$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: 5IrzC8t2OEinoRXsG1BPORg2bh2GtgAcnevi35sHyYM= Subject key identifier: C5:D8:21:32:AA:0A:73:B5:50:17:0C:92:72:CF:E3:6E:35:59:34:FC Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 4AA69AC0D8DB1B61CE7231E854834CAECA169E24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 5B Signing time: Mon 16 Jun 2025 09:12:19 +0000 Manifest this update: Mon 16 Jun 2025 09:07:19 +0000 Manifest next update: Thu 19 Jun 2025 18:49:19 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: 36OfmMTcChKTW2411awpYf9Iuxd5+34f9DBJq+p9mXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 18:49:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:a6:9a:c0:d8:db:1b:61:ce:72:31:e8:54:83:4c:ae:ca:16:9e:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Jun 16 09:07:19 2025 GMT Not After : Jun 19 18:49:19 2025 GMT Subject: CN=C5D82132AA0A73B550170C9272CFE36E355934FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b6:6c:13:59:66:09:87:b4:fa:b2:ee:17:f8: 3b:60:ed:3a:38:49:de:b3:ac:87:b9:70:86:fb:0d: ed:cf:5c:cb:31:f6:1d:d3:3a:42:bb:41:30:8e:9e: fc:2a:1c:84:a8:44:07:4e:b8:ee:5d:93:3b:90:f5: 67:0d:21:94:75:04:10:12:75:f6:d2:a0:ff:89:c0: 5a:b7:d1:2b:34:e6:7b:77:dc:d2:cc:aa:b6:59:ba: c2:08:f5:97:e9:4c:17:62:23:2c:3f:8e:e5:a0:6d: 65:6e:1b:04:cb:3f:6e:5d:4f:8d:91:50:39:57:a0: 1b:fe:8b:b5:29:19:65:d6:5e:af:53:ad:ab:bc:30: 30:fb:67:55:b7:fe:a0:fc:09:eb:da:a7:d6:37:8f: 48:fe:a8:f1:1a:36:74:83:87:8b:35:a2:9d:84:af: 93:11:dd:06:e4:39:96:7f:e8:1d:87:ba:9d:b3:3b: 84:23:b6:8a:f9:2a:c0:9d:92:2e:ac:2f:08:73:12: 85:3c:db:4d:90:fb:7b:e0:ce:42:2f:51:20:32:75: 2c:0c:14:bb:f3:b6:ed:62:b8:82:1d:73:45:ad:b3: 5a:d8:8c:cf:48:96:d9:1b:ee:77:f3:0f:80:04:e7: 6f:c5:f4:02:be:f1:7e:9f:32:b1:21:ec:d2:0b:f9: 3d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:D8:21:32:AA:0A:73:B5:50:17:0C:92:72:CF:E3:6E:35:59:34:FC X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:89:9e:20:bf:a6:69:d5:44:77:78:3f:d4:b4:9d:b5:99:00: ca:93:22:9e:96:ac:5d:51:a2:5a:8f:b2:f9:04:c6:b4:3d:5a: 1e:88:c2:a4:4b:85:7f:ff:73:31:f8:82:1e:6a:e0:73:39:87: 52:dd:10:1b:da:da:fb:a6:bf:8b:62:14:4c:21:04:1b:bd:1c: 7b:77:92:29:6b:14:76:bd:4b:b1:77:a9:0a:ea:47:b6:22:ee: 92:7e:bb:29:da:9b:b6:3a:82:b3:f3:87:42:cc:be:b9:18:f7: d5:a4:54:00:b8:18:de:02:fb:49:dc:34:af:0f:ca:7a:a9:86: fe:90:c2:9b:75:98:32:b9:d3:28:13:18:de:c2:44:47:f4:44: c4:7f:47:5b:7f:5c:d3:b6:d0:ed:eb:d7:d7:bf:6d:eb:7f:38: b0:70:7d:14:59:15:1f:56:b2:ab:c2:35:45:6b:58:53:22:88: 70:e9:15:cc:55:8e:4e:86:41:78:90:72:ff:a2:46:b6:7c:d2: 79:9f:7f:84:41:82:db:88:a5:7f:84:c1:f2:3f:f1:7f:81:ed: c4:58:62:69:0b:7e:70:46:58:47:6a:cf:87:79:4f:01:d5:f2: 7a:14:2d:69:41:71:a0:40:b2:32:2b:df:d1:ac:0b:81:5c:ce: ae:fa:a3:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSqaawNjbG2HOcjHoVINMrsoWniQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA2MTYwOTA3MTlaFw0yNTA2MTkxODQ5MTlaMDMxMTAvBgNV BAMTKEM1RDgyMTMyQUEwQTczQjU1MDE3MEM5MjcyQ0ZFMzZFMzU1OTM0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLtmwTWWYJh7T6su4X+Dtg7To4 Sd6zrIe5cIb7De3PXMsx9h3TOkK7QTCOnvwqHISoRAdOuO5dkzuQ9WcNIZR1BBAS dfbSoP+JwFq30Ss05nt33NLMqrZZusII9ZfpTBdiIyw/juWgbWVuGwTLP25dT42R UDlXoBv+i7UpGWXWXq9Trau8MDD7Z1W3/qD8Cevap9Y3j0j+qPEaNnSDh4s1op2E r5MR3QbkOZZ/6B2Hup2zO4Qjtor5KsCdki6sLwhzEoU8202Q+3vgzkIvUSAydSwM FLvztu1iuIIdc0Wts1rYjM9Iltkb7nfzD4AE52/F9AK+8X6fMrEh7NIL+T1VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxdghMqoKc7VQFwyScs/jbjVZNPwwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIOJniC/pmnVRHd4P9S0nbWZAMqTIp6WrF1R olqPsvkExrQ9Wh6IwqRLhX//czH4gh5q4HM5h1LdEBva2vumv4tiFEwhBBu9HHt3 kilrFHa9S7F3qQrqR7Yi7pJ+uynam7Y6grPzh0LMvrkY99WkVAC4GN4C+0ncNK8P ynqphv6Qwpt1mDK50ygTGN7CREf0RMR/R1t/XNO20O3r19e/bet/OLBwfRRZFR9W sqvCNUVrWFMiiHDpFcxVjk6GQXiQcv+iRrZ80nmff4RBgtuIpX+EwfI/8X+B7cRY YmkLfnBGWEdqz4d5TwHV8noULWlBcaBAsjIr39GsC4Fczq76o5o= -----END CERTIFICATE-----Generated at Tue Jun 17 20:54:43 2025 by rpki-client