$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: OJ7UgOBdQ9VgOpgy0HNFs3wZ26TWCgFk94OTEjqTcX8= Subject key identifier: 32:7E:36:DF:B9:75:D0:AD:FA:1A:54:4C:43:51:65:DF:41:A4:D7:4C Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 6B492BA2704FEFDDF92E8EE5E05E4CA76C785C82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 0560 Signing time: Thu 12 Mar 2026 20:51:43 +0000 Manifest this update: Thu 12 Mar 2026 20:46:43 +0000 Manifest next update: Mon 16 Mar 2026 00:15:43 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: eMIpFTn3dFmv1C4MDrX0lkj1ZQs9jU1AYYbAGg+J5/E=) 2: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: TdOcBSulqT/k1J+bS2r7sCrDeanQk+UTRzf1JaxNxiY=) 3: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 4: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: spe84zVMe2bcaKVxUGj36+XcsHH/BNLwdoJ4BjQFuA4=) 5: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: awWbA7ZeNcCHztQ1ZAubpOQkFHc4cuFUkQrm1dRk6W0=) 6: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: Z9EEMEF5zgEExgpHK7oCqGG8wCUnuduZshqAFkuwllk=) 7: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: Fp0TOmR+T5KOOmBtJv0Rn3A8v15C+CZs9SaobCRyXyI=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 9: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: l2eAmwYAMdwqeVaiqpSuqh9iJ+09xrmmKyFN9F/M7QY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Mar 2026 00:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:49:2b:a2:70:4f:ef:dd:f9:2e:8e:e5:e0:5e:4c:a7:6c:78:5c:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Mar 12 20:46:43 2026 GMT Not After : Mar 16 00:15:43 2026 GMT Subject: CN=327E36DFB975D0ADFA1A544C435165DF41A4D74C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:06:90:19:e7:5e:0f:54:c3:55:a7:c7:11:62: bc:bc:10:41:41:d7:0f:3f:85:65:2a:ee:c9:fb:dd: 1e:3d:1a:75:64:3c:fb:e6:a5:ec:45:f9:8d:f4:38: 96:aa:27:4f:fb:9c:32:27:d7:de:7f:03:6f:d1:3d: 94:3f:a0:a6:6f:7e:d6:0e:d2:88:3f:75:05:fe:32: bd:64:24:55:05:55:5e:17:95:40:1a:04:7c:cf:c0: db:72:ed:d0:00:1d:07:7b:fc:8e:98:3d:ef:74:1d: 54:79:45:02:0d:de:a9:0b:40:94:0a:ae:b4:c2:eb: a7:cc:13:5c:45:88:6d:cc:7b:bf:cf:18:84:75:87: f8:1a:46:41:e7:8a:51:a3:d8:c6:84:c3:fc:12:b8: 95:c3:b5:8a:44:bf:88:8f:72:85:ab:c5:5e:60:42: 59:97:bf:a2:26:31:79:f4:f9:66:e0:24:de:19:3e: bd:2d:6b:c2:80:aa:58:f9:91:07:3d:5c:50:1a:85: ae:01:16:72:1a:df:0a:20:11:77:0a:99:d5:76:a7: 98:ec:1d:f7:8c:22:1c:f6:c7:c1:02:bb:ce:0e:84: 84:40:d6:b3:15:15:b0:13:4e:e3:a9:17:69:ff:d1: 5d:4a:d3:02:50:8b:6e:30:dd:ad:5a:76:28:df:7c: eb:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7E:36:DF:B9:75:D0:AD:FA:1A:54:4C:43:51:65:DF:41:A4:D7:4C X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:c4:ad:57:64:55:40:93:e4:f9:02:6a:22:c7:3f:78:9d:3f: 36:41:7a:78:7c:15:68:aa:6c:89:82:94:8b:12:bd:0b:d3:05: 85:fc:cb:37:a0:40:1f:96:73:9c:42:da:2e:e2:38:f9:91:b6: 21:ec:4e:c3:bd:d4:0b:89:44:10:03:00:d0:55:34:87:6d:6f: 6b:63:10:16:84:58:34:82:0e:f0:48:10:28:76:57:c9:fc:51: 4a:4a:09:e3:15:d0:76:60:7f:ce:b8:de:78:09:b4:e0:4e:44: 4f:c8:a8:6d:63:29:4a:0d:fb:d4:cb:3c:28:4b:f7:9a:59:ff: c6:57:71:c4:8a:6b:e3:6e:57:1c:af:22:71:52:6f:cd:4d:52: ea:bb:74:16:04:10:8c:d1:f8:1a:9a:63:0d:ae:f4:54:2e:c7: 2a:19:fa:92:0e:65:78:d0:71:a8:93:f9:71:ce:0a:94:89:91: 19:3d:1e:42:cb:6e:f4:b0:d1:a7:14:7c:e4:b1:ec:45:b9:c1: 8e:05:2d:6a:d7:b8:c1:cc:ba:44:5c:dc:a3:5a:89:d4:f8:cd: d2:42:2b:ca:54:b4:d1:e7:a6:36:b7:67:c8:de:8d:a4:25:ec: 05:3b:90:44:6c:61:c8:a2:62:2c:45:1a:cc:49:06:83:ac:4e: 0f:3a:03:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa0kronBP7935Lo7l4F5Mp2x4XIIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNjAzMTIyMDQ2NDNaFw0yNjAzMTYwMDE1NDNaMDMxMTAvBgNV BAMTKDMyN0UzNkRGQjk3NUQwQURGQTFBNTQ0QzQzNTE2NURGNDFBNEQ3NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgBpAZ514PVMNVp8cRYry8EEFB 1w8/hWUq7sn73R49GnVkPPvmpexF+Y30OJaqJ0/7nDIn195/A2/RPZQ/oKZvftYO 0og/dQX+Mr1kJFUFVV4XlUAaBHzPwNty7dAAHQd7/I6YPe90HVR5RQIN3qkLQJQK rrTC66fME1xFiG3Me7/PGIR1h/gaRkHnilGj2MaEw/wSuJXDtYpEv4iPcoWrxV5g QlmXv6ImMXn0+WbgJN4ZPr0ta8KAqlj5kQc9XFAaha4BFnIa3wogEXcKmdV2p5js HfeMIhz2x8ECu84OhIRA1rMVFbATTuOpF2n/0V1K0wJQi24w3a1adijffOtVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMn4237l10K36GlRMQ1Fl30Gk10wwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLErVdkVUCT5PkCaiLHP3idPzZBenh8FWiq bImClIsSvQvTBYX8yzegQB+Wc5xC2i7iOPmRtiHsTsO91AuJRBADANBVNIdtb2tj EBaEWDSCDvBIECh2V8n8UUpKCeMV0HZgf8643ngJtOBORE/IqG1jKUoN+9TLPChL 95pZ/8ZXccSKa+NuVxyvInFSb81NUuq7dBYEEIzR+BqaYw2u9FQuxyoZ+pIOZXjQ caiT+XHOCpSJkRk9HkLLbvSw0acUfOSx7EW5wY4FLWrXuMHMukRc3KNaidT4zdJC K8pUtNHnpja3Z8jejaQl7AU7kERsYciiYixFGsxJBoOsTg86AwA= -----END CERTIFICATE-----Generated at Fri Mar 13 05:24:53 2026 by rpki-client