$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json) Hash identifier: KPVOVwX6uhGy+JBeHTdM0NpKwIrdfYphJlBXB2LhMpo= Subject key identifier: 21:5D:E4:E0:EE:05:4A:E7:DA:F1:F2:CD:FC:D9:6A:B3:2E:CC:0D:D9 Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Certificate serial: 152E5C45077534992EAA20EBDF036EBDD3D2B50B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft Manifest number: 0505 Signing time: Sat 19 Jul 2025 09:01:40 +0000 Manifest this update: Sat 19 Jul 2025 08:56:40 +0000 Manifest next update: Tue 22 Jul 2025 11:09:40 +0000 Files and hashes: 1: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=) 2: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=) 3: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=) 4: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=) 5: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=) 6: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=) 7: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=) 8: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=) 9: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: DLEEWRg8CzNEC40bkoq+06vWx/pLLLcKvRY7UIZLKcs=) 10: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: Ta+zMCE4QSoD0SMB6yzLGR5gGbxAjhSIXZxJhI2PSYM=) 11: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=) 12: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=) 13: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=) 14: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=) 15: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: lYozuS7H8g71TmDAhlsE7Z+j/6P9Ega8nsca+NA9iZs=) 16: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: +h2OIV45k9IMNmhDrlIF5o27fKX07HhXCAJxexuPVfw=) 17: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=) 18: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=) 19: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: yw3K/bp/LPi1I2OAb+IKkUT9fIWUEaXPoYhzWvShryU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:2e:5c:45:07:75:34:99:2e:aa:20:eb:df:03:6e:bd:d3:d2:b5:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F Validity Not Before: Jul 19 08:56:40 2025 GMT Not After : Jul 22 11:09:40 2025 GMT Subject: CN=215DE4E0EE054AE7DAF1F2CDFCD96AB32ECC0DD9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:e0:d7:8d:fe:cc:d6:e5:61:ad:96:39:9d:bd: c3:4e:84:99:88:06:58:0c:74:98:75:74:50:77:09: 97:45:83:6d:cb:40:b6:87:68:03:53:17:94:05:61: dc:f5:57:96:7b:15:39:32:8b:9a:1f:d6:fc:49:6b: 0f:30:f9:19:f7:ca:ff:8d:f7:a8:20:3a:09:d6:9b: d1:3c:e1:00:fa:16:4c:ee:4d:de:b8:69:0b:83:c9: 2e:09:48:39:18:28:e2:2b:77:44:94:5d:c6:f7:6c: e5:83:fd:f4:d5:8e:9a:8c:53:13:8c:87:93:80:b4: 98:6a:13:1b:3b:54:73:70:21:c0:84:d9:07:41:37: cc:df:c4:a0:25:55:e2:32:ae:dc:32:9b:b1:e1:f8: 1a:70:d8:e7:0b:4d:7f:65:ba:fc:63:43:db:b6:21: d5:9b:c1:db:4e:b6:83:bb:2a:62:04:a7:0a:67:cb: 06:74:68:87:34:7b:64:c5:30:6c:a7:1c:13:ba:88: 