$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: 0Ed15EAbP9QFn7kEi0LqDmRI4yWXz61RcGhyB9f6qSg= Subject key identifier: 2D:87:1F:2B:09:DB:D1:39:84:99:DD:D7:7D:D0:0E:34:A7:12:68:3C Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 16832FA3E4B85EF25926CAC2F3E43FAA6DE53F8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04D3 Signing time: Sun 04 May 2025 08:11:31 +0000 Manifest this update: Sun 04 May 2025 08:06:31 +0000 Manifest next update: Wed 07 May 2025 13:20:31 +0000 Files and hashes: 1: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: HdcryJxAA7MbsRyRQPfW8xEk/b0k+SKyYZxamrbZODY=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 3: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 4: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: RiJN0l87aY48VKpm5kB/oKohwUhSNuwZ2dejTOYaeE0=) 5: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: uvqfjeAuMsDgy2S+lqKfVA/VGjsHmAxmc+ppKnV8vvI=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:20:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:83:2f:a3:e4:b8:5e:f2:59:26:ca:c2:f3:e4:3f:aa:6d:e5:3f:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: May 4 08:06:31 2025 GMT Not After : May 7 13:20:31 2025 GMT Subject: CN=2D871F2B09DBD1398499DDD77DD00E34A712683C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:37:7b:ad:bb:8b:bf:22:39:6f:cd:84:d8:e4: 0e:85:9f:7c:02:16:f2:40:2b:32:39:7b:51:c1:79: cf:12:4d:94:60:97:3c:83:29:7c:c9:9e:0f:95:10: a6:e8:ba:56:2c:36:18:95:10:d6:e0:9e:62:64:b5: d1:bd:32:39:03:52:5a:63:4b:0e:ca:56:65:63:9d: 02:ed:fe:93:a4:86:37:25:c2:fc:e7:4d:77:b1:d8: bc:3a:84:ef:ea:55:c2:c0:1c:6c:c7:4c:b3:f0:4a: 52:07:26:74:71:3e:13:7b:b7:dd:3b:93:b8:d5:a1: ca:9a:e6:fb:ab:0f:e6:b5:0e:49:26:87:84:30:b6: 3f:97:8e:b6:cd:6b:a9:67:e2:de:0e:01:4e:6b:32: 4d:09:a6:fb:f3:29:70:8a:5a:a2:4e:23:55:66:fd: 7a:66:5f:3c:bb:9e:d9:0c:36:6d:d8:93:35:2a:25: 5f:31:51:34:48:8c:3d:d3:73:06:1a:b5:7f:a4:d2: 6f:b8:ce:0c:61:39:9e:10:f6:c2:b1:84:90:ad:77: 06:e5:83:08:df:cb:f9:04:af:b0:ee:7b:8d:0c:07: e6:45:ef:39:ae:7c:14:b7:df:0e:d5:8e:ab:fb:12: f0:40:09:1b:4c:1d:ea:53:a2:3c:bf:d2:da:cf:62: 22:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:87:1F:2B:09:DB:D1:39:84:99:DD:D7:7D:D0:0E:34:A7:12:68:3C X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:56:61:01:ca:23:85:e8:69:ba:a3:60:d9:f3:d7:f2:5c:7f: a9:b2:2a:12:74:d3:55:9e:fe:54:bb:6f:db:f0:42:13:19:d6: bd:de:7d:b7:9a:fb:c5:ee:e9:14:9d:98:e8:a8:53:65:bf:48: 36:d6:2d:84:69:60:a7:90:28:aa:90:d8:05:05:47:b5:03:40: 16:b2:1d:dd:3f:7d:8a:db:91:72:32:41:8e:3a:82:e7:a3:55: 13:d5:34:79:79:43:65:7c:83:86:8c:ec:3a:08:4a:91:74:5c: 46:c4:bd:27:70:7e:ae:e7:c6:bb:62:7d:01:f5:e0:76:c4:c6: 8d:7b:fd:61:3c:1b:9c:1b:a9:41:ad:cb:42:31:32:13:01:75: f2:56:df:5d:44:4b:ba:0d:c6:db:7d:4d:3e:4f:3e:90:42:bf: cd:52:18:20:40:5f:8f:a8:90:3f:0f:97:e6:30:a5:aa:57:f5: 80:91:ee:ed:64:0d:7d:33:3c:ce:70:bb:54:20:89:41:cd:7a: 71:0d:bb:a0:17:07:4f:9c:e7:0c:aa:a3:09:0f:c1:c5:c0:06: db:b9:ed:f3:f0:e7:2c:ad:c5:47:98:36:7b:87:d6:58:18:3b: 5d:b1:d5:2b:7e:7f:83:1a:c6:d9:54:b3:d8:6e:16:05:9c:97: 9d:ca:ce:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFoMvo+S4XvJZJsrC8+Q/qm3lP48wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA1MDQwODA2MzFaFw0yNTA1MDcxMzIwMzFaMDMxMTAvBgNV BAMTKDJEODcxRjJCMDlEQkQxMzk4NDk5RERENzdERDAwRTM0QTcxMjY4M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2N3utu4u/IjlvzYTY5A6Fn3wC FvJAKzI5e1HBec8STZRglzyDKXzJng+VEKboulYsNhiVENbgnmJktdG9MjkDUlpj Sw7KVmVjnQLt/pOkhjclwvznTXex2Lw6hO/qVcLAHGzHTLPwSlIHJnRxPhN7t907 k7jVocqa5vurD+a1Dkkmh4Qwtj+XjrbNa6ln4t4OAU5rMk0JpvvzKXCKWqJOI1Vm /XpmXzy7ntkMNm3YkzUqJV8xUTRIjD3TcwYatX+k0m+4zgxhOZ4Q9sKxhJCtdwbl gwjfy/kEr7Due40MB+ZF7zmufBS33w7Vjqv7EvBACRtMHepTojy/0trPYiJTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYcfKwnb0TmEmd3XfdAONKcSaDwwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1WYQHKI4XoabqjYNnz1/Jcf6myKhJ001We /lS7b9vwQhMZ1r3efbea+8Xu6RSdmOioU2W/SDbWLYRpYKeQKKqQ2AUFR7UDQBay Hd0/fYrbkXIyQY46guejVRPVNHl5Q2V8g4aM7DoISpF0XEbEvSdwfq7nxrtifQH1 4HbExo17/WE8G5wbqUGty0IxMhMBdfJW311ES7oNxtt9TT5PPpBCv81SGCBAX4+o kD8Pl+YwpapX9YCR7u1kDX0zPM5wu1QgiUHNenENu6AXB0+c5wyqowkPwcXABtu5 7fPw5yytxUeYNnuH1lgYO12x1St+f4MaxtlUs9huFgWcl53KzsA= -----END CERTIFICATE-----Generated at Wed May 7 04:19:16 2025 by rpki-client