$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: ynejh4YBHajdk1Z5uLkvxvCjRa54iaMsfbkV3YBNo8A= Subject key identifier: 81:90:85:36:2B:B7:A4:84:77:E0:B0:C7:AF:D9:D7:8A:69:E6:33:54 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 3AE7AB8190B31265935011C0FA9510926D90777F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: E3 Signing time: Fri 17 Apr 2026 15:52:41 +0000 Manifest this update: Fri 17 Apr 2026 15:47:41 +0000 Manifest next update: Tue 21 Apr 2026 03:46:41 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: mkz1artzwDJRHTWt03N+TvnnmT6TLqO2kIqygffWmrM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 03:46:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:e7:ab:81:90:b3:12:65:93:50:11:c0:fa:95:10:92:6d:90:77:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Apr 17 15:47:41 2026 GMT Not After : Apr 21 03:46:41 2026 GMT Subject: CN=819085362BB7A48477E0B0C7AFD9D78A69E63354 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:54:3b:c0:dc:a6:d9:95:96:ee:ff:d9:ee:63: c7:5b:e2:51:78:5d:20:e5:d5:77:5c:92:4a:cd:18: 9e:42:46:e1:5e:0b:c0:11:98:a1:e0:bc:c8:3d:ac: d5:b1:f5:9e:b8:39:c3:6b:92:ca:23:cd:48:0c:17: 82:16:5a:76:72:49:f0:94:4f:cb:c0:be:53:5c:85: 56:1d:f1:59:43:13:cf:33:f6:4c:fb:45:1e:b1:a2: dc:a4:05:5d:4e:2d:53:31:ff:a7:6d:74:43:0d:38: 80:da:56:b1:61:29:6e:55:83:dc:72:a2:33:16:44: e0:67:f6:13:7a:2e:ee:e1:6f:12:14:b0:ee:9d:ee: 82:97:84:d1:dc:68:b7:e1:79:61:4e:2b:96:f2:2a: e3:73:87:4b:72:6a:bb:81:b7:79:aa:48:dd:40:7b: 03:36:13:38:01:cc:d6:14:2e:f5:1b:98:6a:11:ef: 07:fb:79:24:6b:91:38:ef:35:55:e4:ec:3e:f0:9d: 67:c0:36:fc:ae:33:95:17:44:1f:d0:18:ec:bb:b4: dd:f6:ba:bd:b1:fd:94:55:60:32:d4:48:f4:87:e5: 7d:3b:d5:0c:6a:00:2f:f5:58:2b:df:dc:55:2e:bb: 96:24:ed:61:8d:6f:64:74:52:bb:ab:15:57:c4:9c: cf:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:90:85:36:2B:B7:A4:84:77:E0:B0:C7:AF:D9:D7:8A:69:E6:33:54 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:0b:2a:f1:7e:25:d2:4e:ab:a7:f5:de:7d:d9:f1:84:4d:44: 72:d4:77:4f:b0:2c:ad:2a:84:89:e4:c3:b1:d5:09:88:aa:4e: cd:64:30:4c:59:5f:75:17:77:28:f9:2a:27:67:ba:c6:48:9e: eb:48:f3:9c:d8:24:52:5a:ea:2e:e5:7e:5c:0e:93:bc:59:12: 38:82:c4:22:46:0c:dc:52:21:d0:2c:0b:77:c2:bc:ed:9b:ae: c0:18:6c:ae:35:ad:9e:90:4d:65:f2:fb:1c:d2:8a:c5:f9:da: e7:59:58:21:2e:d5:7b:d2:d0:da:06:77:13:58:9a:a2:5f:50: 02:8f:14:c3:b1:75:99:d2:69:3f:18:e4:4f:34:f0:86:fd:4e: 44:67:af:06:32:16:c5:3a:7a:d4:8e:d9:f9:cb:94:a8:b2:a5: 3e:b2:b8:c2:3c:5b:0e:bf:de:ad:c3:db:d2:f5:5d:76:cb:ff: 29:31:02:3a:5d:01:25:8d:fe:bc:70:b9:62:9d:ec:a5:2a:cf: fb:4f:39:b6:26:13:07:da:a4:3a:0f:e9:b7:fb:22:ca:b9:3a: 5c:8d:82:22:39:01:1c:c2:10:d3:e8:0d:d8:2f:eb:4e:91:6a: c8:88:93:79:dd:c3:f4:f8:6c:69:ee:1e:a1:e9:78:f3:32:c2: 29:66:fe:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOuergZCzEmWTUBHA+pUQkm2Qd38wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNjA0MTcxNTQ3NDFaFw0yNjA0MjEwMzQ2NDFaMDMxMTAvBgNV BAMTKDgxOTA4NTM2MkJCN0E0ODQ3N0UwQjBDN0FGRDlENzhBNjlFNjMzNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmVDvA3KbZlZbu/9nuY8db4lF4 XSDl1XdckkrNGJ5CRuFeC8ARmKHgvMg9rNWx9Z64OcNrksojzUgMF4IWWnZySfCU T8vAvlNchVYd8VlDE88z9kz7RR6xotykBV1OLVMx/6dtdEMNOIDaVrFhKW5Vg9xy ojMWROBn9hN6Lu7hbxIUsO6d7oKXhNHcaLfheWFOK5byKuNzh0tyaruBt3mqSN1A ewM2EzgBzNYULvUbmGoR7wf7eSRrkTjvNVXk7D7wnWfANvyuM5UXRB/QGOy7tN32 ur2x/ZRVYDLUSPSH5X071QxqAC/1WCvf3FUuu5Yk7WGNb2R0UrurFVfEnM9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgZCFNiu3pIR34LDHr9nXimnmM1QwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQLKvF+JdJOq6f13n3Z8YRNRHLUd0+wLK0q hInkw7HVCYiqTs1kMExZX3UXdyj5KidnusZInutI85zYJFJa6i7lflwOk7xZEjiC xCJGDNxSIdAsC3fCvO2brsAYbK41rZ6QTWXy+xzSisX52udZWCEu1XvS0NoGdxNY mqJfUAKPFMOxdZnSaT8Y5E808Ib9TkRnrwYyFsU6etSO2fnLlKiypT6yuMI8Ww6/ 3q3D29L1XXbL/ykxAjpdASWN/rxwuWKd7KUqz/tPObYmEwfapDoP6bf7Isq5OlyN giI5ARzCENPoDdgv606RasiIk3ndw/T4bGnuHqHpePMywilm/is= -----END CERTIFICATE-----Generated at Sun Apr 19 14:21:54 2026 by rpki-client