$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: aSWlExtlW/QddvwcyiidC0ZBj8EB9MH+Xdnf/0c5j9k= Subject key identifier: F1:CA:CE:BC:B4:68:F7:6D:06:46:10:5A:4A:B4:A2:AE:07:42:34:6E Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 160707F7A8F763CCB70BD3D87CB79F8258D8F300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 93 Signing time: Mon 20 Oct 2025 07:52:22 +0000 Manifest this update: Mon 20 Oct 2025 07:47:22 +0000 Manifest next update: Thu 23 Oct 2025 11:54:22 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: SAlEqsothYVf86VQ56dOd6RQY+9J25EOuvK3ob8UiI0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:07:07:f7:a8:f7:63:cc:b7:0b:d3:d8:7c:b7:9f:82:58:d8:f3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Oct 20 07:47:22 2025 GMT Not After : Oct 23 11:54:22 2025 GMT Subject: CN=F1CACEBCB468F76D0646105A4AB4A2AE0742346E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:04:ff:0c:04:73:01:ed:5d:bc:d0:21:e4:10: a4:e9:96:a2:7f:b4:6e:61:9d:cd:46:be:20:25:7f: 4a:d9:d6:74:69:26:99:ce:7a:78:af:23:84:e7:6f: 17:34:a5:61:ee:4f:8d:6f:3d:45:79:10:0b:ad:9a: 05:1f:f2:90:10:60:d9:38:be:aa:da:99:5b:9b:39: 37:32:fd:05:1a:cb:51:8e:be:75:a3:60:f0:d1:1c: 41:67:2f:dc:17:86:63:64:5d:1e:d8:25:f6:8f:88: 8f:f4:77:80:50:36:60:5f:4b:84:5c:0d:51:f8:f1: 38:d9:e7:6a:03:11:80:29:6e:cc:03:53:4a:02:de: f4:7b:cb:67:b7:5c:96:73:94:bb:37:09:79:6b:30: e2:5a:07:14:f1:5c:0f:13:3e:2e:36:6b:10:be:0a: b8:9a:b3:39:1e:2e:e4:6b:f2:ec:11:1c:9f:61:f3: c5:b6:0c:5a:9a:4a:6e:43:d5:5c:94:17:37:8a:83: c0:be:f4:2c:4d:75:bd:72:ba:cb:2e:d1:e4:6b:36: 9f:32:77:ab:b0:e9:db:cc:3a:8c:5e:f2:5b:b8:22: 60:22:ff:d6:7d:35:23:0b:32:56:a1:96:0d:32:f7: 22:f7:02:cb:85:d1:45:ad:c5:3b:ba:c1:01:b5:b2: 57:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:CA:CE:BC:B4:68:F7:6D:06:46:10:5A:4A:B4:A2:AE:07:42:34:6E X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:12:bc:e5:30:b0:d5:84:9d:c9:9f:41:66:85:d3:f1:4e:48: 4d:00:79:f7:6c:e0:50:5b:4c:db:ed:ef:cd:70:04:c5:fb:4a: 21:b1:0c:79:7e:11:1c:e6:5c:9f:84:6d:bd:e4:42:44:d9:47: dc:d4:30:3e:b2:48:5f:29:ba:66:f5:d5:25:26:03:8e:0d:ff: 4d:80:68:19:ff:a1:8e:10:f2:d5:c1:08:d4:23:16:bb:fd:e5: e2:7a:b6:a8:4d:4b:e0:78:0f:e9:74:c8:31:15:8a:f5:ea:9c: 06:dc:62:1d:14:7b:53:e2:db:b5:fa:01:b8:20:cc:61:3a:e7: 5f:79:54:6b:d0:77:25:c5:68:ff:75:9e:22:c7:26:33:cc:6c: 6b:ca:f3:a8:18:a9:9b:ef:0a:d2:5a:25:d7:07:64:4e:2a:c3: 89:8d:37:48:6f:9f:a3:b2:7c:5b:d4:d2:37:14:79:fa:36:60: 70:71:27:eb:e3:f4:09:5a:4c:43:6b:95:ab:40:40:d7:82:a6: f7:a3:de:97:db:40:88:ab:fd:0e:c0:92:43:d5:6e:e8:fe:c3: 8f:02:f1:94:29:53:43:64:e8:1e:8b:aa:03:8d:ca:14:7c:b1: 23:e4:4b:30:b6:f0:53:e4:3b:b7:a9:cc:58:15:7a:e6:e4:e1: 73:bf:ec:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFgcH96j3Y8y3C9PYfLefgljY8wAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTEwMjAwNzQ3MjJaFw0yNTEwMjMxMTU0MjJaMDMxMTAvBgNV BAMTKEYxQ0FDRUJDQjQ2OEY3NkQwNjQ2MTA1QTRBQjRBMkFFMDc0MjM0NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7BP8MBHMB7V280CHkEKTplqJ/ tG5hnc1GviAlf0rZ1nRpJpnOenivI4Tnbxc0pWHuT41vPUV5EAutmgUf8pAQYNk4 vqramVubOTcy/QUay1GOvnWjYPDRHEFnL9wXhmNkXR7YJfaPiI/0d4BQNmBfS4Rc DVH48TjZ52oDEYApbswDU0oC3vR7y2e3XJZzlLs3CXlrMOJaBxTxXA8TPi42axC+ CriaszkeLuRr8uwRHJ9h88W2DFqaSm5D1VyUFzeKg8C+9CxNdb1yussu0eRrNp8y d6uw6dvMOoxe8lu4ImAi/9Z9NSMLMlahlg0y9yL3AsuF0UWtxTu6wQG1slfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8crOvLRo920GRhBaSrSirgdCNG4wHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKISvOUwsNWEncmfQWaF0/FOSE0Aefds4FBb TNvt781wBMX7SiGxDHl+ERzmXJ+Ebb3kQkTZR9zUMD6ySF8pumb11SUmA44N/02A aBn/oY4Q8tXBCNQjFrv95eJ6tqhNS+B4D+l0yDEVivXqnAbcYh0Ue1Pi27X6Abgg zGE65195VGvQdyXFaP91niLHJjPMbGvK86gYqZvvCtJaJdcHZE4qw4mNN0hvn6Oy fFvU0jcUefo2YHBxJ+vj9AlaTENrlatAQNeCpvej3pfbQIir/Q7AkkPVbuj+w48C 8ZQpU0Nk6B6LqgONyhR8sSPkSzC28FPkO7epzFgVeubk4XO/7EM= -----END CERTIFICATE-----Generated at Mon Oct 20 21:09:39 2025 by rpki-client