96:68:33:af:bd:56:7b:4b:4f:e5:b9:13:27:df:17: 1c:f9:39:82:e7:21:af:09:3c:6f:8d:23:e4:93:6d: d1:86:46:1d:77:f7:05:25:81:c5:53:25:b3:30:ba: 42:8c:56:76:7d:50:8c:fd:ef:4d:24:a3:31:cf:45: 53:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:5D:E4:E0:EE:05:4A:E7:DA:F1:F2:CD:FC:D9:6A:B3:2E:CC:0D:D9 X509v3 Authority Key Identifier: keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:be:37:3e:f8:75:4b:c9:5a:2b:6d:84:ed:9b:b2:27:ce:e0: d8:32:fd:dd:fe:01:c4:83:49:66:12:62:63:c6:46:c2:f5:6c: 62:76:cb:98:2d:de:62:1e:c8:c7:27:c4:7c:c7:fc:08:00:b0: e0:d9:d6:7a:5a:89:69:12:9d:9c:ba:db:21:bb:2f:7f:ad:d1: 8f:b5:43:88:ed:de:0c:27:82:69:8e:4a:27:1b:0e:2c:63:75: bf:9c:8c:17:7f:da:41:ac:eb:0e:8a:c9:a2:c4:ca:1b:5e:c7: ea:15:54:2b:da:7b:1d:47:52:80:e7:95:44:3f:6c:da:34:71: b8:a6:06:0a:34:ad:fc:b1:d0:84:d7:2d:f9:e8:7f:40:6f:21: 06:07:74:eb:aa:8d:4e:95:ef:3f:b7:6f:a1:11:da:b9:e9:ca: 29:e8:d9:eb:88:90:51:7d:ed:ec:4d:32:83:cc:72:6b:f9:98: 63:37:2e:f4:f0:4a:8a:80:ca:21:ba:02:41:46:48:06:f8:0a: 86:d5:f3:99:e8:ef:81:1a:74:c9:e8:25:dd:1d:22:28:98:c7: c0:f6:62:93:30:2b:bf:96:b0:fd:4a:9f:b2:63:dd:4d:4b:2f: 82:ab:b3:ec:b2:b5:e8:67:a4:2a:1f:70:25:59:06:8d:5a:bd: a7:c6:c2:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFS5cRQd1NJkuqiDr3wNuvdPStQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJD QUI5NjEwRjAeFw0yNTA3MTkwODU2NDBaFw0yNTA3MjIxMTA5NDBaMDMxMTAvBgNV BAMTKDIxNURFNEUwRUUwNTRBRTdEQUYxRjJDREZDRDk2QUIzMkVDQzBERDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC94NeN/szW5WGtljmdvcNOhJmI BlgMdJh1dFB3CZdFg23LQLaHaANTF5QFYdz1V5Z7FTkyi5of1vxJaw8w+Rn3yv+N 96ggOgnWm9E84QD6FkzuTd64aQuDyS4JSDkYKOIrd0SUXcb3bOWD/fTVjpqMUxOM h5OAtJhqExs7VHNwIcCE2QdBN8zfxKAlVeIyrtwym7Hh+Bpw2OcLTX9luvxjQ9u2 IdWbwdtOtoO7KmIEpwpnywZ0aIc0e2TFMGynHBO6iJZoM6+9VntLT+W5EyffFxz5 OYLnIa8JPG+NI+STbdGGRh139wUlgcVTJbMwukKMVnZ9UIz9700kozHPRVMlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIV3k4O4FSufa8fLN/Nlqsy7MDdkwHwYDVR0j BBgwFoAUiv67UdAMjgaq6oQuDAz/wsq5YQ8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjEyNDMyOS1lYzIwLTQ0NjAtYWMzMS05YzM2Y2Y5NGYzZmIvMC84QUZFQkI1MUQw MEM4RTA2QUFFQTg0MkUwQzBDRkZDMkNBQjk2MTBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZGQzJDQUI5 NjEwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYxMjQzMjktZWMyMC00NDYwLWFj MzEtOWMzNmNmOTRmM2ZiLzAvOEFGRUJCNTFEMDBDOEUwNkFBRUE4NDJFMEMwQ0ZG QzJDQUI5NjEwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALi+Nz74dUvJWitthO2bsifO4Ngy/d3+AcSD SWYSYmPGRsL1bGJ2y5gt3mIeyMcnxHzH/AgAsODZ1npaiWkSnZy62yG7L3+t0Y+1 Q4jt3gwngmmOSicbDixjdb+cjBd/2kGs6w6KyaLEyhtex+oVVCvaex1HUoDnlUQ/ bNo0cbimBgo0rfyx0ITXLfnof0BvIQYHdOuqjU6V7z+3b6ER2rnpyino2euIkFF9 7exNMoPMcmv5mGM3LvTwSoqAyiG6AkFGSAb4CobV85no74EadMnoJd0dIiiYx8D2 YpMwK7+WsP1Kn7Jj3U1LL4Krs+yytehnpCofcCVZBo1avafGwp4= -----END CERTIFICATE-----Generated at Mon Jul 21 03:08:08 2025 by rpki-client