$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: t4gPbPAcH7TCmaLsBa4SxAAmcdIIchkoPf0qrsop/h8= Subject key identifier: FE:6E:FA:5B:66:23:5D:A9:A3:3F:AC:E3:2C:AE:D6:4D:C1:DF:B8:B2 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 3AABB014F424834F78F1F7E8C68B921EDF132B2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 012A Signing time: Wed 06 Aug 2025 00:21:44 +0000 Manifest this update: Wed 06 Aug 2025 00:16:44 +0000 Manifest next update: Sat 09 Aug 2025 09:02:44 +0000 Files and hashes: 1: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: V6vjICvLn9S4w47zPr9Ez7hlj2eh2ZKDEs6q4ZLFC0o=) 2: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 3: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) 4: 3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa (hash: Av+/utp0kWimi6k+EGw6qb8Dfeu6Ca9sqADqCSG4T5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 09:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ab:b0:14:f4:24:83:4f:78:f1:f7:e8:c6:8b:92:1e:df:13:2b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Aug 6 00:16:44 2025 GMT Not After : Aug 9 09:02:44 2025 GMT Subject: CN=FE6EFA5B66235DA9A33FACE32CAED64DC1DFB8B2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:1b:8f:2c:ad:1b:72:ca:66:96:94:85:7d:8b: 69:66:1a:55:80:62:56:ca:a5:af:14:5d:56:4a:23: 25:27:7a:4e:d7:6d:e3:c3:9c:a8:55:c7:e5:fc:a3: 80:2a:ee:cf:30:3e:64:9b:20:00:74:48:b8:69:10: 43:80:a1:22:59:0b:e8:af:f8:db:9d:0c:76:10:50: 06:a0:e4:30:ec:44:5d:41:b4:08:cf:df:d0:30:47: ae:05:c6:ab:e8:4e:02:24:00:bd:c4:74:b3:31:4a: 71:19:72:f0:c7:69:bb:3d:c3:15:80:53:c2:0a:8f: f5:93:04:30:b1:8e:d8:33:4e:9f:53:e9:b5:13:5f: 58:d7:37:49:5a:85:0c:f5:61:ab:ca:64:c3:d1:6a: e1:0b:96:09:b7:f1:ad:ba:a5:8d:ec:ed:f6:9d:71: 2c:d4:67:b1:c2:e0:f4:d5:de:0a:3f:c9:51:06:12: 01:54:a1:89:53:5f:af:07:7d:88:18:6c:43:43:ac: f5:89:32:b7:b6:f6:7f:4e:6b:3c:16:7d:a0:24:c8: 76:5f:cd:06:a2:50:22:ea:d2:2d:0b:63:a7:f0:0d: 01:c1:00:cf:e1:ae:63:3f:53:66:84:43:f0:bc:e4: dd:12:17:c5:d9:eb:8e:fa:b4:7e:53:f5:90:e8:f7: 4f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:6E:FA:5B:66:23:5D:A9:A3:3F:AC:E3:2C:AE:D6:4D:C1:DF:B8:B2 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:7d:63:10:38:1d:34:d4:46:f6:16:de:5b:14:96:97:5e:b4: bd:2e:7a:1b:c9:55:d5:b1:fa:ba:21:bc:7d:26:33:ca:06:35: dc:8b:5b:3f:36:6e:d1:30:09:c5:f1:58:bf:da:63:64:2f:f6: 88:c5:2e:4f:de:73:4c:e6:d0:78:65:cf:38:4f:1b:a8:bc:0c: b9:5d:c0:ed:34:2e:2c:59:7f:d2:41:67:80:38:ad:cd:0b:6d: d0:92:41:04:bb:e1:a1:7c:1f:03:30:2f:17:92:f4:78:5c:fd: 45:af:30:56:b4:37:ce:9f:a7:1d:a3:df:57:05:f9:ad:56:fb: ed:ab:e8:7a:8d:4c:77:af:16:d9:ff:e3:53:cf:2c:3e:06:e6: 7d:1f:6b:5e:0b:5a:e2:86:c5:a4:ce:c8:23:1e:9b:0a:cb:4f: da:cc:2d:9a:fd:e1:50:63:3a:14:ff:0f:50:14:2e:24:3c:ac: c5:cb:88:99:77:d5:ac:05:ce:f6:95:1d:4e:ea:0f:28:2f:37: b4:44:b2:10:3d:66:b0:e4:46:ab:75:92:eb:c1:80:40:f0:fa: 59:ba:6a:91:99:29:97:fa:29:ab:fb:a9:72:df:2d:1c:c4:fd: 9d:57:a9:19:ae:58:38:cd:15:ec:59:92:b4:20:a2:c8:26:eb: b7:9e:17:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOquwFPQkg0948ffoxouSHt8TKyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA4MDYwMDE2NDRaFw0yNTA4MDkwOTAyNDRaMDMxMTAvBgNV BAMTKEZFNkVGQTVCNjYyMzVEQTlBMzNGQUNFMzJDQUVENjREQzFERkI4QjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoG48srRtyymaWlIV9i2lmGlWA YlbKpa8UXVZKIyUnek7XbePDnKhVx+X8o4Aq7s8wPmSbIAB0SLhpEEOAoSJZC+iv +NudDHYQUAag5DDsRF1BtAjP39AwR64FxqvoTgIkAL3EdLMxSnEZcvDHabs9wxWA U8IKj/WTBDCxjtgzTp9T6bUTX1jXN0lahQz1YavKZMPRauELlgm38a26pY3s7fad cSzUZ7HC4PTV3go/yVEGEgFUoYlTX68HfYgYbENDrPWJMre29n9OazwWfaAkyHZf zQaiUCLq0i0LY6fwDQHBAM/hrmM/U2aEQ/C85N0SF8XZ6476tH5T9ZDo909DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/m76W2YjXamjP6zjLK7WTcHfuLIwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK19YxA4HTTURvYW3lsUlpdetL0uehvJVdWx +rohvH0mM8oGNdyLWz82btEwCcXxWL/aY2Qv9ojFLk/ec0zm0HhlzzhPG6i8DLld wO00LixZf9JBZ4A4rc0LbdCSQQS74aF8HwMwLxeS9Hhc/UWvMFa0N86fpx2j31cF +a1W++2r6HqNTHevFtn/41PPLD4G5n0fa14LWuKGxaTOyCMemwrLT9rMLZr94VBj OhT/D1AULiQ8rMXLiJl31awFzvaVHU7qDygvN7REshA9ZrDkRqt1kuvBgEDw+lm6 apGZKZf6Kav7qXLfLRzE/Z1XqRmuWDjNFexZkrQgosgm67eeF54= -----END CERTIFICATE-----Generated at Thu Aug 7 03:29:10 2025 by rpki-client