$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: L7sssDeJa/WSJSMWGKMephGjgQL1V3s59CIVfEt36b4= Subject key identifier: CC:54:29:3C:4E:D2:DA:CB:B5:18:AE:3B:E7:A6:97:DF:46:73:E4:FC Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 652EEB1176BD4E6C1AA555B44690A9A2BED4E768 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 13 Signing time: Sun 20 Jul 2025 05:52:15 +0000 Manifest this update: Sun 20 Jul 2025 05:47:15 +0000 Manifest next update: Wed 23 Jul 2025 08:02:15 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: x3C+mO3SWr8PSpwYJ90M9imnhz6L54mHzXgX5Pkslqo=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 08:02:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:2e:eb:11:76:bd:4e:6c:1a:a5:55:b4:46:90:a9:a2:be:d4:e7:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Jul 20 05:47:15 2025 GMT Not After : Jul 23 08:02:15 2025 GMT Subject: CN=CC54293C4ED2DACBB518AE3BE7A697DF4673E4FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:1a:cf:48:86:6d:2e:5d:32:0f:40:a5:76: 61:57:1d:94:7a:41:b7:f7:c8:da:e2:57:32:e7:b7: bf:37:6e:68:cd:6b:fb:24:f1:81:ac:14:a0:83:b6: e3:56:e5:77:16:4c:ff:02:3b:ef:c7:55:11:d8:07: a3:85:4b:d8:87:ed:b2:05:ec:eb:35:84:28:9e:4c: 40:76:3a:1d:7a:ef:34:76:66:b0:97:c7:2d:08:15: 56:6e:ca:99:8f:b6:99:10:03:0a:47:98:41:d2:3d: c4:35:35:ef:1e:36:7c:c4:93:ba:a7:2f:47:57:d8: 06:b3:64:82:bf:09:f6:79:0b:ce:28:40:1d:41:9b: d4:ae:52:2d:0b:6c:60:b1:5d:87:61:d1:dc:e7:d0: c9:ad:e3:bf:e5:4b:6d:c7:0e:06:1d:1d:72:23:a0: 66:f5:8f:cb:d0:a7:bc:c0:2c:af:1f:d4:66:d4:6f: 67:59:2d:ad:c4:8e:b2:ed:67:57:18:6a:10:33:ad: 7b:7e:59:8c:13:5a:c8:2a:c9:9d:ad:24:fa:17:18: 6b:4d:b9:f5:6e:ab:0a:52:40:48:88:b5:38:dc:08: 59:97:aa:62:d0:f6:8e:29:cb:c6:1f:f9:61:f6:4c: c1:38:9a:93:9e:8e:63:f8:af:5d:e2:50:b0:79:07: 3e:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:54:29:3C:4E:D2:DA:CB:B5:18:AE:3B:E7:A6:97:DF:46:73:E4:FC X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:e9:51:b0:18:63:50:a5:83:f0:1e:44:ee:1e:8e:13:0f:a1: dd:f5:c6:45:a0:e8:a6:50:9c:4d:4a:6c:78:e1:f1:20:8f:48: e9:08:f6:e1:20:a6:f1:1a:40:0b:56:fc:3b:e4:11:0e:30:a0: a2:66:a8:7d:62:2c:81:af:73:03:04:bf:b8:35:a2:91:f7:3e: de:80:1a:ff:9b:92:1d:af:a6:2c:72:dd:ee:e3:22:b4:a7:1f: f1:5a:14:58:66:c5:de:24:9c:d0:b8:a6:9a:0a:ea:67:70:e6: 67:1e:2f:c4:4b:b3:f0:ab:98:20:88:0e:e3:3f:3c:46:98:44: 3b:ac:10:e0:c0:9d:63:8d:b0:6d:e5:d0:0a:d7:c6:12:aa:f6: ee:b6:f8:4c:38:51:51:cd:a1:70:f9:5a:85:97:9e:cc:e0:cc: 41:23:4a:a7:85:1f:f1:4c:ba:de:e2:99:61:11:53:91:17:02: 26:cd:6b:f9:66:0a:d5:9f:05:7c:62:4e:8f:b5:53:7f:95:55: 88:51:b1:18:04:fd:c8:55:5d:25:cd:b1:c2:e4:5c:ae:34:00: c4:25:b4:fa:6b:91:e7:ca:ed:21:6d:57:4b:32:fb:4a:8f:70: 0f:0b:17:17:30:6e:fb:8c:fb:67:61:e0:93:5a:73:47:f5:b3: 40:d5:c8:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZS7rEXa9TmwapVW0RpCpor7U52gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTA3MjAwNTQ3MTVaFw0yNTA3MjMwODAyMTVaMDMxMTAvBgNV BAMTKENDNTQyOTNDNEVEMkRBQ0JCNTE4QUUzQkU3QTY5N0RGNDY3M0U0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFRBrPSIZtLl0yD0CldmFXHZR6 Qbf3yNriVzLnt783bmjNa/sk8YGsFKCDtuNW5XcWTP8CO+/HVRHYB6OFS9iH7bIF 7Os1hCieTEB2Oh167zR2ZrCXxy0IFVZuypmPtpkQAwpHmEHSPcQ1Ne8eNnzEk7qn L0dX2AazZIK/CfZ5C84oQB1Bm9SuUi0LbGCxXYdh0dzn0Mmt47/lS23HDgYdHXIj oGb1j8vQp7zALK8f1GbUb2dZLa3EjrLtZ1cYahAzrXt+WYwTWsgqyZ2tJPoXGGtN ufVuqwpSQEiItTjcCFmXqmLQ9o4py8Yf+WH2TME4mpOejmP4r13iULB5Bz5hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzFQpPE7S2su1GK4756aX30Zz5PwwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7pUbAYY1Clg/AeRO4ejhMPod31xkWg6KZQ nE1KbHjh8SCPSOkI9uEgpvEaQAtW/DvkEQ4woKJmqH1iLIGvcwMEv7g1opH3Pt6A Gv+bkh2vpixy3e7jIrSnH/FaFFhmxd4knNC4ppoK6mdw5mceL8RLs/CrmCCIDuM/ PEaYRDusEODAnWONsG3l0ArXxhKq9u62+Ew4UVHNoXD5WoWXnszgzEEjSqeFH/FM ut7imWERU5EXAibNa/lmCtWfBXxiTo+1U3+VVYhRsRgE/chVXSXNscLkXK40AMQl tPprkefK7SFtV0sy+0qPcA8LFxcwbvuM+2dh4JNac0f1s0DVyLU= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:04 2025 by rpki-client