$ rpki-client -vvf repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft File: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft (raw, json) Hash identifier: dlzoV6J6R4pGoRK7g9jk/0g9fTosYwQGxgAl9q/XEjQ= Subject key identifier: 40:E9:E2:67:C2:B8:E3:F5:90:A4:8D:5F:BE:84:2C:49:05:FA:63:67 Authority key identifier: 08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 Certificate issuer: /CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Certificate serial: 223999AB309728013A1519A31479BE8D3F60ECF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft Manifest number: 04E0 Signing time: Mon 02 Jun 2025 02:04:53 +0000 Manifest this update: Mon 02 Jun 2025 01:59:53 +0000 Manifest next update: Thu 05 Jun 2025 12:57:53 +0000 Files and hashes: 1: 3130332e3134382e3139382e302f32342d3234203d3e2034373837.roa (hash: e4K70c+l6o1H0jUf9NfNvizUU4LNYZwwkZ1VlRNX2oM=) 2: 08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl (hash: 3dXHzvdusey/uuJQf6ELf3vjxlW0qWzVCmr497ZQ2bo=) 3: 323030313a6466323a653838303a3a2f34382d3438203d3e20313339393938.roa (hash: nNX7HtrSmZosplxX3sNrwbTF/yyCS/NG8/khqeK7R2k=) 4: 3130332e3134382e3139392e302f32342d3234203d3e2034373837.roa (hash: p+o3Rxwi7Ep9QzNDO0C3gsAoxTUv16nFtXGsCyIZiVs=) 5: 3130332e3134382e3139382e302f32332d3234203d3e20313339393938.roa (hash: 398pMxlUxLm+mb3+06bFJF2HzdMJXZdsn6WziA62E2w=) 6: 3130332e3134382e3139382e302f32342d3234203d3e203233393437.roa (hash: +Qpxa5tuXUbGmdEMTheVpHvWYbCADJoAx1XIiJ6kkyQ=) 7: 3130332e3134382e3139382e302f32342d3234203d3e2034383030.roa (hash: 7SJMGKYIqywZq1oxStI1Ck+o92Gvb6NwaNA8HcKMaAA=) 8: 323030313a6466323a653838303a3a2f34382d3438203d3e2034373837.roa (hash: 4IPSllJPKCbe7aQKXRkaaNgX/oYCfpS1iXyW/h8vCFE=) 9: 3130332e3134382e3139382e302f32332d3234203d3e20313338313238.roa (hash: W0H9HDrVApNe3HWG7kzRwsgZpewrgw+OQsIBd3Xl334=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:39:99:ab:30:97:28:01:3a:15:19:a3:14:79:be:8d:3f:60:ec:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=08D07F010DA28112A94E8800C317B8DF7F1ABF43 Validity Not Before: Jun 2 01:59:53 2025 GMT Not After : Jun 5 12:57:53 2025 GMT Subject: CN=40E9E267C2B8E3F590A48D5FBE842C4905FA6367 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:41:5c:a8:c1:ba:23:4d:8d:c4:f5:3e:cb:45: 2e:0b:e0:04:0d:ce:58:3c:fa:b7:a5:a2:64:14:75: 8a:1b:3f:2c:ab:42:b6:95:21:b9:ce:a6:81:51:e0: 8e:de:fe:12:82:8d:a5:ea:26:15:4e:74:0d:e3:1d: cd:94:29:9d:74:17:3f:5f:8e:c1:d9:db:01:a0:dd: b0:a7:1f:6a:5c:2d:6d:17:0f:c0:f0:c8:0c:f9:51: ff:03:dc:42:94:72:37:9b:37:34:fa:09:c3:ec:12: 5d:56:77:10:a6:40:93:ca:f4:ed:a9:b8:03:1b:c3: aa:28:16:47:a4:2a:07:34:f8:ce:7c:36:36:a0:05: 20:d3:32:81:ae:27:6a:31:ac:a3:55:e6:af:b2:7f: f9:80:94:fc:ea:61:be:94:ad:95:f6:4f:f7:93:35: 32:a2:1d:37:94:ee:22:dd:f1:12:b7:f2:ab:68:d6: c3:cb:84:0e:97:06:c9:b4:22:63:63:dd:a0:af:87: 48:00:ad:8e:57:a9:07:47:d7:51:a9:24:78:e7:04: 5f:f3:df:65:77:59:19:44:07:b7:c0:b0:94:3d:17: 78:a8:35:33:99:9f:8e:0b:ab:df:55:7c:9b:0b:9c: 81:d9:30:d9:1d:df:3c:38:58:49:7b:bf:f2:0d:51: ae:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:E2:67:C2:B8:E3:F5:90:A4:8D:5F:BE:84:2C:49:05:FA:63:67 X509v3 Authority Key Identifier: keyid:08:D0:7F:01:0D:A2:81:12:A9:4E:88:00:C3:17:B8:DF:7F:1A:BF:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08D07F010DA28112A94E8800C317B8DF7F1ABF43.