$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: rk699FPPsfioypvrHHVmzPpWcgzK9lI5soLRMYWe+/4= Subject key identifier: F6:19:67:37:B9:FE:78:FE:F0:1A:28:5E:44:96:C1:83:5D:94:0F:68 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 6F9F24A443B507B3259E7C90985E7060CA15CDA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: D9 Signing time: Thu 26 Mar 2026 02:52:44 +0000 Manifest this update: Thu 26 Mar 2026 02:47:44 +0000 Manifest next update: Sun 29 Mar 2026 14:34:44 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: hoQ2gC1q5cPkg6qlyS/yMYAZFrhzDtHwx02Q3jp/HTA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:34:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:9f:24:a4:43:b5:07:b3:25:9e:7c:90:98:5e:70:60:ca:15:cd:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Mar 26 02:47:44 2026 GMT Not After : Mar 29 14:34:44 2026 GMT Subject: CN=F6196737B9FE78FEF01A285E4496C1835D940F68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:0a:48:61:ea:26:97:d0:fd:3b:d9:79:31:3d: d0:ac:3a:96:a3:2d:8a:7a:bf:50:7f:41:a3:3b:93: ba:6a:36:44:47:b6:4d:31:19:61:84:ea:b2:f1:fb: 05:c5:ed:17:2c:21:97:9f:9b:b4:f7:7a:8f:b7:4f: 46:a9:d1:9e:78:4b:dc:41:da:2b:4e:59:94:1f:7b: 42:90:c5:dd:cb:7d:37:76:2f:22:32:b6:ba:45:e1: f3:93:48:fa:a2:1d:21:56:85:65:05:19:cf:8b:72: b9:50:cc:8a:39:c2:cd:9e:45:6b:18:a1:cb:52:bb: a1:36:79:b7:47:a0:62:70:d7:0d:3c:53:e1:79:93: cf:1f:60:01:87:02:32:03:8e:f5:dd:e0:a3:d0:b2: a9:59:2f:36:7f:93:ea:3e:87:cb:d3:67:01:10:2b: fb:e9:ee:e1:81:f4:85:bf:79:3a:08:c7:87:bd:e6: 83:3c:0a:8f:ba:1f:f4:b9:3c:1f:80:79:04:78:5e: 55:43:0f:eb:ac:77:c1:c3:c7:6a:87:e8:55:b3:cd: 33:2b:59:2e:a3:dd:a5:6a:ab:06:57:07:f5:c9:94: f4:97:99:28:9f:27:41:10:ed:6a:cf:df:a3:a8:67: 50:b3:bd:ea:0b:c0:b3:b4:48:7b:c2:49:9a:c4:8a: 6d:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:19:67:37:B9:FE:78:FE:F0:1A:28:5E:44:96:C1:83:5D:94:0F:68 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:06:ab:ad:99:63:26:0f:be:2d:ed:ff:37:fe:e3:35:5f:b3: 48:b4:d1:e9:f2:c9:93:58:1c:83:29:11:78:11:e8:50:95:00: 5b:64:4d:26:c9:6b:5f:db:de:33:c4:7e:d2:8a:39:0d:af:ba: cd:62:51:6f:24:a1:4d:cd:77:04:8b:77:b7:5f:25:7f:96:9e: 27:51:38:54:2b:76:7a:fb:0b:78:b9:b3:74:20:74:9d:ef:79: d0:c1:48:eb:70:0c:0d:74:e8:8f:81:56:7a:6a:90:8d:bd:d1: bd:3a:99:27:98:06:7d:d7:26:e4:2b:be:c3:25:ad:91:91:10: e0:f4:fe:de:11:f0:6f:a5:2d:3d:14:e0:ff:cc:8a:bb:98:34: b3:8e:87:e7:e9:57:62:74:e0:24:22:05:ae:db:c2:ad:64:5a: eb:77:df:2e:e1:a3:32:09:5c:5c:0f:e9:7f:34:d4:23:dc:99: ee:ae:be:0d:be:37:bc:43:40:47:d8:61:a4:3d:96:30:aa:ef: 32:49:37:8b:95:8b:4f:53:da:cd:50:08:33:f0:2b:df:fc:23: 16:47:c2:d7:1a:05:5d:4f:8f:29:c8:7d:1b:d9:47:33:b2:d2: 70:ec:01:1b:50:3c:30:0a:13:f3:7e:5c:b6:26:83:c5:7b:2b: 26:8d:39:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb58kpEO1B7MlnnyQmF5wYMoVzaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNjAzMjYwMjQ3NDRaFw0yNjAzMjkxNDM0NDRaMDMxMTAvBgNV BAMTKEY2MTk2NzM3QjlGRTc4RkVGMDFBMjg1RTQ0OTZDMTgzNUQ5NDBGNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChCkhh6iaX0P072XkxPdCsOpaj LYp6v1B/QaM7k7pqNkRHtk0xGWGE6rLx+wXF7RcsIZefm7T3eo+3T0ap0Z54S9xB 2itOWZQfe0KQxd3LfTd2LyIytrpF4fOTSPqiHSFWhWUFGc+LcrlQzIo5ws2eRWsY octSu6E2ebdHoGJw1w08U+F5k88fYAGHAjIDjvXd4KPQsqlZLzZ/k+o+h8vTZwEQ K/vp7uGB9IW/eToIx4e95oM8Co+6H/S5PB+AeQR4XlVDD+usd8HDx2qH6FWzzTMr WS6j3aVqqwZXB/XJlPSXmSifJ0EQ7WrP36OoZ1CzveoLwLO0SHvCSZrEim3DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9hlnN7n+eP7wGiheRJbBg12UD2gwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABkGq62ZYyYPvi3t/zf+4zVfs0i00enyyZNY HIMpEXgR6FCVAFtkTSbJa1/b3jPEftKKOQ2vus1iUW8koU3NdwSLd7dfJX+WnidR OFQrdnr7C3i5s3QgdJ3vedDBSOtwDA106I+BVnpqkI290b06mSeYBn3XJuQrvsMl rZGREOD0/t4R8G+lLT0U4P/MiruYNLOOh+fpV2J04CQiBa7bwq1kWut33y7hozIJ XFwP6X801CPcme6uvg2+N7xDQEfYYaQ9ljCq7zJJN4uVi09T2s1QCDPwK9/8IxZH wtcaBV1PjynIfRvZRzOy0nDsARtQPDAKE/N+XLYmg8V7KyaNOcI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:23 2026 by rpki-client