
$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json)
Hash identifier: UsncQgGZpgx7TcQRPwosrNcXa5RBvxcjVEgnnJKI78A=
Subject key identifier: 8F:73:2B:6B:78:AE:AF:19:01:B9:21:CD:6F:C1:A4:3F:91:AF:36:A7
Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Certificate serial: 05B71B8521FC5D9FD84CBA83072C50EC0C0DC557
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
Manifest number: 055B
Signing time: Sun 01 Mar 2026 22:21:44 +0000
Manifest this update: Sun 01 Mar 2026 22:16:44 +0000
Manifest next update: Thu 05 Mar 2026 02:23:44 +0000
Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=)
2: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=)
3: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=)
4: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=)
5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=)
6: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=)
7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=)
8: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: v/KXbdmnnPUFpxyx7Vpxvp2cwYs/7WQevAJ5FFfBF9Q=)
9: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 02:23:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
05:b7:1b:85:21:fc:5d:9f:d8:4c:ba:83:07:2c:50:ec:0c:0d:c5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43
Validity
Not Before: Mar 1 22:16:44 2026 GMT
Not After : Mar 5 02:23:44 2026 GMT
Subject: CN=8F732B6B78AEAF1901B921CD6FC1A43F91AF36A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f6:a4:f0:ef:68:13:ad:dd:27:6c:c3:c5:8c:
35:a2:11:f3:25:9c:98:75:b0:ad:67:dc:f3:8d:02:
25:d3:68:5b:06:d0:5c:d9:bd:34:81:ff:e3:33:2a:
1e:e4:46:78:90:d1:f8:4e:fb:3e:61:9c:4c:b5:76:
8f:2c:b3:a9:5b:9f:64:a3:52:9c:58:55:7d:4f:8c:
88:f2:2b:f3:93:8f:81:a2:5f:39:42:94:54:14:a7:
aa:42:5b:b2:d5:f7:23:02:b2:3d:12:60:bc:fa:80:
5a:cc:d5:34:3a:8d:61:6d:37:19:20:0c:bf:6f:6a:
d8:4b:a9:7f:68:da:20:e9:12:37:9c:ae:aa:6d:17:
4e:15:7e:7c:40:ba:27:a1:b4:40:6a:98:79:d6:ba:
f9:de:6f:9a:d1:cd:62:c8:9e:bb:27:61:6c:3b:76:
9d:a7:3c:e7:65:9d:2a:e4:1c:15:3c:83:48:ea:66:
ca:93:0a:fd:c7:e3:f2:28:d4:c4:3e:70:45:83:f6:
e4:08:cf:60:c8:a7:7d:1a:aa:4d:e5:da:23:73:3c:
77:35:5d:29:e6:14:7d:48:02:03:32:fd:b8:8a:79:
e5:36:0c:05:39:73:81:b0:5b:f1:a3:70:78:36:c8:
a4:0f:0f:f4:eb:c2:6e:4a:d3:d1:76:aa:c3:0a:20:
0e:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:73:2B:6B:78:AE:AF:19:01:B9:21:CD:6F:C1:A4:3F:91:AF:36:A7
X509v3 Authority Key Identifier:
keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:be:85:03:8c:2d:a0:29:00:4b:3f:04:e5:fd:e9:da:01:8d:
ff:1f:83:03:c3:75:0a:95:3f:96:22:39:0c:71:51:a9:80:84:
f5:a7:0f:ed:11:72:5a:e8:53:54:ea:fb:fd:2e:52:3b:22:cd:
d1:c9:1c:e5:b9:49:08:ed:2f:5e:ca:c9:38:34:d3:a2:a3:fb:
46:b1:dd:e7:6b:5d:7b:83:1a:a7:a2:98:0b:9a:e7:e8:b7:f2:
1f:93:2e:01:24:47:e6:ce:43:a8:bc:a1:3c:59:ff:9d:2e:41:
43:b2:f2:2b:b2:da:c4:83:ed:ce:94:85:53:9b:2d:07:82:04:
22:ae:6f:f2:03:bd:2b:d7:f6:1b:a0:ec:22:25:0b:30:47:8e:
b6:94:5e:c3:74:9c:6a:08:52:87:a0:a3:f9:f8:0b:f5:3e:50:
ed:7f:33:e3:4b:56:b8:95:a5:b6:0d:9d:17:e1:12:72:c9:62:
c6:89:35:bd:15:cd:64:ad:08:d8:9f:3a:7c:93:b9:c5:97:76:
21:99:d4:69:37:37:5e:9a:93:79:85:b9:0c:67:4e:9a:4c:3f:
84:d6:b1:8a:f4:7e:c7:4b:c7:ba:62:b2:c4:b9:8d:fc:7b:f9:
3b:ad:51:b0:6a:ed:d5:2b:f0:73:22:c6:0d:e8:3b:be:b9:7a:
61:52:d7:7b
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUBbcbhSH8XZ/YTLqDByxQ7AwNxVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3
RjFBQkY0MzAeFw0yNjAzMDEyMjE2NDRaFw0yNjAzMDUwMjIzNDRaMDMxMTAvBgNV
BAMTKDhGNzMyQjZCNzhBRUFGMTkwMUI5MjFDRDZGQzFBNDNGOTFBRjM2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9qTw72gTrd0nbMPFjDWiEfMl
nJh1sK1n3PONAiXTaFsG0FzZvTSB/+MzKh7kRniQ0fhO+z5hnEy1do8ss6lbn2Sj
UpxYVX1PjIjyK/OTj4GiXzlClFQUp6pCW7LV9yMCsj0SYLz6gFrM1TQ6jWFtNxkg
DL9vathLqX9o2iDpEjecrqptF04VfnxAuiehtEBqmHnWuvneb5rRzWLInrsnYWw7
dp2nPOdlnSrkHBU8g0jqZsqTCv3H4/Io1MQ+cEWD9uQIz2DIp30aqk3l2iNzPHc1
XSnmFH1IAgMy/biKeeU2DAU5c4GwW/GjcHg2yKQPD/Trwm5K09F2qsMKIA7DAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUj3Mra3iurxkBuSHNb8GkP5GvNqcwHwYDVR0j
BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE
QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB
QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj
MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4
REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBALu+hQOMLaApAEs/BOX96doBjf8fgwPDdQqV
P5YiOQxxUamAhPWnD+0RclroU1Tq+/0uUjsizdHJHOW5SQjtL17KyTg006Kj+0ax
3edrXXuDGqeimAua5+i38h+TLgEkR+bOQ6i8oTxZ/50uQUOy8iuy2sSD7c6UhVOb
LQeCBCKub/IDvSvX9hug7CIlCzBHjraUXsN0nGoIUoego/n4C/U+UO1/M+NLVriV
pbYNnRfhEnLJYsaJNb0VzWStCNifOnyTucWXdiGZ1Gk3N16ak3mFuQxnTppMP4TW
sYr0fsdLx7pissS5jfx7+TutUbBq7dUr8HMixg3oO765emFS13s=
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:25:50 2026 by rpki-client