$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: ujFdL3HD7BX5wGWEkyCTjUMytjYgoeX4uDf/YeJo9sE= Subject key identifier: DB:B6:7F:45:69:CB:CD:DF:7E:4C:45:FE:57:A2:EA:6F:3C:2F:B7:E9 Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 3AD97D3B7467C92A767C1662F9946B5EA348CCDA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 57 Signing time: Sat 07 Jun 2025 02:42:18 +0000 Manifest this update: Sat 07 Jun 2025 02:37:18 +0000 Manifest next update: Tue 10 Jun 2025 08:53:18 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: mKy6q/q+gOtlUAgZODy5m0n8Py/l/zuwmwNrW/hkF5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 08:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d9:7d:3b:74:67:c9:2a:76:7c:16:62:f9:94:6b:5e:a3:48:cc:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Jun 7 02:37:18 2025 GMT Not After : Jun 10 08:53:18 2025 GMT Subject: CN=DBB67F4569CBCDDF7E4C45FE57A2EA6F3C2FB7E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:7e:fe:2d:df:e9:8e:25:50:9a:ce:e1:8e: 41:60:01:9a:bf:15:7d:17:24:ee:b7:f8:ff:cd:88: 7c:f8:04:c6:66:13:4d:80:b8:c9:00:37:4e:d1:de: ef:82:32:48:95:13:16:7d:ab:bb:f7:97:e6:56:7d: 8d:69:b2:5d:ee:da:46:fc:13:1d:a1:c8:05:1b:96: 7c:58:af:f7:64:ba:2a:3b:9c:ff:d1:34:1f:51:e6: d5:31:a0:83:18:43:b5:5d:68:ce:51:45:80:04:8b: fb:84:07:09:9b:71:f1:22:3a:0b:50:9e:09:7b:05: e2:1b:77:12:d0:c1:14:ca:86:b9:40:90:a8:14:e3: 59:c2:e7:66:ca:9f:b1:5f:bb:db:f0:55:c7:89:3b: ac:6a:b3:09:86:ff:c7:83:f4:09:5c:e1:d2:f2:17: 92:22:0e:34:41:a1:3b:e2:b8:96:6b:13:e5:2b:2a: b0:a8:a8:4b:af:f9:4f:98:a3:c3:a3:9a:7c:58:f7: c7:dc:99:ef:0b:4b:2e:8f:f7:38:f5:41:cf:4e:eb: 97:9d:fc:64:82:75:28:48:ae:08:d4:2a:a0:7b:83: ca:58:ae:2b:73:da:06:fa:d7:71:17:12:29:b4:a3: c9:af:9b:cc:0a:c1:79:79:53:ac:91:1b:18:f0:c8: 16:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:B6:7F:45:69:CB:CD:DF:7E:4C:45:FE:57:A2:EA:6F:3C:2F:B7:E9 X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:4b:75:fb:ab:43:d9:94:80:7d:ca:02:c9:b0:e0:64:39:33: 05:50:0e:a0:e3:2c:a4:9d:ba:b2:97:5f:50:9d:d4:f1:c4:08: 34:23:f6:5a:4f:4f:15:1e:7a:28:8e:1e:36:26:54:af:b8:77: c8:28:05:2c:b3:d7:31:0e:07:e2:f3:85:d2:d3:cf:c7:8e:9f: c6:95:41:7f:d6:cf:17:66:0a:d0:0f:92:f7:1a:e2:42:47:55: e9:fc:df:f7:15:b7:d8:dc:4b:94:73:7e:08:38:24:95:5a:32: 31:3c:bd:6a:52:1a:94:12:6e:f7:cc:4d:a6:31:84:e2:69:b7: f4:a1:b9:58:b7:c6:6c:c1:ca:93:87:d5:8a:e1:04:84:d3:c0: 34:85:1b:e3:40:13:61:77:ea:e2:e5:9d:03:8a:cc:92:de:52: d2:ba:a1:57:09:ca:6f:70:70:51:74:f4:52:78:a9:70:51:41: d0:a1:b3:47:22:b8:21:f1:f3:98:31:a3:57:91:49:21:ba:fe: b9:a2:00:a3:c1:43:6a:29:1c:52:d3:73:11:27:56:ca:dc:1e: cf:e1:8d:d3:8e:7a:8f:3d:74:02:f3:1d:be:e9:3f:5e:d2:ae: 63:28:9b:2b:19:96:8b:30:28:74:31:2d:18:1c:45:54:db:45: 5a:99:75:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtl9O3RnySp2fBZi+ZRrXqNIzNowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA2MDcwMjM3MThaFw0yNTA2MTAwODUzMThaMDMxMTAvBgNV BAMTKERCQjY3RjQ1NjlDQkNEREY3RTRDNDVGRTU3QTJFQTZGM0MyRkI3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvln7+Ld/pjiVQms7hjkFgAZq/ FX0XJO63+P/NiHz4BMZmE02AuMkAN07R3u+CMkiVExZ9q7v3l+ZWfY1psl3u2kb8 Ex2hyAUblnxYr/dkuio7nP/RNB9R5tUxoIMYQ7VdaM5RRYAEi/uEBwmbcfEiOgtQ ngl7BeIbdxLQwRTKhrlAkKgU41nC52bKn7Ffu9vwVceJO6xqswmG/8eD9Alc4dLy F5IiDjRBoTviuJZrE+UrKrCoqEuv+U+Yo8OjmnxY98fcme8LSy6P9zj1Qc9O65ed /GSCdShIrgjUKqB7g8pYritz2gb613EXEim0o8mvm8wKwXl5U6yRGxjwyBbZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27Z/RWnLzd9+TEX+V6Lqbzwvt+kwHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGdLdfurQ9mUgH3KAsmw4GQ5MwVQDqDjLKSd urKXX1Cd1PHECDQj9lpPTxUeeiiOHjYmVK+4d8goBSyz1zEOB+LzhdLTz8eOn8aV QX/WzxdmCtAPkvca4kJHVen83/cVt9jcS5Rzfgg4JJVaMjE8vWpSGpQSbvfMTaYx hOJpt/ShuVi3xmzBypOH1YrhBITTwDSFG+NAE2F36uLlnQOKzJLeUtK6oVcJym9w cFF09FJ4qXBRQdChs0ciuCHx85gxo1eRSSG6/rmiAKPBQ2opHFLTcxEnVsrcHs/h jdOOeo89dALzHb7pP17SrmMomysZloswKHQxLRgcRVTbRVqZdYA= -----END CERTIFICATE-----Generated at Sun Jun 8 12:42:44 2025 by rpki-client