$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: TzN+vRNpzO/MQMj6+vhpn4dnNx4ly42bNO/NcL+2vNI= Subject key identifier: DB:36:D5:A1:FF:B5:03:04:56:B1:97:00:F9:DD:3C:FA:53:CF:45:65 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 4B7B0CF34C4474A6595EE49CE21E9790486695BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 0244 Signing time: Wed 25 Mar 2026 10:31:25 +0000 Manifest this update: Wed 25 Mar 2026 10:26:25 +0000 Manifest next update: Sat 28 Mar 2026 19:17:25 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: GIQ6KrNgyiD5C7pNMf/Gocm2tm9OGZYzUK+c6wNh3oA=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:7b:0c:f3:4c:44:74:a6:59:5e:e4:9c:e2:1e:97:90:48:66:95:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Mar 25 10:26:25 2026 GMT Not After : Mar 28 19:17:25 2026 GMT Subject: CN=DB36D5A1FFB5030456B19700F9DD3CFA53CF4565 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:f7:b4:bf:bf:21:ad:d3:23:6d:9b:e3:d1:8f: ba:2a:96:0b:0b:aa:80:dd:13:db:37:97:4d:f2:77: ac:ce:4a:2a:5e:ee:fb:1f:a7:d2:c3:c4:2d:6d:53: de:12:a6:b0:dc:f7:72:02:bb:ab:73:48:64:39:85: d8:ec:fa:c1:4b:86:61:cd:eb:0e:88:be:87:8a:0b: f4:88:fa:96:5e:80:1a:15:3b:aa:2c:43:70:ff:05: 5f:c7:36:67:dc:03:0b:d6:d0:f7:46:80:ce:ad:dc: 7d:95:52:d9:34:0d:dd:b1:88:de:d2:37:07:22:1e: a6:11:9e:5d:5f:db:11:27:cf:1c:92:c7:08:73:11: 5f:cb:a3:c9:bd:a0:f0:9d:e0:20:50:83:4f:bc:9b: 4c:f0:33:88:56:7a:e4:c2:ed:10:61:64:bf:ee:ff: 6f:48:87:e3:8a:23:f7:e2:fd:77:50:ad:f0:56:70: 4e:ca:7b:9b:6e:a7:f2:af:b8:95:e1:a0:d6:90:10: bb:0e:1e:c6:d6:32:25:53:a4:28:58:3d:67:4b:18: 40:a0:03:92:69:ff:93:46:69:63:51:b0:7e:5b:95: 3c:60:b7:dd:57:df:07:14:91:70:35:eb:14:96:af: b4:15:a8:7f:af:76:a8:b9:8c:7f:15:1e:dd:0f:83: a9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:36:D5:A1:FF:B5:03:04:56:B1:97:00:F9:DD:3C:FA:53:CF:45:65 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:88:7b:6a:de:d4:f7:86:b7:d9:f6:4d:28:ac:3d:2c:97:e8: 8e:e3:5d:31:45:fd:24:35:66:f8:98:9b:a9:f3:d7:c9:4c:58: eb:a0:83:25:cc:14:af:60:93:bb:39:b7:c2:db:74:58:c8:28: fd:15:77:18:ec:31:18:88:a0:f7:dc:c2:06:21:02:54:78:8c: c0:34:7c:52:e5:91:df:5d:a6:52:92:84:76:2d:86:2a:02:73: c1:fe:7a:4b:2c:07:07:87:e5:8b:84:17:e1:4c:82:7d:b9:b7: 34:15:7e:bb:ee:b1:fa:3a:aa:c1:40:93:ce:92:ab:e4:44:c5: f8:8c:25:bb:ab:36:e8:d9:15:6f:9b:3c:f2:b1:94:56:e7:7d: 07:9c:8f:88:a8:a0:10:7c:61:a0:b6:a2:26:7c:7a:06:e1:b7: 6e:45:f6:b3:35:72:a2:f4:64:d2:44:41:a2:32:1a:ed:e5:e8: 2f:98:6d:1e:10:87:d5:01:c4:4a:3e:86:b5:80:10:ed:df:a0: ea:63:67:84:9c:d5:03:85:02:ae:c5:2e:37:82:2e:e5:77:98: 9f:fd:ad:28:ec:51:35:d4:ed:72:bd:e9:b2:72:3e:c9:ec:1e: 15:32:02:da:14:94:13:03:a7:75:20:e9:95:31:0c:dc:d8:e7: c1:e6:d4:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3sM80xEdKZZXuSc4h6XkEhmlb0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNjAzMjUxMDI2MjVaFw0yNjAzMjgxOTE3MjVaMDMxMTAvBgNV BAMTKERCMzZENUExRkZCNTAzMDQ1NkIxOTcwMEY5REQzQ0ZBNTNDRjQ1NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC997S/vyGt0yNtm+PRj7oqlgsL qoDdE9s3l03yd6zOSipe7vsfp9LDxC1tU94SprDc93ICu6tzSGQ5hdjs+sFLhmHN 6w6IvoeKC/SI+pZegBoVO6osQ3D/BV/HNmfcAwvW0PdGgM6t3H2VUtk0Dd2xiN7S NwciHqYRnl1f2xEnzxySxwhzEV/Lo8m9oPCd4CBQg0+8m0zwM4hWeuTC7RBhZL/u /29Ih+OKI/fi/XdQrfBWcE7Ke5tup/KvuJXhoNaQELsOHsbWMiVTpChYPWdLGECg A5Jp/5NGaWNRsH5blTxgt91X3wcUkXA16xSWr7QVqH+vdqi5jH8VHt0Pg6lxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2zbVof+1AwRWsZcA+d08+lPPRWUwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqIe2re1PeGt9n2TSisPSyX6I7jXTFF/SQ1 ZviYm6nz18lMWOuggyXMFK9gk7s5t8LbdFjIKP0VdxjsMRiIoPfcwgYhAlR4jMA0 fFLlkd9dplKShHYthioCc8H+ekssBweH5YuEF+FMgn25tzQVfrvusfo6qsFAk86S q+RExfiMJburNujZFW+bPPKxlFbnfQecj4iooBB8YaC2oiZ8egbht25F9rM1cqL0 ZNJEQaIyGu3l6C+YbR4Qh9UBxEo+hrWAEO3foOpjZ4Sc1QOFAq7FLjeCLuV3mJ/9 rSjsUTXU7XK96bJyPsnsHhUyAtoUlBMDp3Ug6ZUxDNzY58Hm1Bw= -----END CERTIFICATE-----Generated at Thu Mar 26 23:07:57 2026 by rpki-client