$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: RgSfv+UA4jKCs3fNmBLFFFXrwLBCikTluDg3QfbUQKE= Subject key identifier: 73:2E:05:64:63:EA:1C:FD:E2:C5:4F:7B:10:DA:30:7A:F3:0E:08:C3 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 3A3F80F3270A7128D420A11F704DB8775BA6AD68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0527 Signing time: Tue 04 Nov 2025 19:41:34 +0000 Manifest this update: Tue 04 Nov 2025 19:36:34 +0000 Manifest next update: Fri 07 Nov 2025 23:09:34 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 2: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 8: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: rHV8G7jxibkzIqH7O/V53uHQAAoiOnzAdcRsR2Oxg5I=) 9: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 23:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:3f:80:f3:27:0a:71:28:d4:20:a1:1f:70:4d:b8:77:5b:a6:ad:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Nov 4 19:36:34 2025 GMT Not After : Nov 7 23:09:34 2025 GMT Subject: CN=732E056463EA1CFDE2C54F7B10DA307AF30E08C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:ff:06:20:2f:2a:ab:96:98:f6:53:6b:1a: 43:ef:21:59:ef:9c:21:69:6d:a2:6c:e5:0f:50:f1: 95:59:76:73:e7:8b:72:16:6e:5f:e9:0b:2e:df:ef: 6b:56:19:7f:95:ad:92:8b:8e:f3:0f:23:5f:3e:7d: 60:80:3b:62:9d:fa:6c:ce:74:a3:91:bf:c4:26:a8: 88:29:fc:b9:43:61:5a:b0:68:9e:26:c2:a8:d4:2a: 50:c8:76:79:96:be:22:93:51:f6:5d:3e:22:a7:d0: 0f:41:29:d7:a8:49:75:4b:7e:0b:19:05:27:de:da: f7:9e:ec:55:fa:76:22:01:c1:93:79:a8:b4:33:ee: ee:84:e5:61:0f:35:8f:8d:2e:36:1a:e7:53:2d:6e: da:ed:3b:43:44:3e:60:c9:65:8e:90:17:33:92:c1: 3d:28:b7:6b:73:39:9a:eb:8d:5e:39:fc:9a:46:2d: 11:52:d7:f0:ac:f2:54:da:f3:13:87:82:15:1d:62: 5b:63:bb:9a:8a:91:4d:ee:dc:ee:c4:d4:e1:a8:5a: 7d:1c:86:61:5c:f1:4e:b1:41:9a:a7:7b:34:82:a3: d9:a8:0d:9a:24:4e:fe:5a:49:6b:d5:c7:6c:47:a0: 01:88:1d:4b:fa:54:da:fc:21:27:49:98:a2:1c:14: 06:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:2E:05:64:63:EA:1C:FD:E2:C5:4F:7B:10:DA:30:7A:F3:0E:08:C3 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:2f:cc:e5:58:e5:49:69:a2:9c:fc:9b:a5:05:46:e9:8a:39: 54:84:ed:9e:e2:06:24:08:4b:ec:a3:02:5d:34:60:41:15:ce: 9b:d4:95:be:8e:cf:fa:e8:08:a4:19:d0:7f:6c:c6:26:ba:ed: 71:b0:51:8a:5d:57:ac:c3:c6:9d:11:70:6e:0e:c5:02:a2:ee: d1:20:dd:ca:88:e3:64:75:a0:34:1c:be:78:c3:4c:a7:50:df: 85:c9:29:d6:e6:10:15:b8:be:1d:1a:33:7e:b5:90:d8:a9:e8: d4:49:c8:df:95:15:64:dd:30:53:d3:2f:49:a6:e5:01:12:a1: 10:55:ed:65:d6:c2:a6:40:2d:b3:76:32:9b:5c:c2:fb:6b:38: 06:6c:7e:8a:b6:64:de:2e:3f:c0:11:32:7a:ee:b5:93:99:fb: 94:36:31:68:3c:32:aa:48:96:38:65:a5:49:69:42:b2:3a:8c: a9:d2:dc:f4:87:6c:2f:ca:0b:54:76:84:1e:cf:fb:ce:0f:dc: a7:4d:b5:1d:2e:36:ac:78:ad:7d:fd:f8:59:8f:2b:ac:5f:a3: ed:96:2f:aa:c2:87:8d:47:65:8d:47:25:2f:90:f6:72:70:a6: a1:4d:70:16:69:a7:9e:be:fc:3c:7c:09:44:55:91:1b:76:f6: a3:28:78:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOj+A8ycKcSjUIKEfcE24d1umrWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTExMDQxOTM2MzRaFw0yNTExMDcyMzA5MzRaMDMxMTAvBgNV BAMTKDczMkUwNTY0NjNFQTFDRkRFMkM1NEY3QjEwREEzMDdBRjMwRTA4QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kf8GIC8qq5aY9lNrGkPvIVnv nCFpbaJs5Q9Q8ZVZdnPni3IWbl/pCy7f72tWGX+VrZKLjvMPI18+fWCAO2Kd+mzO dKORv8QmqIgp/LlDYVqwaJ4mwqjUKlDIdnmWviKTUfZdPiKn0A9BKdeoSXVLfgsZ BSfe2vee7FX6diIBwZN5qLQz7u6E5WEPNY+NLjYa51MtbtrtO0NEPmDJZY6QFzOS wT0ot2tzOZrrjV45/JpGLRFS1/Cs8lTa8xOHghUdYltju5qKkU3u3O7E1OGoWn0c hmFc8U6xQZqnezSCo9moDZokTv5aSWvVx2xHoAGIHUv6VNr8ISdJmKIcFAaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcy4FZGPqHP3ixU97ENowevMOCMMwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKYvzOVY5Ulpopz8m6UFRumKOVSE7Z7iBiQI S+yjAl00YEEVzpvUlb6Oz/roCKQZ0H9sxia67XGwUYpdV6zDxp0RcG4OxQKi7tEg 3cqI42R1oDQcvnjDTKdQ34XJKdbmEBW4vh0aM361kNip6NRJyN+VFWTdMFPTL0mm 5QESoRBV7WXWwqZALbN2MptcwvtrOAZsfoq2ZN4uP8ARMnrutZOZ+5Q2MWg8MqpI ljhlpUlpQrI6jKnS3PSHbC/KC1R2hB7P+84P3KdNtR0uNqx4rX39+FmPK6xfo+2W L6rCh41HZY1HJS+Q9nJwpqFNcBZpp56+/Dx8CURVkRt29qMoeBY= -----END CERTIFICATE-----Generated at Wed Nov 5 00:59:07 2025 by rpki-client