$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: 5P/ofLxJtYrMzVKYrNld+dMs7z8BxjOugsQhDE+AVSU= Subject key identifier: DF:4C:7D:7A:A1:9E:07:E4:97:62:07:90:54:69:38:91:DB:94:BE:16 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 26169A21D283D4AA69C666E54ED0342811D9B59B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 010E Signing time: Sun 20 Jul 2025 03:50:49 +0000 Manifest this update: Sun 20 Jul 2025 03:45:49 +0000 Manifest next update: Wed 23 Jul 2025 09:29:49 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: SqST78wbPBDCsPYL+vhMTYwj4m5Hgo6TOWMXOoOiL3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:16:9a:21:d2:83:d4:aa:69:c6:66:e5:4e:d0:34:28:11:d9:b5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Jul 20 03:45:49 2025 GMT Not After : Jul 23 09:29:49 2025 GMT Subject: CN=DF4C7D7AA19E07E49762079054693891DB94BE16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:b0:2a:0a:6c:d5:a1:d4:27:33:08:c7:a1:95: df:a9:17:9a:9d:b9:c6:d2:60:57:3f:9c:1e:d4:6c: bc:24:1f:68:44:74:87:32:4a:ec:b8:f8:1a:c9:46: 35:ae:9c:5a:18:08:c4:0b:9e:03:0b:e5:c8:6f:d6: 5c:44:a3:c2:66:6e:03:28:5c:e0:69:7f:31:ea:aa: 6c:3e:27:9d:cc:5f:79:02:45:30:1e:b1:ed:a4:36: e5:e5:e5:a0:bd:9f:d8:a2:73:b8:b1:1e:50:20:02: 61:83:f3:6f:06:60:3f:40:3b:96:f6:97:c3:94:f4: 70:7c:17:62:55:bc:be:01:15:eb:8f:ca:a8:f7:be: e8:6a:2d:a1:22:b3:c6:c3:cf:1f:48:7c:62:44:76: 92:3a:ca:f1:26:85:e8:4f:24:11:90:85:d6:61:89: 6a:b3:35:01:64:ce:a1:68:07:04:93:55:05:72:71: 40:05:8b:33:08:42:a2:f5:62:52:cf:fb:3b:c7:e2: 40:46:39:57:19:16:ec:4d:cc:15:73:d5:25:19:65: 25:70:b7:5b:8f:8f:63:54:54:89:e0:ef:30:bb:92: a1:9d:50:51:e5:bb:59:90:86:db:0f:ac:30:e5:c8: 44:21:2f:f1:ce:0e:c4:90:10:42:8a:3b:09:fd:67: d6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:4C:7D:7A:A1:9E:07:E4:97:62:07:90:54:69:38:91:DB:94:BE:16 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:8c:51:c9:54:a7:e7:7b:75:57:23:63:89:fc:cc:ea:8d:53: 51:9b:32:f0:a4:c6:b8:aa:df:e2:95:72:b0:c9:d6:86:c1:6e: 30:c4:59:88:50:7b:2d:a1:50:00:bb:71:97:9b:18:28:c5:81: d3:f5:7f:9b:4a:3c:44:e8:97:c1:0f:7b:12:23:9a:e6:52:65: 73:ae:e3:96:82:f7:aa:19:50:45:01:da:f4:f4:6a:07:de:8e: 78:da:97:f9:e7:a6:4a:09:42:65:53:01:79:66:3c:27:a6:8e: c2:1a:d5:1d:cc:0b:15:d5:75:3e:ed:5c:8c:ba:ab:78:a3:62: 50:6f:8c:36:5e:80:cc:55:e6:0d:66:5b:46:ac:db:17:91:91: 20:9c:47:89:0d:1b:48:fe:25:b9:14:af:01:32:83:02:ed:b1: 5d:be:d5:3a:28:21:81:3f:bc:3e:c7:c6:51:aa:43:6b:02:d6: 3d:11:56:01:59:17:c6:c0:a1:b3:fd:1e:53:d1:a2:1c:b4:a1: 4d:ee:7b:11:c4:e7:56:e9:ab:96:aa:8a:aa:fd:8b:28:31:58: 57:e2:80:b0:8a:09:6e:36:b4:f1:9b:21:49:80:57:ba:94:fc: f5:b2:eb:cb:b6:34:ec:c9:b0:9a:18:41:3c:8c:82:d9:17:44: 30:28:d7:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhaaIdKD1KppxmblTtA0KBHZtZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTA3MjAwMzQ1NDlaFw0yNTA3MjMwOTI5NDlaMDMxMTAvBgNV BAMTKERGNEM3RDdBQTE5RTA3RTQ5NzYyMDc5MDU0NjkzODkxREI5NEJFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChsCoKbNWh1CczCMehld+pF5qd ucbSYFc/nB7UbLwkH2hEdIcySuy4+BrJRjWunFoYCMQLngML5chv1lxEo8JmbgMo XOBpfzHqqmw+J53MX3kCRTAese2kNuXl5aC9n9iic7ixHlAgAmGD828GYD9AO5b2 l8OU9HB8F2JVvL4BFeuPyqj3vuhqLaEis8bDzx9IfGJEdpI6yvEmhehPJBGQhdZh iWqzNQFkzqFoBwSTVQVycUAFizMIQqL1YlLP+zvH4kBGOVcZFuxNzBVz1SUZZSVw t1uPj2NUVIng7zC7kqGdUFHlu1mQhtsPrDDlyEQhL/HODsSQEEKKOwn9Z9b5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU30x9eqGeB+SXYgeQVGk4kduUvhYwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWMUclUp+d7dVcjY4n8zOqNU1GbMvCkxriq 3+KVcrDJ1obBbjDEWYhQey2hUAC7cZebGCjFgdP1f5tKPETol8EPexIjmuZSZXOu 45aC96oZUEUB2vT0agfejnjal/nnpkoJQmVTAXlmPCemjsIa1R3MCxXVdT7tXIy6 q3ijYlBvjDZegMxV5g1mW0as2xeRkSCcR4kNG0j+JbkUrwEygwLtsV2+1TooIYE/ vD7HxlGqQ2sC1j0RVgFZF8bAobP9HlPRohy0oU3uexHE51bpq5aqiqr9iygxWFfi gLCKCW42tPGbIUmAV7qU/PWy68u2NOzJsJoYQTyMgtkXRDAo17I= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:47 2025 by rpki-client