$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: Fmk66igJ17/I8xvPp0X19j0WTLrCzKtmuwADi24deL8= Subject key identifier: 5D:0B:CB:62:1A:8F:1D:FB:F8:1D:4E:D9:BC:D7:80:C7:4E:44:70:DE Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 3465B1F4369E0123DB1234F392E7E3741DE233EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01DF Signing time: Sun 10 Aug 2025 13:11:17 +0000 Manifest this update: Sun 10 Aug 2025 13:06:17 +0000 Manifest next update: Wed 13 Aug 2025 14:08:17 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) 2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: XnyUXFtlCJ0RjC7QzdBjTKpdVlPOgPUU7oIqwsQ5MG8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 14:08:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:65:b1:f4:36:9e:01:23:db:12:34:f3:92:e7:e3:74:1d:e2:33:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Aug 10 13:06:17 2025 GMT Not After : Aug 13 14:08:17 2025 GMT Subject: CN=5D0BCB621A8F1DFBF81D4ED9BCD780C74E4470DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:54:77:1d:83:25:8f:2b:a5:0c:09:d6:44:87: 6e:2d:73:3a:da:50:27:37:bd:ed:7c:f5:54:b0:e5: 5a:bf:cd:b4:ee:09:c4:34:09:da:b5:73:d7:14:7e: dc:74:e1:07:2d:31:0d:f9:6b:8a:12:6c:c1:17:4f: 6f:61:fa:64:dd:e8:21:63:87:5f:4b:45:7d:17:1b: 26:1c:bc:0a:49:16:3f:96:0d:2d:73:bf:6a:1d:b0: 17:bb:34:c7:d4:7a:43:eb:fc:ab:4a:05:f3:75:40: c4:14:74:c3:18:44:dd:b1:ae:af:07:ee:e7:9a:a7: 51:e2:e9:83:35:c9:d8:43:e6:3f:f2:b7:f9:6a:02: c9:d6:f4:ba:59:d5:59:ed:bf:38:ab:f1:85:5b:2e: 5b:e6:d0:fa:96:c6:66:a2:64:4b:c4:cd:e3:12:7b: cf:8d:0f:52:2e:02:d7:4e:99:cc:3b:47:2b:95:f9: 08:5e:10:b7:93:e3:8e:4a:88:0b:df:80:a4:2a:f4: ae:22:36:7d:2f:45:52:29:b5:28:f7:a0:2f:7e:5d: 02:07:b1:1c:6e:ee:a6:b9:9b:f9:94:a1:16:23:06: 88:0b:32:56:3e:92:64:ff:9c:8b:98:6f:60:04:83: b6:4a:c3:f3:29:ec:4e:9a:71:7a:4b:47:2f:6e:ea: 3e:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:0B:CB:62:1A:8F:1D:FB:F8:1D:4E:D9:BC:D7:80:C7:4E:44:70:DE X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:ff:5e:04:e6:07:27:30:91:94:b4:fd:b7:80:e7:f7:ad:45: 55:b3:b5:5c:6f:2d:37:4b:a2:59:88:0d:9b:d4:fb:1c:c5:02: 69:a3:41:89:6f:01:d1:f5:63:e5:98:4b:96:de:92:e0:a1:df: 40:2b:56:79:75:5e:f3:cb:94:96:cc:9f:a9:3c:63:35:97:a6: 9c:ee:a2:1c:f2:7a:90:5c:ec:dd:bb:95:f6:e5:89:d8:1b:20: 7e:10:94:26:53:6e:3b:43:4e:0c:7c:6a:85:54:38:68:a4:a2: 0c:28:5a:c6:2a:28:af:fb:e9:d0:2c:66:d6:6b:7c:25:33:20: 8f:60:92:1b:50:d7:fd:81:e9:83:a3:4a:99:c8:10:ea:80:f3: 10:71:4b:ce:91:de:df:9c:ac:d2:9c:07:3c:a5:6c:cb:f1:66: d6:15:b2:e7:c0:00:da:b9:4d:a6:8a:e6:8d:ea:6a:48:49:82: 75:57:a3:4f:f6:eb:e4:64:17:7b:2d:22:f3:59:f1:82:62:92: d3:96:bb:2c:02:ac:bf:1c:9e:31:69:ed:c1:85:3c:96:13:97: 01:6e:89:1e:d0:ff:9e:ed:7b:9c:09:b3:9c:c9:3f:b2:b9:c3: 12:17:38:75:82:b6:47:b2:b0:9a:17:e9:e1:df:94:0e:e4:f1: 92:0b:2b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNGWx9DaeASPbEjTzkufjdB3iM+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTA4MTAxMzA2MTdaFw0yNTA4MTMxNDA4MTdaMDMxMTAvBgNV BAMTKDVEMEJDQjYyMUE4RjFERkJGODFENEVEOUJDRDc4MEM3NEU0NDcwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVHcdgyWPK6UMCdZEh24tczra UCc3ve189VSw5Vq/zbTuCcQ0Cdq1c9cUftx04QctMQ35a4oSbMEXT29h+mTd6CFj h19LRX0XGyYcvApJFj+WDS1zv2odsBe7NMfUekPr/KtKBfN1QMQUdMMYRN2xrq8H 7ueap1Hi6YM1ydhD5j/yt/lqAsnW9LpZ1Vntvzir8YVbLlvm0PqWxmaiZEvEzeMS e8+ND1IuAtdOmcw7RyuV+QheELeT445KiAvfgKQq9K4iNn0vRVIptSj3oC9+XQIH sRxu7qa5m/mUoRYjBogLMlY+kmT/nIuYb2AEg7ZKw/Mp7E6acXpLRy9u6j6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXQvLYhqPHfv4HU7ZvNeAx05EcN4wHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFr/XgTmBycwkZS0/beA5/etRVWztVxvLTdL olmIDZvU+xzFAmmjQYlvAdH1Y+WYS5bekuCh30ArVnl1XvPLlJbMn6k8YzWXppzu ohzyepBc7N27lfblidgbIH4QlCZTbjtDTgx8aoVUOGikogwoWsYqKK/76dAsZtZr fCUzII9gkhtQ1/2B6YOjSpnIEOqA8xBxS86R3t+crNKcBzylbMvxZtYVsufAANq5 TaaK5o3qakhJgnVXo0/26+RkF3stIvNZ8YJiktOWuywCrL8cnjFp7cGFPJYTlwFu iR7Q/57te5wJs5zJP7K5wxIXOHWCtkeysJoX6eHflA7k8ZILK3Y= -----END CERTIFICATE-----Generated at Mon Aug 11 05:54:16 2025 by rpki-client