$ rpki-client -vvf repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft File: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft (raw, json) Hash identifier: pRLdHIT7mtt+X4fwIyZJ4leD4SMH8501TAWbS7H5TSk= Subject key identifier: 43:FD:FA:18:CF:56:12:88:15:6D:22:A8:ED:54:CA:3A:B4:9C:A1:CE Authority key identifier: 0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 Certificate issuer: /CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Certificate serial: 2A12DD9A6402AC16608C61FA8E7B8500243A1DBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft Manifest number: 41 Signing time: Fri 18 Apr 2025 09:42:18 +0000 Manifest this update: Fri 18 Apr 2025 09:37:18 +0000 Manifest next update: Mon 21 Apr 2025 18:06:18 +0000 Files and hashes: 1: 0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl (hash: QI/dFBgpQRxMMNHguwAezRoTQeSOr3OYLT6vY/q4Wus=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:06:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:12:dd:9a:64:02:ac:16:60:8c:61:fa:8e:7b:85:00:24:3a:1d:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0CE1FC473D0C13A032D39EE0433A7A5935A7BE00 Validity Not Before: Apr 18 09:37:18 2025 GMT Not After : Apr 21 18:06:18 2025 GMT Subject: CN=43FDFA18CF561288156D22A8ED54CA3AB49CA1CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:74:4f:06:d0:1a:ed:87:80:f3:83:3c:dd:a4: 7b:bf:cf:a7:23:05:f2:e9:0e:a9:4b:31:85:60:c4: 7f:5e:52:78:b4:d5:f3:b0:31:77:df:c1:e9:f5:e7: 7e:1a:2c:91:eb:3b:af:24:72:ee:0e:36:55:a2:1e: 87:66:1f:55:3d:f2:b8:a8:1a:4d:8e:68:06:63:87: d9:54:92:cf:30:e7:3e:64:7b:ce:4f:20:1a:42:65: b1:4e:78:d3:0b:b8:56:db:ba:d0:92:79:f9:37:b3: 11:34:1b:47:b7:77:24:60:84:62:31:c7:3f:ed:6e: 7f:10:e3:31:de:56:95:45:f1:a7:2b:05:64:e2:df: 0f:3c:b9:d7:31:88:f5:a2:ec:f0:07:9a:08:15:4c: d6:02:65:fa:e5:9b:7f:df:4a:76:5c:2a:4a:82:cf: 81:e2:0a:a5:18:fe:bc:1a:25:3a:0d:7d:c9:9f:a6: c9:ad:df:22:1e:ab:78:6a:0a:6e:70:e2:db:60:a7: a4:68:3e:8d:69:37:54:3c:27:f6:b4:cf:70:47:8d: 88:07:f7:2b:90:e1:e9:d8:1b:fe:0d:31:a1:c8:bf: cd:23:9c:92:8e:8b:55:04:e3:ac:ec:88:f1:15:2b: f6:16:9a:8a:db:cf:f1:d8:3f:4c:a5:8c:c7:18:b0: ed:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:FD:FA:18:CF:56:12:88:15:6D:22:A8:ED:54:CA:3A:B4:9C:A1:CE X509v3 Authority Key Identifier: keyid:0C:E1:FC:47:3D:0C:13:A0:32:D3:9E:E0:43:3A:7A:59:35:A7:BE:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72f47763-b0e0-4d01-b6c8-60ea4ca560b4/0/0CE1FC473D0C13A032D39EE0433A7A5935A7BE00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:e2:a6:32:4f:29:ee:1b:70:58:a2:9b:ce:c1:71:c6:0e:9b: