$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: XN7yh43YBLEFTuNzNOMbCuPNVh/GQnO7O3ua3hUfTd0= Subject key identifier: DF:37:BD:B5:09:19:98:F8:F6:60:80:A5:C7:56:21:3E:A8:57:03:48 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 53F1FEAD26DFD68CEA729C296D8D20601272D14B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: FC Signing time: Tue 29 Apr 2025 12:21:42 +0000 Manifest this update: Tue 29 Apr 2025 12:16:42 +0000 Manifest next update: Fri 02 May 2025 21:42:42 +0000 Files and hashes: 1: 3130332e33382e3131302e302f32332d3234203d3e20313531353639.roa (hash: fz4jQ39XtDTg8Ui8fp6XbcvLBixTeHrSwMTFcEaOYh8=) 2: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) 3: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: vb/L/86EuCz/Q1i7lHCxOZBD3Ban+44CSSBnsaePl0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f1:fe:ad:26:df:d6:8c:ea:72:9c:29:6d:8d:20:60:12:72:d1:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Apr 29 12:16:42 2025 GMT Not After : May 2 21:42:42 2025 GMT Subject: CN=DF37BDB5091998F8F66080A5C756213EA8570348 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5f:89:a8:46:69:06:39:8e:b2:e1:34:0d:0b: be:9a:6c:4e:c0:7f:63:d5:22:48:6d:40:30:d1:9d: fd:4d:82:29:f5:94:33:67:6c:80:de:c0:6e:1a:f6: 96:4b:e3:58:65:38:f7:da:27:3b:34:38:6d:cb:56: d6:52:e5:f5:6c:9e:15:ef:90:4d:e9:f8:34:a1:b9: 3d:60:48:3a:b3:b8:74:d5:a0:9e:af:58:cf:11:9a: ca:f5:8d:04:24:88:f4:6b:f5:70:69:5e:3b:0a:b5: d5:94:db:0d:e5:03:03:da:7b:77:23:58:c0:27:ca: 84:bf:fd:40:56:e5:ca:b1:ea:f9:e2:8b:03:ed:6f: 1d:4f:dd:75:2b:a9:fa:33:6d:7f:7c:12:cb:1e:63: 7c:e8:9a:fb:b4:cb:a9:6f:8f:b7:ea:e7:9b:2e:66: 55:76:14:a6:a9:98:db:bf:2f:f2:ae:ca:d8:76:8f: c6:f0:29:f4:ec:c1:9c:c2:cf:9a:75:44:f9:dc:07: f6:3a:92:a3:37:f3:60:2e:0f:9c:81:62:29:f2:aa: 03:de:b9:6c:50:a0:75:a9:b3:92:f8:26:94:d0:80: be:12:ab:86:a5:ed:a6:63:1d:2f:b4:63:01:71:40: c4:65:6f:95:e3:90:03:03:c4:cc:46:cf:2e:eb:95: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:BD:B5:09:19:98:F8:F6:60:80:A5:C7:56:21:3E:A8:57:03:48 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:66:05:94:98:f1:03:59:d3:7a:cc:4e:c3:94:1a:8b:d3:31: 26:bf:9e:fe:57:3c:65:65:2c:a5:56:64:e0:18:2a:f0:9a:b1: f0:bd:03:7f:98:c9:50:db:74:d1:07:b2:35:e0:79:91:35:19: 84:ee:99:86:f1:a9:0f:ea:a3:82:ca:a3:8f:ac:1b:f0:7a:0f: 1c:28:e2:3b:c7:b7:95:38:d2:5d:f0:19:13:4d:f3:3e:e6:07: c1:3e:61:63:e8:9b:1e:23:68:66:51:8e:c6:8e:6b:4d:04:22: 38:18:2f:2e:58:da:fc:11:3c:82:a0:d1:dd:9b:24:06:12:e6: f3:19:47:58:c4:c3:db:16:fa:39:34:9d:b6:2e:40:e1:f1:14: a3:21:dd:98:d6:c1:7e:0e:82:ba:ee:81:97:42:5f:dd:aa:00: 50:ca:0a:25:ea:3f:69:3e:d9:9f:85:ef:9b:9d:e5:69:dd:9f: 71:64:0a:bc:42:e1:26:f6:58:91:bc:b8:95:87:f8:5a:d3:33: 7e:96:d1:37:33:61:9f:bd:46:90:8d:8d:04:65:fe:eb:7f:ed: 19:77:63:4a:57:14:1a:81:45:05:ec:df:58:e0:9f:38:1d:90: c3:c1:2f:0b:a5:78:54:26:24:56:b8:22:15:43:d0:ed:e9:8d: 01:36:b3:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/H+rSbf1ozqcpwpbY0gYBJy0UswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA0MjkxMjE2NDJaFw0yNTA1MDIyMTQyNDJaMDMxMTAvBgNV BAMTKERGMzdCREI1MDkxOTk4RjhGNjYwODBBNUM3NTYyMTNFQTg1NzAzNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4X4moRmkGOY6y4TQNC76abE7A f2PVIkhtQDDRnf1Ngin1lDNnbIDewG4a9pZL41hlOPfaJzs0OG3LVtZS5fVsnhXv kE3p+DShuT1gSDqzuHTVoJ6vWM8Rmsr1jQQkiPRr9XBpXjsKtdWU2w3lAwPae3cj WMAnyoS//UBW5cqx6vniiwPtbx1P3XUrqfozbX98EsseY3zomvu0y6lvj7fq55su ZlV2FKapmNu/L/Kuyth2j8bwKfTswZzCz5p1RPncB/Y6kqM382AuD5yBYinyqgPe uWxQoHWps5L4JpTQgL4Sq4al7aZjHS+0YwFxQMRlb5XjkAMDxMxGzy7rlXlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3ze9tQkZmPj2YIClx1YhPqhXA0gwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5mBZSY8QNZ03rMTsOUGovTMSa/nv5XPGVl LKVWZOAYKvCasfC9A3+YyVDbdNEHsjXgeZE1GYTumYbxqQ/qo4LKo4+sG/B6Dxwo 4jvHt5U40l3wGRNN8z7mB8E+YWPomx4jaGZRjsaOa00EIjgYLy5Y2vwRPIKg0d2b JAYS5vMZR1jEw9sW+jk0nbYuQOHxFKMh3ZjWwX4OgrrugZdCX92qAFDKCiXqP2k+ 2Z+F75ud5Wndn3FkCrxC4Sb2WJG8uJWH+FrTM36W0TczYZ+9RpCNjQRl/ut/7Rl3 Y0pXFBqBRQXs31jgnzgdkMPBLwuleFQmJFa4IhVD0O3pjQE2s3Q= -----END CERTIFICATE-----Generated at Wed Apr 30 01:27:49 2025 by rpki-client