$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: aXZTKpSQgw7IVwxkrK2hv5QeXSFMb/x6oVChFCUw+c0= Subject key identifier: AC:79:E0:9D:E6:BA:03:8B:2C:01:A9:BC:12:AF:ED:A4:7C:EE:9E:DF Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 04DA9DE0BC62CBC3DF5C5AEF7EFED51DE92653A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0504 Signing time: Thu 21 Aug 2025 22:41:33 +0000 Manifest this update: Thu 21 Aug 2025 22:36:33 +0000 Manifest next update: Sun 24 Aug 2025 23:23:33 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 3: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 5: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 7: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: /4MW8z4glqXgf7ORPCtsxmfEih5bOU8kdRqmQ45Umqk=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 23:23:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:da:9d:e0:bc:62:cb:c3:df:5c:5a:ef:7e:fe:d5:1d:e9:26:53:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Aug 21 22:36:33 2025 GMT Not After : Aug 24 23:23:33 2025 GMT Subject: CN=AC79E09DE6BA038B2C01A9BC12AFEDA47CEE9EDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:4f:87:e5:ab:df:5d:e2:73:f3:d7:03:cd:a6: be:cf:75:37:79:26:a2:c5:e0:8b:7c:4a:4f:d4:f5: 97:b7:ac:81:c1:c6:6c:34:7a:67:1a:9e:27:37:57: c3:02:91:1b:94:fa:27:07:9f:a2:03:5f:13:c1:6e: 39:3b:34:88:15:69:b9:c7:b8:c8:9e:f9:d2:2e:b0: d4:65:6e:2d:96:8d:20:a8:f5:76:5f:a1:22:05:0a: 65:5a:17:70:0c:a1:a5:58:3b:63:92:83:6c:ff:f5: 57:3d:fc:d0:3a:cf:d0:1d:a6:b2:6d:88:28:a0:40: 83:05:60:d8:df:62:e5:3c:c0:0c:05:08:9b:38:4e: b8:07:ba:e1:5d:88:72:47:d7:75:42:a8:aa:f1:6f: 75:b3:0f:65:b4:84:3a:1e:15:8f:c0:ef:20:3d:2d: 24:b6:9a:73:26:46:29:39:72:0a:ba:f6:5f:22:5f: 54:2c:89:18:48:27:8c:c9:b5:67:1f:0a:4f:92:7a: ed:ff:5f:3e:58:65:56:f9:cf:3b:fd:11:fd:f9:f5: 91:63:61:c4:dd:13:30:0b:f3:02:ee:20:78:e5:bb: 84:5a:84:58:6b:ad:73:ae:f7:47:a0:a3:d0:ea:1e: 5a:1d:6c:25:ee:13:10:ff:5c:2b:2a:3f:76:0e:88: 5a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:79:E0:9D:E6:BA:03:8B:2C:01:A9:BC:12:AF:ED:A4:7C:EE:9E:DF X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:68:50:9f:1f:f6:08:9d:1a:86:d7:9e:cb:d9:d5:70:8e:ad: 4f:9e:44:6f:48:ed:0d:e6:5a:4b:fc:13:5d:7f:a6:6a:9b:42: 6b:bc:f4:dc:55:8e:e2:ab:58:71:cc:db:2c:96:81:de:fc:f3: 8a:a3:e0:b3:f3:bb:b6:ba:02:17:2b:ce:34:6e:58:b2:26:90: eb:0b:f4:70:52:b6:c1:ac:28:35:45:24:0e:e2:6b:a7:41:27: 00:21:58:8c:61:52:38:db:a3:df:2e:5b:9d:a8:f7:00:95:29: b3:25:e7:20:24:b2:44:6f:a3:b2:bb:11:9f:7c:fb:66:f2:8d: 2c:35:33:12:8b:9f:31:b1:8a:fd:86:6a:19:e6:cd:36:c9:f2: 33:e7:e7:2f:43:42:c9:38:80:4d:59:10:cb:71:29:f6:56:0e: f7:bb:2b:1e:c0:8a:95:ce:9d:7a:c9:8e:48:89:97:41:8f:94: 74:6f:92:3a:39:b6:5e:20:d9:72:bf:83:3c:0e:e0:2a:62:de: 29:e4:b6:12:1d:54:4c:14:05:9d:22:db:6b:97:8b:d2:fd:da: 94:25:ff:b1:d0:ff:69:5b:20:bf:09:29:84:94:3f:36:74:55: 31:21:fd:05:05:32:a4:8f:ef:b4:6c:12:c0:0e:be:c0:58:9d: ea:68:a4:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNqd4Lxiy8PfXFrvfv7VHekmU6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA4MjEyMjM2MzNaFw0yNTA4MjQyMzIzMzNaMDMxMTAvBgNV BAMTKEFDNzlFMDlERTZCQTAzOEIyQzAxQTlCQzEyQUZFREE0N0NFRTlFREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDT4flq99d4nPz1wPNpr7PdTd5 JqLF4It8Sk/U9Ze3rIHBxmw0emcanic3V8MCkRuU+icHn6IDXxPBbjk7NIgVabnH uMie+dIusNRlbi2WjSCo9XZfoSIFCmVaF3AMoaVYO2OSg2z/9Vc9/NA6z9AdprJt iCigQIMFYNjfYuU8wAwFCJs4TrgHuuFdiHJH13VCqKrxb3WzD2W0hDoeFY/A7yA9 LSS2mnMmRik5cgq69l8iX1QsiRhIJ4zJtWcfCk+Seu3/Xz5YZVb5zzv9Ef359ZFj YcTdEzAL8wLuIHjlu4RahFhrrXOu90ego9DqHlodbCXuExD/XCsqP3YOiFo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrHngnea6A4ssAam8Eq/tpHzunt8wHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMZoUJ8f9gidGobXnsvZ1XCOrU+eRG9I7Q3m Wkv8E11/pmqbQmu89NxVjuKrWHHM2yyWgd7884qj4LPzu7a6AhcrzjRuWLImkOsL 9HBStsGsKDVFJA7ia6dBJwAhWIxhUjjbo98uW52o9wCVKbMl5yAkskRvo7K7EZ98 +2byjSw1MxKLnzGxiv2GahnmzTbJ8jPn5y9DQsk4gE1ZEMtxKfZWDve7Kx7AipXO nXrJjkiJl0GPlHRvkjo5tl4g2XK/gzwO4Cpi3inkthIdVEwUBZ0i22uXi9L92pQl /7HQ/2lbIL8JKYSUPzZ0VTEh/QUFMqSP77RsEsAOvsBYnepopL4= -----END CERTIFICATE-----Generated at Sat Aug 23 13:36:33 2025 by rpki-client