$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: mbVLRNqAEkPkYrh8c4kCRyS34LYPWoxNpz5sINwOwcs= Subject key identifier: 25:A4:98:87:93:9F:2B:9C:BA:15:E4:A1:5A:9E:82:63:B8:D9:0A:8B Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 1D920D2479F19A2BEB9B6571C32596DDE5ABFEDF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0132 Signing time: Fri 22 Aug 2025 09:41:43 +0000 Manifest this update: Fri 22 Aug 2025 09:36:43 +0000 Manifest next update: Mon 25 Aug 2025 16:13:43 +0000 Files and hashes: 1: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 2: 3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa (hash: Av+/utp0kWimi6k+EGw6qb8Dfeu6Ca9sqADqCSG4T5s=) 3: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: fgJSkJYcW6WxtwyvIeUIQWAbxgDn9Wk2xgk3U+PysVA=) 4: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 16:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:92:0d:24:79:f1:9a:2b:eb:9b:65:71:c3:25:96:dd:e5:ab:fe:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Aug 22 09:36:43 2025 GMT Not After : Aug 25 16:13:43 2025 GMT Subject: CN=25A49887939F2B9CBA15E4A15A9E8263B8D90A8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:78:c8:74:aa:2b:5f:a3:ee:e3:42:eb:65:c5: 12:7e:92:f9:76:18:05:e2:32:0e:9b:86:5e:14:19: 45:74:5e:a1:e1:a7:47:67:18:d7:f9:dc:57:28:ed: 8a:04:ab:da:c9:c4:50:1b:20:9a:e4:11:46:0a:71: 67:30:a0:0e:19:52:ae:70:43:32:5e:f4:c5:fe:f1: 11:15:04:0f:1f:a4:12:fa:90:1d:24:f1:2d:2d:39: 19:e8:5f:1a:16:aa:66:7e:76:6c:d8:52:3e:c9:2f: b6:ab:aa:4e:1a:d3:5c:ef:c1:a6:ab:11:c0:0d:c2: 0e:f1:cd:b9:a2:0b:07:be:a1:3c:59:26:06:e9:de: 7f:ad:12:28:4c:d8:ab:60:39:14:4f:de:eb:a8:7d: f9:62:36:7f:8e:e1:a4:7d:39:43:40:5d:bd:d6:1c: a7:53:00:40:54:1c:17:82:0d:6a:af:57:e2:ce:0d: ad:b3:b7:d1:ec:77:50:5e:e4:96:94:2d:f4:b7:e9: f8:57:b3:5d:65:9f:81:2d:90:da:66:3e:a6:8c:05: e2:02:05:d9:2a:a9:91:92:db:f0:fe:80:80:3d:ce: fb:ae:a2:90:7c:e9:64:cc:7d:ac:bb:e9:74:0a:6f: f0:fc:aa:1f:78:15:c0:1c:7d:60:c7:61:78:0f:49: 56:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:A4:98:87:93:9F:2B:9C:BA:15:E4:A1:5A:9E:82:63:B8:D9:0A:8B X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:8a:3f:cc:7c:25:a5:56:41:7e:aa:d5:eb:c4:34:ee:77:7b: c5:ea:49:c6:3a:35:5a:d9:a6:05:ec:f2:f7:5e:20:aa:a9:ff: 42:22:2a:31:88:31:d9:b4:44:4b:5d:8c:f3:fb:78:27:90:74: 1f:a0:bf:16:cd:f1:2f:1f:5b:8f:12:f0:e7:b1:62:c3:01:d8: 49:39:76:3b:29:8b:ac:5e:d0:f0:3a:fa:9e:b7:39:65:78:22: 7c:2b:63:55:93:37:dd:b1:00:14:00:63:36:3f:a3:ae:ae:30: 2f:55:ed:ac:c5:a5:16:d3:34:03:b5:3a:e3:87:ce:4c:fe:0d: 14:35:4f:aa:e4:12:c1:56:92:62:8d:a6:8b:56:9d:6f:8f:b4: 74:56:6a:84:66:d9:75:c6:9d:58:ac:70:24:c9:3d:97:cb:52: 2e:37:71:7d:a1:d7:3f:3b:c2:fd:d4:23:ed:d6:a4:c9:86:59: 40:da:79:d2:0c:ef:83:d7:f9:b0:8b:9c:8b:13:5e:60:67:b3: c3:81:58:46:37:59:58:d8:71:31:43:3a:49:02:9d:5f:40:0d: f7:3c:38:0a:84:77:10:0d:0b:53:8c:b7:5a:2a:8b:a5:ab:c3: 83:4c:ba:a5:d2:68:2e:0a:cf:b8:ba:56:a9:5a:8f:93:8d:ae: a0:87:99:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHZINJHnxmivrm2VxwyWW3eWr/t8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA4MjIwOTM2NDNaFw0yNTA4MjUxNjEzNDNaMDMxMTAvBgNV BAMTKDI1QTQ5ODg3OTM5RjJCOUNCQTE1RTRBMTVBOUU4MjYzQjhEOTBBOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCheMh0qitfo+7jQutlxRJ+kvl2 GAXiMg6bhl4UGUV0XqHhp0dnGNf53Fco7YoEq9rJxFAbIJrkEUYKcWcwoA4ZUq5w QzJe9MX+8REVBA8fpBL6kB0k8S0tORnoXxoWqmZ+dmzYUj7JL7arqk4a01zvwaar EcANwg7xzbmiCwe+oTxZJgbp3n+tEihM2KtgORRP3uuoffliNn+O4aR9OUNAXb3W HKdTAEBUHBeCDWqvV+LODa2zt9Hsd1Be5JaULfS36fhXs11ln4EtkNpmPqaMBeIC BdkqqZGS2/D+gIA9zvuuopB86WTMfay76XQKb/D8qh94FcAcfWDHYXgPSVaRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJaSYh5OfK5y6FeShWp6CY7jZCoswHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqKP8x8JaVWQX6q1evENO53e8XqScY6NVrZ pgXs8vdeIKqp/0IiKjGIMdm0REtdjPP7eCeQdB+gvxbN8S8fW48S8OexYsMB2Ek5 djspi6xe0PA6+p63OWV4InwrY1WTN92xABQAYzY/o66uMC9V7azFpRbTNAO1OuOH zkz+DRQ1T6rkEsFWkmKNpotWnW+PtHRWaoRm2XXGnViscCTJPZfLUi43cX2h1z87 wv3UI+3WpMmGWUDaedIM74PX+bCLnIsTXmBns8OBWEY3WVjYcTFDOkkCnV9ADfc8 OAqEdxANC1OMt1oqi6Wrw4NMuqXSaC4Kz7i6Vqlaj5ONrqCHmRM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:08:51 2025 by rpki-client