$ rpki-client -vvvf rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft File: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft (raw, json) Hash identifier: vBk7AlzRJ5wybt+MRGITQD1RwhKH9RzM3fB7csSwUis= Subject key identifier: BF:FC:AD:91:C9:51:3F:DA:D1:65:E4:B6:D8:6C:F7:91:C4:99:A4:BD Authority key identifier: 13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 Certificate issuer: /CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38 Certificate serial: 0C13065D530DD705A5C7CE47D86C1E61BB0C0FCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft Manifest number: EC Signing time: Sun 25 Oct 2026 14:39:55 +0000 Manifest this update: Sun 25 Oct 2026 14:34:55 +0000 Manifest next update: Mon 26 Oct 2026 15:07:55 +0000 Files and hashes: 1: 3131332e3139322e312e302f32342d3234203d3e20313532303630.roa (hash: jeO45G4cjQWLOJ3zrv9QzySKe/sGNsFGZNj2yoHSCWM=) 2: 3131332e3139322e302e302f32342d3234203d3e20313532303630.roa (hash: 0EkbgHKObrdTUBNawUOT3sTIwzdJX1zYj3Y5ETblK1o=) 3: 3131332e3139322e302e302f32332d3233203d3e20313532303630.roa (hash: XU8Cud2VRf6M0JkESJsAHgOHQmX+Y9rjUkFbsFEd38g=) 4: 13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl (hash: r30ILNRUCX8AavB2GhK75QlzJr/heQxwxCEkVNo/GEw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:13:06:5d:53:0d:d7:05:a5:c7:ce:47:d8:6c:1e:61:bb:0c:0f:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=13C1DB8AEDE021039FFAB84A79C8E02396DE5B38 Validity Not Before: Oct 25 14:34:55 2026 GMT Not After : Oct 26 15:07:55 2026 GMT Subject: CN=BFFCAD91C9513FDAD165E4B6D86CF791C499A4BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:60:e1:9c:4b:b5:b6:1b:a8:9b:c0:39:d8:c5: 29:81:56:24:a5:92:e4:dd:2e:0d:6f:24:db:8c:d0: 59:06:2b:53:0a:ab:12:27:e6:26:bc:24:3c:9e:31: 53:be:8a:58:1e:b1:f6:42:00:10:f5:d9:01:51:46: 85:94:fe:22:c3:37:bb:01:02:d8:03:80:ac:f0:79: 3e:50:cf:2e:9c:e1:73:b0:48:6e:62:35:a8:dc:da: 07:fb:71:d8:67:ad:40:34:22:8a:bc:4a:d8:bb:d4: df:9b:80:6f:66:f3:c4:70:68:4e:11:aa:cd:51:ce: e5:a1:c3:06:96:25:66:53:6f:51:19:04:bf:55:85: cb:2c:99:f5:fb:09:c1:79:45:41:2d:ad:12:5e:33: 07:c2:ba:fb:42:39:07:0b:33:54:de:c2:55:da:33: 59:9a:3a:bc:fb:58:b8:d0:e0:97:ca:cd:4d:53:9f: 1d:d0:9f:d3:c3:de:89:9a:78:dd:29:7a:d0:f6:7e: 82:c7:49:60:a0:9e:56:58:9a:0e:00:26:40:a7:ab: ef:4c:33:43:51:be:51:12:37:51:e4:88:4f:82:c6: 13:1c:29:44:ea:fc:a7:cc:30:fd:4b:3c:51:cc:f0: 7f:5e:3b:27:7b:da:9a:1a:a8:46:93:95:46:60:89: 60:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:FC:AD:91:C9:51:3F:DA:D1:65:E4:B6:D8:6C:F7:91:C4:99:A4:BD X509v3 Authority Key Identifier: