$ rpki-client -vvf repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft File: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft (raw, json) Hash identifier: RwKqPusIhXCJHhQP/xz5GYiXCyJT0DGa4yIg3LuTqSo= Subject key identifier: AF:57:BE:DB:04:FA:BA:30:98:39:0F:3D:74:6E:70:05:2B:4E:55:72 Authority key identifier: 8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 Certificate issuer: /CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Certificate serial: 549FC354553BB40AFC0C968C2B0F37E165655CE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft Manifest number: 0139 Signing time: Sun 07 Sep 2025 03:51:43 +0000 Manifest this update: Sun 07 Sep 2025 03:46:43 +0000 Manifest next update: Wed 10 Sep 2025 07:51:43 +0000 Files and hashes: 1: 323030313a6466333a3263303a3a2f34382d3438203d3e20313531353639.roa (hash: zVkKXHp1IUSWn6/DI0KODZ2Sd/LhWyDMOtuowY983gU=) 2: 3130332e33382e3131302e302f32342d3234203d3e20313531353639.roa (hash: J0htEBbJtg13KY4rKcx5Rasf7tnVHbIZzu6sYSNQaxY=) 3: 3130332e33382e3131312e302f32342d3234203d3e20313336383830.roa (hash: Av+/utp0kWimi6k+EGw6qb8Dfeu6Ca9sqADqCSG4T5s=) 4: 8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl (hash: WiptX9q5RXncMO4sUhjE/f79V6Zeu5huc8B6fcyP1QA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:51:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9f:c3:54:55:3b:b4:0a:fc:0c:96:8c:2b:0f:37:e1:65:65:5c:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80 Validity Not Before: Sep 7 03:46:43 2025 GMT Not After : Sep 10 07:51:43 2025 GMT Subject: CN=AF57BEDB04FABA3098390F3D746E70052B4E5572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:27:96:71:7a:ba:67:c3:e0:32:c1:2d:b3: 81:d9:85:21:c2:f6:93:66:16:99:89:65:de:5a:88: d8:5c:e6:cd:7c:5b:5c:66:99:76:f4:a0:d5:f5:65: 18:f3:d8:83:80:9a:b2:0e:34:4d:7e:9c:4a:77:74: 94:00:b3:0b:f1:fd:13:f9:85:4a:01:3c:75:a5:7c: 0e:96:41:51:43:cb:0f:e4:b8:ae:8c:07:80:7e:01: d7:f9:97:69:94:92:5b:88:86:c8:67:34:67:ba:26: 11:61:af:f1:86:ec:c6:cd:a5:74:5b:47:91:9b:19: 63:06:ee:8a:27:c5:31:c6:1a:36:08:61:18:6f:27: 2d:69:05:5c:9c:ed:ee:ea:f7:3e:90:5e:0f:44:8f: 52:fa:40:05:cc:db:b9:a9:e7:1b:88:fc:50:db:20: f7:a8:50:2e:63:0a:fb:07:23:a4:b9:97:14:85:d7: 91:c3:f9:68:2e:44:51:0b:d7:48:c9:b1:54:ee:2a: 23:13:42:dd:05:e7:35:aa:16:c4:27:75:6a:0c:2b: cd:59:35:0a:a6:e8:31:0f:83:e3:75:20:fc:7c:22: 25:c6:ab:58:b8:63:de:40:57:89:38:e0:d8:b9:b6: f5:f7:00:67:88:2e:45:c0:71:f8:c9:ff:36:5b:aa: 3c:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:57:BE:DB:04:FA:BA:30:98:39:0F:3D:74:6E:70:05:2B:4E:55:72 X509v3 Authority Key Identifier: keyid:8A:F2:4B:A6:BB:2F:67:CD:54:8B:D0:8B:64:D9:7B:9A:24:68:ED:80 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cabeebcc-a247-4fde-aa86-c6669eabcd82/0/8AF24BA6BB2F67CD548BD08B64D97B9A2468ED80.