$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: g6CgfdkQlq3/+htKhFQDX62YAljGxCqtfF8iCUYcJIo= Subject key identifier: 05:30:2A:85:95:89:82:49:D0:AB:8F:7B:FC:89:B2:3B:60:6C:C8:FC Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 65CA005BE4C9AEED6A24E9898E9A609FA7B8F871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 050C Signing time: Fri 05 Sep 2025 13:11:33 +0000 Manifest this update: Fri 05 Sep 2025 13:06:33 +0000 Manifest next update: Tue 09 Sep 2025 00:06:33 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 3: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 4: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: opROicQ3S+ZUVr5Lml0+U0BMSp6shPo+wqytgrQnb5E=) 5: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 6: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 7: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 8: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ca:00:5b:e4:c9:ae:ed:6a:24:e9:89:8e:9a:60:9f:a7:b8:f8:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Sep 5 13:06:33 2025 GMT Not After : Sep 9 00:06:33 2025 GMT Subject: CN=05302A8595898249D0AB8F7BFC89B23B606CC8FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:e8:61:10:33:b6:a5:22:79:1f:15:9c:4a:bc: 23:b6:a5:64:fc:36:67:8d:f2:56:82:66:0b:6d:b5: 07:76:b8:b0:4a:0e:22:7b:69:54:b1:f9:c3:42:47: 44:c4:40:b7:c8:58:4b:57:c8:2d:37:6b:9f:c3:45: 0d:84:c3:db:61:43:a4:a2:80:cd:96:64:02:26:b2: b4:e4:6a:bc:d4:95:fd:ef:81:b9:51:49:06:43:a5: fc:23:f9:81:4e:31:72:ec:cc:7c:8c:dd:eb:e1:5e: 94:bf:be:89:79:79:eb:27:30:d7:c8:46:24:d9:a3: 75:4f:e6:7c:22:5b:f0:03:47:cd:6f:98:55:98:d5: e4:d3:c3:e9:a9:65:fa:c7:24:05:dc:3e:93:6a:f0: aa:39:20:12:d8:53:f6:fd:3d:40:54:3d:88:70:fa: 1b:95:7e:ec:18:5b:99:b5:2a:c5:f1:05:61:fc:b3: 14:e7:8f:4d:13:e9:e3:e8:5d:0f:e5:e0:b9:d6:fc: 47:46:72:f1:55:0d:0d:b9:85:a3:db:a1:3a:1a:88: 40:aa:31:d6:94:a3:0e:6a:f2:8b:13:35:4a:9c:02: 82:9b:ea:3b:74:cd:71:a3:8a:85:33:cb:57:43:3c: a1:4c:83:1c:07:9e:e4:c8:c3:93:ca:d8:5b:1f:29: bd:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:30:2A:85:95:89:82:49:D0:AB:8F:7B:FC:89:B2:3B:60:6C:C8:FC X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:fe:79:b8:e3:e0:16:9f:0f:3c:f0:75:3f:51:90:2c:dd:0a: 9c:10:60:f0:f8:71:5e:c2:9d:e3:ec:a6:f8:19:d2:9e:02:f4: 62:85:18:bb:23:fa:a6:61:c6:73:7b:01:e8:cd:5b:66:c6:81: 72:9a:ad:1d:ca:da:fd:1c:33:7a:3b:c1:06:41:21:c2:c2:d7: 3a:8b:80:9c:cc:c9:e2:34:8e:89:d2:04:6f:f9:5d:87:e2:3e: 27:e2:22:a5:48:a6:88:08:24:ae:0f:ac:1e:ad:b4:52:04:62: 07:21:7e:00:b0:2a:68:37:8f:09:3c:87:52:79:3c:b6:2b:dd: a7:7d:e1:53:c1:20:1a:b4:cb:20:09:76:d1:ba:20:e2:51:51: 0a:dc:ae:c0:7f:2c:d3:20:41:cc:a8:0f:22:46:9c:b0:0c:ad: e0:e0:7b:c4:d8:f2:9e:d6:e4:f3:ca:ad:10:2e:07:1f:d4:8a: 81:10:5c:e6:fb:0d:78:88:67:e9:b2:9d:1e:4e:2d:95:71:40: d0:3e:8e:49:ae:99:71:83:3f:75:73:7d:2a:d5:8b:6b:1a:1b: f9:c8:67:67:1e:36:6a:0d:6e:06:d3:7b:18:18:da:eb:f3:24: 50:b0:4e:4a:26:9e:3b:a1:01:b1:e7:e1:94:57:a2:5b:35:4a: 14:f6:37:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcoAW+TJru1qJOmJjppgn6e4+HEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA5MDUxMzA2MzNaFw0yNTA5MDkwMDA2MzNaMDMxMTAvBgNV BAMTKDA1MzAyQTg1OTU4OTgyNDlEMEFCOEY3QkZDODlCMjNCNjA2Q0M4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6GEQM7alInkfFZxKvCO2pWT8 NmeN8laCZgtttQd2uLBKDiJ7aVSx+cNCR0TEQLfIWEtXyC03a5/DRQ2Ew9thQ6Si gM2WZAImsrTkarzUlf3vgblRSQZDpfwj+YFOMXLszHyM3evhXpS/vol5eesnMNfI RiTZo3VP5nwiW/ADR81vmFWY1eTTw+mpZfrHJAXcPpNq8Ko5IBLYU/b9PUBUPYhw +huVfuwYW5m1KsXxBWH8sxTnj00T6ePoXQ/l4LnW/EdGcvFVDQ25haPboToaiECq MdaUow5q8osTNUqcAoKb6jt0zXGjioUzy1dDPKFMgxwHnuTIw5PK2FsfKb3JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBTAqhZWJgknQq497/ImyO2BsyPwwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAML+ebjj4BafDzzwdT9RkCzdCpwQYPD4cV7C nePspvgZ0p4C9GKFGLsj+qZhxnN7AejNW2bGgXKarR3K2v0cM3o7wQZBIcLC1zqL gJzMyeI0jonSBG/5XYfiPifiIqVIpogIJK4PrB6ttFIEYgchfgCwKmg3jwk8h1J5 PLYr3ad94VPBIBq0yyAJdtG6IOJRUQrcrsB/LNMgQcyoDyJGnLAMreDge8TY8p7W 5PPKrRAuBx/UioEQXOb7DXiIZ+mynR5OLZVxQNA+jkmumXGDP3VzfSrVi2saG/nI Z2ceNmoNbgbTexgY2uvzJFCwTkomnjuhAbHn4ZRXols1ShT2N1E= -----END CERTIFICATE-----Generated at Sun Sep 7 14:04:39 2025 by rpki-client