$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: UWeXhAzZeVv02MSFJGWo9jT605OQfo8EKa7bX2JgTQs= Subject key identifier: 42:ED:D9:80:89:A9:E4:A4:13:3B:2E:A6:5A:A0:00:7B:AC:59:B0:07 Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 3C19511ED1C7A2B0314EC3B6256F8D3BEB1EC178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 033B Signing time: Mon 21 Jul 2025 00:10:45 +0000 Manifest this update: Mon 21 Jul 2025 00:05:45 +0000 Manifest next update: Thu 24 Jul 2025 09:46:45 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: 5WAjPQFyaB8VU/xV/L/W+MpTyoJtVsIgPQ74sNXdzhE=) 2: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: /rq1WhPl2nzWETUM/oiNyUY2THnfP1otKF0KD2KPb+U=) 3: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: bVoDXhe46P19QM7hVjT2qiZYD89lNdSdIydpB16x9i4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 06:47:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:19:51:1e:d1:c7:a2:b0:31:4e:c3:b6:25:6f:8d:3b:eb:1e:c1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Jul 21 00:05:45 2025 GMT Not After : Jul 24 09:46:45 2025 GMT Subject: CN=42EDD98089A9E4A4133B2EA65AA0007BAC59B007 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f1:56:fc:f3:7d:c7:cb:39:ae:64:0f:7f:ce: 9d:1e:ef:8a:cd:18:38:cc:8c:7f:79:3a:01:4e:2c: 8e:1f:9a:cc:68:6d:bf:12:82:61:3e:15:a7:01:e6: 28:b8:b9:0d:ea:fd:69:3c:1a:06:89:85:c9:8f:7f: 27:18:24:7e:cb:ee:b4:45:7d:ad:90:c8:61:f9:a8: 3c:2d:e8:6e:79:6b:b5:55:c2:cd:b1:79:33:a4:cf: 62:ca:eb:63:7b:8d:ec:6d:e5:5c:9c:45:5c:52:7a: 82:36:e5:88:e8:9c:23:f7:fe:fc:a4:17:7f:3f:4d: 02:d7:4e:c4:fe:e6:9c:80:8f:c5:0c:3a:dc:2e:18: 71:7a:b8:fa:8b:54:11:b3:dc:65:05:94:c9:a6:84: 38:5f:a2:1f:8e:1a:a8:a1:40:12:ae:89:a8:29:37: 33:9e:e5:66:b0:99:07:1f:0c:7c:93:b8:b4:05:e0: d9:91:dd:81:1b:b6:38:dd:2b:4a:56:6a:8e:15:a4: 8e:b1:db:eb:7f:8c:1b:c6:65:cd:29:20:19:32:57: f8:b5:d9:0c:2a:94:ab:e7:13:e0:23:d8:29:b7:b6: 6a:00:9f:0f:2a:05:4f:9b:8a:5b:2c:0c:ba:91:5c: 50:ab:ee:94:80:3f:cb:5d:eb:7a:e7:f0:33:99:56: 2c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:ED:D9:80:89:A9:E4:A4:13:3B:2E:A6:5A:A0:00:7B:AC:59:B0:07 X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:e4:1a:23:38:73:67:27:34:7b:38:d2:f4:14:de:db:33:7c: 1c:a2:44:e3:71:2e:48:1d:be:1c:32:9e:a1:1e:a5:a1:f4:19: ca:b9:22:7a:6f:cc:cc:ca:e3:51:08:37:bd:15:2b:1d:b1:d7: e2:b1:76:03:6b:82:83:28:53:18:c4:8a:bd:34:36:6b:3c:47: 6b:54:ef:b7:dd:ce:d1:b2:26:1e:d3:5f:70:8a:a6:45:d3:52: 33:47:f3:e4:79:39:b0:b8:ac:c7:08:3d:d9:e4:44:f5:cf:7b: a9:4a:8d:76:89:2b:08:7f:72:96:be:6d:f1:12:c5:0d:41:1a: 3f:b2:49:e8:42:85:2c:55:93:8a:a7:38:fd:ea:ac:24:a9:d3: 5f:f0:75:4d:32:5a:08:80:3c:5e:af:4f:cd:86:ee:a8:fc:de: ff:63:34:4f:68:13:5d:b4:47:f9:92:84:33:e4:89:d1:c1:dc: 1b:3a:d7:58:1f:cb:00:38:4a:bc:df:18:0f:06:f2:a6:db:d1: 5a:d8:ef:50:3b:36:21:b2:ce:98:6b:21:75:ab:6f:62:f9:13: 93:a0:f0:61:ce:9b:23:e1:d6:5e:be:28:e4:b9:67:16:67:40: ad:ae:c4:e0:85:7b:76:25:9c:63:b5:7e:22:e7:3a:79:32:b1: 6f:f3:90:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPBlRHtHHorAxTsO2JW+NO+sewXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNTA3MjEwMDA1NDVaFw0yNTA3MjQwOTQ2NDVaMDMxMTAvBgNV BAMTKDQyRUREOTgwODlBOUU0QTQxMzNCMkVBNjVBQTAwMDdCQUM1OUIwMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq8Vb8833HyzmuZA9/zp0e74rN GDjMjH95OgFOLI4fmsxobb8SgmE+FacB5ii4uQ3q/Wk8GgaJhcmPfycYJH7L7rRF fa2QyGH5qDwt6G55a7VVws2xeTOkz2LK62N7jext5VycRVxSeoI25YjonCP3/vyk F38/TQLXTsT+5pyAj8UMOtwuGHF6uPqLVBGz3GUFlMmmhDhfoh+OGqihQBKuiagp NzOe5WawmQcfDHyTuLQF4NmR3YEbtjjdK0pWao4VpI6x2+t/jBvGZc0pIBkyV/i1 2QwqlKvnE+Aj2Cm3tmoAnw8qBU+bilssDLqRXFCr7pSAP8td63rn8DOZViwjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQu3ZgImp5KQTOy6mWqAAe6xZsAcwHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzkGiM4c2cnNHs40vQU3tszfByiRONxLkgd vhwynqEepaH0Gcq5InpvzMzK41EIN70VKx2x1+KxdgNrgoMoUxjEir00Nms8R2tU 77fdztGyJh7TX3CKpkXTUjNH8+R5ObC4rMcIPdnkRPXPe6lKjXaJKwh/cpa+bfES xQ1BGj+ySehChSxVk4qnOP3qrCSp01/wdU0yWgiAPF6vT82G7qj83v9jNE9oE120 R/mShDPkidHB3Bs611gfywA4SrzfGA8G8qbb0VrY71A7NiGyzphrIXWrb2L5E5Og 8GHOmyPh1l6+KOS5ZxZnQK2uxOCFe3YlnGO1fiLnOnkysW/zkJI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:04 2025 by rpki-client