$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: 10VvBktoDLAdBMku+FIf5BtEkkolSUV3WdG9IL5Aif8= Subject key identifier: F9:CF:B0:11:24:62:1F:AE:BA:D6:5A:A9:1B:C4:D6:6A:25:F2:02:38 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 118A85A9E6621A08FFE508442370181681A55B46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 0239 Signing time: Sat 28 Feb 2026 21:51:23 +0000 Manifest this update: Sat 28 Feb 2026 21:46:23 +0000 Manifest next update: Wed 04 Mar 2026 02:49:23 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: OaQ3H16/w3EXYOk4AGfze1t1vPypGfh+f+poBljaPo4=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:49:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8a:85:a9:e6:62:1a:08:ff:e5:08:44:23:70:18:16:81:a5:5b:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Feb 28 21:46:23 2026 GMT Not After : Mar 4 02:49:23 2026 GMT Subject: CN=F9CFB01124621FAEBAD65AA91BC4D66A25F20238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:bd:a9:b6:8e:9e:98:5c:bb:d4:60:66:c4: 5e:5a:d3:57:cb:80:f4:54:65:d7:1f:87:dc:a0:3c: 76:66:cb:fb:5a:ed:3a:88:46:df:e9:07:30:15:30: c4:cb:95:cd:66:c5:f6:97:0f:bb:92:ef:c7:23:ef: 17:00:f7:63:c7:a3:b0:eb:5a:55:29:3d:ec:17:7c: 6b:84:6e:78:43:74:04:79:5e:be:d5:16:66:7b:79: 13:0a:a4:05:d5:f8:c0:d6:29:00:40:7b:cc:87:45: de:57:6a:ab:28:cc:68:2f:bf:ac:8d:07:35:a0:24: 00:8b:93:ed:33:e8:c7:60:db:03:38:1d:63:3a:54: d9:f1:7d:41:12:7d:f9:8c:ca:4e:66:df:6d:9e:97: bd:bf:4d:50:bc:b0:84:d0:59:7f:be:f1:42:6c:58: c3:13:69:16:8e:fa:1e:d9:b2:f8:f5:10:f0:77:92: e7:60:f2:28:d3:4f:1b:da:76:e3:2b:9e:ed:7c:67: 0a:b2:45:3c:be:22:14:00:87:03:f8:59:45:a8:5c: a4:a7:28:18:8a:82:a1:31:da:4d:81:d5:4a:d9:cb: b1:38:c7:51:53:15:62:2b:31:e0:d1:e5:b9:5c:70: 1d:bd:e9:b0:85:4a:b5:63:89:ce:eb:27:57:fc:12: 01:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:B0:11:24:62:1F:AE:BA:D6:5A:A9:1B:C4:D6:6A:25:F2:02:38 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:c2:b3:8a:72:9b:a1:bd:29:eb:c4:d4:bb:8f:35:23:14:37: 46:69:6e:d6:de:b4:22:63:70:af:e1:d3:30:f6:2e:2d:40:8c: e6:1a:4b:21:97:8d:73:01:b8:96:e3:47:cd:2b:9e:29:55:f4: ec:cf:54:64:e4:6c:bd:3e:a9:cc:83:7a:9d:8c:56:b5:b0:34: 31:7c:44:ba:29:fe:2d:e4:43:6f:06:db:73:34:70:72:5d:0e: c3:56:83:cf:ce:f0:b3:c1:b4:1d:cf:b3:93:84:f3:95:ed:c5: 14:bf:24:9a:87:30:d1:77:f4:38:af:3e:58:6e:13:90:c3:4b: f2:5f:08:c5:f8:44:38:46:b7:18:6a:d6:cb:ee:2f:15:82:6e: c7:ca:01:23:b1:b5:2c:2a:12:70:24:69:a2:0d:e4:c6:56:4a: 37:d2:d8:8f:79:f9:d9:92:f8:6e:b5:6e:b9:f5:d8:77:ce:c9: 34:04:70:ad:8c:e7:da:8b:7d:ea:52:d6:15:4b:38:53:08:08: 33:22:2c:d5:f2:0f:97:4f:93:0a:ce:0a:8c:4b:83:7b:9a:6b: 94:3a:1c:f6:62:1e:ac:0e:a2:64:ab:9c:07:dd:91:49:9a:de: fb:4a:b0:fb:9b:fa:34:02:83:75:e6:d5:c8:4c:5e:4c:0f:33: 85:e0:81:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYqFqeZiGgj/5QhEI3AYFoGlW0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNjAyMjgyMTQ2MjNaFw0yNjAzMDQwMjQ5MjNaMDMxMTAvBgNV BAMTKEY5Q0ZCMDExMjQ2MjFGQUVCQUQ2NUFBOTFCQzRENjZBMjVGMjAyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cb2pto6emFy71GBmxF5a01fL gPRUZdcfh9ygPHZmy/ta7TqIRt/pBzAVMMTLlc1mxfaXD7uS78cj7xcA92PHo7Dr WlUpPewXfGuEbnhDdAR5Xr7VFmZ7eRMKpAXV+MDWKQBAe8yHRd5XaqsozGgvv6yN BzWgJACLk+0z6Mdg2wM4HWM6VNnxfUESffmMyk5m322el72/TVC8sITQWX++8UJs WMMTaRaO+h7Zsvj1EPB3kudg8ijTTxvaduMrnu18ZwqyRTy+IhQAhwP4WUWoXKSn KBiKgqEx2k2B1UrZy7E4x1FTFWIrMeDR5blccB296bCFSrVjic7rJ1f8EgEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+c+wESRiH6661lqpG8TWaiXyAjgwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvCs4pym6G9KevE1LuPNSMUN0ZpbtbetCJj cK/h0zD2Li1AjOYaSyGXjXMBuJbjR80rnilV9OzPVGTkbL0+qcyDep2MVrWwNDF8 RLop/i3kQ28G23M0cHJdDsNWg8/O8LPBtB3Ps5OE85XtxRS/JJqHMNF39DivPlhu E5DDS/JfCMX4RDhGtxhq1svuLxWCbsfKASOxtSwqEnAkaaIN5MZWSjfS2I95+dmS +G61brn12HfOyTQEcK2M59qLfepS1hVLOFMICDMiLNXyD5dPkwrOCoxLg3uaa5Q6 HPZiHqwOomSrnAfdkUma3vtKsPub+jQCg3Xm1chMXkwPM4XggQ8= -----END CERTIFICATE-----Generated at Mon Mar 2 21:29:40 2026 by rpki-client