$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: eZdTdY1M9FpodTxmDpKJd6tWPRRiwRXLJFGQg0oe1d0= Subject key identifier: 68:D1:A9:3E:85:E6:1A:D2:45:53:6D:8D:FA:F7:23:67:27:CB:A2:9B Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 5AD38A421A13D0B819F3755777138BEC0022AED5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01FE Signing time: Sun 19 Oct 2025 02:11:16 +0000 Manifest this update: Sun 19 Oct 2025 02:06:16 +0000 Manifest next update: Wed 22 Oct 2025 13:04:16 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: P+SDlE7LyU5SoSvrQileCAWH+yD5amDDPpxd8jidnjk=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 13:04:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:d3:8a:42:1a:13:d0:b8:19:f3:75:57:77:13:8b:ec:00:22:ae:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Oct 19 02:06:16 2025 GMT Not After : Oct 22 13:04:16 2025 GMT Subject: CN=68D1A93E85E61AD245536D8DFAF7236727CBA29B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7c:70:cb:c6:f1:05:18:72:1d:21:42:50:08: 6a:3c:01:e9:37:03:6a:cb:7c:b2:f0:c2:2a:11:09: 14:8c:4f:a1:40:90:d3:7f:57:65:e4:ba:66:a5:8e: f0:c0:d5:96:ae:a6:3e:42:2e:c8:83:af:27:12:eb: 59:54:98:bf:04:d8:30:d7:ef:aa:81:24:27:db:bb: 4a:a1:f5:73:e3:e1:7c:ef:54:c3:5c:82:0f:02:06: 7d:2f:23:da:94:7d:5c:61:8a:ee:e8:2c:00:9d:97: 5c:94:e9:72:14:17:6e:5e:04:15:bc:ad:6c:06:54: 73:4c:0d:51:22:9d:63:26:d8:be:49:f6:df:0c:c4: 2a:62:67:13:f1:12:6f:0c:74:03:c9:67:e6:5d:cd: 2a:84:37:c5:72:b1:84:83:2f:58:c1:0d:51:84:c1: e2:cd:eb:68:66:a8:87:e9:ca:59:8d:e2:26:29:f4: 2b:06:a4:05:fc:f4:9f:71:f7:7e:0e:24:01:66:02: cd:9e:34:7a:cf:51:e4:3e:b3:8c:43:8b:c2:0a:78: e9:ea:50:38:43:36:26:73:e4:62:61:6c:6c:60:c3: 8f:92:33:7b:5f:60:16:91:dc:a6:1c:e1:06:e9:58: 30:21:f7:96:c6:6b:28:68:27:0f:2e:a3:53:20:a1: 8f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:A9:3E:85:E6:1A:D2:45:53:6D:8D:FA:F7:23:67:27:CB:A2:9B X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:62:43:4f:7e:51:59:36:40:ca:a6:5e:e3:af:d0:e0:0c:87: 8c:50:63:9d:9a:02:47:54:d5:4a:88:ff:48:25:b4:dc:9d:02: df:e7:28:39:60:72:2b:f6:9e:cd:b2:aa:1c:0d:0a:15:e3:56: df:78:b3:91:bf:71:81:8f:1c:fc:34:62:32:39:54:95:df:d7: 8e:36:bc:9c:5a:ad:21:e7:6d:5f:c8:dc:c8:37:d0:8c:b8:58: 47:cd:24:f9:c2:26:85:7c:86:e6:e2:d3:cd:6e:62:69:bf:e0: 0d:18:65:a5:7a:98:d3:ff:25:fc:d9:d9:66:da:a0:24:29:3a: c1:be:89:4f:7f:0a:1e:1a:7e:6f:06:c6:ae:d2:b5:8e:bc:02: dc:3e:48:41:df:aa:46:d1:36:34:ef:ff:b1:20:73:45:50:c7: 9a:01:18:c4:c3:8b:ca:00:e3:bb:aa:ec:7b:08:08:19:bc:bd: ad:84:6c:15:68:63:12:79:f5:23:cb:5b:3c:d2:06:44:5e:0c: c6:45:b6:fd:eb:81:2e:e2:28:46:e7:5d:98:62:82:2d:4b:7c: 9b:90:be:3a:8b:58:f0:12:74:e5:fd:b1:e8:1a:1e:83:d3:ac: 36:76:4e:68:4c:d0:29:57:2c:de:a4:e5:38:66:c6:b7:43:28: 1b:cd:ae:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtOKQhoT0LgZ83VXdxOL7AAirtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTEwMTkwMjA2MTZaFw0yNTEwMjIxMzA0MTZaMDMxMTAvBgNV BAMTKDY4RDFBOTNFODVFNjFBRDI0NTUzNkQ4REZBRjcyMzY3MjdDQkEyOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyfHDLxvEFGHIdIUJQCGo8Aek3 A2rLfLLwwioRCRSMT6FAkNN/V2XkumaljvDA1Zaupj5CLsiDrycS61lUmL8E2DDX 76qBJCfbu0qh9XPj4XzvVMNcgg8CBn0vI9qUfVxhiu7oLACdl1yU6XIUF25eBBW8 rWwGVHNMDVEinWMm2L5J9t8MxCpiZxPxEm8MdAPJZ+ZdzSqEN8VysYSDL1jBDVGE weLN62hmqIfpylmN4iYp9CsGpAX89J9x934OJAFmAs2eNHrPUeQ+s4xDi8IKeOnq UDhDNiZz5GJhbGxgw4+SM3tfYBaR3KYc4QbpWDAh95bGayhoJw8uo1MgoY/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNGpPoXmGtJFU22N+vcjZyfLopswHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHliQ09+UVk2QMqmXuOv0OAMh4xQY52aAkdU 1UqI/0gltNydAt/nKDlgciv2ns2yqhwNChXjVt94s5G/cYGPHPw0YjI5VJXf1442 vJxarSHnbV/I3Mg30Iy4WEfNJPnCJoV8hubi081uYmm/4A0YZaV6mNP/JfzZ2Wba oCQpOsG+iU9/Ch4afm8Gxq7StY68Atw+SEHfqkbRNjTv/7Egc0VQx5oBGMTDi8oA 47uq7HsICBm8va2EbBVoYxJ59SPLWzzSBkReDMZFtv3rgS7iKEbnXZhigi1LfJuQ vjqLWPASdOX9segaHoPTrDZ2TmhM0ClXLN6k5ThmxrdDKBvNrmk= -----END CERTIFICATE-----Generated at Mon Oct 20 07:56:01 2025 by rpki-client