$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: aaNYiNisb59FRClGyCSP8Bd/Ot9HsZ8fxz1TMcFgd0c= Subject key identifier: 55:1E:FD:75:2C:73:B2:6C:A6:62:77:23:1F:2E:67:BB:43:50:D4:43 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 4F84FD01C81D362B5A03AD7288B43F5542B571BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 4A Signing time: Fri 09 May 2025 00:42:17 +0000 Manifest this update: Fri 09 May 2025 00:37:17 +0000 Manifest next update: Mon 12 May 2025 02:35:17 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: pIyyZpM2QBKSW925p0KHTRpl1Nuiy0/+hA0Ge/pmf6Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 02:35:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:84:fd:01:c8:1d:36:2b:5a:03:ad:72:88:b4:3f:55:42:b5:71:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: May 9 00:37:17 2025 GMT Not After : May 12 02:35:17 2025 GMT Subject: CN=551EFD752C73B26CA66277231F2E67BB4350D443 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:81:0d:ee:7d:7f:5e:ed:06:8a:3d:2e:4d:fd: 4a:16:cd:22:8d:b8:ac:2a:7e:7d:72:7e:42:3c:66: 1a:f9:e9:7a:df:9d:5f:91:a1:e8:20:bf:7e:30:ea: 91:21:4f:4d:50:11:57:19:80:44:45:4d:d2:77:13: 6d:98:24:1c:5b:91:bb:58:98:b7:25:52:79:0f:0f: 82:05:15:b7:09:03:8b:92:b9:ac:22:7d:7d:a4:f7: 67:6e:ed:e3:ad:6a:06:61:b3:df:55:3c:e4:6c:a8: 34:ce:a5:aa:e7:c0:44:62:d4:fb:b5:0d:3e:95:25: 6d:dc:37:c7:7c:c4:dc:56:03:a3:cf:18:c4:13:96: 59:e4:59:80:7c:cc:c6:79:86:c9:93:fc:a7:68:ef: aa:e7:13:dd:a2:fa:36:40:a0:70:73:a9:e1:c7:ba: 1c:a4:e9:10:c1:c6:11:4c:36:47:03:6c:36:7f:71: 1e:e1:e0:77:c4:aa:01:3a:b3:17:3f:77:f7:d4:a8: eb:e6:d2:f9:64:db:6a:34:5d:05:da:7f:c0:a1:b9: 95:d0:c9:82:40:bf:11:40:15:cb:cc:06:0a:07:d2: 03:37:0c:b7:d7:09:cf:95:d2:8e:88:47:3f:84:3c: 99:27:b0:69:9c:ee:80:64:82:2b:f0:08:c8:a9:81: 2a:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:1E:FD:75:2C:73:B2:6C:A6:62:77:23:1F:2E:67:BB:43:50:D4:43 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:92:7e:28:c3:19:59:57:dd:52:d3:c3:83:66:0e:8e:a2:2d: 20:be:51:44:7b:d4:7e:be:d6:c6:74:bf:6f:08:4f:c5:95:e8: 76:13:1b:1f:f1:6e:63:39:8d:17:be:c6:85:01:fe:79:0d:38: b5:ea:17:76:82:42:9c:92:48:6e:53:0e:90:3a:a7:59:af:22: 1d:c3:51:44:18:24:c3:70:87:e8:90:79:8d:a1:fa:fb:77:2f: 19:57:f1:ef:b1:51:36:6e:88:c7:aa:25:76:18:b9:21:cf:84: 24:e8:bf:77:90:9c:ed:94:60:6a:ab:54:bc:d1:e7:37:ce:21: 53:b9:b1:e5:44:07:3c:ed:35:85:24:ce:27:8f:4a:d0:0f:7c: 4e:60:20:08:31:d3:02:a2:1f:16:fc:00:b7:16:b9:fc:bb:46: 79:64:5d:3f:eb:fb:c5:8e:a6:64:75:73:2f:45:7b:21:d7:7b: 56:36:ae:fd:6d:97:32:35:bd:43:8a:3c:8d:7a:42:11:f5:5f: 1c:c3:26:9f:9c:b1:4c:29:92:2a:ce:96:30:58:95:63:a5:70: 34:70:04:03:54:46:bc:98:f4:3d:a1:02:1b:91:84:0a:75:38: 66:46:77:30:44:e0:16:4b:5f:5f:3b:6c:48:7f:d1:17:02:23: 29:c2:fa:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4T9AcgdNitaA61yiLQ/VUK1cb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA1MDkwMDM3MTdaFw0yNTA1MTIwMjM1MTdaMDMxMTAvBgNV BAMTKDU1MUVGRDc1MkM3M0IyNkNBNjYyNzcyMzFGMkU2N0JCNDM1MEQ0NDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgQ3ufX9e7QaKPS5N/UoWzSKN uKwqfn1yfkI8Zhr56XrfnV+Roeggv34w6pEhT01QEVcZgERFTdJ3E22YJBxbkbtY mLclUnkPD4IFFbcJA4uSuawifX2k92du7eOtagZhs99VPORsqDTOparnwERi1Pu1 DT6VJW3cN8d8xNxWA6PPGMQTllnkWYB8zMZ5hsmT/Kdo76rnE92i+jZAoHBzqeHH uhyk6RDBxhFMNkcDbDZ/cR7h4HfEqgE6sxc/d/fUqOvm0vlk22o0XQXaf8ChuZXQ yYJAvxFAFcvMBgoH0gM3DLfXCc+V0o6IRz+EPJknsGmc7oBkgivwCMipgSojAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVR79dSxzsmymYncjHy5nu0NQ1EMwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+SfijDGVlX3VLTw4NmDo6iLSC+UUR71H6+ 1sZ0v28IT8WV6HYTGx/xbmM5jRe+xoUB/nkNOLXqF3aCQpySSG5TDpA6p1mvIh3D UUQYJMNwh+iQeY2h+vt3LxlX8e+xUTZuiMeqJXYYuSHPhCTov3eQnO2UYGqrVLzR 5zfOIVO5seVEBzztNYUkziePStAPfE5gIAgx0wKiHxb8ALcWufy7RnlkXT/r+8WO pmR1cy9FeyHXe1Y2rv1tlzI1vUOKPI16QhH1XxzDJp+csUwpkirOljBYlWOlcDRw BANURryY9D2hAhuRhAp1OGZGdzBE4BZLX187bEh/0RcCIynC+mQ= -----END CERTIFICATE-----Generated at Fri May 9 02:45:55 2025 by rpki-client