$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: b+BWgUvyzPJ4RzdHmP09P+wzr5MNDCEmAVvx9yw3wjc= Subject key identifier: 5C:06:B0:84:03:EA:E3:7A:CD:6E:9C:ED:5B:CB:3E:C3:9D:6E:F6:D9 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 24F321854D8CF107211264860CCE63CCC1EA438A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 79 Signing time: Fri 22 Aug 2025 11:12:22 +0000 Manifest this update: Fri 22 Aug 2025 11:07:22 +0000 Manifest next update: Mon 25 Aug 2025 18:35:22 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: PLakcPfy0+0jmwBqfdz/KyBYeVkPp30xnNTm8faedH8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 18:35:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:f3:21:85:4d:8c:f1:07:21:12:64:86:0c:ce:63:cc:c1:ea:43:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Aug 22 11:07:22 2025 GMT Not After : Aug 25 18:35:22 2025 GMT Subject: CN=5C06B08403EAE37ACD6E9CED5BCB3EC39D6EF6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:15:c1:f8:c1:23:df:fc:6e:6e:d5:37:7a:cd: 77:ad:27:44:5e:2d:57:e1:c6:11:65:9b:3f:64:fd: 3e:08:d3:32:d3:18:5d:a0:e4:19:e7:bb:e9:99:6a: 56:9d:62:31:ce:91:56:bc:98:e8:13:dd:b9:e0:84: c1:94:3f:63:5f:cf:c8:d2:c1:da:f6:9b:0b:e5:da: 06:ad:d8:83:2d:2d:84:26:ae:0d:b2:c1:4b:e5:f4: 1f:a4:f7:43:85:31:86:73:0f:1e:26:14:0c:b3:80: 41:da:3a:8a:96:f0:92:b5:b8:30:11:a0:ad:e1:7d: 23:68:c1:47:95:61:a8:fb:eb:f4:9a:8e:d8:da:e7: 51:9f:33:a8:25:fd:47:92:48:31:4b:53:fb:30:4a: e4:b4:f2:76:29:4d:d0:75:ab:a3:51:7f:30:61:c9: 1e:fa:09:68:95:93:1f:d0:a5:cd:bf:1f:b7:fc:b1: 05:d7:27:0f:e9:ef:b6:a6:85:06:8f:4c:37:a0:16: 7c:e6:24:b7:5b:9a:8a:ff:b9:ae:e4:94:d3:4f:c4: fa:b4:d8:33:9e:ec:f7:e8:82:36:56:da:a3:cf:27: 61:43:76:42:1b:22:7f:70:64:32:83:01:3a:44:31: 35:f1:ba:98:82:c8:ce:1d:71:48:ae:1b:41:69:82: 5f:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:06:B0:84:03:EA:E3:7A:CD:6E:9C:ED:5B:CB:3E:C3:9D:6E:F6:D9 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:5a:30:b5:57:00:59:8e:f3:8f:4d:3b:48:ea:05:a5:37:7e: ed:5d:12:ce:da:a5:f6:c9:b8:91:5b:c5:1a:70:cc:2c:fb:85: 32:2a:96:89:71:b5:23:94:e0:b8:e1:0f:e4:4d:4f:05:f6:53: cc:ea:4d:bc:a1:f9:59:fd:d3:f9:be:00:ec:8b:bc:1e:ed:d7: 00:20:75:f9:62:ef:d6:5c:61:f8:c5:81:fa:1f:e6:bf:63:a2: 97:21:c3:c3:e7:ae:77:25:37:cd:e3:f6:96:4e:3a:88:27:cb: 24:a0:00:44:47:5a:d9:83:f0:51:0c:c1:42:3c:56:d5:c3:1b: ad:9a:b5:e2:5a:3b:75:2e:29:5e:40:df:12:be:01:7f:9b:39: b6:f5:e3:9d:61:31:64:6b:76:8a:f2:1f:72:b6:87:eb:c7:54: 0a:64:44:d9:a9:57:a9:a8:91:18:aa:39:87:4b:f4:83:5d:0d: 1d:6b:da:06:6c:31:5b:ce:a6:fd:13:50:24:29:94:1f:c7:57: 01:e2:4a:5c:8c:7b:24:55:13:0a:bb:7b:d2:fe:48:80:d6:0d: e3:b0:21:8f:4e:f3:a2:2f:ff:28:12:d5:ec:f5:cd:f3:fd:9e: d2:40:1d:d3:3f:45:ea:43:95:55:29:24:81:4e:7d:18:88:aa: 77:39:13:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJPMhhU2M8QchEmSGDM5jzMHqQ4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA4MjIxMTA3MjJaFw0yNTA4MjUxODM1MjJaMDMxMTAvBgNV BAMTKDVDMDZCMDg0MDNFQUUzN0FDRDZFOUNFRDVCQ0IzRUMzOUQ2RUY2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxFcH4wSPf/G5u1Td6zXetJ0Re LVfhxhFlmz9k/T4I0zLTGF2g5Bnnu+mZaladYjHOkVa8mOgT3bnghMGUP2Nfz8jS wdr2mwvl2gat2IMtLYQmrg2ywUvl9B+k90OFMYZzDx4mFAyzgEHaOoqW8JK1uDAR oK3hfSNowUeVYaj76/Sajtja51GfM6gl/UeSSDFLU/swSuS08nYpTdB1q6NRfzBh yR76CWiVkx/Qpc2/H7f8sQXXJw/p77amhQaPTDegFnzmJLdbmor/ua7klNNPxPq0 2DOe7PfogjZW2qPPJ2FDdkIbIn9wZDKDATpEMTXxupiCyM4dcUiuG0Fpgl/rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXAawhAPq43rNbpztW8s+w51u9tkwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJaMLVXAFmO849NO0jqBaU3fu1dEs7apfbJ uJFbxRpwzCz7hTIqlolxtSOU4LjhD+RNTwX2U8zqTbyh+Vn90/m+AOyLvB7t1wAg dfli79ZcYfjFgfof5r9jopchw8PnrnclN83j9pZOOognyySgAERHWtmD8FEMwUI8 VtXDG62ateJaO3UuKV5A3xK+AX+bObb1451hMWRrdoryH3K2h+vHVApkRNmpV6mo kRiqOYdL9INdDR1r2gZsMVvOpv0TUCQplB/HVwHiSlyMeyRVEwq7e9L+SIDWDeOw IY9O86Iv/ygS1ez1zfP9ntJAHdM/RepDlVUpJIFOfRiIqnc5E04= -----END CERTIFICATE-----Generated at Sat Aug 23 10:36:11 2025 by rpki-client