$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: MqvbUlQv7O//ltX2ZlNaI99+RwjhA7nFyM5vXC6v5lg= Subject key identifier: 5B:7C:2F:5B:A9:91:81:FD:11:EC:AF:31:4B:D2:6B:E1:85:C9:38:36 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 37098CA9ABFAD6FCDF60AC9A2EDEA431D1DC93CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01E4 Signing time: Thu 21 Aug 2025 17:11:16 +0000 Manifest this update: Thu 21 Aug 2025 17:06:16 +0000 Manifest next update: Sun 24 Aug 2025 19:07:16 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) 2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: K1zwMtZiMA/xbxdfQlK3ZgfsWNXy9HEedtGtG/2UhW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:07:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:09:8c:a9:ab:fa:d6:fc:df:60:ac:9a:2e:de:a4:31:d1:dc:93:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Aug 21 17:06:16 2025 GMT Not After : Aug 24 19:07:16 2025 GMT Subject: CN=5B7C2F5BA99181FD11ECAF314BD26BE185C93836 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:be:4d:bd:a2:b8:f8:6f:da:b6:43:e0:0f:e6: ee:c3:b6:8b:90:f9:6f:b5:7f:8b:f6:cb:69:a2:7f: 50:00:de:c6:e2:72:a0:a0:69:e6:1a:ce:ce:8f:50: 5e:c4:3c:0e:5b:a7:6d:86:7b:35:79:ef:ae:79:6a: f2:01:9a:18:2a:9f:c4:34:0c:b5:76:20:0c:a7:c0: b5:62:2a:e7:3f:24:b3:d7:f7:ba:6a:0b:99:b8:a3: 56:f8:10:34:8b:bf:e8:40:85:a3:19:45:61:40:13: 32:13:9f:89:33:ec:03:19:60:b7:28:c1:47:90:17: a8:7c:02:99:67:05:63:fe:f3:11:88:3f:a3:8e:50: 7b:19:a5:d6:fb:a4:74:ea:6c:a9:90:9d:78:eb:bd: ef:b2:a0:96:1c:4c:d6:67:5a:1f:46:1d:74:96:2b: 9f:b6:c0:c9:f4:3a:b6:14:5b:97:8f:7a:c3:fc:d8: 17:dc:fe:1d:84:31:3a:7e:f4:2e:29:01:30:c8:05: db:68:79:bd:c7:61:a0:29:4c:d7:00:83:91:04:ac: b1:7c:85:9e:fe:5b:0d:6c:e5:dd:2d:44:2d:1e:90: 9f:01:79:0e:22:26:18:13:72:30:18:58:44:44:68: 0e:fe:ce:7c:fb:2e:99:13:e4:6f:d6:ef:9c:de:0a: ed:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:7C:2F:5B:A9:91:81:FD:11:EC:AF:31:4B:D2:6B:E1:85:C9:38:36 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:18:85:13:2b:c2:f8:79:f0:1a:a4:46:21:1f:9c:2b:df:ad: c1:00:41:d1:33:82:0f:af:57:0d:87:a6:ba:8d:b5:6f:e8:ca: 5b:0c:af:76:5c:54:b6:62:1b:7b:26:b9:21:5d:98:e5:9f:bd: 57:91:76:f7:ce:6e:71:7d:e9:4d:28:79:f2:9d:de:e6:9a:08: fb:a7:ca:13:2e:57:4a:fa:f4:c3:44:6b:2d:30:07:17:46:ac: bc:7c:1c:a3:a1:3d:16:21:7c:47:72:e2:48:d1:b0:81:f4:8b: f7:9e:e8:15:19:28:8e:42:83:ed:a4:25:00:c3:c8:fe:c9:7b: cd:b8:94:79:8d:df:8f:6b:d3:25:08:c0:ea:de:bc:97:4a:25: fe:05:4a:8f:5d:f1:87:93:c9:86:48:72:e6:22:74:f2:13:fc: 9a:6a:bc:48:5d:7b:a3:53:0a:64:07:6a:1d:d5:22:24:da:50: 10:6d:50:da:52:f7:a5:7b:b6:dd:70:b4:dd:8f:36:63:f7:50: 3e:74:9a:4f:31:bf:b9:75:7f:5f:8b:a9:76:ca:70:85:a5:fc: 6d:92:87:eb:a6:3f:69:40:91:b3:b9:b2:77:d2:b5:60:6a:33: 5e:45:b1:c0:ed:81:dc:4d:3b:3d:8c:37:8a:8c:f2:0e:9e:b9: 9c:fa:6b:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNwmMqav61vzfYKyaLt6kMdHck80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTA4MjExNzA2MTZaFw0yNTA4MjQxOTA3MTZaMDMxMTAvBgNV BAMTKDVCN0MyRjVCQTk5MTgxRkQxMUVDQUYzMTRCRDI2QkUxODVDOTM4MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcvk29orj4b9q2Q+AP5u7DtouQ +W+1f4v2y2mif1AA3sbicqCgaeYazs6PUF7EPA5bp22GezV57655avIBmhgqn8Q0 DLV2IAynwLViKuc/JLPX97pqC5m4o1b4EDSLv+hAhaMZRWFAEzITn4kz7AMZYLco wUeQF6h8AplnBWP+8xGIP6OOUHsZpdb7pHTqbKmQnXjrve+yoJYcTNZnWh9GHXSW K5+2wMn0OrYUW5ePesP82Bfc/h2EMTp+9C4pATDIBdtoeb3HYaApTNcAg5EErLF8 hZ7+Ww1s5d0tRC0ekJ8BeQ4iJhgTcjAYWEREaA7+znz7LpkT5G/W75zeCu1TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW3wvW6mRgf0R7K8xS9Jr4YXJODYwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC4YhRMrwvh58BqkRiEfnCvfrcEAQdEzgg+v Vw2HprqNtW/oylsMr3ZcVLZiG3smuSFdmOWfvVeRdvfObnF96U0oefKd3uaaCPun yhMuV0r69MNEay0wBxdGrLx8HKOhPRYhfEdy4kjRsIH0i/ee6BUZKI5Cg+2kJQDD yP7Je824lHmN349r0yUIwOrevJdKJf4FSo9d8YeTyYZIcuYidPIT/JpqvEhde6NT CmQHah3VIiTaUBBtUNpS96V7tt1wtN2PNmP3UD50mk8xv7l1f1+LqXbKcIWl/G2S h+umP2lAkbO5snfStWBqM15FscDtgdxNOz2MN4qM8g6euZz6aws= -----END CERTIFICATE-----Generated at Sat Aug 23 18:20:47 2025 by rpki-client