$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: wt2NP3+dPM5aiqTWzIBVLHJ69VolB4hxBZsYeLdK9yo= Subject key identifier: 38:D8:DC:21:D4:99:C4:40:22:84:2B:4F:1E:14:65:DB:12:92:76:EA Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 5CB5D3C873FA19D58021F9B8A9F30FCEDC7A15C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 0123 Signing time: Fri 05 Sep 2025 07:20:49 +0000 Manifest this update: Fri 05 Sep 2025 07:15:49 +0000 Manifest next update: Mon 08 Sep 2025 16:05:49 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: zDHae4knhZjlGNhD05azeFjffHp97zBq48+tQbNapV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 16:05:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b5:d3:c8:73:fa:19:d5:80:21:f9:b8:a9:f3:0f:ce:dc:7a:15:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Sep 5 07:15:49 2025 GMT Not After : Sep 8 16:05:49 2025 GMT Subject: CN=38D8DC21D499C44022842B4F1E1465DB129276EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:fd:78:b3:3d:de:1e:26:34:29:8f:3b:52:9c: 54:90:75:7e:6c:be:b3:80:00:09:8d:a1:4d:3a:a8: 73:75:d4:9b:e6:aa:d5:e1:34:28:b9:bd:ed:f5:e2: 5f:06:22:3f:31:30:d7:40:e7:d8:ec:fb:ab:3c:b4: 1c:a1:48:ad:65:a1:c2:01:b5:4a:3c:ce:c3:5c:63: fe:1c:bb:81:fd:24:fb:8f:cb:e2:de:91:33:4a:9e: 06:d1:4e:0e:72:31:b4:06:eb:e7:90:46:10:69:6b: af:4e:e1:d0:23:e0:07:65:53:52:ea:61:51:ef:10: 83:63:9a:08:6c:f9:3f:c5:fc:74:2f:b7:d6:76:c8: 2a:a1:aa:b2:ab:b6:71:9c:f5:00:86:69:cc:43:6e: 2b:ad:5c:bb:53:45:35:21:e5:40:6c:4d:a2:0d:47: b2:b2:57:69:d0:24:2c:5f:bf:46:76:ca:ae:6a:9c: d5:fd:f2:18:6e:53:1c:2e:84:db:4b:9a:70:3c:5c: 4e:46:ee:e7:2a:7d:2c:7f:6c:57:7f:f2:3e:bd:76: e0:02:1b:08:59:53:25:4a:54:d4:99:7d:c3:37:af: b7:78:97:ea:ef:97:66:2b:55:65:d6:e8:98:8e:d7: f0:75:d2:90:20:20:96:bc:82:4e:f0:5d:76:30:04: 21:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D8:DC:21:D4:99:C4:40:22:84:2B:4F:1E:14:65:DB:12:92:76:EA X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b0:b0:76:98:8e:ff:37:b7:f0:6a:d3:5a:b4:32:62:ee:c4: d3:86:f3:ad:e5:b7:f9:77:db:4f:01:fe:0b:e6:34:68:77:fa: db:87:24:a4:c3:fb:3d:0c:a1:bc:ce:49:4d:55:1f:26:3a:75: 4f:8a:55:71:39:b5:9a:ee:53:11:98:89:0f:bf:e3:83:72:12: 66:91:44:8d:5e:0f:de:f3:59:9a:24:35:3a:26:00:66:3d:ae: 0d:02:a9:a5:58:80:96:6e:1e:ee:3f:f5:14:bb:79:cc:ce:af: 53:02:31:df:03:61:62:21:59:71:5e:e0:81:2d:42:5f:a2:93: b9:94:b1:d7:1e:c9:5a:e3:2a:bf:f8:41:ca:ab:b1:77:5d:c9: 4d:3a:31:18:93:97:1c:21:ff:ef:73:73:ec:d0:06:49:d0:e7: fe:b4:47:77:35:57:f7:a3:28:73:af:54:20:ca:e8:62:aa:a3: cc:89:2b:0b:1a:f0:97:6e:98:d1:f2:35:5e:34:d4:47:f5:13: 2a:c8:c9:7b:46:18:2c:8c:d2:ac:34:43:7f:08:12:27:66:26: 1e:3d:5b:1c:d2:61:aa:aa:a8:c3:77:df:b4:a7:8c:4a:74:21: 76:b3:13:d0:fb:4c:75:fa:44:6c:e7:39:69:6f:cd:9c:c7:59: 01:30:25:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLXTyHP6GdWAIfm4qfMPztx6FckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTA5MDUwNzE1NDlaFw0yNTA5MDgxNjA1NDlaMDMxMTAvBgNV BAMTKDM4RDhEQzIxRDQ5OUM0NDAyMjg0MkI0RjFFMTQ2NURCMTI5Mjc2RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDz/XizPd4eJjQpjztSnFSQdX5s vrOAAAmNoU06qHN11JvmqtXhNCi5ve314l8GIj8xMNdA59js+6s8tByhSK1locIB tUo8zsNcY/4cu4H9JPuPy+LekTNKngbRTg5yMbQG6+eQRhBpa69O4dAj4AdlU1Lq YVHvEINjmghs+T/F/HQvt9Z2yCqhqrKrtnGc9QCGacxDbiutXLtTRTUh5UBsTaIN R7KyV2nQJCxfv0Z2yq5qnNX98hhuUxwuhNtLmnA8XE5G7ucqfSx/bFd/8j69duAC GwhZUyVKVNSZfcM3r7d4l+rvl2YrVWXW6JiO1/B10pAgIJa8gk7wXXYwBCEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUONjcIdSZxEAihCtPHhRl2xKSduowHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGwsHaYjv83t/Bq01q0MmLuxNOG863lt/l3 208B/gvmNGh3+tuHJKTD+z0MobzOSU1VHyY6dU+KVXE5tZruUxGYiQ+/44NyEmaR RI1eD97zWZokNTomAGY9rg0CqaVYgJZuHu4/9RS7eczOr1MCMd8DYWIhWXFe4IEt Ql+ik7mUsdceyVrjKr/4QcqrsXddyU06MRiTlxwh/+9zc+zQBknQ5/60R3c1V/ej KHOvVCDK6GKqo8yJKwsa8JdumNHyNV401Ef1EyrIyXtGGCyM0qw0Q38IEidmJh49 WxzSYaqqqMN337SnjEp0IXazE9D7THX6RGznOWlvzZzHWQEwJWg= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:03 2025 by rpki-client