$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: CWfoCuovxYRuVkaTKNRFUzfOEHBoA7qxnjVrJqD8I2s= Subject key identifier: 1C:6F:A0:DA:46:2A:A5:BD:DE:75:6D:E0:8E:31:5E:BF:37:50:BD:A5 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 7A06CE6E3B96D904D347005712ECB769E30AA8FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 03D4 Signing time: Mon 23 Mar 2026 23:01:04 +0000 Manifest this update: Mon 23 Mar 2026 22:56:04 +0000 Manifest next update: Fri 27 Mar 2026 06:58:04 +0000 Files and hashes: 1: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) 2: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: 4UfJIo9k/QWXJLlKBvXNm1J0BIoizQjwxe/H9D8jwhk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:06:ce:6e:3b:96:d9:04:d3:47:00:57:12:ec:b7:69:e3:0a:a8:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Mar 23 22:56:04 2026 GMT Not After : Mar 27 06:58:04 2026 GMT Subject: CN=1C6FA0DA462AA5BDDE756DE08E315EBF3750BDA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ac:10:18:82:16:89:82:9d:fa:69:8f:49:5c: 93:07:25:6a:09:74:87:9b:83:cd:5e:0d:df:b5:f8: dd:32:7e:de:a9:5f:f9:74:1d:95:9a:c7:93:7f:0c: 05:35:0f:28:38:03:1f:66:51:f2:bc:3b:f4:23:3b: a8:20:6c:d7:3b:7f:a1:b6:de:9c:68:36:78:c7:60: af:a6:1a:80:cf:31:d2:46:5e:41:0e:dc:ac:ad:ac: 35:28:83:e4:47:59:08:bd:d5:32:63:59:b8:1f:5d: 6e:82:5a:a3:87:b5:e3:b5:37:0e:5f:c8:7d:fe:13: 80:f3:68:31:d7:5a:e8:75:75:3f:db:1b:b6:45:82: f3:e8:a6:2c:b9:0e:48:d7:c8:bd:7c:0d:ba:16:84: 09:34:d4:97:2a:e8:db:23:84:eb:e9:48:ff:f3:58: 38:91:0b:eb:67:7e:91:74:a3:20:49:78:b1:f3:02: 30:92:74:16:9d:4c:66:04:6f:f4:77:d9:3b:d4:1d: ac:40:62:83:71:f5:b2:06:21:1d:e2:ae:1d:df:8c: a4:cf:6b:ec:27:be:1b:17:dc:81:b7:5c:f8:42:87: 1e:dc:1b:5d:f5:3c:82:28:d3:5a:a9:f4:c5:d7:2a: da:95:82:d9:0a:f5:38:1f:1a:31:93:bc:2d:a9:9f: 27:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:6F:A0:DA:46:2A:A5:BD:DE:75:6D:E0:8E:31:5E:BF:37:50:BD:A5 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:7f:59:6b:ee:6c:39:b0:6a:96:c0:6f:af:ca:7a:c8:76:a4: 06:5a:13:d2:32:f0:bb:b9:bf:37:64:49:47:25:ac:06:cc:e5: 6e:5c:3b:18:2d:6b:7c:64:e6:d2:50:7f:05:ec:af:3a:20:d4: 01:f2:61:08:92:92:9e:71:9b:13:ee:0c:8b:67:ea:8f:4d:0c: cf:d4:2f:56:73:65:a4:94:ea:40:a8:6f:7b:e4:1f:19:86:97: a5:9a:c0:8c:65:c1:b1:a8:22:93:32:e2:5a:db:c8:23:71:1c: de:9b:95:c5:a9:f3:ff:82:23:12:b9:84:1a:d6:c0:76:6c:cd: 39:44:2a:16:73:d1:6b:94:74:12:58:1c:0c:94:d0:cd:29:90: f3:b8:fe:7e:51:bf:2e:c8:69:d8:0c:fc:7d:ce:6b:9b:fd:20: 12:85:22:be:22:1f:17:97:3d:85:d0:95:5a:b6:db:d5:48:e6: 61:f0:61:6d:d0:88:3f:55:8e:88:90:1d:01:63:80:53:04:41: 55:2b:f9:dc:5b:52:cd:d3:bc:1f:e6:6f:8e:bd:ea:94:52:59: e5:3a:49:de:87:ad:3e:2b:ed:f4:ec:50:1c:a3:cd:43:95:61: a8:fd:b4:b3:95:f1:de:3a:86:46:ae:15:e8:ae:85:c9:61:b0: 8a:a6:43:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUegbObjuW2QTTRwBXEuy3aeMKqP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNjAzMjMyMjU2MDRaFw0yNjAzMjcwNjU4MDRaMDMxMTAvBgNV BAMTKDFDNkZBMERBNDYyQUE1QkRERTc1NkRFMDhFMzE1RUJGMzc1MEJEQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCorBAYghaJgp36aY9JXJMHJWoJ dIebg81eDd+1+N0yft6pX/l0HZWax5N/DAU1Dyg4Ax9mUfK8O/QjO6ggbNc7f6G2 3pxoNnjHYK+mGoDPMdJGXkEO3KytrDUog+RHWQi91TJjWbgfXW6CWqOHteO1Nw5f yH3+E4DzaDHXWuh1dT/bG7ZFgvPopiy5DkjXyL18DboWhAk01Jcq6NsjhOvpSP/z WDiRC+tnfpF0oyBJeLHzAjCSdBadTGYEb/R32TvUHaxAYoNx9bIGIR3irh3fjKTP a+wnvhsX3IG3XPhChx7cG131PIIo01qp9MXXKtqVgtkK9TgfGjGTvC2pnycDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHG+g2kYqpb3edW3gjjFevzdQvaUwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAB/WWvubDmwapbAb6/Kesh2pAZaE9Iy8Lu5 vzdkSUclrAbM5W5cOxgta3xk5tJQfwXsrzog1AHyYQiSkp5xmxPuDItn6o9NDM/U L1ZzZaSU6kCob3vkHxmGl6WawIxlwbGoIpMy4lrbyCNxHN6blcWp8/+CIxK5hBrW wHZszTlEKhZz0WuUdBJYHAyU0M0pkPO4/n5Rvy7IadgM/H3Oa5v9IBKFIr4iHxeX PYXQlVq229VI5mHwYW3QiD9VjoiQHQFjgFMEQVUr+dxbUs3TvB/mb4696pRSWeU6 Sd6HrT4r7fTsUByjzUOVYaj9tLOV8d46hkauFeiuhclhsIqmQwM= -----END CERTIFICATE-----Generated at Tue Mar 24 01:51:24 2026 by rpki-client