$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: SHgPcnqUutxTZMIw+uGe4aw1Ue4QoGy0qE1iUjT3Yxw= Subject key identifier: 78:F4:A3:29:29:23:4A:86:9B:74:FC:38:75:B1:6B:42:B6:72:6C:FB Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 52C0B08973C7BB6E8B8FD9EFEE8DDA967DC057AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 038F Signing time: Mon 20 Oct 2025 09:20:57 +0000 Manifest this update: Mon 20 Oct 2025 09:15:57 +0000 Manifest next update: Thu 23 Oct 2025 11:43:57 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: RVs5Jz9mja/XqAiqKjY8OmNtes5QsIVRFhY0AQjESaQ=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:43:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:c0:b0:89:73:c7:bb:6e:8b:8f:d9:ef:ee:8d:da:96:7d:c0:57:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Oct 20 09:15:57 2025 GMT Not After : Oct 23 11:43:57 2025 GMT Subject: CN=78F4A32929234A869B74FC3875B16B42B6726CFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4e:ff:a1:41:76:a3:8c:57:98:45:10:3a:8b: 05:ec:dd:fe:00:7b:19:5d:ac:9e:84:c2:24:d2:66: 06:28:1f:9e:2a:64:1b:20:78:cc:7d:48:74:24:cd: f4:f0:31:d3:5f:8e:ea:94:05:de:6f:5d:bc:4c:7e: 26:6c:e8:4b:83:36:99:df:05:c0:d7:7b:46:9f:55: f6:04:ae:8e:7c:5f:92:2f:46:81:18:dd:94:ac:39: db:71:8f:e7:4a:5b:f3:88:1f:89:26:b3:2b:7d:f5: 01:df:bb:7a:e8:3a:d3:56:04:65:55:5e:d7:9b:77: e4:d8:79:42:d0:13:0f:0d:19:c8:84:d1:12:42:e2: 51:a3:e2:33:ae:20:fd:63:71:75:54:53:55:97:e1: 32:a7:9d:8b:18:6e:f2:1b:90:09:5f:08:10:68:8b: 51:52:04:bb:96:76:7e:ae:76:65:17:7d:ab:84:77: a9:43:29:22:97:7d:73:17:00:d6:46:eb:8c:0c:0a: 7b:9c:9b:cd:68:3e:98:af:04:6a:2d:68:5d:41:d6: bb:5a:12:28:30:00:75:bf:e4:82:af:86:51:c7:9d: cc:8f:32:ca:b4:50:d6:b8:e3:0f:fe:d1:33:80:c4: ad:c3:cf:0b:b8:ec:f6:1e:4b:69:44:ca:7a:5e:3b: 31:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:F4:A3:29:29:23:4A:86:9B:74:FC:38:75:B1:6B:42:B6:72:6C:FB X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:85:1b:8e:26:7f:09:4d:14:05:7d:a1:10:37:31:75:4b:f8: dd:29:d1:89:4d:99:00:67:22:6e:eb:de:dc:4a:1e:bc:15:56: 87:0d:b7:0f:25:87:d8:c1:18:35:ce:e6:40:3a:0f:40:eb:aa: 75:8d:89:67:81:0d:3f:3a:50:6f:0d:a2:4c:54:46:44:9a:ae: 9d:61:6a:ad:a7:f9:5a:3f:ef:fb:80:92:0e:62:1e:59:09:c1: 7f:69:ef:6a:e0:2a:e8:c9:dc:43:ba:0e:70:6a:36:ce:37:55: 73:e0:46:a9:b6:59:7c:ed:8d:63:3a:59:50:c4:a2:12:a1:2a: 85:9b:d0:b0:be:20:ec:72:6b:85:b1:13:17:42:99:22:15:f1: d3:07:bb:ae:a2:e5:03:3f:f3:94:3e:83:d9:07:ac:68:23:df: 4c:4d:c3:21:8e:88:44:a0:e2:93:18:76:00:e9:21:24:52:f4: f0:94:a5:15:89:91:ac:07:c0:d8:42:90:02:e6:d3:bf:91:c9: 74:31:b6:8e:bd:89:ac:6b:eb:66:6d:d9:e6:27:70:1a:bd:b6: 85:68:97:b2:1b:52:1e:51:d7:41:fd:a7:85:c0:79:f8:7a:63: 9c:29:4d:50:f0:6b:c0:0f:0e:5e:0b:eb:68:dd:09:77:3b:58: 7d:48:7b:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUsCwiXPHu26Lj9nv7o3aln3AV6owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNTEwMjAwOTE1NTdaFw0yNTEwMjMxMTQzNTdaMDMxMTAvBgNV BAMTKDc4RjRBMzI5MjkyMzRBODY5Qjc0RkMzODc1QjE2QjQyQjY3MjZDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTv+hQXajjFeYRRA6iwXs3f4A exldrJ6EwiTSZgYoH54qZBsgeMx9SHQkzfTwMdNfjuqUBd5vXbxMfiZs6EuDNpnf BcDXe0afVfYEro58X5IvRoEY3ZSsOdtxj+dKW/OIH4kmsyt99QHfu3roOtNWBGVV Xtebd+TYeULQEw8NGciE0RJC4lGj4jOuIP1jcXVUU1WX4TKnnYsYbvIbkAlfCBBo i1FSBLuWdn6udmUXfauEd6lDKSKXfXMXANZG64wMCnucm81oPpivBGotaF1B1rta EigwAHW/5IKvhlHHncyPMsq0UNa44w/+0TOAxK3Dzwu47PYeS2lEynpeOzGjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUePSjKSkjSoabdPw4dbFrQrZybPswHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJyFG44mfwlNFAV9oRA3MXVL+N0p0YlNmQBn Im7r3txKHrwVVocNtw8lh9jBGDXO5kA6D0DrqnWNiWeBDT86UG8NokxURkSarp1h aq2n+Vo/7/uAkg5iHlkJwX9p72rgKujJ3EO6DnBqNs43VXPgRqm2WXztjWM6WVDE ohKhKoWb0LC+IOxya4WxExdCmSIV8dMHu66i5QM/85Q+g9kHrGgj30xNwyGOiESg 4pMYdgDpISRS9PCUpRWJkawHwNhCkALm07+RyXQxto69iaxr62Zt2eYncBq9toVo l7IbUh5R10H9p4XAefh6Y5wpTVDwa8APDl4L62jdCXc7WH1Ie98= -----END CERTIFICATE-----Generated at Mon Oct 20 18:02:20 2025 by rpki-client