$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: pYJAKaCywgGaTmWGlYffO0DUdE7tW0pbkpTqExNcZbQ= Subject key identifier: C5:B0:D5:09:D7:B3:C5:B2:32:40:D5:FD:EE:CD:70:AA:7C:AD:CB:5E Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 3D223B5C09C0D71D8749298A6B0A61398E9CBC87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: F8 Signing time: Sun 20 Apr 2025 07:01:42 +0000 Manifest this update: Sun 20 Apr 2025 06:56:42 +0000 Manifest next update: Wed 23 Apr 2025 17:57:42 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: Yo3YDtNICENVtjQCJjmao0Ij4Zhr/p/PS47VjT7FrD0=) 2: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: ITTcg+0CL9AAJ3C6coOtqO9cvmMVYqc2eFlyRBCuwhk=) 3: 3130332e33382e3131302e302f32332d3234203d3e20313531353639.roa (hash: fz4jQ39XtDTg8Ui8fp6XbcvLBixTeHrSwMTFcEaOYh8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 11:03:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:22:3b:5c:09:c0:d7:1d:87:49:29:8a:6b:0a:61:39:8e:9c:bc:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Apr 20 06:56:42 2025 GMT Not After : Apr 23 17:57:42 2025 GMT Subject: CN=C5B0D509D7B3C5B23240D5FDEECD70AA7CADCB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cb:d8:4b:af:09:2e:36:d7:32:0e:d3:74:3d: da:8c:db:f7:95:8b:85:fd:8d:6c:af:3f:1e:eb:e7: af:f5:26:94:cf:c5:b7:38:d3:b7:76:34:e9:3d:e7: ad:7c:86:b4:5c:47:c2:06:be:a2:86:73:34:62:79: e9:ec:e4:c3:4b:e0:47:c4:df:e2:b9:2d:1a:13:c2: 45:48:91:c8:4e:61:e6:e1:b2:b8:c2:02:f6:95:01: 1b:74:4c:b2:c5:56:dc:91:4c:9e:8c:23:73:d4:70: b1:00:7b:c9:f6:35:3c:0f:f8:11:c0:96:91:f9:9b: 57:9d:15:80:f6:7e:7e:bd:8d:f1:ce:01:31:43:b7: 62:72:ab:eb:e6:90:93:37:6c:49:80:fe:07:9d:b5: 3e:4a:7e:85:5e:81:d4:a1:c7:16:39:61:b0:ba:50: 26:1c:e6:d9:67:b8:ad:99:8b:06:50:40:17:a1:ae: a5:0f:ce:35:0f:a2:b8:98:65:14:40:0b:c2:4b:9f: 03:ee:47:65:34:0c:78:4f:5f:c5:05:31:4e:9e:f5: ed:2f:3c:13:75:fb:5f:57:ec:85:84:6f:ff:3e:8b: 6f:b4:69:c1:a5:ee:c6:08:a5:e9:00:a5:68:a8:16: bc:da:90:09:c9:cd:51:30:25:3b:f8:b4:8e:0a:8a: 71:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:B0:D5:09:D7:B3:C5:B2:32:40:D5:FD:EE:CD:70:AA:7C:AD:CB:5E X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:c2:02:66:f9:cb:7d:39:e3:a5:ca:bc:e9:d6:a6:77:49:85: 29:f2:49:3a:ce:81:cb:b9:dd:d5:1e:72:fe:5f:85:cd:6f:6a: e1:2c:32:7d:d3:f3:ff:de:79:09:55:68:4f:fc:1a:f7:ea:32: 67:df:e6:98:7e:dd:8c:10:8c:31:79:d2:4f:e7:03:77:f3:f9: 95:02:7d:ce:df:b7:09:ad:e7:a8:81:85:9a:cd:ce:ff:54:ca: 9c:a3:ef:61:9d:d2:96:6d:24:71:25:c2:41:75:ab:8a:86:2e: fa:ea:3c:88:25:b6:00:a4:91:82:1e:00:22:57:28:2c:f0:6f: 5b:5e:ab:6e:25:20:43:3c:ec:81:04:1a:61:1a:cf:2c:3b:09: 29:a4:30:ed:2f:cf:db:45:55:4c:a0:e5:d3:de:b8:5e:fa:f8: 77:60:bf:d5:0e:28:ea:e5:41:c9:5e:c5:a4:45:4b:e1:d2:22: 14:01:10:3f:d5:f8:7a:62:bb:b6:37:27:c5:4a:2c:44:ef:3d: 52:1d:cc:24:79:bc:78:70:79:41:f8:1b:f5:d5:00:f2:3d:03: 6b:9b:a1:c8:cf:09:9a:92:a0:c5:2f:e5:48:fe:43:d2:46:89: 38:64:ca:3e:d1:6a:5f:79:36:f6:5b:55:63:12:e4:f4:f8:cf: c3:66:af:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPSI7XAnA1x2HSSmKawphOY6cvIcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA0MjAwNjU2NDJaFw0yNTA0MjMxNzU3NDJaMDMxMTAvBgNV BAMTKEM1QjBENTA5RDdCM0M1QjIzMjQwRDVGREVFQ0Q3MEFBN0NBRENCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9y9hLrwkuNtcyDtN0PdqM2/eV i4X9jWyvPx7r56/1JpTPxbc407d2NOk95618hrRcR8IGvqKGczRieens5MNL4EfE 3+K5LRoTwkVIkchOYebhsrjCAvaVARt0TLLFVtyRTJ6MI3PUcLEAe8n2NTwP+BHA lpH5m1edFYD2fn69jfHOATFDt2Jyq+vmkJM3bEmA/gedtT5KfoVegdShxxY5YbC6 UCYc5tlnuK2ZiwZQQBehrqUPzjUPoriYZRRAC8JLnwPuR2U0DHhPX8UFMU6e9e0v PBN1+19X7IWEb/8+i2+0acGl7sYIpekApWioFrzakAnJzVEwJTv4tI4KinHZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxbDVCdezxbIyQNX97s1wqnyty14wHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACbCAmb5y30546XKvOnWpndJhSnySTrOgcu5 3dUecv5fhc1vauEsMn3T8//eeQlVaE/8GvfqMmff5ph+3YwQjDF50k/nA3fz+ZUC fc7ftwmt56iBhZrNzv9Uypyj72Gd0pZtJHElwkF1q4qGLvrqPIgltgCkkYIeACJX KCzwb1teq24lIEM87IEEGmEazyw7CSmkMO0vz9tFVUyg5dPeuF76+Hdgv9UOKOrl QclexaRFS+HSIhQBED/V+Hpiu7Y3J8VKLETvPVIdzCR5vHhweUH4G/XVAPI9A2ub ocjPCZqSoMUv5Uj+Q9JGiThkyj7Ral95NvZbVWMS5PT4z8Nmr88= -----END CERTIFICATE-----Generated at Sun Apr 20 12:19:01 2025 by rpki-client