$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: Z9wW9BwLx20Xt+Cp2Cy4nPucTm7lR9FPfSKR+aeEaG8= Subject key identifier: 7F:0D:D6:68:8F:B3:D0:49:EF:14:F4:50:C6:EE:8E:B6:F9:E5:BE:84 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 7A51AE492E84560996C4C4242772C471A57238E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03CA Signing time: Sun 01 Mar 2026 13:21:09 +0000 Manifest this update: Sun 01 Mar 2026 13:16:09 +0000 Manifest next update: Wed 04 Mar 2026 15:29:09 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: k9cH8TUz/R4sHXV1N2vLSw9rZLU/EyCAoRVrulP6xkE=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:29:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:51:ae:49:2e:84:56:09:96:c4:c4:24:27:72:c4:71:a5:72:38:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Mar 1 13:16:09 2026 GMT Not After : Mar 4 15:29:09 2026 GMT Subject: CN=7F0DD6688FB3D049EF14F450C6EE8EB6F9E5BE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a4:04:83:80:bd:1c:84:76:97:b6:32:9c:d8: a2:4b:b3:63:e2:db:4b:4f:f9:d9:92:8f:e8:d7:7b: 9f:16:9d:e6:e4:b5:3e:7f:06:58:07:b1:f7:13:4c: 0d:f2:76:94:5c:8d:1a:d8:de:bd:fb:e7:63:99:a2: 38:d8:39:a6:4f:4a:62:f7:1c:80:22:63:01:30:e5: b4:fe:e9:4d:fe:31:3b:a0:38:e3:97:45:30:ea:77: 39:ff:be:10:d1:4a:49:5b:87:7c:af:d1:5c:33:d6: 75:81:8e:da:f1:80:80:cb:57:2c:88:13:1d:dc:39: 16:8e:31:5f:ea:bf:f7:13:11:4c:94:78:18:e2:42: 27:a5:ef:48:a9:06:a5:96:77:c0:64:2c:00:8e:69: ed:e3:00:dd:75:7c:8f:15:42:d8:f8:70:ea:de:1d: f7:72:fd:81:e2:92:2b:1e:df:35:a0:cd:a3:ed:ef: eb:85:51:0b:ac:4a:80:65:7f:3b:b9:75:11:7c:d2: 3b:b1:8c:3e:84:29:cc:d0:1a:ab:de:3e:57:9f:fd: ed:fb:89:c8:98:b2:ce:c0:17:5a:80:ad:36:e0:10: 21:5c:fb:29:b9:b0:10:59:47:69:d7:4a:db:2c:4e: 98:16:0f:77:05:86:a1:d2:21:dd:da:07:9d:7b:dc: d2:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:0D:D6:68:8F:B3:D0:49:EF:14:F4:50:C6:EE:8E:B6:F9:E5:BE:84 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:c0:d3:9f:aa:6c:be:8f:82:eb:ca:e4:bb:aa:60:1d:c4:6d: 59:95:0b:0f:3c:1e:70:50:60:ba:b9:27:81:a1:27:19:2c:ae: 02:3b:5c:ce:03:2d:1f:9e:68:21:48:de:e3:10:68:ae:43:c7: 8a:5f:61:10:08:99:a0:3f:7e:aa:19:8f:04:9b:95:5d:0a:cf: 4e:65:db:55:37:df:07:d1:b4:7a:3d:f3:6e:bb:22:c2:cf:52: 92:c4:40:7d:c4:62:ae:b6:87:1a:6a:92:54:03:5c:fe:f0:99: 91:98:a4:8c:85:7b:15:ed:83:ea:05:14:5e:bf:21:c8:d3:8d: 57:73:ea:0f:3c:5b:81:4f:50:06:df:da:28:46:91:b2:73:ac: f0:66:33:14:7e:b2:45:24:d8:6a:35:70:22:8a:9e:3c:3b:0b: d6:9f:c7:36:28:2d:7c:47:b6:b0:e0:55:f4:aa:ca:de:43:fe: 01:bf:78:c8:63:72:53:f8:8a:62:a0:75:cf:53:79:1b:43:b1: 56:95:5f:69:9c:0d:ff:5c:04:a2:36:25:9c:74:30:eb:be:13: 7d:f0:18:23:bf:70:c0:86:33:7d:80:ad:0b:73:db:8a:97:2b: b2:d1:d2:e0:91:23:13:2c:85:a6:8f:87:8e:0a:b8:67:70:fc: 4b:6c:e8:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelGuSS6EVgmWxMQkJ3LEcaVyOOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNjAzMDExMzE2MDlaFw0yNjAzMDQxNTI5MDlaMDMxMTAvBgNV BAMTKDdGMERENjY4OEZCM0QwNDlFRjE0RjQ1MEM2RUU4RUI2RjlFNUJFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRpASDgL0chHaXtjKc2KJLs2Pi 20tP+dmSj+jXe58WnebktT5/BlgHsfcTTA3ydpRcjRrY3r3752OZojjYOaZPSmL3 HIAiYwEw5bT+6U3+MTugOOOXRTDqdzn/vhDRSklbh3yv0Vwz1nWBjtrxgIDLVyyI Ex3cORaOMV/qv/cTEUyUeBjiQiel70ipBqWWd8BkLACOae3jAN11fI8VQtj4cOre Hfdy/YHikise3zWgzaPt7+uFUQusSoBlfzu5dRF80juxjD6EKczQGqvePlef/e37 iciYss7AF1qArTbgECFc+ym5sBBZR2nXStssTpgWD3cFhqHSId3aB5173NKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfw3WaI+z0EnvFPRQxu6OtvnlvoQwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHA05+qbL6PguvK5LuqYB3EbVmVCw88HnBQ YLq5J4GhJxksrgI7XM4DLR+eaCFI3uMQaK5Dx4pfYRAImaA/fqoZjwSblV0Kz05l 21U33wfRtHo98267IsLPUpLEQH3EYq62hxpqklQDXP7wmZGYpIyFexXtg+oFFF6/ IcjTjVdz6g88W4FPUAbf2ihGkbJzrPBmMxR+skUk2Go1cCKKnjw7C9afxzYoLXxH trDgVfSqyt5D/gG/eMhjclP4imKgdc9TeRtDsVaVX2mcDf9cBKI2JZx0MOu+E33w GCO/cMCGM32ArQtz24qXK7LR0uCRIxMshaaPh44KuGdw/Ets6A4= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:33 2026 by rpki-client