$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: Wr7h92fECRtekkvbLEK+Vl7w8zf4rP5EoXHfdAO4HE0= Subject key identifier: FA:42:8E:7A:5E:15:04:F0:2E:71:85:9E:06:83:51:8C:AE:75:36:E2 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 53CC6D6FB46D054ADDB5ED68AA8E735A1D01A07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 0205 Signing time: Tue 04 Nov 2025 07:21:16 +0000 Manifest this update: Tue 04 Nov 2025 07:16:16 +0000 Manifest next update: Fri 07 Nov 2025 17:27:16 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) 2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: AYhiZtd6gp+PUWy2Ye3G0FEVtQcUzm47K8MzOlbD7e8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:cc:6d:6f:b4:6d:05:4a:dd:b5:ed:68:aa:8e:73:5a:1d:01:a0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Nov 4 07:16:16 2025 GMT Not After : Nov 7 17:27:16 2025 GMT Subject: CN=FA428E7A5E1504F02E71859E0683518CAE7536E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:6f:d6:1a:1a:b7:0e:02:15:88:29:f0:8d:ca: 07:6d:d7:f7:4d:17:05:56:a0:f6:5c:bb:af:1f:5b: d3:38:e9:b7:72:c7:dd:19:6f:e2:bb:52:de:5c:7f: 69:48:f4:5a:a1:e9:ae:77:01:86:38:c0:70:dc:0a: 38:98:02:ee:09:6f:b5:5d:ba:7a:65:b9:2c:61:df: 60:95:6e:07:0d:ca:ab:d8:d3:bc:86:5c:5b:95:1a: 91:40:c4:ab:54:81:85:ae:ed:d4:e3:9b:75:bf:6f: 7c:16:e1:21:87:4f:84:40:d1:1b:22:bb:8e:4a:7f: 55:4a:32:ca:dd:38:4e:da:59:f1:fb:3e:4e:6e:0a: 87:27:e8:40:d3:da:39:58:70:f0:d6:37:56:f5:46: 26:b5:9c:94:04:46:9a:c0:e1:ae:e1:a8:cb:d0:c0: 8b:ce:7f:8e:20:7b:62:66:c6:07:b8:e9:63:0e:dc: 9d:fc:03:53:a5:20:d1:54:c9:2a:ee:7b:1a:1e:42: ea:74:52:e9:d5:3a:cf:62:ae:47:8a:0d:6c:a3:98: 69:4a:77:24:f2:89:fc:e8:10:70:7a:72:d0:ba:ce: a7:7c:e4:82:e9:10:90:f0:3f:34:9c:34:25:33:e5: a2:e5:b5:c9:9a:ed:1e:2c:74:80:54:dd:3b:ff:0d: da:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:42:8E:7A:5E:15:04:F0:2E:71:85:9E:06:83:51:8C:AE:75:36:E2 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:69:49:0a:b6:44:41:0e:e3:a6:cd:ab:c3:41:d5:d9:1b:0c: 75:da:fb:01:5f:2e:f4:4d:1b:2d:f9:2d:99:0f:b2:a3:19:27: 0d:09:ae:88:4b:9a:71:66:e2:1f:14:37:f9:ae:5a:22:6e:f4: fc:cd:0c:09:a3:f8:ab:ae:ae:15:5d:82:d1:d4:eb:fa:67:70: 1b:95:30:48:71:8f:08:2b:28:1e:65:9f:45:00:f5:db:3e:e7: 7c:d1:5f:2a:91:36:1b:4c:3b:b7:f9:3f:7c:35:9a:26:bc:36: 80:03:bc:89:52:ed:c6:22:5c:46:78:f7:17:92:ce:26:37:17: 92:63:1f:d9:d4:52:e2:f6:59:8c:0c:65:53:16:9b:d3:9d:a9: 7c:c1:36:b9:9e:04:aa:cf:0f:cb:81:e3:6b:5a:cc:aa:35:a6: 1d:0f:1a:2e:e6:22:c3:0c:cd:68:56:62:3a:03:82:a7:ae:0f: 57:f3:33:0c:2e:46:ee:b8:10:8c:e3:62:a6:fb:20:b7:2f:31: 2c:1f:f8:00:5c:46:fb:e2:d0:04:a8:d6:1e:dd:3c:75:d6:0f: d7:15:58:43:93:3f:45:80:ba:68:54:e6:98:34:35:87:80:80: 32:5f:ca:6e:51:d4:06:5e:af:78:c1:2b:e5:c6:eb:0b:79:17: 69:70:13:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU8xtb7RtBUrdte1oqo5zWh0BoHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTExMDQwNzE2MTZaFw0yNTExMDcxNzI3MTZaMDMxMTAvBgNV BAMTKEZBNDI4RTdBNUUxNTA0RjAyRTcxODU5RTA2ODM1MThDQUU3NTM2RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9b9YaGrcOAhWIKfCNygdt1/dN FwVWoPZcu68fW9M46bdyx90Zb+K7Ut5cf2lI9Fqh6a53AYY4wHDcCjiYAu4Jb7Vd unpluSxh32CVbgcNyqvY07yGXFuVGpFAxKtUgYWu7dTjm3W/b3wW4SGHT4RA0Rsi u45Kf1VKMsrdOE7aWfH7Pk5uCocn6EDT2jlYcPDWN1b1Ria1nJQERprA4a7hqMvQ wIvOf44ge2Jmxge46WMO3J38A1OlINFUySruexoeQup0UunVOs9irkeKDWyjmGlK dyTyifzoEHB6ctC6zqd85ILpEJDwPzScNCUz5aLltcma7R4sdIBU3Tv/DdrJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+kKOel4VBPAucYWeBoNRjK51NuIwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFpSQq2REEO46bNq8NB1dkbDHXa+wFfLvRN Gy35LZkPsqMZJw0JrohLmnFm4h8UN/muWiJu9PzNDAmj+KuurhVdgtHU6/pncBuV MEhxjwgrKB5ln0UA9ds+53zRXyqRNhtMO7f5P3w1mia8NoADvIlS7cYiXEZ49xeS ziY3F5JjH9nUUuL2WYwMZVMWm9OdqXzBNrmeBKrPD8uB42tazKo1ph0PGi7mIsMM zWhWYjoDgqeuD1fzMwwuRu64EIzjYqb7ILcvMSwf+ABcRvvi0ASo1h7dPHXWD9cV WEOTP0WAumhU5pg0NYeAgDJfym5R1AZer3jBK+XG6wt5F2lwE54= -----END CERTIFICATE-----Generated at Tue Nov 4 16:33:41 2025 by rpki-client