$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json) Hash identifier: W5mShpKd+PLfujkqqGDkyWeLjHHSIFzISlSu7FQRUDA= Subject key identifier: 3D:5E:D3:24:58:D2:17:E6:EC:F4:E8:30:38:08:E5:2A:89:AC:B8:F8 Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Certificate serial: 4C5E7A6A1F457A3047EBF55EFA140412AB60BD8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft Manifest number: 0346 Signing time: Mon 21 Jul 2025 04:02:55 +0000 Manifest this update: Mon 21 Jul 2025 03:57:55 +0000 Manifest next update: Thu 24 Jul 2025 04:10:55 +0000 Files and hashes: 1: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: OqgAqdXTkd1D2NhPAZ/UZhCfurgUG69NUxmVZKteHcQ=) 2: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: ZB2kD6NR/mYv5kGEqytph50kcVXoUhI+Q/8OQb+2EIo=) 3: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: mdAnNzPQX1fBQRxqx/liQc+y8HoOIQ1ZRmWeSXm/9lE=) 4: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: XIli98cQ5DslYaylLZi+5Ts9pki82Z8fAKzqEWLUjbk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 04:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5e:7a:6a:1f:45:7a:30:47:eb:f5:5e:fa:14:04:12:ab:60:bd:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Validity Not Before: Jul 21 03:57:55 2025 GMT Not After : Jul 24 04:10:55 2025 GMT Subject: CN=3D5ED32458D217E6ECF4E8303808E52A89ACB8F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:95:ca:2d:26:99:6f:5d:06:8d:7f:31:a1:52: cd:b7:d7:fa:1c:62:7b:1f:b5:a6:ab:ba:38:95:07: a2:90:89:44:8f:e1:88:8a:cf:4f:22:bf:69:13:c9: cd:ae:a1:ba:29:af:28:99:a5:d1:4e:6e:21:2f:f7: f4:42:53:1a:8d:bd:c5:db:84:7b:6f:ec:1e:63:50: 89:d2:6c:28:f2:d9:f0:54:eb:30:43:e9:be:2c:1a: e8:6c:07:49:30:3b:f1:b5:af:4c:a9:cf:bd:ce:6c: 7b:0c:b9:26:bc:e8:77:46:e8:ab:52:22:98:a1:a9: 21:e7:02:f1:a5:80:9e:c0:0d:50:0d:24:4f:7c:69: 4c:7a:5e:b8:6c:df:88:39:13:95:59:c1:18:65:9a: e7:a5:30:52:fc:d7:a2:5e:f8:10:5d:5d:da:2a:62: 27:ba:79:d1:dc:64:bb:42:d7:a5:4b:a0:1d:59:9a: cd:41:77:ab:96:ec:32:0a:2c:4c:a4:bd:7b:85:23: 90:14:1d:67:42:b4:a1:c4:12:4d:65:2a:61:85:f2: 20:21:52:90:cc:3c:92:36:59:4c:85:18:9c:49:d2: 77:df:7d:b0:4e:5b:ab:93:c9:07:16:03:d0:70:ed: ad:8c:5d:e6:2a:37:5b:ae:40:55:7e:a5:a1:93:d7: 8c:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:5E:D3:24:58:D2:17:E6:EC:F4:E8:30:38:08:E5:2A:89:AC:B8:F8 X509v3 Authority Key Identifier: keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:ec:25:00:21:f7:73:5e:32:a7:6d:8c:97:c0:e1:27:b4:93: 63:53:e9:b7:f9:b0:3d:39:21:80:4b:dc:df:4c:54:aa:38:a6: f1:bc:af:85:2d:ac:07:63:6d:2a:c2:d4:20:11:72:b8:a2:cc: c8:c9:c0:8c:8a:2b:2d:0e:cf:5c:ce:45:8a:d6:eb:59:4b:25: 6e:7d:01:52:7c:c1:3d:49:4e:d6:44:53:1d:32:cb:b4:c0:d5: ee:48:5f:e9:4e:22:9e:f8:ac:03:04:cf:40:a5:93:20:6d:54: f4:7f:a1:c1:ae:b5:51:ac:58:3b:a5:18:68:ac:ee:23:44:d3: aa:fc:5b:91:ed:f9:fe:5c:6b:11:4a:b6:b2:29:1f:24:6b:2d: 2f:0e:8d:f8:96:56:4e:c9:6f:25:b6:13:f6:5c:b5:1e:be:a1: 6a:f1:76:cc:5d:62:71:15:5e:61:3c:95:52:16:95:47:4a:ff: 6d:6a:92:bf:e7:79:b0:8d:96:0f:59:0d:2e:93:e6:84:76:db: b3:9e:9f:cb:fc:e3:6e:b2:38:5e:bd:7b:7c:49:d0:07:2d:c1: 20:44:b9:85:5e:1b:9e:82:ac:36:30:0b:29:00:33:ba:e7:6b: e2:90:3f:fc:26:06:65:bd:96:bd:83:50:8b:0f:b8:f5:f8:0a: f8:0f:be:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTF56ah9FejBH6/Ve+hQEEqtgvY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF NDlFOEExNzAeFw0yNTA3MjEwMzU3NTVaFw0yNTA3MjQwNDEwNTVaMDMxMTAvBgNV BAMTKDNENUVEMzI0NThEMjE3RTZFQ0Y0RTgzMDM4MDhFNTJBODlBQ0I4RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lcotJplvXQaNfzGhUs231/oc YnsftaarujiVB6KQiUSP4YiKz08iv2kTyc2uobopryiZpdFObiEv9/RCUxqNvcXb hHtv7B5jUInSbCjy2fBU6zBD6b4sGuhsB0kwO/G1r0ypz73ObHsMuSa86HdG6KtS IpihqSHnAvGlgJ7ADVANJE98aUx6Xrhs34g5E5VZwRhlmuelMFL816Je+BBdXdoq Yie6edHcZLtC16VLoB1Zms1Bd6uW7DIKLEykvXuFI5AUHWdCtKHEEk1lKmGF8iAh UpDMPJI2WUyFGJxJ0nfffbBOW6uTyQcWA9Bw7a2MXeYqN1uuQFV+paGT14xJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPV7TJFjSF+bs9OgwOAjlKomsuPgwHwYDVR0j BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2 NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2 N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/sJQAh93NeMqdtjJfA4Se0k2NT6bf5sD05 IYBL3N9MVKo4pvG8r4UtrAdjbSrC1CARcriizMjJwIyKKy0Oz1zORYrW61lLJW59 AVJ8wT1JTtZEUx0yy7TA1e5IX+lOIp74rAMEz0ClkyBtVPR/ocGutVGsWDulGGis 7iNE06r8W5Ht+f5caxFKtrIpHyRrLS8OjfiWVk7JbyW2E/ZctR6+oWrxdsxdYnEV XmE8lVIWlUdK/21qkr/nebCNlg9ZDS6T5oR227Oen8v8426yOF69e3xJ0ActwSBE uYVeG56CrDYwCykAM7rna+KQP/wmBmW9lr2DUIsPuPX4CvgPvjc= -----END CERTIFICATE-----Generated at Mon Jul 21 18:05:47 2025 by rpki-client