$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: tsIWf7KVHRWsWL3uVmtdrrIKp9KGS5CBSZaz6ATgta8= Subject key identifier: 06:62:6B:C8:7D:8D:34:F8:9A:CB:AE:BB:DE:E6:A8:3B:35:DA:F3:51 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 3E28E409BF0FB932104E9FA858DBF8D72BB5AF68 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 61 Signing time: Sun 29 Jun 2025 22:52:19 +0000 Manifest this update: Sun 29 Jun 2025 22:47:19 +0000 Manifest next update: Thu 03 Jul 2025 03:07:19 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: tCx2WSRODtFZyddWlobs7SgBy0jltpUAROOvnSl9Res=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:28:e4:09:bf:0f:b9:32:10:4e:9f:a8:58:db:f8:d7:2b:b5:af:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Jun 29 22:47:19 2025 GMT Not After : Jul 3 03:07:19 2025 GMT Subject: CN=06626BC87D8D34F89ACBAEBBDEE6A83B35DAF351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:6d:a7:ee:a8:a8:40:41:36:ab:01:c2:ee:f1: 83:a2:5b:33:c2:f4:13:1d:1b:3b:b7:92:ef:77:f5: d9:8a:6c:70:b8:dc:ec:75:f0:4c:2d:91:64:83:c5: 1d:53:ef:a9:06:1a:12:f0:39:e0:2a:78:11:bf:41: 48:e2:1a:2c:2e:4d:90:ce:53:ef:1d:f2:70:32:52: 3a:07:31:f8:91:48:dd:32:ab:94:65:71:24:96:cf: 46:10:73:c1:97:80:6d:02:a5:33:3e:e2:18:6b:e3: b8:10:3d:f8:b0:50:cb:b1:f9:11:98:94:3a:a4:61: b3:10:b6:17:fc:a0:df:ae:58:09:6d:f5:1a:37:9e: 92:a8:66:c2:dc:d4:63:8a:57:2c:00:bb:b6:be:0d: 1f:ef:dc:ed:ae:cb:2b:a6:4d:24:e0:16:bd:16:f7: c8:33:17:67:6c:76:33:0b:25:8f:30:1a:40:a0:67: 9d:1d:8c:1a:52:34:dc:f0:68:ce:f2:b9:1e:d3:a0: 03:c0:cb:ab:f0:33:35:f8:d6:6c:34:30:2c:2d:e3: c9:1a:e9:a0:18:de:0b:57:40:62:07:b6:b7:63:35: bc:5b:a1:f7:e0:e3:84:8c:a4:e9:d7:1b:28:4a:3a: a3:5b:7b:0a:8a:53:85:f6:33:6e:2c:12:ad:c6:5e: b0:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:62:6B:C8:7D:8D:34:F8:9A:CB:AE:BB:DE:E6:A8:3B:35:DA:F3:51 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:21:96:bc:4c:1a:4c:6c:05:dd:08:f5:a1:0e:18:c6:ab:b3: 59:66:df:8a:d8:08:a6:03:4b:2c:a3:58:aa:5a:8c:ad:75:40: f5:8b:ea:19:c8:c5:82:b7:c8:77:f3:76:24:5a:f4:32:c3:39: 3c:f0:c1:1f:63:02:ac:da:0c:5a:f7:8d:6c:17:4d:72:b8:9d: b7:78:ee:2a:5a:30:5a:9d:39:ea:77:93:53:14:fd:36:ef:dd: 4c:6e:7d:7f:c4:c9:b9:46:fa:2e:c0:ea:e7:20:bd:47:22:47: 24:0f:d7:ae:91:01:d0:64:58:9f:95:f4:c7:85:8f:1b:dd:68: 48:d1:8c:7b:40:b4:85:e7:cd:9a:ae:17:65:0e:81:f8:47:d0: 5c:05:f0:37:b8:07:58:8a:6c:cf:e2:4f:ee:90:1a:65:1c:24: 37:7b:f7:cd:62:e8:d2:1a:b4:b8:47:ad:70:59:da:b1:bc:82: 68:a3:cc:32:03:86:f0:0e:e2:11:a3:6e:03:95:4f:55:7e:19: 60:f4:1c:d6:7a:64:fe:ca:49:b7:91:aa:16:7f:ee:c9:0d:bd: 6e:77:23:2c:20:4c:bd:c2:1f:b7:8d:33:f0:a3:a0:10:da:59: 24:d4:7c:c9:64:6a:81:42:63:9c:38:50:30:e6:d8:87:ad:b5: e6:76:98:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPijkCb8PuTIQTp+oWNv41yu1r2gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA2MjkyMjQ3MTlaFw0yNTA3MDMwMzA3MTlaMDMxMTAvBgNV BAMTKDA2NjI2QkM4N0Q4RDM0Rjg5QUNCQUVCQkRFRTZBODNCMzVEQUYzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDabafuqKhAQTarAcLu8YOiWzPC 9BMdGzu3ku939dmKbHC43Ox18EwtkWSDxR1T76kGGhLwOeAqeBG/QUjiGiwuTZDO U+8d8nAyUjoHMfiRSN0yq5RlcSSWz0YQc8GXgG0CpTM+4hhr47gQPfiwUMux+RGY lDqkYbMQthf8oN+uWAlt9Ro3npKoZsLc1GOKVywAu7a+DR/v3O2uyyumTSTgFr0W 98gzF2dsdjMLJY8wGkCgZ50djBpSNNzwaM7yuR7ToAPAy6vwMzX41mw0MCwt48ka 6aAY3gtXQGIHtrdjNbxboffg44SMpOnXGyhKOqNbewqKU4X2M24sEq3GXrBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBmJryH2NNPiay6673uaoOzXa81EwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACMhlrxMGkxsBd0I9aEOGMars1lm34rYCKYD SyyjWKpajK11QPWL6hnIxYK3yHfzdiRa9DLDOTzwwR9jAqzaDFr3jWwXTXK4nbd4 7ipaMFqdOep3k1MU/Tbv3UxufX/EyblG+i7A6ucgvUciRyQP166RAdBkWJ+V9MeF jxvdaEjRjHtAtIXnzZquF2UOgfhH0FwF8De4B1iKbM/iT+6QGmUcJDd7981i6NIa tLhHrXBZ2rG8gmijzDIDhvAO4hGjbgOVT1V+GWD0HNZ6ZP7KSbeRqhZ/7skNvW53 IywgTL3CH7eNM/CjoBDaWSTUfMlkaoFCY5w4UDDm2IetteZ2mHo= -----END CERTIFICATE-----Generated at Tue Jul 1 12:02:34 2025 by rpki-client