$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: Io4ZJJGkSdbXta/8NT9KlMr3OQCIBrHRNg6BITohi38= Subject key identifier: AD:BC:99:DB:F2:D0:98:DF:E3:97:14:3E:A3:81:DF:61:9F:CE:BB:1B Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 51C777B4499400769248375A988A81906326AD3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0565 Signing time: Tue 24 Mar 2026 12:11:44 +0000 Manifest this update: Tue 24 Mar 2026 12:06:44 +0000 Manifest next update: Fri 27 Mar 2026 20:35:44 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 2: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: 5thVHzF0JpDUWHTxp8dSe9BkSOUaOVLxtoPvIN1uigg=) 3: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 6: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 7: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=) 8: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 9: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:35:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:c7:77:b4:49:94:00:76:92:48:37:5a:98:8a:81:90:63:26:ad:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Mar 24 12:06:44 2026 GMT Not After : Mar 27 20:35:44 2026 GMT Subject: CN=ADBC99DBF2D098DFE397143EA381DF619FCEBB1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:10:4a:57:19:ff:d8:55:7f:e7:88:bf:9b:d6: d8:e7:ff:d6:a1:d8:27:ed:91:e5:8f:68:5e:91:09: 20:db:1c:19:d5:7a:28:6c:a1:1c:b2:43:2b:ba:34: 91:a7:b1:b7:3d:d9:4c:ef:ac:2b:89:d0:0e:c0:6a: 3b:30:bc:b3:13:1f:1b:af:ce:aa:a5:0f:76:9b:8a: 97:ff:90:1f:78:c4:54:31:67:ea:a9:d0:4c:b2:c8: e1:0a:b8:a1:17:87:63:a3:3c:03:c8:dd:96:fa:ba: c0:31:87:07:55:57:bf:29:22:24:5c:f9:94:0f:e3: 9d:10:23:fa:02:56:36:c5:d8:61:05:84:d1:b2:c1: e3:74:85:8f:9c:23:93:ac:b8:a4:d3:4c:04:fc:76: 11:4b:fa:5b:6d:8c:b6:b5:2a:a1:e3:52:37:9b:69: 0f:c8:2f:3a:4d:55:9a:95:d5:63:96:4f:2d:18:7b: f2:9b:29:33:9d:f4:df:09:a2:fc:f5:a8:d6:a7:1d: 72:5d:b3:26:99:60:87:3b:d8:8c:3d:7a:36:3e:5a: 72:9b:42:fa:d6:4d:b2:0e:7c:0a:ac:91:ee:b8:f4: 7d:0b:d3:31:ce:73:de:e8:ae:80:30:f0:02:fd:b8: 34:d4:94:91:96:63:24:21:4f:f3:f2:69:09:30:45: d0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BC:99:DB:F2:D0:98:DF:E3:97:14:3E:A3:81:DF:61:9F:CE:BB:1B X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:fa:8f:e2:8b:50:02:31:84:41:74:78:6c:8c:9a:89:24:9e: 44:51:9d:cc:cf:e1:45:b2:52:18:db:56:6c:c0:3e:f0:20:01: 32:1f:3c:b9:9b:f5:23:d2:aa:2e:58:c0:70:c4:26:37:1c:72: f7:d3:55:69:11:30:61:48:e2:3b:84:fe:e9:71:a9:8b:44:1b: 4d:b7:87:ec:0e:cb:8c:1a:4c:5c:7d:35:04:59:c3:91:65:4b: 19:65:d4:61:02:97:6e:5d:67:fa:3f:0a:66:14:b0:8a:00:8c: e6:c7:6f:82:24:2c:0d:63:05:9d:33:66:9d:10:ed:d9:a3:53: 02:e4:81:7a:19:b5:45:c7:f8:42:cd:5f:8d:03:87:ec:bd:83: 9a:d8:8f:ac:81:32:86:bd:05:70:cd:f9:50:75:92:c4:93:62: 1e:b8:33:3d:2f:40:04:f9:bf:97:67:08:d8:48:94:5e:df:f7: 2f:cd:b7:8d:2b:99:03:0a:b6:f1:68:87:4e:60:8b:73:f2:d6: e9:de:f1:14:31:d7:b6:6a:e9:92:a6:49:55:68:27:e6:a9:39: 5c:c8:06:2c:14:70:94:08:28:28:6d:55:05:39:36:4b:a5:02: 71:d0:30:8f:63:35:ce:51:7b:d7:74:e5:da:a2:24:2f:c7:03: 84:22:94:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUcd3tEmUAHaSSDdamIqBkGMmrT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNjAzMjQxMjA2NDRaFw0yNjAzMjcyMDM1NDRaMDMxMTAvBgNV BAMTKEFEQkM5OURCRjJEMDk4REZFMzk3MTQzRUEzODFERjYxOUZDRUJCMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJEEpXGf/YVX/niL+b1tjn/9ah 2CftkeWPaF6RCSDbHBnVeihsoRyyQyu6NJGnsbc92UzvrCuJ0A7AajswvLMTHxuv zqqlD3abipf/kB94xFQxZ+qp0EyyyOEKuKEXh2OjPAPI3Zb6usAxhwdVV78pIiRc +ZQP450QI/oCVjbF2GEFhNGyweN0hY+cI5OsuKTTTAT8dhFL+lttjLa1KqHjUjeb aQ/ILzpNVZqV1WOWTy0Ye/KbKTOd9N8Jovz1qNanHXJdsyaZYIc72Iw9ejY+WnKb QvrWTbIOfAqske649H0L0zHOc97oroAw8AL9uDTUlJGWYyQhT/PyaQkwRdATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrbyZ2/LQmN/jlxQ+o4HfYZ/OuxswHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED6j+KLUAIxhEF0eGyMmokknkRRnczP4UWy UhjbVmzAPvAgATIfPLmb9SPSqi5YwHDEJjcccvfTVWkRMGFI4juE/ulxqYtEG023 h+wOy4waTFx9NQRZw5FlSxll1GECl25dZ/o/CmYUsIoAjObHb4IkLA1jBZ0zZp0Q 7dmjUwLkgXoZtUXH+ELNX40Dh+y9g5rYj6yBMoa9BXDN+VB1ksSTYh64Mz0vQAT5 v5dnCNhIlF7f9y/Nt40rmQMKtvFoh05gi3Py1une8RQx17Zq6ZKmSVVoJ+apOVzI BiwUcJQIKChtVQU5NkulAnHQMI9jNc5Re9d05dqiJC/HA4QilBk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:51:24 2026 by rpki-client