$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: mkMT6sgW1aJ2KeI4DKFLj4/QeVD6jJUaZ2lT/hzS1E0= Subject key identifier: 33:FE:74:ED:8D:9B:06:FF:D5:AB:31:1C:76:2A:F1:E9:2E:1C:2E:DC Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 5001665193B4AF1A639033F14E31AC8DFE25A7DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 9A Signing time: Tue 04 Nov 2025 15:12:25 +0000 Manifest this update: Tue 04 Nov 2025 15:07:25 +0000 Manifest next update: Sat 08 Nov 2025 00:39:25 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: C9Wk94unCH60Nlal5vqGERBCXQ/39RD9gpSMYnKiUvg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 13:50:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:01:66:51:93:b4:af:1a:63:90:33:f1:4e:31:ac:8d:fe:25:a7:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Nov 4 15:07:25 2025 GMT Not After : Nov 8 00:39:25 2025 GMT Subject: CN=33FE74ED8D9B06FFD5AB311C762AF1E92E1C2EDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:71:f3:3e:34:c6:59:a3:43:46:45:2e:37:ef: 62:cf:01:58:4a:ad:c1:ee:57:67:8e:11:b4:77:41: 4b:76:de:e2:da:c8:5e:5a:ae:2f:cf:8a:b6:75:6b: 4b:1e:82:b4:84:74:ce:15:bb:d7:fa:82:0a:13:23: ea:37:e4:e0:e6:61:61:e2:0b:7d:50:b1:f0:cc:5e: 53:ef:80:16:6e:d6:4b:af:9b:80:09:14:c6:a3:e3: dc:d2:a9:d1:0b:69:6f:c3:e8:e2:5a:1a:b3:8f:c7: 0c:cf:04:d0:9b:fe:8e:a0:42:3c:69:16:76:16:e4: 8b:59:e8:9f:de:db:33:31:5b:1d:20:de:32:ce:f5: 47:0f:28:d7:c4:9d:cc:9d:e2:b3:96:ec:61:e8:53: 29:54:c5:68:b3:49:70:95:0a:e5:24:c8:59:3e:5f: 4b:46:9a:81:c1:d0:b2:3d:01:7c:c7:78:76:2b:b9: 6c:62:a0:77:4f:94:f0:d8:4d:ab:bb:d1:ff:da:d1: 5e:04:aa:60:35:d3:ac:06:7d:ca:36:28:b2:6e:df: 21:ad:d2:dd:5d:62:08:1d:e5:6a:6a:6c:ae:95:9d: ee:74:4e:41:6e:14:db:23:69:2c:23:e1:8b:60:94: 5c:62:01:06:6b:d4:33:6b:76:58:e8:f1:51:55:36: a5:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:FE:74:ED:8D:9B:06:FF:D5:AB:31:1C:76:2A:F1:E9:2E:1C:2E:DC X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:06:cc:77:8e:25:ff:5b:ff:03:5e:6f:cf:7e:57:dd:ff:7c: 70:7c:f0:df:0a:77:2a:ad:84:c6:e8:f5:95:82:fd:30:40:a7: 67:5e:41:57:0d:1c:8c:b5:e5:c3:fb:a6:65:fa:b5:75:f0:0b: 85:e3:ff:c2:3c:59:bb:1c:38:67:df:7f:58:ea:7b:50:f5:d5: 01:8d:1d:22:e3:87:7a:10:17:74:e7:02:68:6b:67:e2:09:02: 09:12:19:1e:58:64:aa:0d:db:fa:f1:d1:14:76:e5:ea:ba:de: 99:3a:d9:ac:53:e6:02:3c:66:2f:60:a5:eb:a0:f8:ef:5f:a8: 03:d4:cc:cd:15:f7:d3:47:2f:18:f8:05:34:9f:7e:9b:34:71: 2a:43:f4:a1:4f:dc:f6:27:a6:10:27:a3:72:ef:9b:d7:6c:66: f9:72:3b:c1:4f:1c:d8:7f:e3:99:9c:70:ec:26:97:89:51:77: 31:94:05:40:e6:06:bc:6b:29:77:1a:92:10:66:52:fa:68:5b: d0:59:fa:18:9a:07:1a:0e:2a:49:73:0d:86:0f:2d:99:95:84: b0:73:30:ca:17:3d:e2:25:ab:92:f0:2b:3c:9d:3b:24:ad:9a: 09:73:c5:36:f7:b2:fd:07:0e:ca:e3:15:af:0f:39:9a:c6:60: 62:f0:48:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUAFmUZO0rxpjkDPxTjGsjf4lp9swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTExMDQxNTA3MjVaFw0yNTExMDgwMDM5MjVaMDMxMTAvBgNV BAMTKDMzRkU3NEVEOEQ5QjA2RkZENUFCMzExQzc2MkFGMUU5MkUxQzJFREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDycfM+NMZZo0NGRS4372LPAVhK rcHuV2eOEbR3QUt23uLayF5ari/PirZ1a0segrSEdM4Vu9f6ggoTI+o35ODmYWHi C31QsfDMXlPvgBZu1kuvm4AJFMaj49zSqdELaW/D6OJaGrOPxwzPBNCb/o6gQjxp FnYW5ItZ6J/e2zMxWx0g3jLO9UcPKNfEncyd4rOW7GHoUylUxWizSXCVCuUkyFk+ X0tGmoHB0LI9AXzHeHYruWxioHdPlPDYTau70f/a0V4EqmA106wGfco2KLJu3yGt 0t1dYggd5WpqbK6Vne50TkFuFNsjaSwj4YtglFxiAQZr1DNrdljo8VFVNqWZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM/507Y2bBv/VqzEcdirx6S4cLtwwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFwGzHeOJf9b/wNeb89+V93/fHB88N8Kdyqt hMbo9ZWC/TBAp2deQVcNHIy15cP7pmX6tXXwC4Xj/8I8WbscOGfff1jqe1D11QGN HSLjh3oQF3TnAmhrZ+IJAgkSGR5YZKoN2/rx0RR25eq63pk62axT5gI8Zi9gpeug +O9fqAPUzM0V99NHLxj4BTSffps0cSpD9KFP3PYnphAno3Lvm9dsZvlyO8FPHNh/ 45mccOwml4lRdzGUBUDmBrxrKXcakhBmUvpoW9BZ+hiaBxoOKklzDYYPLZmVhLBz MMoXPeIlq5LwKzydOyStmglzxTb3sv0HDsrjFa8POZrGYGLwSL4= -----END CERTIFICATE-----Generated at Tue Nov 4 19:08:16 2025 by rpki-client