$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: RzSOeSyaEo7S7w49UFS5ylKAKekkhW1kL+LLoDc/Fc0= Subject key identifier: 5A:42:88:4B:99:C5:EF:3F:14:F0:DB:0B:EA:FC:69:3C:59:AF:82:6A Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 640EDAD8D69FB82F4A505725F8A404586F866B71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0523 Signing time: Sun 26 Oct 2025 20:01:35 +0000 Manifest this update: Sun 26 Oct 2025 19:56:35 +0000 Manifest next update: Thu 30 Oct 2025 04:32:35 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 3: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 4: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 9: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: XS0TuDPEMx2wI86or04DQcL1aLqklu+uVzoQSwaKllQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 30 Oct 2025 04:32:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0e:da:d8:d6:9f:b8:2f:4a:50:57:25:f8:a4:04:58:6f:86:6b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Oct 26 19:56:35 2025 GMT Not After : Oct 30 04:32:35 2025 GMT Subject: CN=5A42884B99C5EF3F14F0DB0BEAFC693C59AF826A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c7:7e:be:c1:1a:52:c8:e0:74:da:d6:a5:80: 41:7c:e0:43:7e:e0:ab:68:6a:cc:dc:35:9d:e1:96: e7:1d:e9:09:e9:4d:40:7f:25:5a:61:e7:e3:9e:35: d0:e4:da:c0:f3:e9:09:7c:f1:6f:bf:b2:f4:db:2f: c4:ee:1a:9e:d9:64:08:09:2d:06:a4:64:d5:dd:80: e7:7d:a3:5f:f7:de:45:6b:7f:c2:fc:23:6b:9c:cf: 04:59:17:18:68:5d:9d:ba:13:b3:23:ce:76:9b:92: 66:71:7e:de:f1:97:45:f2:6d:c7:0f:56:4c:8d:15: e4:04:bb:0b:c3:36:9f:6c:4e:0c:94:e4:02:c0:0f: 58:49:b8:e1:c0:3b:a2:80:7b:e5:f5:6b:b3:a3:19: d4:2a:5e:15:0f:41:98:79:45:de:c5:bf:17:55:2a: 65:73:42:14:45:7c:5f:a2:5a:fd:9c:10:7e:1d:90: f5:7b:e9:9b:0b:fe:f3:c5:4d:60:36:cd:68:32:d3: 86:7e:7c:23:11:43:fc:6f:62:58:1a:e4:a6:af:b0: ea:1b:69:3b:9e:d9:a9:fb:52:0d:30:f6:44:f7:55: ae:dd:d9:37:5f:f1:dc:87:7b:8d:2e:31:98:10:ff: 60:b1:29:94:66:e0:e1:ef:6a:4f:35:07:e3:c9:9d: ef:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:42:88:4B:99:C5:EF:3F:14:F0:DB:0B:EA:FC:69:3C:59:AF:82:6A X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ae:35:63:7a:a6:e7:d9:de:b9:03:76:3d:c3:8b:02:8a:e7: 7d:62:e3:8f:d9:7b:4e:d4:13:ee:d4:aa:cc:4f:c3:55:8a:83: f8:c3:48:51:e9:43:c7:29:0a:7f:ff:b3:e9:7a:bb:24:15:e4: c6:94:ae:1a:57:ec:ba:09:cb:22:7b:a0:6a:0f:62:3b:aa:e7: 1d:d9:d1:f7:fa:a6:f3:bf:34:9a:00:e0:c1:c4:8a:c1:a6:32: 6d:65:02:6d:f1:a8:d6:9b:88:10:9c:96:ea:78:61:27:f1:d1: 98:60:11:68:cf:6a:10:7d:25:4e:48:cd:ce:cb:83:77:37:02: 05:ea:ba:d1:2c:3c:11:b0:3d:ff:bc:57:79:3c:19:dd:d6:68: 6f:ea:8d:a8:ea:13:c7:fb:02:fc:6d:d8:be:39:e4:44:53:e7: a4:e0:a0:4c:f4:6a:8e:25:ee:79:fe:ef:a4:b4:cf:04:be:fb: a4:b4:62:2f:18:64:c6:95:cb:d4:05:52:22:a9:fa:46:0d:cf: 41:83:b1:90:7a:72:12:a9:d0:e0:5d:de:2a:75:17:35:da:22: 6f:e4:1f:a6:6a:71:ac:8f:13:f3:0d:b6:82:8c:2c:00:e1:f9: dd:b7:5e:5e:f3:c0:4d:83:74:9a:10:07:b5:5b:de:ee:b7:7e: 57:57:8e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZA7a2NafuC9KUFcl+KQEWG+Ga3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTEwMjYxOTU2MzVaFw0yNTEwMzAwNDMyMzVaMDMxMTAvBgNV BAMTKDVBNDI4ODRCOTlDNUVGM0YxNEYwREIwQkVBRkM2OTNDNTlBRjgyNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4x36+wRpSyOB02talgEF84EN+ 4KtoaszcNZ3hlucd6QnpTUB/JVph5+OeNdDk2sDz6Ql88W+/svTbL8TuGp7ZZAgJ LQakZNXdgOd9o1/33kVrf8L8I2uczwRZFxhoXZ26E7MjznabkmZxft7xl0XybccP VkyNFeQEuwvDNp9sTgyU5ALAD1hJuOHAO6KAe+X1a7OjGdQqXhUPQZh5Rd7FvxdV KmVzQhRFfF+iWv2cEH4dkPV76ZsL/vPFTWA2zWgy04Z+fCMRQ/xvYlga5KavsOob aTue2an7Ug0w9kT3Va7d2Tdf8dyHe40uMZgQ/2CxKZRm4OHvak81B+PJne/xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWkKIS5nF7z8U8NsL6vxpPFmvgmowHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM2uNWN6pufZ3rkDdj3DiwKK531i44/Ze07U E+7UqsxPw1WKg/jDSFHpQ8cpCn//s+l6uyQV5MaUrhpX7LoJyyJ7oGoPYjuq5x3Z 0ff6pvO/NJoA4MHEisGmMm1lAm3xqNabiBCclup4YSfx0ZhgEWjPahB9JU5Izc7L g3c3AgXqutEsPBGwPf+8V3k8Gd3WaG/qjajqE8f7Avxt2L455ERT56TgoEz0ao4l 7nn+76S0zwS++6S0Yi8YZMaVy9QFUiKp+kYNz0GDsZB6chKp0OBd3ip1FzXaIm/k H6ZqcayPE/MNtoKMLADh+d23Xl7zwE2DdJoQB7Vb3u63fldXjhI= -----END CERTIFICATE-----Generated at Mon Oct 27 11:54:29 2025 by rpki-client