$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: Et8YmFBh/aOeBs67Yputjl+bI/0v9ocAYmvH0XggKDE= Subject key identifier: 08:15:28:F4:B6:4C:EA:A9:B1:3A:FC:72:6E:8F:0B:04:90:1B:80:FA Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 14AC4DF64B0E1A23E53A30E8208926D66C7BA3C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03D5 Signing time: Thu 26 Mar 2026 07:01:06 +0000 Manifest this update: Thu 26 Mar 2026 06:56:06 +0000 Manifest next update: Sun 29 Mar 2026 15:49:06 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) 2: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: cQvShk+Z3/ScuKi+DHf0QC7G4GZjUJwPIp1JGZfkAYA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:49:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:ac:4d:f6:4b:0e:1a:23:e5:3a:30:e8:20:89:26:d6:6c:7b:a3:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Mar 26 06:56:06 2026 GMT Not After : Mar 29 15:49:06 2026 GMT Subject: CN=081528F4B64CEAA9B13AFC726E8F0B04901B80FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:c5:d4:02:3d:42:af:76:1e:c3:c2:cc:c2:69: dd:cb:1a:c3:f2:0b:fe:4a:66:87:b8:26:1a:54:d4: c9:8a:a3:b0:82:f4:72:10:93:fe:aa:d2:10:ef:dc: 0b:44:09:27:2d:9d:67:3c:25:e2:ae:4a:5e:c4:c6: 4f:9d:9f:31:10:73:5d:26:dc:57:90:36:e3:0b:1f: c6:87:d8:96:3e:22:47:06:d2:04:01:ad:85:50:1b: 1e:42:c9:a3:1b:68:ec:fe:f4:00:1f:31:dc:8f:d3: 42:51:c0:25:ad:1b:5d:d7:9c:92:a0:5a:10:e7:6b: 59:6e:8c:89:d0:7e:49:4d:3b:28:3b:4e:e2:29:4d: 90:bb:4d:04:ce:f4:12:3d:d7:c9:38:07:c3:89:a6: 86:50:2e:6a:e6:cf:57:cb:ce:69:82:24:14:3f:20: 10:63:b9:14:ea:7c:78:a9:f5:63:76:73:d4:31:2a: 24:f2:54:ff:0f:a5:55:b0:56:2c:44:c6:13:36:17: d4:c9:09:09:ba:42:61:6a:be:13:d0:91:c4:b0:03: 38:02:99:ec:f4:2c:e1:af:4a:e1:1e:05:63:32:1f: 8a:bd:c3:36:69:21:a8:3c:0a:51:92:da:6d:f5:ad: 4b:d6:14:4a:44:59:3e:f7:8e:7b:f8:b7:33:7c:06: 49:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:15:28:F4:B6:4C:EA:A9:B1:3A:FC:72:6E:8F:0B:04:90:1B:80:FA X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:73:46:3e:73:ea:22:b5:d5:ca:05:e9:40:15:be:1b:52:8f: 0c:7b:e7:56:49:01:38:84:03:13:bd:0b:4b:c5:1e:b8:c6:b8: c8:87:01:28:1e:69:10:f7:c3:a7:63:f2:8c:91:12:b8:87:a6: 11:f5:99:9e:eb:70:ed:c8:38:51:89:a0:02:38:48:75:1f:45: e6:60:53:81:e0:5c:3b:36:38:c4:4e:61:10:0a:ba:b8:14:0f: 82:41:29:5a:89:dd:38:5b:35:4a:40:87:15:ac:68:1a:52:1d: 2e:e4:ae:57:83:61:22:96:4d:d8:e8:ac:8b:09:f0:26:04:02: b9:ee:55:38:96:92:bd:a0:9d:ea:7f:f6:2b:02:19:6f:48:ee: ee:a4:12:cb:8c:e1:19:6a:29:93:17:5e:79:2b:31:03:6d:13: 22:b1:b7:39:31:9d:66:59:60:25:15:49:aa:0c:eb:9a:d6:23: 30:61:72:f6:8a:b1:40:55:f2:ee:ea:e8:ba:d2:e5:12:b7:d0: 90:cb:0c:eb:a1:07:73:64:36:38:af:ac:02:24:3c:cd:90:35: 28:94:35:f7:41:ae:f7:63:eb:47:cc:ef:6d:4e:c6:46:57:73: 50:3c:75:c7:7f:db:47:36:75:c3:04:6e:fd:12:5f:f6:f2:fb: 2e:86:ea:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFKxN9ksOGiPlOjDoIIkm1mx7o8IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNjAzMjYwNjU2MDZaFw0yNjAzMjkxNTQ5MDZaMDMxMTAvBgNV BAMTKDA4MTUyOEY0QjY0Q0VBQTlCMTNBRkM3MjZFOEYwQjA0OTAxQjgwRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwxdQCPUKvdh7DwszCad3LGsPy C/5KZoe4JhpU1MmKo7CC9HIQk/6q0hDv3AtECSctnWc8JeKuSl7Exk+dnzEQc10m 3FeQNuMLH8aH2JY+IkcG0gQBrYVQGx5CyaMbaOz+9AAfMdyP00JRwCWtG13XnJKg WhDna1lujInQfklNOyg7TuIpTZC7TQTO9BI918k4B8OJpoZQLmrmz1fLzmmCJBQ/ IBBjuRTqfHip9WN2c9QxKiTyVP8PpVWwVixExhM2F9TJCQm6QmFqvhPQkcSwAzgC mez0LOGvSuEeBWMyH4q9wzZpIag8ClGS2m31rUvWFEpEWT73jnv4tzN8BknLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCBUo9LZM6qmxOvxybo8LBJAbgPowHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAABzRj5z6iK11coF6UAVvhtSjwx751ZJATiE AxO9C0vFHrjGuMiHASgeaRD3w6dj8oyREriHphH1mZ7rcO3IOFGJoAI4SHUfReZg U4HgXDs2OMROYRAKurgUD4JBKVqJ3ThbNUpAhxWsaBpSHS7krleDYSKWTdjorIsJ 8CYEArnuVTiWkr2gnep/9isCGW9I7u6kEsuM4RlqKZMXXnkrMQNtEyKxtzkxnWZZ YCUVSaoM65rWIzBhcvaKsUBV8u7q6LrS5RK30JDLDOuhB3NkNjivrAIkPM2QNSiU NfdBrvdj60fM721OxkZXc1A8dcd/20c2dcMEbv0SX/by+y6G6lY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:09 2026 by rpki-client