$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: 87drAfnZWKEwRgvXSbXJUwUdUJvugTX4szT09KEBHz4= Subject key identifier: 75:B4:A5:20:FC:CE:61:7B:E1:AC:65:88:5F:DD:4A:7D:08:82:D7:12 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 200BFDE81EA30A13B94A2E6499C074A5D8FA8573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 71 Signing time: Mon 04 Aug 2025 22:52:23 +0000 Manifest this update: Mon 04 Aug 2025 22:47:23 +0000 Manifest next update: Thu 07 Aug 2025 23:27:23 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: AjXqMfjs7bf1NUtxjlQSPk6SCZgpo+JwDuG1k+F5Etw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:27:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:0b:fd:e8:1e:a3:0a:13:b9:4a:2e:64:99:c0:74:a5:d8:fa:85:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Aug 4 22:47:23 2025 GMT Not After : Aug 7 23:27:23 2025 GMT Subject: CN=75B4A520FCCE617BE1AC65885FDD4A7D0882D712 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:0f:14:d3:eb:17:f9:ee:a9:3b:63:f4:48:16: 95:0c:c6:e6:77:80:e5:26:13:d0:2c:e6:eb:b4:1f: e2:d2:f3:e3:61:07:88:af:a7:e6:5a:3e:4d:45:32: 1f:61:f9:1c:f2:78:74:75:32:11:82:9e:49:a4:a3: d2:35:2d:3a:fe:57:8d:c2:8b:c4:76:af:50:6d:ea: 87:68:84:c6:cf:38:93:8d:da:17:66:ff:a5:4b:51: 1b:12:61:fd:4a:34:61:44:22:26:c0:e8:29:e0:76: a2:81:b3:65:f2:82:77:05:6a:7e:9b:45:a4:cf:4c: 2f:65:2e:31:4e:50:eb:8b:a9:20:b1:a7:49:ed:fe: 2a:7a:f7:54:56:34:54:00:22:ca:ad:4d:f1:ad:62: 85:93:f3:1f:32:2d:f4:9b:c2:a9:8a:04:96:a9:bf: 6e:da:3f:0c:e6:a4:71:a4:95:a7:7c:1d:21:f5:12: cf:66:32:78:74:5c:00:c3:f9:aa:b8:cb:7c:56:79: 89:cc:a3:ad:f0:3c:e4:c3:6f:e6:c9:a9:d5:ad:76: fc:c9:90:46:0c:42:a4:13:6f:df:dd:08:3a:81:25: 84:14:fb:96:be:3e:d6:13:ae:58:7b:b4:8a:b8:ed: 83:65:8a:c2:dd:70:c3:18:55:04:e0:0f:13:6e:79: cf:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:B4:A5:20:FC:CE:61:7B:E1:AC:65:88:5F:DD:4A:7D:08:82:D7:12 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:bc:b7:fc:78:31:c9:5f:b7:9d:ae:7f:b2:dd:f0:9a:3b:8d: b7:65:3c:2e:53:9b:25:a3:27:b9:11:cd:99:a0:dc:f5:1e:39: bb:ef:1a:ff:96:85:12:48:e2:9b:ff:ee:20:07:1a:03:03:5b: 31:3e:7e:f4:94:c7:c2:cd:fd:4f:da:64:35:8f:16:90:df:cc: 45:fa:ae:b4:e7:05:dd:8d:4a:cc:19:75:7a:66:af:d9:11:70: 4a:2d:04:a7:c7:e4:62:33:e4:5d:3c:c7:73:9a:ef:8f:10:f8: e9:4a:46:ad:65:86:05:40:32:16:43:e6:b3:41:11:21:63:50: 6f:5f:4d:ec:80:5c:15:18:85:79:d0:02:21:2a:42:16:2a:6c: 62:ff:2d:2a:c8:3c:71:c4:15:59:0a:d4:12:8b:bd:b5:97:87: 9e:b0:e8:a6:c4:e1:2f:f4:95:c5:d4:4b:14:ae:af:3d:00:3f: d3:60:fc:96:5a:a0:86:4d:d1:4c:17:07:18:ae:22:76:d1:54: 37:92:e1:ed:40:fb:e6:63:09:1b:9f:1e:8d:ec:a7:3e:ed:c8: e7:70:f2:71:2d:f8:01:22:6e:34:95:13:88:f4:6d:1f:48:16: 70:25:92:9d:c8:67:f1:b2:81:ed:cf:d6:80:53:59:a1:29:ec: 1e:6d:65:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIAv96B6jChO5Si5kmcB0pdj6hXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA4MDQyMjQ3MjNaFw0yNTA4MDcyMzI3MjNaMDMxMTAvBgNV BAMTKDc1QjRBNTIwRkNDRTYxN0JFMUFDNjU4ODVGREQ0QTdEMDg4MkQ3MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4DxTT6xf57qk7Y/RIFpUMxuZ3 gOUmE9As5uu0H+LS8+NhB4ivp+ZaPk1FMh9h+RzyeHR1MhGCnkmko9I1LTr+V43C i8R2r1Bt6odohMbPOJON2hdm/6VLURsSYf1KNGFEIibA6CngdqKBs2XygncFan6b RaTPTC9lLjFOUOuLqSCxp0nt/ip691RWNFQAIsqtTfGtYoWT8x8yLfSbwqmKBJap v27aPwzmpHGklad8HSH1Es9mMnh0XADD+aq4y3xWeYnMo63wPOTDb+bJqdWtdvzJ kEYMQqQTb9/dCDqBJYQU+5a+PtYTrlh7tIq47YNlisLdcMMYVQTgDxNuec/TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdbSlIPzOYXvhrGWIX91KfQiC1xIwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa8t/x4Mclft52uf7Ld8Jo7jbdlPC5TmyWj J7kRzZmg3PUeObvvGv+WhRJI4pv/7iAHGgMDWzE+fvSUx8LN/U/aZDWPFpDfzEX6 rrTnBd2NSswZdXpmr9kRcEotBKfH5GIz5F08x3Oa748Q+OlKRq1lhgVAMhZD5rNB ESFjUG9fTeyAXBUYhXnQAiEqQhYqbGL/LSrIPHHEFVkK1BKLvbWXh56w6KbE4S/0 lcXUSxSurz0AP9Ng/JZaoIZN0UwXBxiuInbRVDeS4e1A++ZjCRufHo3spz7tyOdw 8nEt+AEibjSVE4j0bR9IFnAlkp3IZ/Gyge3P1oBTWaEp7B5tZVU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:43:04 2025 by rpki-client