$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: GAsfdM2uEUH/+oL+qgijUu5G1Ly3fjVs3nryHCMTtD4= Subject key identifier: 9D:52:36:70:27:DC:F5:7F:DD:3F:10:A4:7E:72:AC:68:50:D8:2C:1B Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 1F5706B2F95768230CE639884E15A3C910CEDAD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0574 Signing time: Sun 26 Apr 2026 12:21:45 +0000 Manifest this update: Sun 26 Apr 2026 12:16:45 +0000 Manifest next update: Wed 29 Apr 2026 14:55:45 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 2: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 4: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: S7rMruXZcs39bdWw59CHcYXC8Ac4qjPZssb28/C5LxA=) 5: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=) 6: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 7: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 14:55:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:57:06:b2:f9:57:68:23:0c:e6:39:88:4e:15:a3:c9:10:ce:da:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Apr 26 12:16:45 2026 GMT Not After : Apr 29 14:55:45 2026 GMT Subject: CN=9D52367027DCF57FDD3F10A47E72AC6850D82C1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:6f:8a:42:bb:77:ea:c4:22:b2:1a:e3:f6:7f: 21:a1:03:4d:2d:9f:72:60:fd:a7:e6:e8:92:ac:d6: 42:ef:ce:ee:71:89:ba:e9:b9:7c:aa:17:20:f9:68: fe:78:d0:83:cc:1c:ce:b5:63:b2:1d:b2:9d:eb:87: 80:bf:f8:b1:f5:03:c9:21:69:2b:8f:11:48:4b:a6: 86:87:57:64:b3:1b:94:64:3b:f0:8e:b1:e7:35:f5: 88:22:7f:b9:50:53:42:e2:c1:de:e0:6a:e4:92:4c: 53:3b:fc:ca:d6:48:35:76:8a:26:12:d5:5e:52:fe: 59:38:3e:ae:4b:b5:c5:32:75:87:2a:cf:74:22:21: d7:54:e0:48:04:2f:32:a9:6e:31:d2:a6:f8:6e:e1: d5:27:63:d5:e9:ad:f4:48:f5:ed:4e:d7:95:d0:b2: 38:66:e8:58:7b:6e:37:ea:1b:7b:5f:ab:61:b3:e2: a8:dc:e8:13:37:a3:cd:ae:62:3d:e7:88:9f:55:11: 20:52:69:88:83:3e:01:ff:d3:cd:47:ef:c1:a8:63: 00:51:1a:a9:e1:1f:a3:9f:18:ef:2c:26:d2:a4:b4: b6:e6:e4:b6:f8:a7:21:ba:cd:c5:0f:16:2c:a7:5f: 89:9b:2e:b9:0c:4c:75:1b:c5:c5:9a:47:c1:d0:7c: cf:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:52:36:70:27:DC:F5:7F:DD:3F:10:A4:7E:72:AC:68:50:D8:2C:1B X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:7d:0e:ee:74:65:7f:c0:cd:64:80:e3:33:e8:6f:e4:5d:18: aa:97:77:59:ac:9f:8f:7c:65:44:aa:c5:04:73:83:f6:d5:99: 2f:03:ff:3c:26:56:19:55:96:6a:b8:f4:c9:8d:cb:60:95:de: f3:fb:09:8f:fb:d4:e0:4b:f8:9f:e6:3f:5c:cd:fa:f4:30:b9: 03:58:59:dd:e4:ee:91:dc:53:18:97:81:b7:9e:fa:5d:f3:2b: 69:bb:9f:2c:63:68:20:d2:47:2a:d6:93:a1:a3:df:9b:e5:2d: 76:c2:ce:8f:b4:51:3e:0a:96:02:00:ce:05:ae:9e:6e:b2:a9: 82:7d:0c:fa:06:2b:db:25:fa:cf:15:9b:35:d0:23:df:3c:d5: a0:99:70:0e:33:19:eb:8e:8c:bd:11:ba:29:82:3c:73:62:f2: 88:8f:28:f9:37:15:be:9c:38:a2:83:a9:85:52:cf:9a:98:bf: 52:3a:9d:b4:f6:a1:7d:2b:a0:4c:36:9e:25:df:66:54:8e:9c: f3:55:9f:cd:d0:b2:c7:f2:f6:10:a4:46:ce:27:23:51:3f:ce: 45:65:50:d5:a1:01:06:71:a6:01:a5:ba:3a:d1:f6:bc:0e:23: 4a:a2:b5:8c:02:3c:e9:7c:d3:5e:ef:f3:2b:24:18:70:46:c0: cf:d6:6c:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH1cGsvlXaCMM5jmIThWjyRDO2tUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNjA0MjYxMjE2NDVaFw0yNjA0MjkxNDU1NDVaMDMxMTAvBgNV BAMTKDlENTIzNjcwMjdEQ0Y1N0ZERDNGMTBBNDdFNzJBQzY4NTBEODJDMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxb4pCu3fqxCKyGuP2fyGhA00t n3Jg/afm6JKs1kLvzu5xibrpuXyqFyD5aP540IPMHM61Y7Idsp3rh4C/+LH1A8kh aSuPEUhLpoaHV2SzG5RkO/COsec19Ygif7lQU0Liwd7gauSSTFM7/MrWSDV2iiYS 1V5S/lk4Pq5LtcUydYcqz3QiIddU4EgELzKpbjHSpvhu4dUnY9XprfRI9e1O15XQ sjhm6Fh7bjfqG3tfq2Gz4qjc6BM3o82uYj3niJ9VESBSaYiDPgH/081H78GoYwBR GqnhH6OfGO8sJtKktLbm5Lb4pyG6zcUPFiynX4mbLrkMTHUbxcWaR8HQfM/7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnVI2cCfc9X/dPxCkfnKsaFDYLBswHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh9Du50ZX/AzWSA4zPob+RdGKqXd1msn498 ZUSqxQRzg/bVmS8D/zwmVhlVlmq49MmNy2CV3vP7CY/71OBL+J/mP1zN+vQwuQNY Wd3k7pHcUxiXgbee+l3zK2m7nyxjaCDSRyrWk6Gj35vlLXbCzo+0UT4KlgIAzgWu nm6yqYJ9DPoGK9sl+s8VmzXQI9881aCZcA4zGeuOjL0RuimCPHNi8oiPKPk3Fb6c OKKDqYVSz5qYv1I6nbT2oX0roEw2niXfZlSOnPNVn83Qssfy9hCkRs4nI1E/zkVl UNWhAQZxpgGlujrR9rwOI0qitYwCPOl8017v8yskGHBGwM/WbIg= -----END CERTIFICATE-----Generated at Mon Apr 27 16:05:55 2026 by rpki-client