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:03:cd:19:0b:09:1e:ef:7b:b1:98:52:1c:c3:c0:c5:bf:6e: e0:97:7c:41:d3:71:fb:3d:71:34:b2:fc:14:d8:e3:53:9e:e1: 7d:4d:50:72:17:bb:dc:fc:10:e0:b7:64:87:c5:96:de:87:7f: 04:56:31:9c:12:40:7a:df:f0:18:57:25:8e:b5:ac:61:d5:cd: 69:7e:3d:7b:3c:62:21:d3:87:00:12:a5:07:19:be:bf:a4:0b: 06:f4:72:c7:52:58:a9:11:95:03:0d:e9:17:80:ce:4c:6c:ce: 3b:22:52:37:eb:3a:31:b9:25:f2:56:d7:74:81:0b:53:e9:c6: 49:59:b1:b1:ee:8f:56:75:6e:47:25:b7:ab:63:66:75:36:04: ec:b2:b1:3e:44:94:31:1d:e9:bb:4c:52:38:f4:41:63:09:d1: ee:89:e6:6f:99:51:7d:c9:c3:ee:e9:e4:88:16:22:84:ad:bd: 4c:43:b6:46:8e:27:da:0e:43:7e:83:e2:de:8f:90:ef:e4:7f: 77:e9:08:e5:30:06:5d:c2:f5:c7:34:e5:4a:b6:68:a2:e7:c1: 61:0e:2f:35:2d:9f:d4:9b:52:53:ce:24:81:4c:b1:51:7b:07: f6:76:b5:47:38:76:a5:56:42:b2:4e:26:6a:52:d6:46:7e:40: a2:24:a8:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJ/DVFU7tAr8DJaMKw834WVlXOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEy NDY4RUQ4MDAeFw0yNTA5MDcwMzQ2NDNaFw0yNTA5MTAwNzUxNDNaMDMxMTAvBgNV BAMTKEFGNTdCRURCMDRGQUJBMzA5ODM5MEYzRDc0NkU3MDA1MkI0RTU1NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKCeWcXq6Z8PgMsEts4HZhSHC 9pNmFpmJZd5aiNhc5s18W1xmmXb0oNX1ZRjz2IOAmrIONE1+nEp3dJQAswvx/RP5 hUoBPHWlfA6WQVFDyw/kuK6MB4B+Adf5l2mUkluIhshnNGe6JhFhr/GG7MbNpXRb R5GbGWMG7oonxTHGGjYIYRhvJy1pBVyc7e7q9z6QXg9Ej1L6QAXM27mp5xuI/FDb IPeoUC5jCvsHI6S5lxSF15HD+WguRFEL10jJsVTuKiMTQt0F5zWqFsQndWoMK81Z NQqm6DEPg+N1IPx8IiXGq1i4Y95AV4k44Ni5tvX3AGeILkXAcfjJ/zZbqjw/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr1e+2wT6ujCYOQ89dG5wBStOVXIwHwYDVR0j BBgwFoAUivJLprsvZ81Ui9CLZNl7miRo7YAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YWJlZWJjYy1hMjQ3LTRmZGUtYWE4Ni1jNjY2OWVhYmNkODIvMC84QUYyNEJBNkJC MkY2N0NENTQ4QkQwOEI2NEQ5N0I5QTI0NjhFRDgwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdCOUEyNDY4 RUQ4MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2FiZWViY2MtYTI0Ny00ZmRlLWFh ODYtYzY2NjllYWJjZDgyLzAvOEFGMjRCQTZCQjJGNjdDRDU0OEJEMDhCNjREOTdC OUEyNDY4RUQ4MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEgDzRkLCR7ve7GYUhzDwMW/buCXfEHTcfs9 cTSy/BTY41Oe4X1NUHIXu9z8EOC3ZIfFlt6HfwRWMZwSQHrf8BhXJY61rGHVzWl+ PXs8YiHThwASpQcZvr+kCwb0csdSWKkRlQMN6ReAzkxszjsiUjfrOjG5JfJW13SB C1PpxklZsbHuj1Z1bkclt6tjZnU2BOyysT5ElDEd6btMUjj0QWMJ0e6J5m+ZUX3J w+7p5IgWIoStvUxDtkaOJ9oOQ36D4t6PkO/kf3fpCOUwBl3C9cc05Uq2aKLnwWEO LzUtn9SbUlPOJIFMsVF7B/Z2tUc4dqVWQrJOJmpS1kZ+QKIkqBA= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:45 2025 by rpki-client