$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: ACfQ8lIKs1j6/7HgqQxlx6ocmfBcU9pw+ekgRE7MfZg= Subject key identifier: 85:6F:74:CF:E3:68:0D:77:F2:2F:86:D7:5A:3D:FF:F5:E8:B2:2A:CE Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 47E8ABB80CC831B2C5BA04A37F536A65DEB200A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03DF Signing time: Fri 17 Apr 2026 22:01:06 +0000 Manifest this update: Fri 17 Apr 2026 21:56:06 +0000 Manifest next update: Tue 21 Apr 2026 00:47:06 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: ZH2yq7QHNo/hd2KAb9fYcGqfT2gDuEr/YT3KaKVGe7g=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 00:47:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e8:ab:b8:0c:c8:31:b2:c5:ba:04:a3:7f:53:6a:65:de:b2:00:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Apr 17 21:56:06 2026 GMT Not After : Apr 21 00:47:06 2026 GMT Subject: CN=856F74CFE3680D77F22F86D75A3DFFF5E8B22ACE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:1b:d2:4d:a8:8b:b2:99:88:e9:e9:c2:7c:e0: 17:78:d1:87:c6:62:d8:35:24:e6:ab:6d:0d:91:c4: ab:39:fc:94:14:dd:4b:e7:18:58:00:25:5c:a4:53: 06:67:d2:a8:1e:38:b5:2f:93:2f:ce:8f:7e:42:2e: 88:4b:1f:04:74:79:da:fe:46:35:34:de:cc:9c:18: a7:2d:c0:8c:85:d8:3e:5c:1a:88:34:29:d6:18:ed: f1:db:91:af:6d:25:22:51:42:d4:90:ac:b2:2a:b9: 92:8d:83:19:c7:df:a0:6c:82:6d:f9:47:22:37:0d: 12:07:02:95:6c:13:1a:c5:cc:3d:c6:08:67:16:04: cf:22:7d:55:15:48:99:aa:b7:69:70:6b:82:9f:17: 7b:71:34:71:e4:63:17:60:86:13:86:59:0d:4c:7a: 5c:54:56:a3:e1:95:17:b2:92:e7:31:f3:f1:1d:d5: 8b:96:48:37:30:13:57:d3:28:e9:64:03:41:66:8d: 2a:66:ad:d4:ae:28:c6:f7:47:5a:2a:59:08:33:2d: 12:96:44:51:3d:60:7f:8f:84:b7:86:1d:3a:c2:7d: 1a:dc:ab:f9:a1:d7:f4:0b:97:97:ad:9d:3e:db:7d: 38:a8:1a:52:9e:0d:38:8b:6d:9e:37:9a:1d:e9:12: bd:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:6F:74:CF:E3:68:0D:77:F2:2F:86:D7:5A:3D:FF:F5:E8:B2:2A:CE X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:3f:6e:9f:90:48:eb:2a:7e:9a:ae:a1:48:e7:4f:f7:be:be: 12:af:85:ed:e2:e9:7b:dd:4d:79:4b:64:78:62:7d:84:9d:a5: 4e:fa:9b:6f:4f:20:aa:58:c6:4d:4d:1e:fb:0c:37:b7:dc:76: 82:a8:9e:cc:ab:a0:3e:e6:7e:e6:f1:e6:2b:4d:fb:23:c0:a8: e4:b3:84:1b:09:6f:56:b2:84:bf:14:4c:5e:de:91:cb:90:3a: 9b:e4:39:61:33:0e:cf:1b:b4:78:84:43:81:62:4b:f8:88:a1: ed:09:16:55:db:1d:33:c5:96:2f:6e:1f:db:c9:b4:3b:1e:a9: de:35:c0:bd:87:48:83:79:2f:77:42:9a:c9:2b:80:f2:04:9a: 2b:2e:3e:c8:f5:8a:89:98:ed:e9:75:b5:80:25:a6:9f:32:bf: 4d:42:6d:ca:cb:18:1a:1c:90:20:41:9c:2f:c8:f7:a5:cc:50: 2e:f3:3a:44:85:aa:9b:4f:09:70:d0:7f:1e:3f:49:61:8d:e7: 4e:66:f8:7c:e3:de:ed:f0:fb:a8:9d:5f:96:c0:07:6d:f6:e2: 10:0a:ba:ff:15:45:d9:f1:7c:db:fc:e8:b1:28:05:7c:7e:f1: 00:cc:5c:99:65:4c:63:53:9d:ae:97:b2:1c:71:5d:77:6d:6f: f6:30:f0:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+iruAzIMbLFugSjf1NqZd6yAKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNjA0MTcyMTU2MDZaFw0yNjA0MjEwMDQ3MDZaMDMxMTAvBgNV BAMTKDg1NkY3NENGRTM2ODBENzdGMjJGODZENzVBM0RGRkY1RThCMjJBQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEG9JNqIuymYjp6cJ84Bd40YfG Ytg1JOarbQ2RxKs5/JQU3UvnGFgAJVykUwZn0qgeOLUvky/Oj35CLohLHwR0edr+ RjU03sycGKctwIyF2D5cGog0KdYY7fHbka9tJSJRQtSQrLIquZKNgxnH36Bsgm35 RyI3DRIHApVsExrFzD3GCGcWBM8ifVUVSJmqt2lwa4KfF3txNHHkYxdghhOGWQ1M elxUVqPhlReykucx8/Ed1YuWSDcwE1fTKOlkA0FmjSpmrdSuKMb3R1oqWQgzLRKW RFE9YH+PhLeGHTrCfRrcq/mh1/QLl5etnT7bfTioGlKeDTiLbZ43mh3pEr2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhW90z+NoDXfyL4bXWj3/9eiyKs4wHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADk/bp+QSOsqfpquoUjnT/e+vhKvhe3i6Xvd TXlLZHhifYSdpU76m29PIKpYxk1NHvsMN7fcdoKonsyroD7mfubx5itN+yPAqOSz hBsJb1ayhL8UTF7ekcuQOpvkOWEzDs8btHiEQ4FiS/iIoe0JFlXbHTPFli9uH9vJ tDseqd41wL2HSIN5L3dCmskrgPIEmisuPsj1iomY7el1tYAlpp8yv01CbcrLGBoc kCBBnC/I96XMUC7zOkSFqptPCXDQfx4/SWGN505m+Hzj3u3w+6idX5bAB2324hAK uv8VRdnxfNv86LEoBXx+8QDMXJllTGNTna6XshxxXXdtb/Yw8JM= -----END CERTIFICATE-----Generated at Sat Apr 18 08:06:40 2026 by rpki-client