$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: I0RegKw7pnNwruLRUTzY9xuB5t4YkqGcEN6i5Chnmqs= Subject key identifier: 78:C2:8F:FC:05:EC:8F:1A:DE:A6:54:E3:D5:D9:2B:17:A3:73:A8:14 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 1A2AC2AB8687C2BDA9F0F2765227D11D5F3DC572 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04F5 Signing time: Sat 19 Jul 2025 00:31:33 +0000 Manifest this update: Sat 19 Jul 2025 00:26:33 +0000 Manifest next update: Tue 22 Jul 2025 04:47:33 +0000 Files and hashes: 1: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 3: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 5: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 6: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 7: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: 3lldzu2zJ60YuinFXRnGcko8lzwrH32F3Vr17+e17k4=) 8: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) 9: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 04:47:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:2a:c2:ab:86:87:c2:bd:a9:f0:f2:76:52:27:d1:1d:5f:3d:c5:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Jul 19 00:26:33 2025 GMT Not After : Jul 22 04:47:33 2025 GMT Subject: CN=78C28FFC05EC8F1ADEA654E3D5D92B17A373A814 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:99:2d:46:f6:b7:b4:83:15:93:26:53:2a:e4: 6d:b5:c8:0a:4d:19:d3:15:89:31:6f:93:0d:fd:55: f0:34:ae:5a:9e:5c:4f:95:bf:a8:eb:07:4e:ad:57: c5:f5:d0:97:cf:65:99:74:08:65:b9:7b:7e:70:73: a9:02:9a:ce:3c:65:75:27:95:92:eb:7e:ba:30:9c: 9d:2b:b1:7e:43:c7:d3:3f:d6:4a:ad:b2:2d:51:5d: 3c:83:cf:21:4c:9b:c0:0b:6c:41:7f:00:39:e9:09: d5:ed:33:dd:b3:e9:51:9c:74:1c:df:d2:49:c5:10: 44:df:31:9b:83:82:72:a4:bf:1b:33:13:89:50:71: 96:5e:a1:76:a8:e9:be:c6:84:9f:12:5c:1f:b0:3b: 39:77:a4:3d:79:b2:0e:5d:29:d1:e9:88:2a:b7:ec: 6f:0d:0a:b4:8f:16:b4:b2:93:2d:14:46:f6:43:4e: 36:ef:0d:2a:b0:22:f3:1b:f9:1a:66:61:96:16:23: 0f:94:36:6c:10:39:a1:28:3d:15:f5:e8:c2:6d:74: 30:1e:50:b7:95:3b:15:cb:90:2b:7e:5f:7a:cb:a9: 87:66:5e:7d:db:81:5a:6a:f0:38:04:d5:3d:87:2d: 77:4d:15:53:97:7c:e2:28:9a:ea:63:af:ac:8f:de: 2e:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:C2:8F:FC:05:EC:8F:1A:DE:A6:54:E3:D5:D9:2B:17:A3:73:A8:14 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:09:40:f3:2d:60:65:3a:18:96:f5:50:df:0f:df:58:66:a4: 0c:a1:20:07:63:a1:34:27:1c:d6:7a:87:32:1a:65:66:a2:fa: 2e:83:05:b9:9d:ba:42:db:37:d7:68:f3:25:21:a2:30:bd:04: 5c:32:59:6d:36:4f:c2:4b:55:22:bc:b2:83:fa:7e:c5:14:28: 03:dd:d1:13:8d:fc:8d:a3:be:61:ba:33:b3:8f:81:e5:8c:c4: 73:9c:12:2a:be:4d:7f:ed:80:13:4d:d2:8a:e4:aa:05:b4:bd: cf:a0:1e:bc:1f:3d:dc:ea:5f:6e:48:12:2c:21:d4:50:b1:83: 0d:f2:02:4e:5e:82:75:70:2e:95:b0:39:44:cf:d0:da:f6:34: 48:04:38:98:a9:56:7f:97:44:03:57:4f:19:00:74:91:4a:b0: 51:71:1c:b3:34:50:65:96:e3:cd:ca:06:87:d5:56:e4:4c:fa: 00:74:b7:82:6d:0c:9d:9f:35:e1:d9:38:9f:4f:6e:7b:90:24: 3b:56:b5:b3:5e:80:51:cd:44:27:2d:aa:5b:bc:b3:d2:f6:64: 7a:54:6b:44:57:76:db:f8:a9:50:5f:1e:0b:92:d8:c8:ea:0e: a8:3c:10:4c:f8:37:5a:6c:db:f3:27:11:98:1e:b7:53:40:eb: 89:c4:ee:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGirCq4aHwr2p8PJ2UifRHV89xXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA3MTkwMDI2MzNaFw0yNTA3MjIwNDQ3MzNaMDMxMTAvBgNV BAMTKDc4QzI4RkZDMDVFQzhGMUFERUE2NTRFM0Q1RDkyQjE3QTM3M0E4MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2mS1G9re0gxWTJlMq5G21yApN GdMViTFvkw39VfA0rlqeXE+Vv6jrB06tV8X10JfPZZl0CGW5e35wc6kCms48ZXUn lZLrfrownJ0rsX5Dx9M/1kqtsi1RXTyDzyFMm8ALbEF/ADnpCdXtM92z6VGcdBzf 0knFEETfMZuDgnKkvxszE4lQcZZeoXao6b7GhJ8SXB+wOzl3pD15sg5dKdHpiCq3 7G8NCrSPFrSyky0URvZDTjbvDSqwIvMb+RpmYZYWIw+UNmwQOaEoPRX16MJtdDAe ULeVOxXLkCt+X3rLqYdmXn3bgVpq8DgE1T2HLXdNFVOXfOIomupjr6yP3i7fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeMKP/AXsjxreplTj1dkrF6NzqBQwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI8JQPMtYGU6GJb1UN8P31hmpAyhIAdjoTQn HNZ6hzIaZWai+i6DBbmdukLbN9do8yUhojC9BFwyWW02T8JLVSK8soP6fsUUKAPd 0RON/I2jvmG6M7OPgeWMxHOcEiq+TX/tgBNN0orkqgW0vc+gHrwfPdzqX25IEiwh 1FCxgw3yAk5egnVwLpWwOUTP0Nr2NEgEOJipVn+XRANXTxkAdJFKsFFxHLM0UGWW 483KBofVVuRM+gB0t4JtDJ2fNeHZOJ9PbnuQJDtWtbNegFHNRCctqlu8s9L2ZHpU a0RXdtv4qVBfHguS2MjqDqg8EEz4N1ps2/MnEZget1NA64nE7hU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:28:26 2025 by rpki-client