$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: C5iGCo6uKVeqS7xTpwYppO32dXCcceFyFVuDniLO99o= Subject key identifier: CB:BD:E4:45:45:50:22:63:EF:CB:79:5E:09:27:B9:23:FA:9F:35:47 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 3754413487929295074B9B025B62EB0B12CBC66F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 7E Signing time: Wed 03 Sep 2025 04:52:24 +0000 Manifest this update: Wed 03 Sep 2025 04:47:24 +0000 Manifest next update: Sat 06 Sep 2025 13:09:24 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: uitgBDYuT0OmQyXJAR4Swv/B0MQSq1SiYgL/n4GVXtM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 13:09:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:54:41:34:87:92:92:95:07:4b:9b:02:5b:62:eb:0b:12:cb:c6:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Sep 3 04:47:24 2025 GMT Not After : Sep 6 13:09:24 2025 GMT Subject: CN=CBBDE44545502263EFCB795E0927B923FA9F3547 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:3c:2f:18:95:d5:b1:8c:b1:a6:eb:3e:48:e3: 65:36:bd:1f:84:90:79:f7:eb:d7:0b:ff:3f:24:e9: 3d:39:d6:f7:a9:14:79:46:4c:66:3c:c1:a4:bb:40: a1:d3:62:39:48:c3:c4:60:c6:03:5c:cd:d6:55:d4: 63:31:c4:11:5f:8f:b5:98:90:ac:42:85:aa:58:72: 24:a2:0e:13:0b:62:2c:69:0d:3b:39:96:bc:54:dd: 22:05:3c:f2:0c:f6:ab:33:2e:e6:30:19:e5:09:6f: d2:dd:94:4d:60:89:80:ba:59:b0:0f:af:69:9c:75: 96:c6:54:db:60:98:ba:10:42:f3:a1:0f:89:57:db: d7:3c:c2:be:d8:70:27:04:32:12:9f:ab:fa:89:c1: f2:40:ab:4e:23:70:c9:1f:49:96:42:2b:0f:90:91: 4e:31:85:be:09:63:db:48:b8:a3:8a:03:a1:4d:e0: b4:bf:42:07:ab:7a:6c:a4:80:98:ef:97:29:ba:e2: fe:77:01:7d:a0:c9:2b:c0:28:cc:80:e2:d7:50:3b: a1:d3:a0:e1:ff:ca:4a:6b:29:f4:76:c7:d7:97:e4: 71:4e:59:f1:95:45:7f:61:03:ef:b2:cc:88:7f:b6: d5:fc:a9:1d:97:9a:09:34:e6:56:2f:28:b4:08:6c: 45:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:BD:E4:45:45:50:22:63:EF:CB:79:5E:09:27:B9:23:FA:9F:35:47 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ae:dd:c1:a5:83:d0:13:a2:ac:e1:38:89:c9:98:96:29:e3: c7:58:bc:d5:88:28:03:da:50:5a:df:db:49:e8:2d:d8:06:4a: 04:1a:41:b1:01:11:b4:ae:1a:94:8d:86:b6:10:9d:e5:27:4f: 6d:82:7c:ff:36:bb:b7:87:77:ec:a9:4c:32:68:b5:78:59:dd: 17:b2:c5:ae:98:47:26:07:3b:40:4a:c8:41:ae:5f:a0:16:d8: c6:45:0a:05:e8:91:dd:48:d2:4a:26:71:26:f4:ed:a5:ac:33: 9f:ce:56:b1:30:5f:80:78:82:27:a6:b8:c1:9c:36:81:2d:ac: 81:4c:a4:ce:40:5f:83:e1:1a:7d:19:13:80:9d:09:ce:4b:a3: 30:95:66:ff:e5:0f:5a:20:08:38:c9:a4:3b:5f:25:22:99:1e: cd:fd:a3:1a:4f:e2:c8:12:5c:44:2a:a0:84:d4:2a:d4:93:ae: 5a:76:00:4e:e6:68:f8:30:7a:87:e7:f8:f9:46:dc:42:90:57: 34:4d:4d:c5:7c:75:b3:90:ce:55:ee:d5:f7:d4:37:13:8c:36: 79:5a:a1:ad:2b:d7:a0:2e:a6:32:99:e9:9e:c0:89:77:ad:bb: 24:5e:ba:dc:43:21:42:62:76:fc:49:0a:55:59:05:8c:4a:47: 56:1c:4f:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN1RBNIeSkpUHS5sCW2LrCxLLxm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA5MDMwNDQ3MjRaFw0yNTA5MDYxMzA5MjRaMDMxMTAvBgNV BAMTKENCQkRFNDQ1NDU1MDIyNjNFRkNCNzk1RTA5MjdCOTIzRkE5RjM1NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9PC8YldWxjLGm6z5I42U2vR+E kHn369cL/z8k6T051vepFHlGTGY8waS7QKHTYjlIw8RgxgNczdZV1GMxxBFfj7WY kKxChapYciSiDhMLYixpDTs5lrxU3SIFPPIM9qszLuYwGeUJb9LdlE1giYC6WbAP r2mcdZbGVNtgmLoQQvOhD4lX29c8wr7YcCcEMhKfq/qJwfJAq04jcMkfSZZCKw+Q kU4xhb4JY9tIuKOKA6FN4LS/QgeremykgJjvlym64v53AX2gySvAKMyA4tdQO6HT oOH/ykprKfR2x9eX5HFOWfGVRX9hA++yzIh/ttX8qR2Xmgk05lYvKLQIbEU/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy73kRUVQImPvy3leCSe5I/qfNUcwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6u3cGlg9AToqzhOInJmJYp48dYvNWIKAPa UFrf20noLdgGSgQaQbEBEbSuGpSNhrYQneUnT22CfP82u7eHd+ypTDJotXhZ3Rey xa6YRyYHO0BKyEGuX6AW2MZFCgXokd1I0komcSb07aWsM5/OVrEwX4B4giemuMGc NoEtrIFMpM5AX4PhGn0ZE4CdCc5LozCVZv/lD1ogCDjJpDtfJSKZHs39oxpP4sgS XEQqoITUKtSTrlp2AE7maPgweofn+PlG3EKQVzRNTcV8dbOQzlXu1ffUNxOMNnla oa0r16AupjKZ6Z7AiXetuyReutxDIUJidvxJClVZBYxKR1YcTwU= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client