$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft File: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft (raw, json) Hash identifier: J0ermnkwnuahFqOEve7mPc6xioiEgjRvsoYdJkqPnE4= Subject key identifier: 68:C5:83:C8:8C:00:83:B7:E4:9B:47:37:A6:26:0A:E7:4C:95:82:C2 Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 Certificate issuer: /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Certificate serial: 611AE0DBB67E5D9320986BB3E4487564105C0B76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft Manifest number: 01C1 Signing time: Sat 07 Jun 2025 00:11:15 +0000 Manifest this update: Sat 07 Jun 2025 00:06:15 +0000 Manifest next update: Tue 10 Jun 2025 10:16:15 +0000 Files and hashes: 1: 13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl (hash: SMFHeR6tnWZwhoYOwTV//M6ySzt+9G6fUvagOWtqXV0=) 2: 3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (hash: P5RVLm4lr2ZaUNe4nmqoH+fJdUlcaDfKG4sRVXp9cBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 10:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:1a:e0:db:b6:7e:5d:93:20:98:6b:b3:e4:48:75:64:10:5c:0b:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479 Validity Not Before: Jun 7 00:06:15 2025 GMT Not After : Jun 10 10:16:15 2025 GMT Subject: CN=68C583C88C0083B7E49B4737A6260AE74C9582C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4e:1e:99:59:eb:cc:28:67:5e:65:b3:46:c9: 43:2d:4b:39:a6:5b:52:ae:3f:29:3b:7f:69:b0:55: bc:68:58:ec:59:b4:d9:67:89:4f:83:e3:01:df:2c: e4:5c:ff:80:c6:65:a6:4f:9a:df:23:5f:7a:8b:89: aa:6a:83:fd:74:9b:7c:33:58:0a:50:9f:72:c0:d5: ae:84:8a:29:7a:6d:ce:ca:72:00:25:12:69:fb:25: b1:f0:2b:eb:03:ad:74:7d:9a:63:b4:4a:72:6b:2c: 2b:5e:27:b0:d9:9c:aa:68:13:01:cf:64:d4:65:82: a3:47:16:c4:9e:5f:cc:f9:76:20:c1:07:8c:95:7f: 19:e7:1b:c4:c4:74:26:7c:a8:45:17:f6:34:ef:28: 4a:2d:37:5c:30:77:ac:d4:f3:aa:a2:54:87:e5:0e: 1a:d9:3d:44:08:60:20:e1:90:5d:90:92:bb:82:cb: 9c:61:c4:5d:ba:bb:af:b0:f5:ef:2a:b7:d8:85:c6: 35:06:62:32:a7:b4:43:23:de:df:dd:6d:7a:c1:c3: 29:6d:e7:9e:b8:96:3c:ba:f7:77:2d:4a:12:6c:78: 1f:a1:ce:10:b8:63:73:8d:a1:28:09:89:56:80:6d: 7e:25:0b:59:9f:1f:9b:72:0d:c3:17:38:52:4a:31: 4f:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:C5:83:C8:8C:00:83:B7:E4:9B:47:37:A6:26:0A:E7:4C:95:82:C2 X509v3 Authority Key Identifier: keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:a1:7a:cf:f5:0e:a6:85:2a:da:a7:92:c3:03:9d:46:82:71: ec:fd:80:f0:17:19:a5:c5:2d:0c:e2:55:c0:c4:79:b1:f4:56: 13:7e:fe:ec:fb:3a:db:50:f0:b9:5d:46:b6:bc:b0:41:a7:07: 2e:61:b4:f9:e3:04:0d:21:02:43:6e:59:55:51:cb:56:f0:be: 9d:c5:98:71:c8:73:83:0c:b8:2a:75:b3:11:12:51:a2:a2:a9: eb:9b:65:c7:33:00:ac:3f:bb:b8:d4:26:48:bc:f6:77:67:d4: 0a:92:0d:4e:5e:8e:43:71:c2:7a:62:70:cf:e1:ec:0f:cd:ab: 36:90:7e:90:1e:e0:4f:b0:bc:53:64:39:90:0f:f9:79:96:ca: bf:c8:49:05:a6:49:71:4d:13:b8:fd:a4:d0:4b:ae:aa:26:5c: 42:69:0f:86:09:9a:cd:a6:87:8b:6a:d5:8f:ae:20:04:97:99: 50:20:a8:89:9a:69:a0:10:d6:16:50:11:00:c0:82:f3:30:30: ba:13:dc:f0:1a:72:58:96:69:fe:8e:8e:d8:29:c4:b1:cb:3f: 12:f9:eb:40:0b:7c:19:89:59:6a:93:1a:b9:03:37:f9:e2:c8: bd:3d:cc:01:cd:1f:2c:9d:aa:8c:4f:76:16:cc:80:13:7a:aa: c5:b2:56:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYRrg27Z+XZMgmGuz5Eh1ZBBcC3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF NUE1QTQ3OTAeFw0yNTA2MDcwMDA2MTVaFw0yNTA2MTAxMDE2MTVaMDMxMTAvBgNV BAMTKDY4QzU4M0M4OEMwMDgzQjdFNDlCNDczN0E2MjYwQUU3NEM5NTgyQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5Th6ZWevMKGdeZbNGyUMtSzmm W1KuPyk7f2mwVbxoWOxZtNlniU+D4wHfLORc/4DGZaZPmt8jX3qLiapqg/10m3wz WApQn3LA1a6Eiil6bc7KcgAlEmn7JbHwK+sDrXR9mmO0SnJrLCteJ7DZnKpoEwHP ZNRlgqNHFsSeX8z5diDBB4yVfxnnG8TEdCZ8qEUX9jTvKEotN1wwd6zU86qiVIfl DhrZPUQIYCDhkF2QkruCy5xhxF26u6+w9e8qt9iFxjUGYjKntEMj3t/dbXrBwylt 5564ljy693ctShJseB+hzhC4Y3ONoSgJiVaAbX4lC1mfH5tyDcMXOFJKMU8nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaMWDyIwAg7fkm0c3piYK50yVgsIwHwYDVR0j BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1 QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1 QTQ3OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVjMzIxZWItMTVmOC00NjQ2LWIw NTMtZjE5OWQ2ZmE3ZjUzLzAvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcx QzVFNUE1QTQ3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIahes/1DqaFKtqnksMDnUaCcez9gPAXGaXF LQziVcDEebH0VhN+/uz7OttQ8LldRra8sEGnBy5htPnjBA0hAkNuWVVRy1bwvp3F mHHIc4MMuCp1sxESUaKiqeubZcczAKw/u7jUJki89ndn1AqSDU5ejkNxwnpicM/h 7A/NqzaQfpAe4E+wvFNkOZAP+XmWyr/ISQWmSXFNE7j9pNBLrqomXEJpD4YJms2m h4tq1Y+uIASXmVAgqImaaaAQ1hZQEQDAgvMwMLoT3PAacliWaf6OjtgpxLHLPxL5 60ALfBmJWWqTGrkDN/niyL09zAHNHyydqoxPdhbMgBN6qsWyVk4= -----END CERTIFICATE-----Generated at Sun Jun 8 23:19:54 2025 by rpki-client