
$ rpki-client -vvf repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
File: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft (raw, json)
Hash identifier: fpBKnNRHPkl36kAEhDQTKLlPzcB+CmOTb0D9RH57mTU=
Subject key identifier: 59:6C:0A:39:B1:6F:EB:5B:59:7A:3C:E4:45:F2:81:DD:9F:DA:D4:48
Authority key identifier: 8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
Certificate issuer: /CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Certificate serial: 18694EECC0EE5CD4FF4C7DFBC1D2A6A0BD4710BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
Manifest number: 0530
Signing time: Wed 22 Oct 2025 07:31:42 +0000
Manifest this update: Wed 22 Oct 2025 07:26:42 +0000
Manifest next update: Sat 25 Oct 2025 17:24:42 +0000
Files and hashes: 1: 3231302e3234372e3234382e302f32342d3234203d3e20313331373435.roa (hash: fEAII0Y1Y5OrJRrreDOapy9Xzh9eNqz/FB7+aD7tXRA=)
2: 3231302e3234372e3235312e302f32342d3234203d3e20313331373435.roa (hash: P6u7QjpJVBQpJpJ2dL4GKUXqC1XLtlIwog/7NL3QJe0=)
3: 3231302e3234372e3234332e302f32342d3234203d3e20313331373435.roa (hash: lzhEeQ6DAkKFZoSDXb/ij7h8jtExSjFLGzcvwIopMPE=)
4: 3231302e3234372e3234372e302f32342d3234203d3e20313331373435.roa (hash: exFF47IhXFNrUrw6HPUoTvZWZdOLZc/bApdp77HMNNg=)
5: 3231302e3234372e3234322e302f32342d3234203d3e20313331373435.roa (hash: D991UEHbv0mT0xjDcSLCu5iaTm6ib67YwDcjKkL5vPw=)
6: 3231302e3234372e3235342e302f32342d3234203d3e20313331373435.roa (hash: 8bH62zhwf0kgF3amh047ZVAlbr2i3orRPBn9qkRCMJk=)
7: 3231302e3234372e3234352e302f32342d3234203d3e20313331373435.roa (hash: kHHBOgtxtA2O4NSmNMgW2PeMrc26bvv8HtnzwONr0bg=)
8: 3231302e3234372e3234302e302f32342d3234203d3e20313331373435.roa (hash: 6Xt6BmWqNlJ2rgGnrh/8HdtB+svaXm043WhGiQr8wxY=)
9: 3231302e3234372e3234392e302f32342d3234203d3e20313331373435.roa (hash: 4G4aZfFUqaHECTTNNiBKb2BiuB7CRoLOY6G0O5P5Xsk=)
10: 34392e3132382e3138342e302f32322d3234203d3e20313331373435.roa (hash: b1YIXb394hbQaEvgUpDDWq1EiTyAhc+KvTRls7LdNdE=)
11: 3231302e3234372e3235332e302f32342d3234203d3e20313331373435.roa (hash: SDQ6xpzFoeg0lTwEJkVJ2YC5ntC/O8NvcqwJeEYUXmo=)
12: 3231302e3234372e3235322e302f32342d3234203d3e20313331373435.roa (hash: 0G3umGSNIafLUyMMJjc+XpTQjFcLRIMU7BoomAPsjew=)
13: 8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl (hash: 3tz35FVgZxDNOhn58CfYWNtueS0tUsJyBEFzsxGxlJw=)
14: 323430363a376530303a35393a3a2f34382d3438203d3e20313430343035.roa (hash: gnvURXZkhn/FEj22B4ytqTMsZk8ZLC9E8Tq6VbTdHlg=)
15: 3231302e3234372e3235352e302f32342d3234203d3e20313331373435.roa (hash: RS4Z5hPliFofbuZy6siMGSvvq53kTGe3aDopkAMtX7s=)
16: 3231302e3234372e3234362e302f32342d3234203d3e20313331373435.roa (hash: FN3CKjxRonayrnINYbudYXLP7jZ9/YnqEvFYbd9U1hM=)
17: 3231302e3234372e3235302e302f32342d3234203d3e20313331373435.roa (hash: UaBtRg3Pe7eF6qAh+L1uU3ib10+G/2GiDGDbWzNrJJQ=)
