$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: MdQacJjE3t6dTSxWH4ManBeRRdhU6LZSI14arIFcfb8= Subject key identifier: D7:F6:68:52:EE:46:3C:3A:84:26:37:41:9D:1E:00:84:B1:E9:71:93 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 334CBE3C0D0010FB61E96AFA26021693A7DF27F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: F9 Signing time: Mon 02 Jun 2025 21:40:49 +0000 Manifest this update: Mon 02 Jun 2025 21:35:49 +0000 Manifest next update: Thu 05 Jun 2025 21:43:49 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: KAObZZZUdx0pSTnZzu7vSmvw92vKqzKLT3mVyJa0+Gk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 21:43:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:4c:be:3c:0d:00:10:fb:61:e9:6a:fa:26:02:16:93:a7:df:27:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Jun 2 21:35:49 2025 GMT Not After : Jun 5 21:43:49 2025 GMT Subject: CN=D7F66852EE463C3A842637419D1E0084B1E97193 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:57:82:d9:66:55:58:0e:3a:8c:01:49:62:c5: 4d:f2:27:d6:49:dc:c3:15:56:ca:44:01:23:e9:b3: e3:d7:18:aa:4f:07:1d:30:f1:a8:82:ff:60:2b:36: 9c:09:dd:33:7c:94:e5:88:78:54:9b:26:be:99:55: ec:13:ee:14:74:55:ea:49:b7:ef:36:a7:85:4c:cb: 34:f9:c4:1a:a4:6a:5a:3e:8d:c6:6d:62:79:94:f9: 00:45:f1:8a:54:27:21:de:18:ab:9d:e5:33:75:c4: 5f:09:72:33:8b:7a:d7:e2:42:72:a2:30:19:62:71: cf:b5:b6:f3:d1:4d:37:76:16:7f:19:39:f5:57:01: 7a:de:17:6c:25:f8:cc:3b:00:6a:ce:9b:20:0d:d3: d9:37:d7:8f:2b:dc:64:81:7d:78:b2:92:75:85:32: e8:31:c0:5d:91:19:1c:ff:69:63:de:24:71:b9:6c: 3e:58:67:38:bb:db:0c:53:6b:ef:87:75:64:f8:05: b9:2e:6f:60:f2:a2:8c:c0:12:10:07:a2:63:cb:4a: 23:8c:da:09:c8:95:df:21:b8:b7:f6:b4:60:c7:d1: 1f:95:3a:da:03:f8:6a:2f:fa:c9:06:b6:07:37:79: a4:4c:f7:74:e9:ce:d3:d0:4b:3a:f1:41:7b:bf:6a: fb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F6:68:52:EE:46:3C:3A:84:26:37:41:9D:1E:00:84:B1:E9:71:93 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:54:52:9f:c8:7a:02:9f:cb:16:0f:b1:b5:4d:25:b6:5c:7d: d1:aa:b0:0d:03:d7:42:d9:9f:80:38:38:bc:5c:87:4b:24:fe: 60:53:c8:d1:f3:0c:e1:68:49:ce:98:56:d7:f9:a2:56:49:be: 15:9b:fc:c5:bb:99:cc:92:9b:1e:6e:91:f1:e8:67:6f:de:ef: 95:ce:78:50:de:c6:cd:08:12:35:77:fd:db:60:9c:51:e3:9c: bf:4d:ed:58:4c:73:d5:27:19:0f:79:6d:af:f2:0e:6d:5b:79: 0d:09:a4:86:09:da:2b:e6:93:4e:19:17:38:80:27:5a:43:6b: e5:e1:3a:35:a2:51:fa:58:fd:7a:db:dc:61:b3:cd:e3:d7:d2: 0d:28:86:20:54:7d:58:66:42:51:f1:dc:c9:3a:a9:62:90:73: 15:ee:c5:9e:6e:88:94:45:b5:86:06:62:22:8c:f2:9e:33:24: 33:23:b1:50:38:e1:aa:df:5a:e8:11:6f:ab:d3:91:b8:08:7f: cf:e5:df:59:8c:16:c5:94:7f:6a:b5:98:c2:51:75:1a:f4:ff: b3:bc:6b:81:8e:b4:47:b3:59:a2:8b:2d:60:4c:77:82:5e:12: 06:c9:f3:e0:82:00:9e:4b:7e:54:ee:f1:87:46:64:3a:c8:5c: 91:1b:cd:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM0y+PA0AEPth6Wr6JgIWk6ffJ/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTA2MDIyMTM1NDlaFw0yNTA2MDUyMTQzNDlaMDMxMTAvBgNV BAMTKEQ3RjY2ODUyRUU0NjNDM0E4NDI2Mzc0MTlEMUUwMDg0QjFFOTcxOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnV4LZZlVYDjqMAUlixU3yJ9ZJ 3MMVVspEASPps+PXGKpPBx0w8aiC/2ArNpwJ3TN8lOWIeFSbJr6ZVewT7hR0VepJ t+82p4VMyzT5xBqkalo+jcZtYnmU+QBF8YpUJyHeGKud5TN1xF8JcjOLetfiQnKi MBlicc+1tvPRTTd2Fn8ZOfVXAXreF2wl+Mw7AGrOmyAN09k3148r3GSBfXiyknWF MugxwF2RGRz/aWPeJHG5bD5YZzi72wxTa++HdWT4Bbkub2DyoozAEhAHomPLSiOM 2gnIld8huLf2tGDH0R+VOtoD+Gov+skGtgc3eaRM93TpztPQSzrxQXu/avtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/ZoUu5GPDqEJjdBnR4AhLHpcZMwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOZUUp/IegKfyxYPsbVNJbZcfdGqsA0D10LZ n4A4OLxch0sk/mBTyNHzDOFoSc6YVtf5olZJvhWb/MW7mcySmx5ukfHoZ2/e75XO eFDexs0IEjV3/dtgnFHjnL9N7VhMc9UnGQ95ba/yDm1beQ0JpIYJ2ivmk04ZFziA J1pDa+XhOjWiUfpY/Xrb3GGzzePX0g0ohiBUfVhmQlHx3Mk6qWKQcxXuxZ5uiJRF tYYGYiKM8p4zJDMjsVA44arfWugRb6vTkbgIf8/l31mMFsWUf2q1mMJRdRr0/7O8 a4GOtEezWaKLLWBMd4JeEgbJ8+CCAJ5LflTu8YdGZDrIXJEbzSU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:17:18 2025 by rpki-client