$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: Fsv7pFAzjTWF0sp98DKBeRSr0cN45onZGUhYV+HuTOY= Subject key identifier: A1:59:77:BB:74:32:AB:04:7D:FF:8F:13:9C:5E:A7:5C:66:08:FA:94 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 2C3578E71ACB6E28825A3F8A6C20CBE7F8E1ED1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01CD Signing time: Wed 02 Jul 2025 12:41:13 +0000 Manifest this update: Wed 02 Jul 2025 12:36:13 +0000 Manifest next update: Sat 05 Jul 2025 13:36:13 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: rG/RhWwbOqlII3DSnnTKib3xHiD/X+cgaEjD9uVUw94=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:36:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:35:78:e7:1a:cb:6e:28:82:5a:3f:8a:6c:20:cb:e7:f8:e1:ed:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Jul 2 12:36:13 2025 GMT Not After : Jul 5 13:36:13 2025 GMT Subject: CN=A15977BB7432AB047DFF8F139C5EA75C6608FA94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:76:52:c6:a7:ff:f1:29:94:fa:f0:cb:77:2b: 1f:ef:3e:02:cc:01:b2:79:ce:69:8e:eb:a2:05:e5: f0:08:94:ef:a2:0b:08:5b:c7:42:77:f3:dd:fb:ef: 97:83:ff:b7:e6:8e:c0:4a:46:a8:ca:09:13:fb:9e: 12:0f:0f:e7:a0:14:20:f9:d4:b7:2e:4d:70:7c:b3: 13:90:54:97:2b:73:a0:8a:01:33:c9:3c:12:2f:e9: 4a:ec:bb:df:55:41:f4:79:1c:1d:67:94:29:2f:2a: e7:a0:4d:f5:0b:eb:69:a7:8a:4e:98:2c:10:76:5d: a2:ff:78:d3:0c:02:fb:16:fc:7b:7a:77:f3:02:71: 42:cd:fa:13:bb:44:b9:35:98:24:de:a7:f2:ff:4e: 20:37:4a:d7:46:a9:43:83:8c:33:72:5a:d7:2a:f4: 0b:57:86:75:62:80:2d:8e:15:9d:66:53:60:7c:03: 82:69:a9:69:2e:32:36:24:a9:b3:fd:a2:03:d9:f5: 27:79:b7:08:53:eb:ad:e1:6a:db:f0:f3:ee:7a:9a: 4e:c6:46:ea:98:b8:b4:05:bb:2f:61:dc:48:cd:b4: c8:41:ba:d4:8e:b5:97:b1:d4:0e:12:d3:29:a2:6c: b0:86:02:46:4d:63:02:3d:f9:e6:a9:af:5e:84:e4: 97:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:59:77:BB:74:32:AB:04:7D:FF:8F:13:9C:5E:A7:5C:66:08:FA:94 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:bd:4b:2a:7e:ed:47:1a:7f:76:26:99:40:7c:a5:d0:97:1a: f0:14:94:b2:61:07:de:e6:1c:e5:a7:9b:2e:f4:94:b1:1b:a2: 87:37:32:e7:20:96:6b:b4:02:2a:2e:13:25:6a:f5:46:c2:ad: ef:e3:5c:d1:d0:16:1c:15:00:78:bd:3a:36:d0:0a:fd:5c:ed: 5b:ec:13:52:5c:f4:bd:17:b8:03:b7:07:af:8a:21:0a:03:61: d8:61:5b:82:87:13:fc:c7:37:0f:94:c9:92:c0:7f:32:1a:57: 8e:47:81:28:ef:3e:45:97:bb:c4:23:05:b5:42:1a:68:64:9d: 79:1b:1e:79:af:b3:ae:3b:44:67:3a:5c:10:9f:84:36:1b:fe: 87:49:0a:61:5f:80:b6:1e:ae:b3:da:ed:36:ba:c6:85:72:2b: 1a:e4:76:df:5b:5c:ff:f9:a5:9a:7e:81:f9:97:e6:c7:47:f3: d4:40:cf:b2:35:f9:7d:ae:e7:4a:5f:24:fc:41:5b:80:3f:22: e5:d8:93:2c:3e:98:76:d7:a6:66:e7:53:18:b1:b6:44:5d:98: 19:0d:b9:18:9c:fd:e0:e5:e9:1e:2e:f5:ed:43:75:53:1a:44: 8e:a0:6f:46:f5:d9:32:10:1a:2a:b3:80:a5:91:86:73:94:c6: 39:2c:5a:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULDV45xrLbiiCWj+KbCDL5/jh7R8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTA3MDIxMjM2MTNaFw0yNTA3MDUxMzM2MTNaMDMxMTAvBgNV BAMTKEExNTk3N0JCNzQzMkFCMDQ3REZGOEYxMzlDNUVBNzVDNjYwOEZBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0dlLGp//xKZT68Mt3Kx/vPgLM AbJ5zmmO66IF5fAIlO+iCwhbx0J3893775eD/7fmjsBKRqjKCRP7nhIPD+egFCD5 1LcuTXB8sxOQVJcrc6CKATPJPBIv6Ursu99VQfR5HB1nlCkvKuegTfUL62mnik6Y LBB2XaL/eNMMAvsW/Ht6d/MCcULN+hO7RLk1mCTep/L/TiA3StdGqUODjDNyWtcq 9AtXhnVigC2OFZ1mU2B8A4JpqWkuMjYkqbP9ogPZ9Sd5twhT663hatvw8+56mk7G RuqYuLQFuy9h3EjNtMhButSOtZex1A4S0ymibLCGAkZNYwI9+eapr16E5JddAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoVl3u3QyqwR9/48TnF6nXGYI+pQwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG+9Syp+7Ucaf3YmmUB8pdCXGvAUlLJhB97m HOWnmy70lLEbooc3Mucglmu0AiouEyVq9UbCre/jXNHQFhwVAHi9OjbQCv1c7Vvs E1Jc9L0XuAO3B6+KIQoDYdhhW4KHE/zHNw+UyZLAfzIaV45HgSjvPkWXu8QjBbVC GmhknXkbHnmvs647RGc6XBCfhDYb/odJCmFfgLYerrPa7Ta6xoVyKxrkdt9bXP/5 pZp+gfmX5sdH89RAz7I1+X2u50pfJPxBW4A/IuXYkyw+mHbXpmbnUxixtkRdmBkN uRic/eDl6R4u9e1DdVMaRI6gb0b12TIQGiqzgKWRhnOUxjksWuc= -----END CERTIFICATE-----Generated at Thu Jul 3 13:29:39 2025 by rpki-client