$ rpki-client -vvf repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft File: 13BAA0DF960A8AD207C380328B5666205D55F24C.mft (raw, json) Hash identifier: autBwHuqeibglhIVHQi+Mhz1K7y0pKa0fjV38Mw4Z2E= Subject key identifier: 51:06:50:C8:CD:E0:EB:78:7B:FB:61:16:37:87:21:D7:A9:BA:9B:C8 Authority key identifier: 13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C Certificate issuer: /CN=13BAA0DF960A8AD207C380328B5666205D55F24C Certificate serial: 752E5BE78417CE7CF15D12B75BCA956C7A41EAD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft Manifest number: 0366 Signing time: Sun 20 Jul 2025 16:50:56 +0000 Manifest this update: Sun 20 Jul 2025 16:45:56 +0000 Manifest next update: Thu 24 Jul 2025 03:58:56 +0000 Files and hashes: 1: 13BAA0DF960A8AD207C380328B5666205D55F24C.crl (hash: /DhKAbJdzDG4QV7aX3WocetewuRe4VLXiJHBZ0pShIc=) 2: 3130332e3136392e3235322e302f32332d3234203d3e203137393935.roa (hash: pJiq9ojTyK7ZZqOiMbF+1PX7W4BwHy5wyU1KAl8QMPg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:58:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:2e:5b:e7:84:17:ce:7c:f1:5d:12:b7:5b:ca:95:6c:7a:41:ea:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13BAA0DF960A8AD207C380328B5666205D55F24C Validity Not Before: Jul 20 16:45:56 2025 GMT Not After : Jul 24 03:58:56 2025 GMT Subject: CN=510650C8CDE0EB787BFB6116378721D7A9BA9BC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:d3:32:79:40:17:0d:15:23:2b:61:48:d7: 92:d4:99:a2:b9:86:93:8b:3b:f5:80:34:0c:fe:6f: 5f:1e:35:f1:7d:f3:ce:ad:f0:a1:10:35:4d:54:46: 29:1c:71:1b:32:83:ed:da:24:fb:ee:2d:f7:5e:1d: cb:61:b3:46:35:bb:71:ab:53:bf:f8:0b:05:69:5a: 8f:4f:0e:40:3f:14:b8:83:a9:86:14:66:b0:42:60: e9:bc:70:e0:8d:bc:13:6f:20:7a:ef:c7:58:90:16: 5d:0e:38:0b:a0:39:16:39:5b:ad:61:9f:12:d1:45: ab:1e:be:12:e2:35:85:4d:90:12:8f:7c:fa:c7:f0: 53:ce:6f:1e:ca:a4:02:de:c5:38:72:08:ec:3f:03: bd:e6:19:62:54:34:4b:db:4d:4e:6d:bc:1a:9f:0b: 7d:9e:d3:5a:e5:46:c7:2e:b5:6d:04:9e:ff:9c:e9: b5:9d:8f:02:33:d1:8a:fb:a9:aa:0e:4e:72:d0:70: c5:ee:b2:cc:11:81:90:dc:8b:6b:e6:80:1c:b8:b8: 7f:5d:a0:5b:1e:81:c0:b7:1b:21:b8:1c:f4:5c:24: 5b:06:72:c1:5e:72:49:3d:40:20:ea:90:77:dc:62: 33:06:94:85:68:42:3b:e9:74:0d:ba:18:d7:fa:ba: d2:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:06:50:C8:CD:E0:EB:78:7B:FB:61:16:37:87:21:D7:A9:BA:9B:C8 X509v3 Authority Key Identifier: keyid:13:BA:A0:DF:96:0A:8A:D2:07:C3:80:32:8B:56:66:20:5D:55:F2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13BAA0DF960A8AD207C380328B5666205D55F24C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b8c543c-de1f-4ef4-92b1-68556ff131a3/0/13BAA0DF960A8AD207C380328B5666205D55F24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:f6:15:af:ba:63:f6:0f:20:6a:e6:e6:a3:4f:8e:a4:fb:70: