$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: lP9pyqEPv4cPWCIZ0VhuITdT6Z2C2MhiY6DMMM1xQII= Subject key identifier: 71:48:7A:32:06:6A:22:BC:08:A2:80:08:F0:E9:DC:D8:76:7B:AB:8D Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 79A1C88BBD3FA07ED024315E5AE7264557460BED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0106 Signing time: Wed 03 Sep 2025 06:42:03 +0000 Manifest this update: Wed 03 Sep 2025 06:37:03 +0000 Manifest next update: Sat 06 Sep 2025 09:21:03 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 0pRXVA+4ClhJWSwseJOdObGy8fQqL6zmYXB6L8lE29E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 09:21:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a1:c8:8b:bd:3f:a0:7e:d0:24:31:5e:5a:e7:26:45:57:46:0b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Sep 3 06:37:03 2025 GMT Not After : Sep 6 09:21:03 2025 GMT Subject: CN=71487A32066A22BC08A28008F0E9DCD8767BAB8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ef:60:a2:71:3b:ca:b8:f2:cf:be:13:a0:89: fa:35:31:99:0a:b8:a5:9d:7e:68:cc:c1:57:db:29: 2e:a2:d8:5d:52:c0:a6:90:3d:dc:00:40:3a:27:d4: 36:32:6f:13:d1:f6:9c:f3:9b:00:ca:26:0a:08:52: f9:cd:93:00:95:7c:a6:2e:ce:53:bd:fe:24:6f:47: 48:fd:94:22:c0:72:20:0c:fc:9c:10:84:79:60:41: f4:f2:07:04:be:38:d0:14:26:11:97:93:03:0b:15: ca:2f:ae:d6:74:da:87:94:e6:51:11:cb:dd:fd:ec: 42:0e:ef:62:54:94:04:46:d9:c7:e5:89:9e:09:c1: 88:bd:d7:a3:9d:8b:a6:c9:7b:d7:a4:80:ce:9e:73: 69:59:29:60:04:05:b5:32:77:d0:d8:ea:95:02:c3: 21:84:58:d1:b8:9c:5b:e8:d3:6f:09:b9:e4:93:84: 31:98:ef:29:10:39:41:e6:de:44:b1:62:33:72:c1: 63:9c:f0:d4:46:fd:ed:63:df:cd:40:2f:79:3a:fd: 24:2d:79:da:38:7e:36:b1:b0:03:06:a4:48:4f:42: b1:87:4b:5f:6e:30:cb:54:a8:82:29:7a:0d:fa:db: 02:b5:bd:dc:b4:c2:22:bd:4a:bc:53:6d:05:f4:86: 33:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:48:7A:32:06:6A:22:BC:08:A2:80:08:F0:E9:DC:D8:76:7B:AB:8D X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:f6:f3:f9:81:54:0b:a4:4b:ce:36:97:15:e3:7e:c3:5d:0e: f9:bc:7f:0f:84:80:33:22:a4:ae:31:b4:c5:06:c8:88:d5:d0: c1:47:79:7c:e4:ee:75:43:1c:95:45:95:44:9b:a2:07:2b:5b: f5:98:98:c4:61:35:7a:12:24:3f:f9:2d:45:81:d8:3d:e0:91: b7:ec:c0:99:3f:07:aa:0d:0a:5f:de:75:26:93:d8:63:36:16: ad:06:cb:4b:10:97:c8:b6:7e:d9:a9:85:d2:f6:20:57:34:85: 39:70:2c:da:ec:dc:c9:0d:50:ed:da:3b:70:61:18:65:34:48: 53:49:62:31:3e:bd:df:49:2a:ff:22:73:a6:a0:cf:cb:95:ef: ef:79:3f:31:07:bd:78:65:30:32:b4:59:3d:fe:0e:99:47:93: ab:38:91:53:48:a1:1a:d3:91:ae:ba:7c:3f:62:66:5a:a4:1a: 21:dc:f6:16:be:16:a1:1c:a4:de:35:81:bc:90:b0:38:54:06: 33:dc:fd:07:59:9e:9b:35:ba:1b:5a:f2:80:24:0f:86:4f:19: 44:78:35:0f:33:c3:12:c7:b4:2c:86:ad:dc:1e:12:ef:df:04: 40:cd:56:12:c6:45:c4:2a:96:02:d5:ae:13:1d:17:13:18:da: af:c5:ae:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaHIi70/oH7QJDFeWucmRVdGC+0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA5MDMwNjM3MDNaFw0yNTA5MDYwOTIxMDNaMDMxMTAvBgNV BAMTKDcxNDg3QTMyMDY2QTIyQkMwOEEyODAwOEYwRTlEQ0Q4NzY3QkFCOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT72CicTvKuPLPvhOgifo1MZkK uKWdfmjMwVfbKS6i2F1SwKaQPdwAQDon1DYybxPR9pzzmwDKJgoIUvnNkwCVfKYu zlO9/iRvR0j9lCLAciAM/JwQhHlgQfTyBwS+ONAUJhGXkwMLFcovrtZ02oeU5lER y9397EIO72JUlARG2cfliZ4JwYi916Odi6bJe9ekgM6ec2lZKWAEBbUyd9DY6pUC wyGEWNG4nFvo028JueSThDGY7ykQOUHm3kSxYjNywWOc8NRG/e1j381AL3k6/SQt edo4fjaxsAMGpEhPQrGHS19uMMtUqIIpeg362wK1vdy0wiK9SrxTbQX0hjPDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcUh6MgZqIrwIooAI8Onc2HZ7q40wHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJb28/mBVAukS842lxXjfsNdDvm8fw+EgDMi pK4xtMUGyIjV0MFHeXzk7nVDHJVFlUSbogcrW/WYmMRhNXoSJD/5LUWB2D3gkbfs wJk/B6oNCl/edSaT2GM2Fq0Gy0sQl8i2ftmphdL2IFc0hTlwLNrs3MkNUO3aO3Bh GGU0SFNJYjE+vd9JKv8ic6agz8uV7+95PzEHvXhlMDK0WT3+DplHk6s4kVNIoRrT ka66fD9iZlqkGiHc9ha+FqEcpN41gbyQsDhUBjPc/QdZnps1uhta8oAkD4ZPGUR4 NQ8zwxLHtCyGrdweEu/fBEDNVhLGRcQqlgLVrhMdFxMY2q/FrjE= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:38 2025 by rpki-client