fc:c2:69:bb:c1:55:1b:7e:98:8a:c4:25:69:b4:6d:52:c0:91: 68:55:fb:f2:cf:b5:cd:dc:f9:b0:78:88:5c:31:0e:2c:52:67: 8a:d5:17:88:a2:53:c8:f0:87:2d:10:fa:2b:6b:b6:03:9a:00: e3:7c:4e:59:68:88:64:72:1c:a0:81:16:56:fc:1f:6e:ee:75: 24:5a:44:2b:25:ee:a8:ed:bf:87:c7:a4:9e:c4:a0:55:1d:40: 2c:a7:88:fa:52:ba:b5:d8:2b:78:7d:d8:d9:21:75:4f:87:77: 1f:10:d6:90:c5:d7:ee:72:a4:87:10:5d:a2:09:93:b1:66:1b: 8e:54:42:aa:4d:3b:73:a9:32:23:d3:69:f5:56:42:ec:6c:da: ab:95:28:69:48:67:51:65:d6:17:d2:d7:52:0b:8f:30:9b:59: 13:69:43:a6:8b:cd:23:0f:59:6c:2a:ae:38:e4:cf:1c:ac:a6: 2e:c2:17:4f:83:39:3c:dd:67:7e:4e:50:ae:b8:b7:5a:57:8e: 43:29:8b:12:61:bd:72:a8:68:fb:c4:bf:c7:e2:70:f9:58:0e: e6:51:69:de:f2:9a:06:ad:4b:b5:51:57:35:38:e0:92:40:26: 51:80:e4:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhLdmmQCrBZgjGH6jnuFACQ6HbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkz NUE3QkUwMDAeFw0yNTA0MTgwOTM3MThaFw0yNTA0MjExODA2MThaMDMxMTAvBgNV BAMTKDQzRkRGQTE4Q0Y1NjEyODgxNTZEMjJBOEVENTRDQTNBQjQ5Q0ExQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtdE8G0Brth4DzgzzdpHu/z6cj BfLpDqlLMYVgxH9eUni01fOwMXffwen1534aLJHrO68kcu4ONlWiHodmH1U98rio Gk2OaAZjh9lUks8w5z5ke85PIBpCZbFOeNMLuFbbutCSefk3sxE0G0e3dyRghGIx xz/tbn8Q4zHeVpVF8acrBWTi3w88udcxiPWi7PAHmggVTNYCZfrlm3/fSnZcKkqC z4HiCqUY/rwaJToNfcmfpsmt3yIeq3hqCm5w4ttgp6RoPo1pN1Q8J/a0z3BHjYgH 9yuQ4enYG/4NMaHIv80jnJKOi1UE46zsiPEVK/YWmorbz/HYP0yljMcYsO3XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/36GM9WEogVbSKo7VTKOrScoc4wHwYDVR0j BBgwFoAUDOH8Rz0ME6Ay057gQzp6WTWnvgAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmY0Nzc2My1iMGUwLTRkMDEtYjZjOC02MGVhNGNhNTYwYjQvMC8wQ0UxRkM0NzNE MEMxM0EwMzJEMzlFRTA0MzNBN0E1OTM1QTdCRTAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdBNTkzNUE3 QkUwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJmNDc3NjMtYjBlMC00ZDAxLWI2 YzgtNjBlYTRjYTU2MGI0LzAvMENFMUZDNDczRDBDMTNBMDMyRDM5RUUwNDMzQTdB NTkzNUE3QkUwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJHipjJPKe4bcFiim87BccYOm/zCabvBVRt+ mIrEJWm0bVLAkWhV+/LPtc3c+bB4iFwxDixSZ4rVF4iiU8jwhy0Q+itrtgOaAON8 TlloiGRyHKCBFlb8H27udSRaRCsl7qjtv4fHpJ7EoFUdQCyniPpSurXYK3h92Nkh dU+Hdx8Q1pDF1+5ypIcQXaIJk7FmG45UQqpNO3OpMiPTafVWQuxs2quVKGlIZ1Fl 1hfS11ILjzCbWRNpQ6aLzSMPWWwqrjjkzxyspi7CF0+DOTzdZ35OUK64t1pXjkMp ixJhvXKoaPvEv8ficPlYDuZRad7ymgatS7VRVzU44JJAJlGA5As= -----END CERTIFICATE-----Generated at Sat Apr 19 12:30:08 2025 by rpki-client