
$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json)
Hash identifier: VI80JLPFYUEeRY4RgY3y8duu3VseVsm1sbtETu7VhxQ=
Subject key identifier: D4:D0:D3:70:A9:91:BA:EB:32:AD:B2:A5:BA:4F:56:31:BC:BC:BB:B3
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial: 55D35BB47E49EA39C881525ECCA53CC9659F7970
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
Manifest number: 036C
Signing time: Tue 04 Nov 2025 12:02:09 +0000
Manifest this update: Tue 04 Nov 2025 11:57:09 +0000
Manifest next update: Fri 07 Nov 2025 19:10:09 +0000
Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=)
2: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: VXTB0/KFUuSDF0viJjX9AbGlYYyjlBgWSb17OjeNZqo=)
3: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=)
4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Fri 07 Nov 2025 13:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:d3:5b:b4:7e:49:ea:39:c8:81:52:5e:cc:a5:3c:c9:65:9f:79:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
Validity
Not Before: Nov 4 11:57:09 2025 GMT
Not After : Nov 7 19:10:09 2025 GMT
Subject: CN=D4D0D370A991BAEB32ADB2A5BA4F5631BCBCBBB3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:a8:62:db:70:9c:f2:52:0b:c4:ea:5d:6d:69:
b8:56:cd:b4:28:71:00:9e:f0:d5:47:b1:7b:d8:1f:
1b:89:c5:fa:0a:6b:25:96:ad:bd:cc:7d:9e:85:24:
64:c4:6d:c0:28:88:c3:da:23:3d:4a:8d:b7:42:34:
a6:41:28:6a:02:27:5e:dc:ba:93:b5:cf:86:c7:31:
38:17:fa:8b:16:cc:f4:00:8c:38:58:86:c2:3f:f8:
9f:c9:a5:cb:10:8d:b6:86:e6:11:6f:07:46:fa:23:
54:72:a4:87:a0:a0:75:46:7f:bf:05:17:5c:33:ed:
83:d8:5a:1d:e8:f8:43:a4:cf:71:3b:29:69:7a:55:
35:49:3a:be:6c:08:b2:d6:9a:4a:32:c7:53:f5:5c:
16:b1:06:d2:f7:7e:b0:3e:ef:db:be:b1:10:23:a6:
f1:bb:95:0d:6a:06:26:bf:11:94:06:15:0f:d9:f8:
d3:05:9b:ab:6f:de:54:d9:c1:48:1b:6f:3c:0f:24:
4b:f8:20:ae:d7:d0:d6:af:35:2b:c3:3f:36:f3:8f:
7b:57:e1:c3:48:55:13:97:c6:43:b2:69:3e:0b:aa:
dc:7e:53:85:19:6a:15:13:cd:36:f1:e1:a9:99:fd:
21:6f:c8:21:9d:51:5d:92:99:6e:57:f9:d8:63:02:
ab:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D0:D3:70:A9:91:BA:EB:32:AD:B2:A5:BA:4F:56:31:BC:BC:BB:B3
X509v3 Authority Key Identifier:
keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:b8:3b:81:5f:e3:04:21:9b:6c:83:70:2d:39:13:e8:e1:2b:
8d:ef:ab:34:49:7b:d8:4c:e4:49:80:e0:da:ef:1f:83:3a:75:
34:d0:34:46:b4:5b:7b:3a:95:08:1a:db:35:6b:5a:e7:43:43:
75:cb:54:61:d9:52:9d:cf:a4:73:15:10:13:e8:37:0c:ef:0a:
93:1f:17:df:ad:14:17:15:ea:ce:67:98:83:e4:99:90:0b:c9:
35:fe:bf:f2:9e:7b:f2:18:ab:53:74:c4:0f:66:e5:36:30:d0:
25:e2:6e:ad:20:10:7f:ee:c5:1b:28:32:4c:72:fc:74:af:f8:
ea:35:24:4d:ff:85:61:ac:c9:bd:d9:5f:bc:c2:6b:f6:fa:03:
82:7e:16:de:2e:86:0f:7b:5c:01:1a:0c:63:6e:fb:2c:7b:d7:
81:b8:91:c4:16:51:f5:f7:db:84:df:39:e3:a5:93:8e:30:a9:
e3:d1:39:a0:8c:7d:7e:3e:5f:55:a5:e5:d1:74:ab:0d:f8:ae:
57:75:be:9d:46:24:3c:0c:aa:57:bc:55:72:95:cd:47:9f:f4:
41:91:67:23:eb:46:fb:ee:da:17:82:2a:06:47:2c:3b:e9:3c:
70:fb:61:17:0c:e0:9c:1a:6e:4f:d3:54:7e:a8:35:41:55:68:
b3:7f:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:53:03 2025 by rpki-client