$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: Lg1mCnJ0GyyDsUG7S8YHq7GIOil4GzrLRxudeI3iEiw= Subject key identifier: 00:EE:A5:3B:D9:BC:64:15:CA:62:87:6F:FD:F3:55:30:71:06:BA:60 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 44D395D062F7E0C38B3A923448870A9A6046193F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0520 Signing time: Mon 20 Oct 2025 02:21:33 +0000 Manifest this update: Mon 20 Oct 2025 02:16:33 +0000 Manifest next update: Thu 23 Oct 2025 06:52:33 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 2: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 5: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 7: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: W/NfIAs1WZSACxU9gf2Eats/WYYSLBbrPeEIcUJwH60=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 9: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 06:52:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:d3:95:d0:62:f7:e0:c3:8b:3a:92:34:48:87:0a:9a:60:46:19:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Oct 20 02:16:33 2025 GMT Not After : Oct 23 06:52:33 2025 GMT Subject: CN=00EEA53BD9BC6415CA62876FFDF355307106BA60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:28:c8:18:3a:7d:bf:46:1b:ad:8b:91:2b:ad: 1f:0a:67:57:c9:32:4a:30:af:12:9e:3d:77:03:af: b1:ec:7c:74:9c:eb:32:bc:e9:d7:2e:03:58:27:1c: 22:8d:ed:bd:9f:cb:d5:61:3f:6d:0f:92:26:82:e3: 9a:2e:c4:d8:f3:ea:ec:5e:bb:81:7f:b5:55:71:03: ae:1a:32:f5:c4:3f:58:79:50:59:fb:f0:c7:db:a6: 17:be:25:aa:4c:3c:91:a9:59:d8:d5:11:f3:16:cf: d5:e7:6f:24:6d:14:c2:ab:1a:37:ee:85:31:52:51: be:f4:93:34:f4:94:8b:58:45:14:0c:20:4d:a3:3d: dd:19:2e:8c:84:9e:2c:69:6c:94:e7:cb:db:f7:d8: e9:54:f9:8f:f9:e1:01:4c:50:a6:09:89:f2:dc:ff: 0e:eb:7e:1b:4f:11:a8:cc:34:16:eb:8a:ae:f0:cd: d0:0b:c0:18:15:4e:e6:ea:7a:6e:a2:70:f3:46:20: e7:df:fd:96:d3:f1:d1:ce:63:a2:84:d6:69:62:72: 45:69:a0:58:ef:87:0a:18:09:56:0a:4b:59:e8:b9: 94:36:d9:0d:13:d2:9f:b3:4a:b9:18:50:2a:4c:57: dc:ee:2d:65:ea:a1:53:d3:19:0c:3e:31:ad:09:e9: 61:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:EE:A5:3B:D9:BC:64:15:CA:62:87:6F:FD:F3:55:30:71:06:BA:60 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:48:db:ef:b9:d2:f9:cb:89:44:1b:d2:f2:1a:41:ff:44:e7: d5:01:e6:2f:b4:7b:44:65:18:fe:42:77:45:05:14:f7:12:4f: 24:bd:45:fb:de:29:db:f5:30:d7:56:52:21:41:84:ce:72:06: 26:8a:6e:22:b9:68:13:5c:78:74:b0:b7:fd:1c:ef:54:40:db: f6:42:8b:29:52:97:05:f5:d4:e0:a1:aa:80:ea:16:28:75:53: c1:4b:5c:ea:25:b7:a4:d3:5d:e5:73:f4:b7:f3:bd:7e:47:8f: 0c:c0:89:38:e9:ed:5a:48:b4:d6:92:3a:44:1b:fb:c4:72:e4: 12:21:cb:4c:15:a3:0b:99:b3:04:32:90:6a:66:e3:27:49:c8: 8f:f5:55:47:8f:66:4f:ed:54:25:16:49:bb:79:cb:9a:65:77: 34:0a:8b:ee:d2:99:09:0a:3f:73:e8:7d:76:45:fa:d0:d0:00: 98:f0:25:92:77:02:ec:50:26:cb:0b:e1:22:b9:56:d7:18:29: 37:6c:52:4b:12:b9:c7:0f:6e:3d:1a:b9:9b:68:34:c5:1f:5a: 1c:f5:3e:cd:91:d9:16:17:69:2f:26:6e:08:df:cb:a1:98:95: 64:eb:19:d6:3f:bc:55:cf:11:d9:9c:da:fa:92:9c:b5:cc:68: 3a:d9:0d:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURNOV0GL34MOLOpI0SIcKmmBGGT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTEwMjAwMjE2MzNaFw0yNTEwMjMwNjUyMzNaMDMxMTAvBgNV BAMTKDAwRUVBNTNCRDlCQzY0MTVDQTYyODc2RkZERjM1NTMwNzEwNkJBNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcKMgYOn2/Rhuti5ErrR8KZ1fJ MkowrxKePXcDr7HsfHSc6zK86dcuA1gnHCKN7b2fy9VhP20PkiaC45ouxNjz6uxe u4F/tVVxA64aMvXEP1h5UFn78Mfbphe+JapMPJGpWdjVEfMWz9XnbyRtFMKrGjfu hTFSUb70kzT0lItYRRQMIE2jPd0ZLoyEnixpbJTny9v32OlU+Y/54QFMUKYJifLc /w7rfhtPEajMNBbriq7wzdALwBgVTubqem6icPNGIOff/ZbT8dHOY6KE1mlickVp oFjvhwoYCVYKS1nouZQ22Q0T0p+zSrkYUCpMV9zuLWXqoVPTGQw+Ma0J6WHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAO6lO9m8ZBXKYodv/fNVMHEGumAwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5I2++50vnLiUQb0vIaQf9E59UB5i+0e0Rl GP5Cd0UFFPcSTyS9RfveKdv1MNdWUiFBhM5yBiaKbiK5aBNceHSwt/0c71RA2/ZC iylSlwX11OChqoDqFih1U8FLXOolt6TTXeVz9LfzvX5HjwzAiTjp7VpItNaSOkQb +8Ry5BIhy0wVowuZswQykGpm4ydJyI/1VUePZk/tVCUWSbt5y5pldzQKi+7SmQkK P3PofXZF+tDQAJjwJZJ3AuxQJssL4SK5VtcYKTdsUksSuccPbj0auZtoNMUfWhz1 Ps2R2RYXaS8mbgjfy6GYlWTrGdY/vFXPEdmc2vqSnLXMaDrZDZ8= -----END CERTIFICATE-----Generated at Mon Oct 20 07:49:56 2025 by rpki-client