$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: 3gnVPwtdk5YTfOY8EvxgCqK9OKWo/6BfHDUOP6aFlKM= Subject key identifier: 98:76:60:FB:EA:18:98:96:D5:89:20:2E:A5:35:FA:90:A5:CC:FF:9E Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 6CCA647173B82980AF467364333444360AC52D67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04EC Signing time: Sun 29 Jun 2025 01:31:31 +0000 Manifest this update: Sun 29 Jun 2025 01:26:31 +0000 Manifest next update: Wed 02 Jul 2025 06:40:31 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 2: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 7: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: N506PN2dYLQyUNyMbZpHy/0VJZwgl9ZJc3jGjPp4WmA=) 8: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:ca:64:71:73:b8:29:80:af:46:73:64:33:34:44:36:0a:c5:2d:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Jun 29 01:26:31 2025 GMT Not After : Jul 2 06:40:31 2025 GMT Subject: CN=987660FBEA189896D589202EA535FA90A5CCFF9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:fc:ff:a4:0c:95:12:f7:3f:ae:cf:e8:95: 7b:bd:5f:6a:99:58:88:94:4d:f1:ae:c1:68:28:78: c7:0b:60:cf:85:0a:09:d7:6f:d3:1b:8a:12:7d:99: ce:ce:dd:81:49:4c:3f:e9:67:6a:c9:94:f1:da:f3: ee:c5:c3:a4:dc:dd:94:d8:5c:09:a5:bc:68:5d:ea: 6a:d7:01:71:9e:6a:f9:19:c3:43:53:30:4a:31:54: 7b:e4:34:04:01:7e:7e:ed:ef:01:ca:4b:ce:44:d7: ec:f0:15:97:87:87:9a:6c:b0:a2:5a:64:0b:c4:1c: e5:0c:18:6f:b1:92:39:a5:0c:23:ae:a5:da:1d:bf: 3f:b5:aa:28:cf:12:40:4f:6b:8f:71:8a:28:01:83: b6:59:f1:a3:5d:9f:96:ae:b4:b1:84:df:10:62:e2: b7:b2:1a:2f:b6:45:5f:93:5f:5b:50:db:2f:1a:53: f9:6a:5a:83:0f:b2:1b:ce:6f:5d:d0:91:2e:71:86: f1:d3:e8:f2:70:d6:00:79:1f:f5:c8:3d:06:02:c1: 3a:31:3b:22:54:be:d6:8b:94:a8:b1:0d:d5:56:c9: 58:cf:3b:e0:88:3b:4b:8e:1a:61:50:c7:fe:f4:61: ec:d7:41:20:b2:95:1b:35:ef:7b:0e:36:17:d8:0c: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:76:60:FB:EA:18:98:96:D5:89:20:2E:A5:35:FA:90:A5:CC:FF:9E X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:6e:5f:ac:51:28:cb:99:78:ab:18:c6:eb:34:f6:35:48:c6: c8:d9:ee:04:2c:0d:02:ee:e3:74:3f:18:4e:7d:24:75:b8:e8: 81:03:24:0e:95:66:36:48:1f:ed:55:f9:06:a0:81:20:45:69: 49:58:eb:81:38:58:a7:a4:b8:68:bd:e5:a1:12:0c:c9:34:b2: d2:66:b5:98:b4:72:41:ec:8f:cb:c9:4d:08:fb:ba:00:9f:3d: eb:fd:ed:d6:f6:d5:a3:f6:12:28:ac:c2:90:50:1e:41:ad:d4: db:bd:81:23:1d:4f:9e:cc:05:5b:eb:af:63:59:9f:00:76:a7: 29:3a:6a:12:a7:cc:43:e7:8e:a1:4f:c9:15:18:cc:23:c0:ba: 63:05:a5:58:95:a3:2d:0b:4e:66:6b:8d:38:2a:23:e1:99:fd: 73:58:89:89:6b:44:5a:c7:62:59:d5:b7:63:07:bc:d8:ba:ad: 20:ce:56:29:b1:d8:09:94:11:85:9d:6c:32:e7:1b:12:60:fa: 4a:01:7e:e9:16:1e:cd:5f:18:06:25:d1:4b:8e:90:ec:97:1c: 06:05:bf:44:02:aa:4b:05:32:5b:bf:76:4f:10:07:fa:43:a2: 99:b8:77:73:06:ef:26:7d:80:86:8c:62:4d:31:24:a5:b0:5b: e0:72:bc:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMpkcXO4KYCvRnNkMzRENgrFLWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA2MjkwMTI2MzFaFw0yNTA3MDIwNjQwMzFaMDMxMTAvBgNV BAMTKDk4NzY2MEZCRUExODk4OTZENTg5MjAyRUE1MzVGQTkwQTVDQ0ZGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdfz/pAyVEvc/rs/olXu9X2qZ WIiUTfGuwWgoeMcLYM+FCgnXb9MbihJ9mc7O3YFJTD/pZ2rJlPHa8+7Fw6Tc3ZTY XAmlvGhd6mrXAXGeavkZw0NTMEoxVHvkNAQBfn7t7wHKS85E1+zwFZeHh5pssKJa ZAvEHOUMGG+xkjmlDCOupdodvz+1qijPEkBPa49xiigBg7ZZ8aNdn5autLGE3xBi 4reyGi+2RV+TX1tQ2y8aU/lqWoMPshvOb13QkS5xhvHT6PJw1gB5H/XIPQYCwTox OyJUvtaLlKixDdVWyVjPO+CIO0uOGmFQx/70YezXQSCylRs173sONhfYDM7lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmHZg++oYmJbViSAupTX6kKXM/54wHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5uX6xRKMuZeKsYxus09jVIxsjZ7gQsDQLu 43Q/GE59JHW46IEDJA6VZjZIH+1V+QaggSBFaUlY64E4WKekuGi95aESDMk0stJm tZi0ckHsj8vJTQj7ugCfPev97db21aP2EiiswpBQHkGt1Nu9gSMdT57MBVvrr2NZ nwB2pyk6ahKnzEPnjqFPyRUYzCPAumMFpViVoy0LTmZrjTgqI+GZ/XNYiYlrRFrH YlnVt2MHvNi6rSDOVimx2AmUEYWdbDLnGxJg+koBfukWHs1fGAYl0UuOkOyXHAYF v0QCqksFMlu/dk8QB/pDopm4d3MG7yZ9gIaMYk0xJKWwW+ByvJk= -----END CERTIFICATE-----Generated at Mon Jun 30 10:47:30 2025 by rpki-client