keyid:13:C1:DB:8A:ED:E0:21:03:9F:FA:B8:4A:79:C8:E0:23:96:DE:5B:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7328b476-6224-4e01-b186-80bcec9bc0e3/0/13C1DB8AEDE021039FFAB84A79C8E02396DE5B38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:ca:b5:57:ff:a9:d9:9c:db:df:41:01:bb:37:37:0f:83:9d: fc:03:3b:ad:c6:42:bf:fc:21:7b:9e:69:2a:63:98:5b:03:9e: 78:45:f3:ec:72:a8:3c:84:f4:bc:30:a9:b7:6b:ca:c5:23:f2: b4:8a:45:a8:08:fa:4f:d7:16:b2:4c:5c:fd:7c:ce:18:2b:3d: 53:0e:b3:e3:ed:45:21:30:ed:a9:9c:dc:1e:f4:19:ed:80:74: 8d:20:f0:8d:3d:7b:2b:a1:c7:84:11:fa:8e:19:10:1b:ca:57: 79:94:d7:ae:f3:19:df:e3:18:c0:fe:50:f8:cc:0a:21:b0:86: cc:2a:e5:29:d7:07:aa:da:f4:a4:bb:a8:bd:cc:9a:0e:6d:05: f7:9e:1c:52:01:a7:83:1e:40:c6:ec:c9:56:69:f7:5e:0c:e8: 25:3d:db:1e:20:94:11:94:bd:f7:fa:e7:03:ec:cd:ef:41:98: 9c:22:a2:c7:df:3b:d1:c3:cd:c2:b1:38:07:e9:37:b9:1c:60: 61:9e:c6:af:39:2e:e9:e9:82:34:53:09:3a:79:9a:37:4a:58: f1:f3:32:e3:e2:fd:e8:80:9f:1f:de:ab:8c:db:1e:ac:2e:49: fa:74:12:96:b5:60:1a:b3:af:ea:01:60:29:7e:a7:4f:65:d6: 28:20:93:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBMGXVMN1wWlx85H2GweYbsMD8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUwMjM5 NkRFNUIzODAeFw0yNjEwMjUxNDM0NTVaFw0yNjEwMjYxNTA3NTVaMDMxMTAvBgNV BAMTKEJGRkNBRDkxQzk1MTNGREFEMTY1RTRCNkQ4NkNGNzkxQzQ5OUE0QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvYOGcS7W2G6ibwDnYxSmBViSl kuTdLg1vJNuM0FkGK1MKqxIn5ia8JDyeMVO+ilgesfZCABD12QFRRoWU/iLDN7sB AtgDgKzweT5Qzy6c4XOwSG5iNajc2gf7cdhnrUA0Ioq8Sti71N+bgG9m88RwaE4R qs1RzuWhwwaWJWZTb1EZBL9VhcssmfX7CcF5RUEtrRJeMwfCuvtCOQcLM1TewlXa M1maOrz7WLjQ4JfKzU1Tnx3Qn9PD3omaeN0petD2foLHSWCgnlZYmg4AJkCnq+9M M0NRvlESN1HkiE+CxhMcKUTq/KfMMP1LPFHM8H9eOyd72poaqEaTlUZgiWCfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv/ytkclRP9rRZeS22Gz3kcSZpL0wHwYDVR0j BBgwFoAUE8Hbiu3gIQOf+rhKecjgI5beWzgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMyOGI0NzYtNjIyNC00ZTAxLWIxODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFF REUwMjEwMzlGRkFCODRBNzlDOEUwMjM5NkRFNUIzOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xM0MxREI4QUVERTAyMTAzOUZGQUI4NEE3OUM4RTAyMzk2REU1 QjM4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMyOGI0NzYtNjIyNC00ZTAxLWIx ODYtODBiY2VjOWJjMGUzLzAvMTNDMURCOEFFREUwMjEwMzlGRkFCODRBNzlDOEUw MjM5NkRFNUIzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfKtVf/qdmc299BAbs3Nw+DnfwDO63GQr/8 IXueaSpjmFsDnnhF8+xyqDyE9LwwqbdrysUj8rSKRagI+k/XFrJMXP18zhgrPVMO s+PtRSEw7amc3B70Ge2AdI0g8I09eyuhx4QR+o4ZEBvKV3mU167zGd/jGMD+UPjM CiGwhswq5SnXB6ra9KS7qL3Mmg5tBfeeHFIBp4MeQMbsyVZp914M6CU92x4glBGU vff65wPsze9BmJwiosffO9HDzcKxOAfpN7kcYGGexq85LunpgjRTCTp5mjdKWPHz MuPi/eiAnx/eq4zbHqwuSfp0Epa1YBqzr+oBYCl+p09l1iggk5Q= -----END CERTIFICATE-----Generated at Sun Oct 25 19:50:12 2026 by rpki-client