$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: sKFuAzUukUiAYpKQ0B4ztmZaXmvqgWu+WkFxqsyJ1TA= Subject key identifier: 64:B9:78:3E:69:E0:8C:55:B6:C5:8D:67:48:F5:1E:74:C7:29:64:70 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 48007ED51AE24E62F8AE5250C2EE658C5AB28239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04D0 Signing time: Sun 27 Apr 2025 01:11:31 +0000 Manifest this update: Sun 27 Apr 2025 01:06:31 +0000 Manifest next update: Wed 30 Apr 2025 11:58:31 +0000 Files and hashes: 1: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: 259c1fIfVIpH5Gn47Vh9p8uGac8YoJfpwImMf5yZhH0=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 3: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 4: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 5: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: RiJN0l87aY48VKpm5kB/oKohwUhSNuwZ2dejTOYaeE0=) 6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 7: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) 8: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: uvqfjeAuMsDgy2S+lqKfVA/VGjsHmAxmc+ppKnV8vvI=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:00:7e:d5:1a:e2:4e:62:f8:ae:52:50:c2:ee:65:8c:5a:b2:82:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Apr 27 01:06:31 2025 GMT Not After : Apr 30 11:58:31 2025 GMT Subject: CN=64B9783E69E08C55B6C58D6748F51E74C7296470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:78:c4:57:86:05:18:13:d6:d4:a9:d6:3b:af: 17:05:14:40:a9:ee:d0:35:8e:2c:24:ea:61:d5:69: 16:08:25:fb:d6:84:96:e3:9b:d2:5d:ed:04:bc:59: 8b:79:5e:18:73:4a:8e:56:4a:e3:b3:15:5f:1a:27: 6a:8b:b8:29:3b:d9:d7:8b:5a:4c:25:c0:9e:9b:d2: ac:1a:82:30:65:32:7e:87:19:8d:13:6d:65:e9:6d: 30:7d:e3:dc:e5:37:54:37:fc:d8:d7:63:5c:ef:8e: f8:e0:54:3a:9d:ca:ef:24:13:3f:c9:6f:3b:e8:cc: 38:14:09:6f:38:14:b0:a8:40:32:1d:7f:ae:0a:89: ec:53:c7:d0:a5:42:74:64:fc:cd:e3:75:d4:b8:96: 6a:d7:84:05:57:f5:de:5e:0a:17:8a:33:70:17:23: b7:11:1b:17:b4:2a:2d:95:92:dd:52:24:28:e9:fe: bf:66:99:57:af:e7:fb:f4:a7:83:4c:b3:0b:dd:38: 40:2f:e7:2b:cc:e2:50:8f:f7:76:f5:bc:14:fa:f9: 5f:78:58:56:8c:f7:1f:52:d2:7d:a5:e4:25:63:69: 07:c2:55:7c:c5:5d:68:3e:45:8f:48:97:5b:6b:0c: 9a:88:3f:d5:91:fa:c3:04:68:29:2c:99:5d:0d:f7: 31:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:B9:78:3E:69:E0:8C:55:B6:C5:8D:67:48:F5:1E:74:C7:29:64:70 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:86:e9:b2:2e:41:bb:f5:a9:d8:50:52:03:98:c3:58:14:74: 36:1e:f6:bf:25:93:4f:db:99:27:a8:68:35:77:c1:4a:2f:b3: c8:2f:4b:b2:1b:7a:43:56:04:3b:8e:88:7c:3b:d6:33:2a:0c: 5a:cf:5c:bf:85:6d:a9:6a:13:64:d7:26:64:c8:20:6b:77:9a: 14:a5:da:a6:13:f1:ac:f7:84:d1:6d:27:d4:d7:01:ac:75:a2: 43:04:bf:ef:14:ff:5c:e2:a3:c2:9d:f0:e8:2a:f1:56:c5:10: 64:a5:4e:5f:a6:fe:67:ea:1b:7c:51:55:b3:59:20:a1:22:84: ce:94:48:68:6f:4a:96:aa:08:15:82:4b:52:b9:c6:4f:de:7c: ce:98:4b:9a:3a:94:a6:43:3e:d0:24:8a:82:a5:cb:b9:50:41: 97:35:f0:be:a1:d7:96:e7:98:53:8a:da:fe:20:da:01:22:42: f4:66:56:9a:0f:ee:af:3e:44:4d:84:dd:25:2e:7a:16:44:ba: 65:3f:ec:7b:09:1b:98:56:47:18:a2:4b:d6:c9:0b:c2:b3:8e: c8:8c:eb:e9:bf:16:b6:37:42:5b:0f:87:05:6a:b2:f7:19:6e: 3a:83:11:be:95:f0:2e:a0:b2:fd:3b:09:a6:ea:6c:8d:0c:fc: a0:ad:83:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSAB+1RriTmL4rlJQwu5ljFqygjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA0MjcwMTA2MzFaFw0yNTA0MzAxMTU4MzFaMDMxMTAvBgNV BAMTKDY0Qjk3ODNFNjlFMDhDNTVCNkM1OEQ2NzQ4RjUxRTc0QzcyOTY0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6eMRXhgUYE9bUqdY7rxcFFECp 7tA1jiwk6mHVaRYIJfvWhJbjm9Jd7QS8WYt5XhhzSo5WSuOzFV8aJ2qLuCk72deL WkwlwJ6b0qwagjBlMn6HGY0TbWXpbTB949zlN1Q3/NjXY1zvjvjgVDqdyu8kEz/J bzvozDgUCW84FLCoQDIdf64KiexTx9ClQnRk/M3jddS4lmrXhAVX9d5eCheKM3AX I7cRGxe0Ki2Vkt1SJCjp/r9mmVev5/v0p4NMswvdOEAv5yvM4lCP93b1vBT6+V94 WFaM9x9S0n2l5CVjaQfCVXzFXWg+RY9Il1trDJqIP9WR+sMEaCksmV0N9zHHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZLl4PmngjFW2xY1nSPUedMcpZHAwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiG6bIuQbv1qdhQUgOYw1gUdDYe9r8lk0/b mSeoaDV3wUovs8gvS7IbekNWBDuOiHw71jMqDFrPXL+FbalqE2TXJmTIIGt3mhSl 2qYT8az3hNFtJ9TXAax1okMEv+8U/1zio8Kd8Ogq8VbFEGSlTl+m/mfqG3xRVbNZ IKEihM6USGhvSpaqCBWCS1K5xk/efM6YS5o6lKZDPtAkioKly7lQQZc18L6h15bn mFOK2v4g2gEiQvRmVpoP7q8+RE2E3SUuehZEumU/7HsJG5hWRxiiS9bJC8KzjsiM 6+m/FrY3QlsPhwVqsvcZbjqDEb6V8C6gsv07CabqbI0M/KCtgyY= -----END CERTIFICATE-----Generated at Sun Apr 27 17:47:33 2025 by rpki-client