$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: 4RbJpey40htUfxIpvoVK7Bcl4Qngd8TR7LvnmaNp3Dw= Subject key identifier: 70:3C:C0:87:0B:75:CA:34:70:94:9D:9E:99:AC:49:56:01:FA:4A:E9 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 236D3096259D027AAA86AC5A961E214CD79649ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0120 Signing time: Sun 20 Jul 2025 06:02:49 +0000 Manifest this update: Sun 20 Jul 2025 05:57:49 +0000 Manifest next update: Wed 23 Jul 2025 09:30:49 +0000 Files and hashes: 1: 3130332e33382e3131302e302f32332d3234203d3e20313531353639.roa (hash: fz4jQ39XtDTg8Ui8fp6XbcvLBixTeHrSwMTFcEaOYh8=) 2: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: w3ftemS1UvssnhzPbvKzmUlc7FvPzFo1S+g3hat3uL8=) 3: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:6d:30:96:25:9d:02:7a:aa:86:ac:5a:96:1e:21:4c:d7:96:49:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Jul 20 05:57:49 2025 GMT Not After : Jul 23 09:30:49 2025 GMT Subject: CN=703CC0870B75CA3470949D9E99AC495601FA4AE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b7:dc:96:d4:77:19:15:03:ad:8d:ba:0f:42: 1a:18:ca:aa:77:66:e6:b1:3e:92:64:f5:5b:6d:36: d6:c2:15:3e:a9:92:e6:d9:d0:02:5f:c9:15:c5:1a: 82:5a:af:a3:4b:47:b3:4c:d3:7a:12:36:28:94:b1: 65:71:35:c4:0e:8e:ef:f0:34:4d:49:66:ed:b5:38: fc:18:23:2a:72:96:43:b1:02:b7:96:29:99:e5:b2: cb:a8:77:15:a4:c3:a5:16:89:e5:ba:f3:6e:fc:d1: 81:04:0d:01:71:bb:3b:77:43:d5:a7:00:63:ce:74: 21:c6:33:c1:28:23:65:c6:1f:5f:66:55:b2:13:4f: 87:e4:59:f6:1f:cf:6a:41:1e:80:01:c3:ba:45:56: 8f:ce:4f:e7:30:29:ac:36:b0:76:cf:ad:4a:fa:27: b3:62:9a:19:bc:e6:29:ab:e3:04:22:27:13:c0:14: 99:df:9e:d0:bd:50:d0:b3:ed:b3:0a:55:ef:78:b4: d8:ab:08:22:0c:2e:02:3c:80:ef:40:93:43:5e:47: 9e:d0:84:94:60:c3:ec:aa:88:d8:06:2d:e0:67:4d: 75:5e:66:5c:b4:bb:22:a5:59:c8:7d:56:7a:79:5f: e5:8f:a7:35:3b:dd:0d:81:1f:a5:2e:50:93:d7:b2: bc:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:3C:C0:87:0B:75:CA:34:70:94:9D:9E:99:AC:49:56:01:FA:4A:E9 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a7:a8:13:20:02:b6:d7:82:95:9f:ee:5d:fd:34:df:5f:e8: 1a:31:22:bd:b3:05:e7:a1:c8:cb:6d:35:e1:1c:78:51:f0:e2: 72:8f:fe:bf:1a:0a:30:ad:b9:6e:ca:40:d6:59:49:91:b0:1a: 30:33:87:5e:5d:ba:d8:f5:7e:20:57:23:11:6b:0e:52:6e:71: 9b:06:5e:62:53:d5:ed:3a:f1:f8:ab:bd:8d:94:4a:9c:92:f1: db:d7:44:28:e8:8b:85:eb:c9:fa:59:99:81:24:39:33:aa:53: 42:c8:bb:7e:ae:f0:3e:f5:02:07:13:b7:69:0c:a4:4f:fb:ff: 78:80:d6:23:79:7f:bb:2e:97:13:4e:a3:a4:d1:9a:b5:fa:ee: d9:af:93:8f:f7:81:69:2f:69:c3:65:75:0c:9a:55:58:f6:3e: 09:46:f9:b8:3b:10:96:24:21:b7:88:e4:59:77:fc:48:12:30: 0c:32:4a:8d:4a:bb:fe:5e:9a:dc:19:d5:c2:cc:22:df:61:8b: 5e:7f:a2:34:30:04:24:a0:79:e2:09:e7:10:cc:95:ee:db:72: a5:4d:0a:2c:52:df:75:2c:66:02:60:df:75:74:82:46:77:51: 20:0e:68:a4:d9:d1:e9:11:7b:7e:40:a3:d8:db:fc:da:cd:a3: 81:dc:cf:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI20wliWdAnqqhqxalh4hTNeWSe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA3MjAwNTU3NDlaFw0yNTA3MjMwOTMwNDlaMDMxMTAvBgNV BAMTKDcwM0NDMDg3MEI3NUNBMzQ3MDk0OUQ5RTk5QUM0OTU2MDFGQTRBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCot9yW1HcZFQOtjboPQhoYyqp3 ZuaxPpJk9VttNtbCFT6pkubZ0AJfyRXFGoJar6NLR7NM03oSNiiUsWVxNcQOju/w NE1JZu21OPwYIypylkOxAreWKZnlssuodxWkw6UWieW682780YEEDQFxuzt3Q9Wn AGPOdCHGM8EoI2XGH19mVbITT4fkWfYfz2pBHoABw7pFVo/OT+cwKaw2sHbPrUr6 J7Nimhm85imr4wQiJxPAFJnfntC9UNCz7bMKVe94tNirCCIMLgI8gO9Ak0NeR57Q hJRgw+yqiNgGLeBnTXVeZly0uyKlWch9Vnp5X+WPpzU73Q2BH6UuUJPXsryDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcDzAhwt1yjRwlJ2emaxJVgH6SukwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIanqBMgArbXgpWf7l39NN9f6BoxIr2zBeeh yMttNeEceFHw4nKP/r8aCjCtuW7KQNZZSZGwGjAzh15dutj1fiBXIxFrDlJucZsG XmJT1e068firvY2USpyS8dvXRCjoi4XryfpZmYEkOTOqU0LIu36u8D71AgcTt2kM pE/7/3iA1iN5f7sulxNOo6TRmrX67tmvk4/3gWkvacNldQyaVVj2PglG+bg7EJYk IbeI5Fl3/EgSMAwySo1Ku/5emtwZ1cLMIt9hi15/ojQwBCSgeeIJ5xDMle7bcqVN CixS33UsZgJg33V0gkZ3USAOaKTZ0ekRe35Ao9jb/NrNo4Hcz5Y= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:34 2025 by rpki-client