$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: Dq7relfEHfR5pyvr3mmiHRxckNI6WUEJGuBxGmHLY5E= Subject key identifier: 9C:48:81:70:22:60:4C:32:60:2B:F3:28:46:7C:20:C2:93:40:65:D8 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 0891E1E8020F616B04C6AB58E71D5A5AE6221D07 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: CE Signing time: Sun 01 Mar 2026 06:45:32 +0000 Manifest this update: Sun 01 Mar 2026 06:40:32 +0000 Manifest next update: Wed 04 Mar 2026 11:08:32 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: QfBAAI9BjukYztSABl+zSeEiVWwAWywHDHNHa2J+yWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:08:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:91:e1:e8:02:0f:61:6b:04:c6:ab:58:e7:1d:5a:5a:e6:22:1d:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Mar 1 06:40:32 2026 GMT Not After : Mar 4 11:08:32 2026 GMT Subject: CN=9C48817022604C32602BF328467C20C2934065D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a8:7d:f6:c4:51:10:cc:46:ec:5e:7f:a6:a2: 06:c8:9d:96:1b:a2:8e:71:8a:9e:5b:c6:08:dc:8b: 91:41:5b:f0:a4:95:5f:c4:31:05:77:e5:e7:61:6f: 5f:b0:75:ed:2c:37:11:aa:d1:ac:42:12:f2:3e:c2: d2:e2:7a:07:14:ac:a5:36:ad:4c:65:da:62:61:3c: f2:e2:93:b5:06:38:eb:b7:84:ab:45:d9:63:01:66: 04:d9:1b:2b:41:b6:0f:1d:11:97:a3:08:51:c4:c7: 71:ad:42:52:4d:8a:58:45:71:2e:c7:f7:97:ba:93: e0:d6:cf:a8:46:a5:b1:03:02:79:93:b7:d3:84:2c: f6:b5:31:e9:dc:e8:32:0f:38:91:b1:b1:85:81:33: f0:67:4f:8d:a7:d1:3a:c0:7d:7e:d9:62:c8:bf:e6: 36:46:76:b0:09:45:ac:9a:00:3f:af:12:70:45:47: ea:72:a8:62:95:a1:d4:6c:c6:c7:e0:cb:e7:a6:86: e5:07:dd:2b:89:1e:6b:ea:e5:9d:45:6c:0b:dc:6d: 9e:d9:f5:ea:e5:61:52:ed:fe:af:32:96:e3:71:c4: ab:86:09:c1:83:9d:27:62:51:dc:98:6c:ea:9b:30: 9d:c1:dd:cf:dc:61:eb:c2:e3:61:59:c3:fb:09:2d: bb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:48:81:70:22:60:4C:32:60:2B:F3:28:46:7C:20:C2:93:40:65:D8 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f5:76:9c:0f:ae:9d:0e:4c:ef:56:2e:f2:dd:24:39:20:c7: 01:81:9b:11:e6:1d:4a:5d:dc:c0:cd:e2:84:80:47:fb:7e:6b: 75:e3:55:27:4e:19:57:4c:b2:42:e5:33:13:0f:ea:d5:0c:de: 64:cb:2b:9b:7c:31:92:34:79:cf:c5:59:fb:4f:d6:52:a8:fb: 3d:05:b0:56:13:88:27:3b:f1:d1:68:fc:39:38:71:74:05:92: ef:ec:4e:1d:4f:8a:1a:83:e4:68:86:ad:47:85:e7:9d:c3:f9: fe:b2:8c:0f:2d:e1:a7:0e:9d:11:be:0a:85:d3:be:b5:97:b3: c9:33:fd:11:de:04:0e:09:7d:59:16:53:6a:36:74:de:cf:cb: 52:97:b0:ae:5f:1d:35:af:ff:f8:0f:b7:d9:a3:6c:08:3b:64: 99:ef:d7:37:a7:62:6a:9a:db:75:f2:d2:f7:f7:fd:83:9c:84: 8f:fc:a9:32:ac:5e:03:d9:55:b0:ed:e6:3f:37:54:88:c9:8f: 87:a4:70:3c:13:7b:fe:a8:50:0d:95:62:c8:df:2c:f1:db:8b: 0e:f5:f7:99:89:fb:dd:38:21:22:c1:d3:81:1c:46:bc:12:fc: 3d:c5:a4:4e:2c:7c:58:61:98:7e:c1:8a:8c:71:20:64:28:6e: d6:b6:b1:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJHh6AIPYWsExqtY5x1aWuYiHQcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNjAzMDEwNjQwMzJaFw0yNjAzMDQxMTA4MzJaMDMxMTAvBgNV BAMTKDlDNDg4MTcwMjI2MDRDMzI2MDJCRjMyODQ2N0MyMEMyOTM0MDY1RDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRqH32xFEQzEbsXn+mogbInZYb oo5xip5bxgjci5FBW/CklV/EMQV35edhb1+wde0sNxGq0axCEvI+wtLiegcUrKU2 rUxl2mJhPPLik7UGOOu3hKtF2WMBZgTZGytBtg8dEZejCFHEx3GtQlJNilhFcS7H 95e6k+DWz6hGpbEDAnmTt9OELPa1Menc6DIPOJGxsYWBM/BnT42n0TrAfX7ZYsi/ 5jZGdrAJRayaAD+vEnBFR+pyqGKVodRsxsfgy+emhuUH3SuJHmvq5Z1FbAvcbZ7Z 9erlYVLt/q8yluNxxKuGCcGDnSdiUdyYbOqbMJ3B3c/cYevC42FZw/sJLbuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEiBcCJgTDJgK/MoRnwgwpNAZdgwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT1dpwPrp0OTO9WLvLdJDkgxwGBmxHmHUpd 3MDN4oSAR/t+a3XjVSdOGVdMskLlMxMP6tUM3mTLK5t8MZI0ec/FWftP1lKo+z0F sFYTiCc78dFo/Dk4cXQFku/sTh1PihqD5GiGrUeF553D+f6yjA8t4acOnRG+CoXT vrWXs8kz/RHeBA4JfVkWU2o2dN7Py1KXsK5fHTWv//gPt9mjbAg7ZJnv1zenYmqa 23Xy0vf3/YOchI/8qTKsXgPZVbDt5j83VIjJj4ekcDwTe/6oUA2VYsjfLPHbiw71 95mJ+904ISLB04EcRrwS/D3FpE4sfFhhmH7BioxxIGQobta2scc= -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:42 2026 by rpki-client