$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: q7hC+KXI5x/IqtqpAGYjeXX/YWhPqDd6PG4zsHwEjDU= Subject key identifier: CA:19:81:54:70:0A:7A:09:DE:EB:89:73:D6:DC:D4:23:BD:5B:17:DA Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 04AC399332960F183C7D4BA210343856B7FC1DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04FD Signing time: Tue 05 Aug 2025 17:01:33 +0000 Manifest this update: Tue 05 Aug 2025 16:56:33 +0000 Manifest next update: Fri 08 Aug 2025 23:58:33 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 3: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 5: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) 6: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: 4DVGv2mcKlRvJ3jIbKUqL4i2mVC2kTgdvsm7OE6l1U0=) 7: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 8: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 23:58:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ac:39:93:32:96:0f:18:3c:7d:4b:a2:10:34:38:56:b7:fc:1d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Aug 5 16:56:33 2025 GMT Not After : Aug 8 23:58:33 2025 GMT Subject: CN=CA198154700A7A09DEEB8973D6DCD423BD5B17DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d4:f1:1d:72:b8:1a:4e:23:45:ba:c6:36:79: 04:61:19:7d:43:f5:70:f6:59:32:c9:3f:09:fe:63: 73:bd:e5:20:ea:5a:57:ad:21:0a:a1:b2:c0:a4:1f: f2:0e:c1:40:45:21:51:ef:a5:41:cb:57:d5:61:d5: 12:e9:90:03:26:e1:99:0f:56:a4:95:4a:8d:d1:56: e2:9b:39:28:1d:06:3b:a9:1a:49:52:39:3b:e5:74: 2d:8c:5f:22:1b:c1:d3:3a:4e:bc:c9:28:77:cf:62: ea:f8:75:f5:21:c7:d0:57:33:ee:2f:40:67:af:aa: 85:e5:26:1b:57:9f:9a:82:ff:fe:e3:98:c0:fd:02: ad:60:ea:a5:f3:62:7e:87:78:ec:29:45:25:02:3d: b8:53:c6:13:94:9b:07:0c:46:a6:07:c4:fd:01:c0: 3e:40:04:c4:e6:c1:7e:6b:09:40:9f:36:f2:de:0d: ec:46:c6:08:4a:b5:7c:10:ce:a8:6e:3c:2b:09:71: c3:fb:d4:ea:ba:5f:50:28:21:6f:dc:b9:ac:1a:08: 85:cf:42:54:27:ab:ad:7d:4c:60:14:39:41:3a:83: 60:a5:8a:66:2f:4d:e1:a0:b1:06:29:f2:28:1d:3c: 26:9c:d6:8f:10:a8:c9:8d:c3:f7:63:60:da:15:a7: e3:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:19:81:54:70:0A:7A:09:DE:EB:89:73:D6:DC:D4:23:BD:5B:17:DA X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e3:aa:85:6d:96:7b:1e:8b:2e:e3:74:a4:af:31:30:8f:9b: 17:c3:d1:a5:3e:6a:11:dd:73:60:45:8d:e3:81:1b:2f:c1:02: 80:87:f8:54:b4:f4:fd:54:3f:b5:8a:20:07:c5:69:13:1d:bc: 9d:1a:0c:1f:fc:86:63:ae:ed:3e:9c:69:e8:8e:de:d7:4f:0e: 94:74:72:28:20:e9:b0:eb:ed:13:7b:c0:56:95:b5:71:1c:5e: ee:fc:96:13:d7:d1:32:fb:01:e9:ad:c2:59:eb:17:b5:36:11: 49:48:81:e2:2b:da:b7:95:81:d3:a2:ff:68:c2:1f:09:fc:d1: 17:a9:62:95:ab:de:0f:6a:e7:2b:5c:82:60:ee:fb:c8:75:b8: 16:c5:3e:2c:68:63:df:49:09:39:38:ba:26:d6:8a:38:c5:41: 55:f9:ed:52:e1:04:7a:e7:a9:7b:4a:52:c7:74:00:f2:f0:03: 88:5a:f3:7d:92:ed:eb:08:ed:da:a4:5c:40:2e:0b:3a:2b:be: da:d7:13:c1:d6:bc:74:43:df:4a:06:1d:d9:50:c1:87:e2:83: 37:69:b5:f0:0b:6c:63:80:29:9b:42:c0:d9:3f:0e:72:a5:35: a4:6f:48:0d:c6:a0:bf:53:47:56:10:6d:7f:b1:49:c2:56:ba: 5d:8c:e4:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKw5kzKWDxg8fUuiEDQ4Vrf8HbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA4MDUxNjU2MzNaFw0yNTA4MDgyMzU4MzNaMDMxMTAvBgNV BAMTKENBMTk4MTU0NzAwQTdBMDlERUVCODk3M0Q2RENENDIzQkQ1QjE3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1PEdcrgaTiNFusY2eQRhGX1D 9XD2WTLJPwn+Y3O95SDqWletIQqhssCkH/IOwUBFIVHvpUHLV9Vh1RLpkAMm4ZkP VqSVSo3RVuKbOSgdBjupGklSOTvldC2MXyIbwdM6TrzJKHfPYur4dfUhx9BXM+4v QGevqoXlJhtXn5qC//7jmMD9Aq1g6qXzYn6HeOwpRSUCPbhTxhOUmwcMRqYHxP0B wD5ABMTmwX5rCUCfNvLeDexGxghKtXwQzqhuPCsJccP71Oq6X1AoIW/cuawaCIXP QlQnq619TGAUOUE6g2ClimYvTeGgsQYp8igdPCac1o8QqMmNw/djYNoVp+ODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyhmBVHAKegne64lz1tzUI71bF9owHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbjqoVtlnseiy7jdKSvMTCPmxfD0aU+ahHd c2BFjeOBGy/BAoCH+FS09P1UP7WKIAfFaRMdvJ0aDB/8hmOu7T6caeiO3tdPDpR0 cigg6bDr7RN7wFaVtXEcXu78lhPX0TL7AemtwlnrF7U2EUlIgeIr2reVgdOi/2jC Hwn80RepYpWr3g9q5ytcgmDu+8h1uBbFPixoY99JCTk4uibWijjFQVX57VLhBHrn qXtKUsd0APLwA4ha832S7esI7dqkXEAuCzorvtrXE8HWvHRD30oGHdlQwYfigzdp tfALbGOAKZtCwNk/DnKlNaRvSA3GoL9TR1YQbX+xScJWul2M5FE= -----END CERTIFICATE-----Generated at Thu Aug 7 00:34:49 2025 by rpki-client