ae:24:e1:b0:47:11:7b:93:80:74:f7:0d:5b:57:8b:1e:b2:49: 4f:c6:e5:03:cb:0c:54:5b:ca:b6:58:85:2c:1c:bb:d3:04:4b: 3d:03:54:20:41:a9:be:dc:e0:d2:19:58:f7:7a:57:d2:f5:53: 56:45:8c:10:76:77:81:b6:fb:5c:f4:6d:3f:c6:fc:6f:ba:6a: 63:1a:b6:a6:92:ba:f7:8c:97:12:14:1e:ed:d2:e0:d2:96:d5: d5:b7:12:06:3f:da:b7:a8:89:c4:1d:c1:2f:08:33:63:10:5f: 65:50:eb:6a:36:21:83:4b:c5:b8:1a:b8:3e:95:87:12:59:30: 8c:78:68:4f:ab:96:50:19:b6:1e:7b:87:e5:bd:15:0b:40:fc: 42:ec:77:42:49:b4:51:90:7d:2b:94:a1:95:3a:91:52:3e:9d: 36:94:a6:a2:17:6d:d7:48:c8:25:fd:61:b2:ef:42:69:d2:7d: 8f:ee:cb:5f:9f:b6:43:e8:63:b4:dc:97:fc:1e:40:a6:3d:cb: 00:89:c7:15:74:aa:0c:6b:e0:90:c0:12:6b:55:50:95:66:a3: 60:01:35:89:6c:bf:a8:1e:e8:19:82:d1:19:53:96:dd:25:b2: 2c:07:93:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdS5b54QXznzxXRK3W8qVbHpB6tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1 RDU1RjI0QzAeFw0yNTA3MjAxNjQ1NTZaFw0yNTA3MjQwMzU4NTZaMDMxMTAvBgNV BAMTKDUxMDY1MEM4Q0RFMEVCNzg3QkZCNjExNjM3ODcyMUQ3QTlCQTlCQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsT9MyeUAXDRUjK2FI15LUmaK5 hpOLO/WANAz+b18eNfF9886t8KEQNU1URikccRsyg+3aJPvuLfdeHcths0Y1u3Gr U7/4CwVpWo9PDkA/FLiDqYYUZrBCYOm8cOCNvBNvIHrvx1iQFl0OOAugORY5W61h nxLRRasevhLiNYVNkBKPfPrH8FPObx7KpALexThyCOw/A73mGWJUNEvbTU5tvBqf C32e01rlRscutW0Env+c6bWdjwIz0Yr7qaoOTnLQcMXusswRgZDci2vmgBy4uH9d oFsegcC3GyG4HPRcJFsGcsFeckk9QCDqkHfcYjMGlIVoQjvpdA26GNf6utJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUQZQyM3g63h7+2EWN4ch16m6m8gwHwYDVR0j BBgwFoAUE7qg35YKitIHw4Ayi1ZmIF1V8kwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YjhjNTQzYy1kZTFmLTRlZjQtOTJiMS02ODU1NmZmMTMxYTMvMC8xM0JBQTBERjk2 MEE4QUQyMDdDMzgwMzI4QjU2NjYyMDVENTVGMjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2MjA1RDU1 RjI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWI4YzU0M2MtZGUxZi00ZWY0LTky YjEtNjg1NTZmZjEzMWEzLzAvMTNCQUEwREY5NjBBOEFEMjA3QzM4MDMyOEI1NjY2 MjA1RDU1RjI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI32Fa+6Y/YPIGrm5qNPjqT7cK4k4bBHEXuT gHT3DVtXix6ySU/G5QPLDFRbyrZYhSwcu9MESz0DVCBBqb7c4NIZWPd6V9L1U1ZF jBB2d4G2+1z0bT/G/G+6amMatqaSuveMlxIUHu3S4NKW1dW3EgY/2reoicQdwS8I M2MQX2VQ62o2IYNLxbgauD6VhxJZMIx4aE+rllAZth57h+W9FQtA/ELsd0JJtFGQ fSuUoZU6kVI+nTaUpqIXbddIyCX9YbLvQmnSfY/uy1+ftkPoY7Tcl/weQKY9ywCJ xxV0qgxr4JDAEmtVUJVmo2ABNYlsv6ge6BmC0RlTlt0lsiwHk24= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:33 2025 by rpki-client