$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: H53o9sI2WIAlbIBeIa7AnE+0NIl1bD+k+gRUY656JMk= Subject key identifier: E8:48:41:CA:6D:05:C0:35:8D:1A:F2:6F:83:77:C5:C0:9D:2D:8F:B4 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 2213227A4006C8309DD4B0ED5275C03C399DE493 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0111 Signing time: Mon 16 Jun 2025 09:31:40 +0000 Manifest this update: Mon 16 Jun 2025 09:26:40 +0000 Manifest next update: Thu 19 Jun 2025 14:30:40 +0000 Files and hashes: 1: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: DVbgTFE9d7HY4lofOu2+3clbDJJzPrGV+CplwTmX52U=) 2: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) 3: 3130332e33382e3131302e302f32332d3234203d3e20313531353639.roa (hash: fz4jQ39XtDTg8Ui8fp6XbcvLBixTeHrSwMTFcEaOYh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 11:48:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:13:22:7a:40:06:c8:30:9d:d4:b0:ed:52:75:c0:3c:39:9d:e4:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Jun 16 09:26:40 2025 GMT Not After : Jun 19 14:30:40 2025 GMT Subject: CN=E84841CA6D05C0358D1AF26F8377C5C09D2D8FB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:29:04:b6:1e:64:bd:29:dc:08:81:69:40:35: bc:da:97:c6:c3:61:77:5d:5f:d4:31:1c:e1:fd:1b: 56:b5:55:60:02:cd:56:49:90:78:23:60:e1:5e:6f: 62:2a:40:01:5d:d2:38:45:3f:c9:8a:49:2c:14:fb: 3f:75:92:9d:c9:e6:06:6b:58:88:b4:ed:27:97:de: 02:26:32:c7:72:6a:84:d1:4a:5f:03:e4:f7:46:c6: d1:2d:b7:5c:b8:42:39:bf:14:d2:9f:d4:16:45:3c: 0c:f6:f1:df:30:31:8e:ad:d4:f8:3c:59:60:b7:59: ba:ef:fc:a5:60:13:3c:4f:93:16:90:e3:2e:16:b3: 73:66:1b:9d:e9:5c:a6:08:86:7a:18:91:46:21:bc: 73:b4:bb:69:c6:16:69:91:9f:56:fd:3f:1e:36:19: c6:14:0d:b4:d5:29:26:d2:04:d6:8c:75:64:1d:e4: 97:41:14:b2:68:8f:c7:ae:2e:4a:d6:b8:70:e2:79: c7:9c:e2:77:a3:1c:70:22:25:0d:95:b6:47:ce:6f: 64:af:95:ca:96:c7:c7:0a:6e:0d:73:f1:4f:c7:a8: c8:21:c4:e4:a5:a1:5f:f6:ee:25:bb:5d:94:76:0e: d9:e5:fc:ca:b4:98:81:aa:d3:e7:53:ae:3b:d9:d5: 51:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:48:41:CA:6D:05:C0:35:8D:1A:F2:6F:83:77:C5:C0:9D:2D:8F:B4 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:81:43:65:61:14:71:30:0c:07:35:a2:99:04:8e:87:6a:0f: 28:2e:e2:08:d2:1e:99:a1:06:18:c2:13:c7:e8:6e:14:de:4f: 22:a2:75:1b:2e:e4:82:7c:c2:cb:c4:1e:02:e8:9e:70:c3:d5: 03:f4:2d:b3:9f:70:0a:55:8f:d1:7f:14:e3:35:24:f1:e3:66: 15:63:1c:51:5f:9c:50:e4:94:74:a6:d7:aa:03:5c:2a:d2:3b: 54:f9:12:da:39:d2:80:c5:6f:5d:85:95:a6:0c:b8:aa:66:a9: e1:1b:f5:e9:19:ff:35:a3:20:eb:56:90:a8:51:c5:1b:35:b0: 2a:29:ce:6a:ad:1f:d5:2d:13:a0:63:75:d5:30:f4:2c:82:a3: 86:29:e2:8a:b2:d2:e6:dd:c9:f5:95:f2:ba:63:bc:2e:89:72: f3:e8:97:42:38:40:7a:35:23:48:72:b1:80:a8:50:3b:75:a3: f1:f1:26:ec:bc:d7:cc:d4:4d:61:29:b1:c1:a5:30:6e:03:2d: 98:93:dd:de:50:f1:e9:6d:2e:63:76:af:ff:83:e1:8f:f8:74: e8:42:72:76:9c:b6:03:6c:98:ae:85:39:e7:e1:8b:3f:e8:12: 67:ae:a3:6a:bc:76:af:cf:85:0e:14:ec:64:70:78:a9:6a:9e: e8:8e:f3:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIhMiekAGyDCd1LDtUnXAPDmd5JMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA2MTYwOTI2NDBaFw0yNTA2MTkxNDMwNDBaMDMxMTAvBgNV BAMTKEU4NDg0MUNBNkQwNUMwMzU4RDFBRjI2RjgzNzdDNUMwOUQyRDhGQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKQS2HmS9KdwIgWlANbzal8bD YXddX9QxHOH9G1a1VWACzVZJkHgjYOFeb2IqQAFd0jhFP8mKSSwU+z91kp3J5gZr WIi07SeX3gImMsdyaoTRSl8D5PdGxtEtt1y4Qjm/FNKf1BZFPAz28d8wMY6t1Pg8 WWC3Wbrv/KVgEzxPkxaQ4y4Ws3NmG53pXKYIhnoYkUYhvHO0u2nGFmmRn1b9Px42 GcYUDbTVKSbSBNaMdWQd5JdBFLJoj8euLkrWuHDiecec4nejHHAiJQ2VtkfOb2Sv lcqWx8cKbg1z8U/HqMghxOSloV/27iW7XZR2Dtnl/Mq0mIGq0+dTrjvZ1VHBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6EhBym0FwDWNGvJvg3fFwJ0tj7QwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKBQ2VhFHEwDAc1opkEjodqDygu4gjSHpmh BhjCE8fobhTeTyKidRsu5IJ8wsvEHgLonnDD1QP0LbOfcApVj9F/FOM1JPHjZhVj HFFfnFDklHSm16oDXCrSO1T5Eto50oDFb12FlaYMuKpmqeEb9ekZ/zWjIOtWkKhR xRs1sCopzmqtH9UtE6BjddUw9CyCo4Yp4oqy0ubdyfWV8rpjvC6JcvPol0I4QHo1 I0hysYCoUDt1o/HxJuy818zUTWEpscGlMG4DLZiT3d5Q8eltLmN2r/+D4Y/4dOhC cnactgNsmK6FOefhiz/oEmeuo2q8dq/PhQ4U7GRweKlqnuiO87o= -----END CERTIFICATE-----Generated at Mon Jun 16 15:50:52 2025 by rpki-client