$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: uezvokveokZuuPB9ctyd+tHAncexHr3uDzcaoh5enVs= Subject key identifier: F7:FC:62:BE:4E:FD:DC:11:4A:CD:7A:5D:41:6D:52:7C:9C:5F:B7:E4 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 69D0756DF60939508DA17B705642F1C91CC6272D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0116 Signing time: Sat 28 Jun 2025 04:01:41 +0000 Manifest this update: Sat 28 Jun 2025 03:56:41 +0000 Manifest next update: Tue 01 Jul 2025 05:05:41 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) 2: 3130332e33382e3131302e302f32332d3234203d3e20313531353639.roa (hash: fz4jQ39XtDTg8Ui8fp6XbcvLBixTeHrSwMTFcEaOYh8=) 3: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: PZWUGkTPEydp3iizwFH+2GHgAiZuRazYBWqp2tTewdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d0:75:6d:f6:09:39:50:8d:a1:7b:70:56:42:f1:c9:1c:c6:27:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Jun 28 03:56:41 2025 GMT Not After : Jul 1 05:05:41 2025 GMT Subject: CN=F7FC62BE4EFDDC114ACD7A5D416D527C9C5FB7E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:2d:ad:09:d4:ca:ea:fe:16:ba:f9:7b:75:80: d2:54:d2:f2:c6:3c:06:64:21:4a:e7:03:17:9b:ec: 50:dd:80:8e:84:cd:80:63:7d:e9:cf:3b:c8:51:b2: 7e:87:eb:7b:64:95:cc:4b:3d:3c:38:aa:06:15:40: f4:51:9d:d3:39:47:87:dd:a5:ab:49:7e:68:18:a8: dc:e0:09:b0:9b:bb:ec:31:06:d0:59:53:c4:bd:af: 2c:a2:6f:83:2b:d5:72:2d:75:08:68:af:83:40:8b: e0:bf:87:5c:9e:b1:b1:16:96:1c:52:40:e4:68:11: 11:41:c8:3f:38:b0:5b:24:e1:d4:6e:fd:c9:6f:ed: bd:03:54:cd:7a:26:72:89:b3:f3:91:9c:a2:b3:e5: 6f:68:bd:45:31:b6:9b:bd:69:71:4c:4a:c1:e6:89: e6:21:8a:0f:fa:4e:43:1c:6d:fb:19:4a:96:8e:88: e9:f2:bf:d2:52:ca:7e:e7:46:0c:0b:6a:64:e9:8b: ce:2b:c8:18:2d:3e:d2:e3:32:5b:9d:19:b8:1b:20: 8d:ae:b2:c0:0b:5b:ca:6f:93:70:2b:72:55:51:4a: e0:f2:75:22:50:6f:5f:45:c3:64:25:3f:ad:d9:6a: a1:08:73:3f:4a:11:af:94:30:3d:99:5a:4e:80:44: 8b:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:FC:62:BE:4E:FD:DC:11:4A:CD:7A:5D:41:6D:52:7C:9C:5F:B7:E4 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:8c:cd:64:2a:83:bc:9b:11:2d:f0:66:97:17:68:ae:fb:5e: 68:3c:c6:c3:78:dd:44:f1:4e:5c:b3:52:77:a6:9e:4b:fa:e6: c6:02:ba:c6:0c:cd:67:ba:eb:98:5d:dd:03:fc:c8:49:a6:7a: 77:3d:d0:25:99:3d:f7:f0:46:ad:80:91:3d:1d:40:a3:39:b2: a1:b1:b6:47:0d:8e:39:42:81:c0:ea:57:6e:0b:3d:8f:41:7a: cf:24:5b:37:99:f1:8c:9d:97:6c:c3:c5:87:1c:09:7b:2c:3e: 0b:c9:33:30:90:24:b0:46:05:a5:c1:b3:24:b5:03:c8:44:67: 8a:d8:88:a9:07:1d:b8:43:4e:18:03:d8:91:ca:0a:3d:01:b8: 09:e0:f8:e0:4f:65:40:c9:9a:97:e2:c7:cf:b8:61:0e:0d:77: da:1b:55:5b:97:b9:53:3e:5d:aa:3e:dd:4e:e3:4e:47:5f:30: e5:65:76:df:19:e2:44:b1:94:04:b3:52:cc:4e:d0:7b:19:55: 35:98:ee:8a:f9:7e:ff:b4:64:6a:60:5f:be:9e:17:a7:71:89: d5:9d:0e:b3:7d:48:d4:b1:45:e9:01:0c:15:51:4c:6d:96:2c: 3c:b3:09:4b:be:b3:3c:79:7f:b9:14:79:86:88:44:ac:c3:7b: 80:7e:3d:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadB1bfYJOVCNoXtwVkLxyRzGJy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA2MjgwMzU2NDFaFw0yNTA3MDEwNTA1NDFaMDMxMTAvBgNV BAMTKEY3RkM2MkJFNEVGRERDMTE0QUNEN0E1RDQxNkQ1MjdDOUM1RkI3RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLa0J1Mrq/ha6+Xt1gNJU0vLG PAZkIUrnAxeb7FDdgI6EzYBjfenPO8hRsn6H63tklcxLPTw4qgYVQPRRndM5R4fd patJfmgYqNzgCbCbu+wxBtBZU8S9ryyib4Mr1XItdQhor4NAi+C/h1yesbEWlhxS QORoERFByD84sFsk4dRu/clv7b0DVM16JnKJs/ORnKKz5W9ovUUxtpu9aXFMSsHm ieYhig/6TkMcbfsZSpaOiOnyv9JSyn7nRgwLamTpi84ryBgtPtLjMludGbgbII2u ssALW8pvk3ArclVRSuDydSJQb19Fw2QlP63ZaqEIcz9KEa+UMD2ZWk6ARIspAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/xivk793BFKzXpdQW1SfJxft+QwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCMzWQqg7ybES3wZpcXaK77Xmg8xsN43UTx TlyzUnemnkv65sYCusYMzWe665hd3QP8yEmmenc90CWZPffwRq2AkT0dQKM5sqGx tkcNjjlCgcDqV24LPY9Bes8kWzeZ8Yydl2zDxYccCXssPgvJMzCQJLBGBaXBsyS1 A8hEZ4rYiKkHHbhDThgD2JHKCj0BuAng+OBPZUDJmpfix8+4YQ4Nd9obVVuXuVM+ Xao+3U7jTkdfMOVldt8Z4kSxlASzUsxO0HsZVTWY7or5fv+0ZGpgX76eF6dxidWd DrN9SNSxRekBDBVRTG2WLDyzCUu+szx5f7kUeYaIRKzDe4B+PRA= -----END CERTIFICATE-----Generated at Sun Jun 29 19:02:25 2025 by rpki-client