$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: 9dBfJK2/waCNHvsvB9/dCv/R7fs1+VD5Pkr1Ia/RM6c= Subject key identifier: 75:7D:E0:B1:18:1F:C9:D2:CC:9D:82:4C:2D:3C:14:A1:39:EB:2C:A8 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 76335C66500F1CD231554CEA1F8F658E3A068C1F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01D7 Signing time: Wed 23 Jul 2025 16:31:14 +0000 Manifest this update: Wed 23 Jul 2025 16:26:14 +0000 Manifest next update: Sat 26 Jul 2025 21:34:14 +0000 Files and hashes: 1: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: 1oyOtVjk62XnsKC1vK32tmLaEZwZLuTAQ3Yr7rjhcoM=) 2: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: AXKXErkz0rCM6NrzZ3mV+/st/ms7Qf79DwNDoRUlIck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 21:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:33:5c:66:50:0f:1c:d2:31:55:4c:ea:1f:8f:65:8e:3a:06:8c:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Jul 23 16:26:14 2025 GMT Not After : Jul 26 21:34:14 2025 GMT Subject: CN=757DE0B1181FC9D2CC9D824C2D3C14A139EB2CA8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:0a:78:fb:48:65:ea:c9:47:8c:b0:5a:6b:40: 8d:64:a4:56:c9:38:c8:0d:4d:eb:22:79:16:5a:67: 22:36:81:44:0e:99:5f:d8:be:47:5a:ee:4d:d8:87: ff:e6:67:1d:d5:14:9b:95:db:7c:b0:dd:07:f4:ac: be:96:3b:f6:7e:2a:d7:3e:dd:81:0e:ab:1c:fc:d3: 50:9c:71:a2:10:31:c6:b8:a3:c9:41:81:ec:e3:68: 0e:f1:b3:d5:44:a5:58:f1:68:d1:a1:2a:bd:53:e4: 5e:97:6c:63:55:39:11:9c:cd:42:14:30:47:c8:af: 72:05:af:a2:b2:b5:1a:49:a9:a9:7d:1d:92:c1:12: 0c:8c:f9:c4:96:d6:a6:f9:bd:d7:8b:4e:58:c7:88: 64:cf:33:7a:fd:c9:61:d6:a0:0a:bb:91:0c:29:a4: e9:a4:de:30:16:49:6a:0e:d8:55:ac:a9:24:8d:cc: dd:47:2d:d9:3d:98:9e:f8:78:7f:6a:6e:c1:4e:11: 22:84:34:88:6c:31:ce:92:9e:82:45:d3:72:e3:e4: 7c:d8:6b:58:99:e3:5a:f7:96:92:3d:3c:38:85:02: 90:70:51:71:f6:b8:83:5a:5f:a7:16:b2:03:69:ed: f2:8d:7f:cc:7c:02:df:25:5e:64:d7:02:f2:cb:00: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:7D:E0:B1:18:1F:C9:D2:CC:9D:82:4C:2D:3C:14:A1:39:EB:2C:A8 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:cc:a7:f7:6a:b7:ff:d2:ad:96:9f:76:5f:df:72:f3:3c:78: 87:86:c8:8a:d3:9e:a8:3a:10:39:ff:88:7e:27:dd:d1:51:94: 35:ce:91:48:a6:9a:74:b8:bd:39:d6:50:08:1f:3d:cb:e4:44: 91:82:bc:68:ba:99:56:f5:9a:e2:28:c9:52:27:9d:79:73:b5: d6:09:17:40:ab:95:43:da:9e:3f:87:2d:ce:5f:63:96:1b:68: 99:a9:b7:4e:09:d8:74:89:8b:02:bc:8a:f4:43:3d:48:10:08: d0:86:fb:c3:7b:46:5e:3c:78:61:a2:7d:53:17:d3:e5:8c:8f: 5f:e4:5d:e9:83:5b:34:a9:ed:fe:74:58:d1:55:81:55:09:8f: 20:dc:51:ec:f2:f9:6e:db:20:3d:8d:a4:bd:2f:eb:f3:d4:1f: 50:f9:e7:a0:90:43:b9:7a:6a:d8:0d:41:67:ce:5d:95:63:63: 43:0f:d1:8f:e9:da:d6:6f:83:df:9c:60:ea:f0:a5:82:dc:1e: e0:b8:d7:4a:9e:2d:79:b3:6b:a6:a1:52:85:04:53:bf:ed:cc: b3:74:8c:e0:7c:0b:6d:7d:5a:1b:e6:dd:8e:ab:68:90:f9:97: 59:1e:4a:c4:36:b7:fb:de:b5:3e:03:5b:f1:b5:e3:6a:0c:dd: f6:44:39:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdjNcZlAPHNIxVUzqH49ljjoGjB8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTA3MjMxNjI2MTRaFw0yNTA3MjYyMTM0MTRaMDMxMTAvBgNV BAMTKDc1N0RFMEIxMTgxRkM5RDJDQzlEODI0QzJEM0MxNEExMzlFQjJDQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWCnj7SGXqyUeMsFprQI1kpFbJ OMgNTesieRZaZyI2gUQOmV/Yvkda7k3Yh//mZx3VFJuV23yw3Qf0rL6WO/Z+Ktc+ 3YEOqxz801CccaIQMca4o8lBgezjaA7xs9VEpVjxaNGhKr1T5F6XbGNVORGczUIU MEfIr3IFr6KytRpJqal9HZLBEgyM+cSW1qb5vdeLTljHiGTPM3r9yWHWoAq7kQwp pOmk3jAWSWoO2FWsqSSNzN1HLdk9mJ74eH9qbsFOESKENIhsMc6SnoJF03Lj5HzY a1iZ41r3lpI9PDiFApBwUXH2uINaX6cWsgNp7fKNf8x8At8lXmTXAvLLACQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdX3gsRgfydLMnYJMLTwUoTnrLKgwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbMp/dqt//SrZafdl/fcvM8eIeGyIrTnqg6 EDn/iH4n3dFRlDXOkUimmnS4vTnWUAgfPcvkRJGCvGi6mVb1muIoyVInnXlztdYJ F0CrlUPanj+HLc5fY5YbaJmpt04J2HSJiwK8ivRDPUgQCNCG+8N7Rl48eGGifVMX 0+WMj1/kXemDWzSp7f50WNFVgVUJjyDcUezy+W7bID2NpL0v6/PUH1D556CQQ7l6 atgNQWfOXZVjY0MP0Y/p2tZvg9+cYOrwpYLcHuC410qeLXmza6ahUoUEU7/tzLN0 jOB8C219Whvm3Y6raJD5l1keSsQ2t/vetT4DW/G142oM3fZEOZA= -----END CERTIFICATE-----Generated at Thu Jul 24 16:28:54 2025 by rpki-client