$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft File: 13697C4A24DCE77089F778CD506D620711B4472B.mft (raw, json) Hash identifier: A5CfSHKC7kkuOYOG+YGyrsyZ7unHMN0YZuJNiQBLvHo= Subject key identifier: 2E:4E:A9:E9:22:10:DB:76:F2:41:E9:07:0B:D4:12:A6:7D:2A:EE:D7 Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B Certificate issuer: /CN=13697C4A24DCE77089F778CD506D620711B4472B Certificate serial: 26C3C789F1865E8FEB910BF79F8D82A93C2FC8F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft Manifest number: 03AA Signing time: Tue 24 Mar 2026 07:20:53 +0000 Manifest this update: Tue 24 Mar 2026 07:15:53 +0000 Manifest next update: Fri 27 Mar 2026 12:26:53 +0000 Files and hashes: 1: 3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (hash: cgQmKFRKJxdktyV9rczfIpoHQDdH6UPgKR9KvlttEAM=) 2: 3130332e3136312e3131372e302f32342d3234203d3e20313430333936.roa (hash: OaYN9F7Ro7W56q+ls2T1VHXeadTTjgnnYsVEGgZUhRE=) 3: 13697C4A24DCE77089F778CD506D620711B4472B.crl (hash: 6zwZYZE8moly24516SvqE5b6vxPBCQh7m9RgSGATOBM=) 4: 3130332e3136312e3131362e302f32342d3234203d3e203538333738.roa (hash: z8SiNmSQZoeivn4D0nJbpNuNEHST/FILH3X+hwxtGs8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:26:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:c3:c7:89:f1:86:5e:8f:eb:91:0b:f7:9f:8d:82:a9:3c:2f:c8:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B Validity Not Before: Mar 24 07:15:53 2026 GMT Not After : Mar 27 12:26:53 2026 GMT Subject: CN=2E4EA9E92210DB76F241E9070BD412A67D2AEED7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f4:1b:e4:74:7d:9e:60:c6:8f:2a:24:2e:71: d0:46:0e:86:f7:4a:f8:b2:c4:dd:53:8a:d6:b2:4a: ef:c1:a4:cb:64:3b:ff:8e:c6:bc:f4:dd:fd:c2:a7: 26:ef:5f:24:d1:cb:8f:f6:a2:37:82:d8:a5:07:b9: 54:6a:89:34:bc:9d:5d:a1:c5:c7:00:64:f9:45:68: 95:ff:d8:60:6f:9f:08:f8:12:b1:a5:28:88:57:03: 3a:ae:da:b9:76:50:8b:26:0f:c4:fe:58:80:19:8b: 9a:02:ba:27:40:2c:0a:b1:e4:da:05:b9:72:68:e4: d0:64:df:88:af:69:ba:3d:18:88:df:05:13:1a:d5: d1:b0:2e:4b:3b:92:89:4a:9a:79:5a:53:20:17:61: 81:ab:b6:34:38:e6:28:c8:8f:02:d8:da:1f:69:80: 07:36:ee:f1:03:7c:30:82:81:00:61:ba:8a:28:6e: 77:2e:e7:6f:45:6f:f1:f1:b8:a3:4d:14:4d:42:4b: 53:0c:9f:59:74:4a:cd:91:cc:32:a6:93:1d:66:cf: ed:bd:0b:b2:87:61:92:72:13:59:c5:40:7c:8a:ce: 3a:b3:17:51:2d:d7:ee:23:91:54:98:ed:72:0c:aa: 4b:70:5f:de:4b:d3:ac:cb:30:12:3d:36:8c:2b:2f: e7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:4E:A9:E9:22:10:DB:76:F2:41:E9:07:0B:D4:12:A6:7D:2A:EE:D7 