18: 3231302e3234372e3234342e302f32342d3234203d3e20313331373435.roa (hash: dBLrElsxS7m32RqtK+bS83Eb5ZTI1r6yldhEY0SWU34=)
19: 3231302e3234372e3234312e302f32342d3234203d3e20313430343035.roa (hash: gD3qH0CL5kDWzLn1NnDdXaxbwmPWUV8Kvspy5PDfTJA=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Oct 2025 17:24:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
18:69:4e:ec:c0:ee:5c:d4:ff:4c:7d:fb:c1:d2:a6:a0:bd:47:10:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F
Validity
Not Before: Oct 22 07:26:42 2025 GMT
Not After : Oct 25 17:24:42 2025 GMT
Subject: CN=596C0A39B16FEB5B597A3CE445F281DD9FDAD448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:a9:86:8f:36:3c:7b:52:a2:b0:40:97:64:
09:3e:69:72:e0:ec:33:17:d8:d0:e0:85:50:47:88:
1a:b1:70:01:16:56:78:67:4e:7c:64:f3:42:d2:69:
89:03:38:ae:05:3c:3f:c6:a1:d6:78:cc:17:d5:ce:
e4:bb:c9:a7:68:70:38:6f:2a:f6:d8:95:72:aa:33:
17:09:48:7c:c1:17:9d:6b:16:8f:cd:a9:7f:05:42:
be:a5:91:dc:ce:cd:92:77:f4:5e:86:19:1b:02:80:
aa:39:ce:ef:61:54:f1:52:5e:64:67:93:bc:40:10:
b7:71:18:a9:cb:34:40:88:97:1f:a3:6e:85:b7:2e:
12:79:bb:9d:ff:62:4a:5d:7a:f3:f9:af:dc:8d:d2:
2c:c4:26:60:67:86:df:79:11:b8:24:ab:ee:e4:64:
95:a1:05:89:0d:15:fd:db:c6:97:ba:2d:dd:53:31:
6c:fa:a9:4a:14:d8:b5:5f:c9:49:27:b8:82:3d:81:
09:03:90:f1:1d:6e:0f:c3:fd:8f:6d:6e:2b:dc:7e:
02:65:bd:b1:00:aa:87:18:28:7f:fb:85:4f:b6:cd:
2b:e3:d9:13:e7:f0:2a:91:7a:9b:d1:5b:b6:d1:06:
11:8a:87:e6:fc:eb:fb:00:66:03:c3:7b:f8:1d:7e:
f9:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:6C:0A:39:B1:6F:EB:5B:59:7A:3C:E4:45:F2:81:DD:9F:DA:D4:48
X509v3 Authority Key Identifier:
keyid:8A:FE:BB:51:D0:0C:8E:06:AA:EA:84:2E:0C:0C:FF:C2:CA:B9:61:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96124329-ec20-4460-ac31-9c36cf94f3fb/0/8AFEBB51D00C8E06AAEA842E0C0CFFC2CAB9610F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:dd:42:b6:f1:a6:a8:bb:0e:1d:33:98:a0:63:f2:5d:08:5c:
1e:74:80:43:95:35:4f:1e:6d:c2:83:a2:ac:2d:3b:16:3c:71:
28:9e:41:1d:16:0a:1c:91:62:7d:c7:c0:5d:08:0e:57:a6:03:
e3:45:88:6f:d7:21:d7:0d:4f:db:cc:02:57:3f:8c:47:5d:89:
e5:07:e7:1a:fe:72:8a:ad:e9:aa:09:1f:9a:e7:b9:ed:e5:b3:
97:31:8c:18:37:0c:23:21:bc:6a:92:35:0f:56:06:70:a7:5e:
99:68:4a:86:8f:c5:07:3e:1e:e7:47:80:57:ec:45:1f:b5:08:
39:7c:59:89:5d:10:1a:ef:87:d6:b5:9b:0d:ee:57:e7:51:0b:
52:af:cc:bb:73:b8:db:32:9a:2c:6d:1e:24:0a:fc:bc:c4:85:
a1:90:52:70:15:08:bc:25:e6:4d:9d:dd:d3:94:e9:af:15:47:
dd:de:e8:21:75:c5:d6:8b:e8:3c:52:23:ac:39:cf:d6:b3:74:
d6:a5:b8:2d:d1:2a:66:72:a9:88:64:a7:5a:1e:46:78:9a:16:
40:89:ec:07:c9:f6:9c:80:d9:8d:3e:b4:f1:79:b6:04:04:4b:
8a:9b:7f:ea:09:e5:aa:40:7f:38:3a:2e:94:95:0e:40:4a:f7:
6c:32:15:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 24 10:09:38 2025 by rpki-client