$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json) Hash identifier: ZDmvJfBapA01iHgFdkVSyawX/xtclZiXwRij5XVsgHY= Subject key identifier: AD:BF:E9:80:CB:D5:DD:12:1C:B5:EB:BC:5F:95:D0:51:33:2D:A4:38 Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Certificate serial: 7CD812937EB11BF58407B8BD632C5B6AD60BAB86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft Manifest number: 0330 Signing time: Mon 02 Jun 2025 18:01:04 +0000 Manifest this update: Mon 02 Jun 2025 17:56:04 +0000 Manifest next update: Fri 06 Jun 2025 01:46:04 +0000 Files and hashes: 1: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: mdAnNzPQX1fBQRxqx/liQc+y8HoOIQ1ZRmWeSXm/9lE=) 2: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: XIli98cQ5DslYaylLZi+5Ts9pki82Z8fAKzqEWLUjbk=) 3: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: zlBEY7IrVKQOZjxLacHTGAmi9IGA2jFyTFtNq++mb7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 01:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:d8:12:93:7e:b1:1b:f5:84:07:b8:bd:63:2c:5b:6a:d6:0b:ab:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Validity Not Before: Jun 2 17:56:04 2025 GMT Not After : Jun 6 01:46:04 2025 GMT Subject: CN=ADBFE980CBD5DD121CB5EBBC5F95D051332DA438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:bb:2c:dc:b2:7b:aa:8f:24:9c:08:69:e7:1c: 02:4b:de:81:0f:fb:96:c6:c6:b8:b6:55:ee:51:9b: e9:ab:97:3f:0a:e4:34:cf:1f:40:18:76:e7:30:05: f1:af:72:16:e0:a5:4b:f4:0d:86:90:6c:0d:a8:f5: ed:c9:3d:61:f4:7e:4a:88:4c:4c:9d:5a:52:d2:4f: f1:e7:72:79:1b:12:1a:14:e9:56:92:5e:51:51:f2: 2c:a0:f4:37:3e:d9:ba:3a:b0:31:c9:36:f6:fa:0d: 6d:93:5c:7e:1e:65:0a:ec:a2:16:5f:a4:c7:da:51: 50:cd:e5:4d:50:59:de:29:22:4f:3e:7d:57:01:78: e8:57:27:43:6a:d6:51:ba:4d:1c:2b:b0:b4:2e:10: e5:88:59:44:cd:4a:92:25:5a:59:ce:d4:81:7a:71: f3:74:fb:60:92:89:f0:d0:24:8d:f0:f0:05:5f:d0: d1:77:28:96:22:0b:c3:7b:88:73:16:47:ee:0f:7d: 91:e2:13:57:ea:c6:c5:c3:c4:3c:a4:85:23:85:6e: bf:7d:37:15:8e:5a:20:f0:1b:3a:58:5b:87:bc:d6: 40:11:0d:4e:0b:7b:ce:5d:3a:17:5b:ac:2b:2d:f1: 33:09:ea:fa:00:c9:c5:5d:e2:a4:93:27:ae:7e:26: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:BF:E9:80:CB:D5:DD:12:1C:B5:EB:BC:5F:95:D0:51:33:2D:A4:38 X509v3 Authority Key Identifier: keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ad:30:13:41:76:e8:be:dd:db:9e:a6:c9:58:eb:d4:3c:dd: 78:4c:39:be:72:3f:d7:45:7d:68:f2:42:4a:41:0c:c0:08:dd: e0:21:69:7f:cb:b8:3e:9f:51:bc:90:18:71:70:16:8a:a2:84: 78:a5:37:9d:ae:85:9f:2b:34:bf:d0:d9:d0:84:bd:9c:c6:59: 62:af:02:b6:13:ea:f1:d4:ae:3b:0e:6a:ce:c5:72:ad:6e:98: bf:48:2b:97:db:0c:41:54:e5:f7:bd:a2:ad:0a:b2:9d:8e:32: 91:03:82:df:14:3e:05:f9:c4:75:ec:77:08:17:31:d6:80:68: 28:28:d8:fc:48:15:cf:60:9d:b8:2e:b3:61:a9:ea:0d:a3:bc: 37:fd:31:bb:6d:2c:2d:b5:4a:cf:9e:e2:b8:ec:5e:34:28:73: 06:e5:f0:fd:4d:62:e7:0d:c8:cf:09:83:78:8c:fc:72:26:16: a8:0c:2b:02:6c:2e:a0:4a:c8:e7:12:89:69:cc:7c:09:a1:5a: e6:03:90:08:76:ed:f8:a9:3b:07:9a:49:bc:0c:bb:ea:09:37: 79:1f:6b:18:ff:4f:53:47:dc:ed:89:cc:30:67:24:a6:60:30: e8:8d:ff:48:d1:84:32:31:65:62:47:37:6a:bd:03:1c:42:dd: 8a:48:6a:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfNgSk36xG/WEB7i9YyxbatYLq4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF NDlFOEExNzAeFw0yNTA2MDIxNzU2MDRaFw0yNTA2MDYwMTQ2MDRaMDMxMTAvBgNV BAMTKEFEQkZFOTgwQ0JENUREMTIxQ0I1RUJCQzVGOTVEMDUxMzMyREE0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvuyzcsnuqjyScCGnnHAJL3oEP +5bGxri2Ve5Rm+mrlz8K5DTPH0AYducwBfGvchbgpUv0DYaQbA2o9e3JPWH0fkqI TEydWlLST/HncnkbEhoU6VaSXlFR8iyg9Dc+2bo6sDHJNvb6DW2TXH4eZQrsohZf pMfaUVDN5U1QWd4pIk8+fVcBeOhXJ0Nq1lG6TRwrsLQuEOWIWUTNSpIlWlnO1IF6 cfN0+2CSifDQJI3w8AVf0NF3KJYiC8N7iHMWR+4PfZHiE1fqxsXDxDykhSOFbr99 NxWOWiDwGzpYW4e81kARDU4Le85dOhdbrCst8TMJ6voAycVd4qSTJ65+JnvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrb/pgMvV3RIcteu8X5XQUTMtpDgwHwYDVR0j BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2 NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2 N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECtMBNBdui+3duepslY69Q83XhMOb5yP9dF fWjyQkpBDMAI3eAhaX/LuD6fUbyQGHFwFoqihHilN52uhZ8rNL/Q2dCEvZzGWWKv ArYT6vHUrjsOas7Fcq1umL9IK5fbDEFU5fe9oq0Ksp2OMpEDgt8UPgX5xHXsdwgX MdaAaCgo2PxIFc9gnbgus2Gp6g2jvDf9MbttLC21Ss+e4rjsXjQocwbl8P1NYucN yM8Jg3iM/HImFqgMKwJsLqBKyOcSiWnMfAmhWuYDkAh27fipOweaSbwMu+oJN3kf axj/T1NH3O2JzDBnJKZgMOiN/0jRhDIxZWJHN2q9AxxC3YpIar0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:18:08 2025 by rpki-client