X509v3 Authority Key Identifier: keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:32:d1:1a:bb:e2:58:34:73:11:7d:e6:bc:55:24:b2:b0:42: ea:85:1c:a9:f0:6e:30:01:ad:63:47:f9:ae:c3:b7:44:dc:14: 0f:1a:e2:3d:2e:2b:b5:52:1a:69:d3:5a:f2:4e:57:d4:3c:03: c8:54:98:be:85:72:e6:d8:0b:a8:2c:43:6b:c7:f6:e4:5b:50: a4:9e:e2:78:ff:d8:bb:75:81:8d:c8:f1:f4:88:4e:9e:ed:9d: c2:af:48:42:fa:76:d3:b8:27:54:89:d5:80:3b:c5:cc:24:74: c6:d1:3f:40:ce:e4:0c:a8:4c:9e:1c:74:cc:fa:51:37:e5:e3: bc:bc:e7:62:1b:39:d4:bd:75:77:df:f1:d2:8b:16:00:ba:36: b8:68:42:60:d5:3e:b6:e1:63:3a:15:fb:64:a5:96:69:5e:f7: bb:5c:a2:c1:39:6b:c5:84:2b:a2:34:b9:6b:a3:b3:5a:03:f4: b2:f9:d2:e0:7e:70:5d:2d:af:d4:65:c1:9b:a2:1a:cb:0b:ea: 93:89:7d:c4:a5:bb:67:91:76:46:44:1b:50:62:f4:e5:64:64: 50:27:bf:2b:45:1e:a6:3a:19:63:d8:9d:0c:d2:bd:a8:06:df: 17:07:88:73:81:d2:91:de:e3:5f:d1:bd:51:ee:62:a1:a3:16: 65:d7:71:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsPHifGGXo/rkQv3n42CqTwvyPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx MUI0NDcyQjAeFw0yNjAzMjQwNzE1NTNaFw0yNjAzMjcxMjI2NTNaMDMxMTAvBgNV BAMTKDJFNEVBOUU5MjIxMERCNzZGMjQxRTkwNzBCRDQxMkE2N0QyQUVFRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9BvkdH2eYMaPKiQucdBGDob3 SviyxN1TitaySu/BpMtkO/+Oxrz03f3CpybvXyTRy4/2ojeC2KUHuVRqiTS8nV2h xccAZPlFaJX/2GBvnwj4ErGlKIhXAzqu2rl2UIsmD8T+WIAZi5oCuidALAqx5NoF uXJo5NBk34ivabo9GIjfBRMa1dGwLks7kolKmnlaUyAXYYGrtjQ45ijIjwLY2h9p gAc27vEDfDCCgQBhuooobncu529Fb/HxuKNNFE1CS1MMn1l0Ss2RzDKmkx1mz+29 C7KHYZJyE1nFQHyKzjqzF1Et1+4jkVSY7XIMqktwX95L06zLMBI9NowrL+epAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULk6p6SIQ23byQekHC9QSpn0q7tcwHwYDVR0j BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0 RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0 NDcyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjczNTA3ZjMtZjhjMC00MTBiLWIx OWUtNTdlNDhiZjMyMzA1LzAvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYy MDcxMUI0NDcyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4y0Rq74lg0cxF95rxVJLKwQuqFHKnwbjAB rWNH+a7Dt0TcFA8a4j0uK7VSGmnTWvJOV9Q8A8hUmL6FcubYC6gsQ2vH9uRbUKSe 4nj/2Lt1gY3I8fSITp7tncKvSEL6dtO4J1SJ1YA7xcwkdMbRP0DO5AyoTJ4cdMz6 UTfl47y852IbOdS9dXff8dKLFgC6NrhoQmDVPrbhYzoV+2Sllmle97tcosE5a8WE K6I0uWujs1oD9LL50uB+cF0tr9RlwZuiGssL6pOJfcSlu2eRdkZEG1Bi9OVkZFAn vytFHqY6GWPYnQzSvagG3xcHiHOB0pHe41/RvVHuYqGjFmXXcas= -----END CERTIFICATE-----Generated at Wed Mar 25 04:27:24 2026 by rpki-client