$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: CCbczl6UEA0Qtwz/GvxzDApU4k1lbgiQKWohtXUKC5w= Subject key identifier: 8A:03:16:5E:BD:05:6D:A5:EE:1D:EF:7A:D2:2B:35:33:59:74:1B:A7 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 1C5585815AA6366E90BB9E4D20A3DA36DD9138C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 0396 Signing time: Tue 04 Nov 2025 13:10:59 +0000 Manifest this update: Tue 04 Nov 2025 13:05:59 +0000 Manifest next update: Fri 07 Nov 2025 21:58:59 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: jeUzXLPPcKnU9798Kh8IT48eR701LmPcWVx+5vcjUrY=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 21:58:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:55:85:81:5a:a6:36:6e:90:bb:9e:4d:20:a3:da:36:dd:91:38:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Nov 4 13:05:59 2025 GMT Not After : Nov 7 21:58:59 2025 GMT Subject: CN=8A03165EBD056DA5EE1DEF7AD22B353359741BA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:16:72:33:18:67:f7:f6:d7:bd:37:9b:49:1f: 42:14:80:09:ab:94:0c:a4:22:ab:d6:f8:64:cc:fd: 29:b1:9a:58:9b:0b:a8:45:fc:9c:df:e0:4b:d4:13: dc:ff:87:fe:ca:b0:6f:a0:27:7a:c6:e3:8d:37:f3: c3:84:cf:3a:63:51:5e:8f:c4:8f:f9:db:19:39:50: 92:b6:cd:5f:f8:77:88:ad:a1:81:14:bc:63:27:10: 7c:4d:01:5d:18:b4:3a:5a:53:86:d2:01:64:bb:2c: d9:2c:15:8c:37:d1:6f:92:cd:49:eb:7a:b0:20:17: 17:c6:0f:e7:d4:e1:fe:0c:f8:69:74:e6:ed:c3:32: 64:53:38:8c:48:33:97:8a:4c:d0:68:bc:9d:d7:3b: a6:09:10:3a:4c:73:85:9d:32:3f:b1:e6:fe:11:ea: 6d:1f:5d:c2:c6:fa:b4:c9:89:3b:14:3d:6c:76:0f: 06:81:c1:59:63:6d:86:b1:d7:be:b2:90:65:88:1e: 00:08:61:22:c1:4b:31:38:68:1a:2c:a9:d0:2c:d6: 7b:11:db:12:0e:4f:76:fa:16:d3:16:74:dc:c3:f4: 87:60:87:1c:0f:d6:73:13:9a:70:74:f7:bb:c1:21: 70:3a:43:53:ac:56:7d:07:a8:b7:21:a7:6b:17:67: 40:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:03:16:5E:BD:05:6D:A5:EE:1D:EF:7A:D2:2B:35:33:59:74:1B:A7 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:15:5a:c9:d0:f6:96:2d:54:98:cc:dc:39:f5:4f:9c:64:1f: d6:97:a0:5d:39:36:c1:d1:34:b5:0b:bd:b5:df:a1:0a:33:ea: fe:f7:26:39:f9:0b:89:7e:d9:df:e2:a3:f5:e5:50:cc:71:5d: 81:d2:ff:85:e5:62:c9:eb:bd:e5:29:32:ce:b1:08:5b:c0:fa: 21:ad:85:0c:ca:13:c2:4f:13:d2:84:64:6a:7e:4b:d9:cd:5a: bd:bd:6c:66:be:23:85:95:8b:ce:0d:66:4f:85:e8:9a:83:b7: cb:a3:43:9d:d3:0f:e1:63:60:61:25:3a:b8:24:c5:95:54:19: 4a:e4:f0:b0:f7:65:27:7c:27:b3:a1:c5:fe:d7:95:d5:a7:c5: b9:71:43:f1:85:ee:e4:ad:c3:b2:6f:dd:b8:fc:63:9e:fc:a2: 60:d6:69:34:e7:e7:2f:01:ee:c9:f1:78:ae:d6:37:91:32:57: 6d:ef:6e:05:61:26:0a:39:32:5d:b6:b6:a1:17:3f:d6:0e:c6: 8a:d4:62:bc:57:53:2b:c5:59:38:64:d2:b5:cc:03:1d:52:c4: 38:8c:11:b4:c9:b0:59:e1:2b:80:79:32:46:99:d7:2a:91:38: e9:2f:bf:ee:c8:cb:81:9c:be:6e:8b:f3:e8:d1:e6:90:82:cb: 6c:fd:d7:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFWFgVqmNm6Qu55NIKPaNt2ROMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNTExMDQxMzA1NTlaFw0yNTExMDcyMTU4NTlaMDMxMTAvBgNV BAMTKDhBMDMxNjVFQkQwNTZEQTVFRTFERUY3QUQyMkIzNTMzNTk3NDFCQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FnIzGGf39te9N5tJH0IUgAmr lAykIqvW+GTM/SmxmlibC6hF/Jzf4EvUE9z/h/7KsG+gJ3rG440388OEzzpjUV6P xI/52xk5UJK2zV/4d4itoYEUvGMnEHxNAV0YtDpaU4bSAWS7LNksFYw30W+SzUnr erAgFxfGD+fU4f4M+Gl05u3DMmRTOIxIM5eKTNBovJ3XO6YJEDpMc4WdMj+x5v4R 6m0fXcLG+rTJiTsUPWx2DwaBwVljbYax176ykGWIHgAIYSLBSzE4aBosqdAs1nsR 2xIOT3b6FtMWdNzD9IdghxwP1nMTmnB097vBIXA6Q1OsVn0HqLchp2sXZ0ANAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigMWXr0FbaXuHe960is1M1l0G6cwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcVWsnQ9pYtVJjM3Dn1T5xkH9aXoF05NsHR NLULvbXfoQoz6v73Jjn5C4l+2d/io/XlUMxxXYHS/4XlYsnrveUpMs6xCFvA+iGt hQzKE8JPE9KEZGp+S9nNWr29bGa+I4WVi84NZk+F6JqDt8ujQ53TD+FjYGElOrgk xZVUGUrk8LD3ZSd8J7Ohxf7XldWnxblxQ/GF7uStw7Jv3bj8Y578omDWaTTn5y8B 7snxeK7WN5EyV23vbgVhJgo5Ml22tqEXP9YOxorUYrxXUyvFWThk0rXMAx1SxDiM EbTJsFnhK4B5MkaZ1yqROOkvv+7Iy4Gcvm6L8+jR5pCCy2z91/g= -----END CERTIFICATE-----Generated at Wed Nov 5 20:32:44 2025 by rpki-client