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70c2a13b-1f40-4c03-bc35-f6961516d4d9/0/08D07F010DA28112A94E8800C317B8DF7F1ABF43.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:c8:95:ae:9b:39:74:86:d1:2f:ef:96:d3:a1:ea:f3:8c:7e: fc:0c:80:0a:9b:5e:c5:ca:07:b2:cf:7f:5e:e4:25:84:7d:f7: db:a8:32:ee:fb:32:7c:62:53:cc:15:f2:82:1b:6d:e9:f4:79: a0:ab:60:00:40:cf:5b:7f:83:7a:54:e1:b4:fc:80:c9:e2:c8: 98:1c:6c:41:82:32:dd:9e:a8:e7:e1:b3:80:d2:09:25:2d:f8: dd:86:d5:42:d9:e7:29:29:8f:e0:aa:ce:20:40:70:46:91:7d: 3d:cb:51:20:65:26:63:d9:c2:6c:77:49:a1:7a:c4:44:77:a5: 0a:3e:83:25:0e:f9:1a:5c:f8:5d:6d:7c:18:d9:35:cd:88:2a: 38:63:ce:eb:e0:97:10:f3:ad:b6:19:df:c6:aa:32:d0:e1:f2: ec:15:5a:a8:92:74:8a:c5:c0:0d:4c:66:fe:05:0e:b9:8d:30: 97:b2:8a:cb:b5:6c:09:67:23:d8:d7:c9:c1:fd:f5:fc:71:1f: 4d:95:e2:23:f5:9c:e0:87:99:f8:db:34:3b:7d:35:8f:71:18: 0e:f1:f7:70:b3:6f:e7:56:8b:1f:3f:32:d6:6e:4c:36:c1:ad: 43:b1:7d:9c:f6:2c:1a:a8:7c:de:cd:f9:f0:7c:55:7d:0c:b5: 98:b6:9f:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjmZqzCXKAE6FRmjFHm+jT9g7PIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3 RjFBQkY0MzAeFw0yNTA2MDIwMTU5NTNaFw0yNTA2MDUxMjU3NTNaMDMxMTAvBgNV BAMTKDQwRTlFMjY3QzJCOEUzRjU5MEE0OEQ1RkJFODQyQzQ5MDVGQTYzNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAQVyowbojTY3E9T7LRS4L4AQN zlg8+relomQUdYobPyyrQraVIbnOpoFR4I7e/hKCjaXqJhVOdA3jHc2UKZ10Fz9f jsHZ2wGg3bCnH2pcLW0XD8DwyAz5Uf8D3EKUcjebNzT6CcPsEl1WdxCmQJPK9O2p uAMbw6ooFkekKgc0+M58NjagBSDTMoGuJ2oxrKNV5q+yf/mAlPzqYb6UrZX2T/eT NTKiHTeU7iLd8RK38qto1sPLhA6XBsm0ImNj3aCvh0gArY5XqQdH11GpJHjnBF/z 32V3WRlEB7fAsJQ9F3ioNTOZn44Lq99VfJsLnIHZMNkd3zw4WEl7v/INUa7TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQOniZ8K44/WQpI1fvoQsSQX6Y2cwHwYDVR0j BBgwFoAUCNB/AQ2igRKpTogAwxe4338av0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGMyYTEzYi0xZjQwLTRjMDMtYmMzNS1mNjk2MTUxNmQ0ZDkvMC8wOEQwN0YwMTBE QTI4MTEyQTk0RTg4MDBDMzE3QjhERjdGMUFCRjQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4REY3RjFB QkY0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBjMmExM2ItMWY0MC00YzAzLWJj MzUtZjY5NjE1MTZkNGQ5LzAvMDhEMDdGMDEwREEyODExMkE5NEU4ODAwQzMxN0I4 REY3RjFBQkY0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAnIla6bOXSG0S/vltOh6vOMfvwMgAqbXsXK B7LPf17kJYR999uoMu77MnxiU8wV8oIbben0eaCrYABAz1t/g3pU4bT8gMniyJgc bEGCMt2eqOfhs4DSCSUt+N2G1ULZ5ykpj+CqziBAcEaRfT3LUSBlJmPZwmx3SaF6 xER3pQo+gyUO+Rpc+F1tfBjZNc2IKjhjzuvglxDzrbYZ38aqMtDh8uwVWqiSdIrF wA1MZv4FDrmNMJeyisu1bAlnI9jXycH99fxxH02V4iP1nOCHmfjbNDt9NY9xGA7x 93Czb+dWix8/MtZuTDbBrUOxfZz2LBqofN7N+fB8VX0MtZi2nww= -----END CERTIFICATE-----Generated at Tue Jun 3 23:33:28 2025 by rpki-client