c1:19:49:c2:ac:e8:5c:bd:f8:ac: 8c:31:72:98:ad:fd:47:d5:b2:e3:9b:0b:32:02:97:9f:a9:bf: 4e:95:01:9e:da:c2:78:5a:d6:b4:b7:2e:6b:b3:7d:d0:47:8c: dd:83:3f:13:8a:a0:45:2f:70:3f:8f:98:10:1d:77:cb:08:83: 2e:9b:d5:21:4c:46:96:7d:ab:3b:fd:cb:08:ae:75:8b:6b:89: 60:fc:4d:3a:b5:24:20:e3:a5:73:00:39:b3:24:94:94:96:80: 58:88:84:bf:dc:0e:d0:46:80:15:10:49:ab:51:f3:2d:eb:73: 81:e8:bc:20:65:f6:53:17:9f:d6:8c:e5:9a:da:04:18:ff:2f: d5:4b:bd:6f:29:a9:29:3f:60:46:e6:5c:d3:71:71:3a:a1:e6: a6:fb:87:34:f4:9a:45:4e:5c:26:ce:ef:ea:93:23:8b:bc:27: 6b:65:56:43:23:99:17:cd:22:8e:e5:7f:74:dd:e5:6a:12:3c: 6c:fc:31:08:3d:b1:f0:f3:e0:b4:85:26:ef:01:80:6b:ff:fe: 1e:81:67:76:e1:20:a8:72:d4:0f:2a:eb:c4:2c:e2:0c:ee:0a: 00:8d:75:2e:c4:9d:30:db:a6:38:4e:1a:54:01:c7:6e:c7:5f: 2f:e3:7b:e5 -----BEGIN CERTIFICATE----- MIIFBjCCA+6gAwIBAgIUKV218J0MVltTir/349oOQSm8xzwwDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxMjFDMzMwMDAwMTEwLwYDVQQFEyg5Q0YwNUU3MDI0 RDRBNDg3RTBCNzlFMkY1NzUyNUJGMzQ1REI1M0VDMB4XDTI1MTEwNTEwNDM0NVoX DTI1MTEwNjExMzM0NVowMzExMC8GA1UEAxMoOTU1REMyRDVBQTQ2QjNGRUMyRDAw OTM2OEM5Nzk0OUNCNTAxQkE0MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALIUcHdQc+z8zowZz00J+ph9oHsGlx5Uqz2/hcftWeoFVVa/muaJRAfIxz1v PeprcievxX3Ah5Aw0zo1+hv5Tn5YE5F71TvhdSt0K9ByiHVe8gOHbBbVPzu6dIFQ b/2H40dMA0iPrvY1edMSsAV7QYj/rjQgJZIlBoq5xXSPiItAlg2LMyu9MX90Ce/y xehTL9RPE9e/8BpPNj5lhIhT6KuZen4vg0EyCvB1N/6QCmb2qBTaXxfiTKWiOomC fu1EjCrEdcyyarOF2K6MPhYh8Skldz4E7kUD8uUH9wsIrOehxxDWM4r5bCwYPMyc zPLBx6DvR3iwPS0AiDxvP5cS4qsCAwEAAaOCAfkwggH1MB0GA1UdDgQWBBSVXcLV qkaz/sLQCTaMl5SctQG6QzAfBgNVHSMEGDAWgBSc8F5wJNSkh+C3ni9XUlvzRdtT 7DAOBgNVHQ8BAf8EBAMCB4AwYQYDVR0fBFowWDBWoFSgUoZQcnN5bmM6Ly9yc3lu Yy5ycC5raS9yZXBvL21pc2FrYWlvLzAvOUNGMDVFNzAyNEQ0QTQ4N0UwQjc5RTJG NTc1MjVCRjM0NURCNTNFQy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAC hmJyc3luYzovL3Jwa2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2 MTFFMkJCNDY4RjdDNzJGRDFGRjIvblBCZWNDVFVwSWZndDU0dlYxSmI4MFhiVS13 LmNlcjBsBggrBgEFBQcBCwRgMF4wXAYIKwYBBQUHMAuGUHJzeW5jOi8vcnN5bmMu cnAua2kvcmVwby9taXNha2Fpby8wLzlDRjA1RTcwMjRENEE0ODdFMEI3OUUyRjU3 NTI1QkYzNDVEQjUzRUMubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQG MASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAAbw/zfi5z08EZScKs6Fy9+KyMMXKY rf1H1bLjmwsyApefqb9OlQGe2sJ4Wta0ty5rs33QR4zdgz8TiqBFL3A/j5gQHXfL CIMum9UhTEaWfas7/csIrnWLa4lg/E06tSQg46VzADmzJJSUloBYiIS/3A7QRoAV EEmrUfMt63OB6LwgZfZTF5/WjOWa2gQY/y/VS71vKakpP2BG5lzTcXE6oeam+4c0 9JpFTlwmzu/qkyOLvCdrZVZDI5kXzSKO5X903eVqEjxs/DEIPbHw8+C0hSbvAYBr //4egWd24SCoctQPKuvELOIM7goAjXUuxJ0w26Y4ThpUAcdux18v43vl -----END CERTIFICATE-----Generated at Wed Nov 5 23:03:46 2025 by rpki-client