$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: FQwXrZ3jnQzOlH4UdecD1oqhflsohwfyKVFNGHyMjPU= Subject key identifier: 0C:56:B3:DA:F9:F9:08:FC:C0:43:D4:A2:88:FE:A6:5C:D2:A5:CD:D3 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 1F1BA583C9A89433190649C6BC868FBF6E1164E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: F2 Signing time: Sun 20 Jul 2025 23:12:02 +0000 Manifest this update: Sun 20 Jul 2025 23:07:02 +0000 Manifest next update: Thu 24 Jul 2025 10:18:02 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 4N9VZOWVnsyPorGBc7uO7fNDjS7nKkffWXDjZDLfzrs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:1b:a5:83:c9:a8:94:33:19:06:49:c6:bc:86:8f:bf:6e:11:64:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Jul 20 23:07:02 2025 GMT Not After : Jul 24 10:18:02 2025 GMT Subject: CN=0C56B3DAF9F908FCC043D4A288FEA65CD2A5CDD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:56:71:87:a5:da:2a:3b:92:00:32:18:76:d5: 90:1e:36:04:ba:42:c0:b8:20:99:63:b7:e9:2b:9a: cc:62:e9:c3:a8:7f:a3:09:b5:b4:78:12:bb:4d:4e: a9:86:9c:9f:69:98:a6:1f:7f:f7:28:5a:78:9a:54: a2:0c:8b:82:89:40:16:0f:4f:6f:5e:45:aa:0c:99: cf:47:37:86:d2:e9:0f:a7:6f:dc:9d:7d:a3:e2:67: ce:87:3b:7b:20:65:eb:2e:53:a4:77:b6:10:2a:ff: 12:a5:ed:f2:25:52:36:fd:04:16:67:41:e0:ea:49: 2e:0a:e9:d5:bd:a0:f8:59:a7:88:88:74:90:88:f4: 44:c9:ec:63:e6:a7:69:ea:80:05:d5:58:3c:af:07: 32:ea:18:3c:ed:f2:db:7d:f3:34:f1:53:d0:49:76: 3b:41:22:ae:07:d0:90:2b:fc:3c:32:1b:f5:0d:2e: 4b:bb:39:ee:48:e7:64:12:49:7c:a7:20:ba:36:82: f7:4a:32:43:72:8d:75:da:39:ed:12:1e:c6:b4:04: 58:0a:d5:91:94:b7:3a:0e:0d:82:ba:1d:c3:06:cf: 2c:54:32:d6:41:60:3e:cf:ac:e2:78:40:a4:f5:0d: 56:73:29:06:bb:67:27:ca:4e:2f:e9:7d:58:25:b5: 3e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:56:B3:DA:F9:F9:08:FC:C0:43:D4:A2:88:FE:A6:5C:D2:A5:CD:D3 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:39:75:fe:89:36:7b:42:b1:67:4c:f7:1c:0f:b8:b2:d2:fb: 57:c8:28:7e:cc:9e:ef:c5:74:9b:7e:7a:9d:b1:10:78:b4:47: 10:5d:ce:fd:12:af:21:67:6e:3a:ca:8c:31:a1:6e:28:63:b5: d2:4b:a8:b5:1d:77:50:62:cf:8d:6a:55:aa:68:d1:94:9b:94: 76:29:0c:62:51:82:11:75:69:c8:31:a0:9f:61:b7:c1:e4:8a: 2e:1f:cd:69:df:9f:07:65:40:20:9e:30:d6:13:6f:45:cf:6d: 5e:bc:ec:f2:6b:fb:cc:f1:41:23:42:0e:e8:bd:eb:25:9e:01: d4:c2:6c:4c:c0:6d:41:b3:76:e4:46:17:27:fc:41:58:6b:10: 6b:66:98:00:9b:be:76:f7:a0:e3:e4:7a:8a:0f:a2:f8:f4:a2: 05:f2:62:95:50:a7:1d:31:2a:24:55:4b:89:b2:31:c1:c3:17: 3f:21:81:0a:d9:23:4a:58:ab:e7:65:eb:e3:93:a5:92:89:d6: 4f:f0:61:16:5f:8b:9b:a6:bc:68:e1:94:7f:6f:7b:bb:35:4d: f3:fe:27:7f:8f:39:9b:d4:1a:4f:b3:8f:90:32:62:e7:e3:36: f2:4d:33:ea:c9:b1:d6:00:c9:ed:d2:6d:29:d7:35:04:10:ce: 2a:49:14:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHxulg8molDMZBknGvIaPv24RZOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA3MjAyMzA3MDJaFw0yNTA3MjQxMDE4MDJaMDMxMTAvBgNV BAMTKDBDNTZCM0RBRjlGOTA4RkNDMDQzRDRBMjg4RkVBNjVDRDJBNUNERDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIVnGHpdoqO5IAMhh21ZAeNgS6 QsC4IJljt+krmsxi6cOof6MJtbR4ErtNTqmGnJ9pmKYff/coWniaVKIMi4KJQBYP T29eRaoMmc9HN4bS6Q+nb9ydfaPiZ86HO3sgZesuU6R3thAq/xKl7fIlUjb9BBZn QeDqSS4K6dW9oPhZp4iIdJCI9ETJ7GPmp2nqgAXVWDyvBzLqGDzt8tt98zTxU9BJ djtBIq4H0JAr/DwyG/UNLku7Oe5I52QSSXynILo2gvdKMkNyjXXaOe0SHsa0BFgK 1ZGUtzoODYK6HcMGzyxUMtZBYD7PrOJ4QKT1DVZzKQa7ZyfKTi/pfVgltT4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDFaz2vn5CPzAQ9SiiP6mXNKlzdMwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGU5df6JNntCsWdM9xwPuLLS+1fIKH7Mnu/F dJt+ep2xEHi0RxBdzv0SryFnbjrKjDGhbihjtdJLqLUdd1Biz41qVapo0ZSblHYp DGJRghF1acgxoJ9ht8Hkii4fzWnfnwdlQCCeMNYTb0XPbV687PJr+8zxQSNCDui9 6yWeAdTCbEzAbUGzduRGFyf8QVhrEGtmmACbvnb3oOPkeooPovj0ogXyYpVQpx0x KiRVS4myMcHDFz8hgQrZI0pYq+dl6+OTpZKJ1k/wYRZfi5umvGjhlH9ve7s1TfP+ J3+POZvUGk+zj5AyYufjNvJNM+rJsdYAye3SbSnXNQQQzipJFKk= -----END CERTIFICATE-----Generated at Tue Jul 22 04:31:30 2025 by rpki-client