$ rpki-client -vvf repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft File: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft (raw, json) Hash identifier: M1J8F68SjYn25JEvFz2vhAhx7csuMg32EbkhT7AJxZI= Subject key identifier: 00:B4:F4:9B:FB:5F:CC:0B:E4:D7:E3:D7:AA:5F:DB:F8:21:65:4F:22 Authority key identifier: 36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 Certificate issuer: /CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Certificate serial: 1F6042BC5917F4E416A598A8193B6DA47941B8C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft Manifest number: 035A Signing time: Thu 04 Sep 2025 04:31:32 +0000 Manifest this update: Thu 04 Sep 2025 04:26:32 +0000 Manifest next update: Sun 07 Sep 2025 08:04:32 +0000 Files and hashes: 1: 36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl (hash: pHFdreNJ4Bw8nHG5Ktwh/kFv/EEUHVpXfgpl9yCHB3k=) 2: 3130332e3136392e3133332e302f32342d3234203d3e20313432333431.roa (hash: XIli98cQ5DslYaylLZi+5Ts9pki82Z8fAKzqEWLUjbk=) 3: 3130332e3136392e3133322e302f32332d3233203d3e20313432333431.roa (hash: OqgAqdXTkd1D2NhPAZ/UZhCfurgUG69NUxmVZKteHcQ=) 4: 3130332e3136392e3133322e302f32342d3234203d3e20313432333431.roa (hash: mdAnNzPQX1fBQRxqx/liQc+y8HoOIQ1ZRmWeSXm/9lE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 08:04:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:60:42:bc:59:17:f4:e4:16:a5:98:a8:19:3b:6d:a4:79:41:b8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36E68E2A264E18BFD9F49E472D0D267EE49E8A17 Validity Not Before: Sep 4 04:26:32 2025 GMT Not After : Sep 7 08:04:32 2025 GMT Subject: CN=00B4F49BFB5FCC0BE4D7E3D7AA5FDBF821654F22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:b5:17:eb:39:1c:8d:1c:f1:26:5d:b3:4d:c0: fa:6f:82:0b:68:3d:cf:c0:6e:7e:10:b3:f7:26:5c: 50:d2:c2:98:21:ca:dd:65:bc:9f:fc:47:97:10:df: ed:f0:f2:b0:f7:f6:e8:c3:01:cf:de:8d:dc:86:a5: d3:eb:18:3d:cb:68:65:0e:78:53:4c:c1:92:23:2b: 89:ff:07:9d:38:b5:13:93:0c:15:57:a0:2d:f0:2a: d3:be:60:58:6e:ee:8a:a8:8e:2e:85:2e:2a:26:89: 79:fc:3f:4c:31:8e:41:14:42:5e:4d:df:6e:26:4c: 7b:25:0d:45:83:96:ed:04:74:ab:07:c9:bc:92:3f: 86:15:e9:42:2c:1c:81:7f:d1:f3:73:8c:e5:1f:63: 41:bc:46:c3:80:ea:65:9c:03:d0:6b:b3:8f:78:cd: 4e:14:8e:ab:cb:9b:67:ba:a4:2c:37:13:15:54:30: a5:6e:05:22:7a:53:1b:7d:1f:a0:97:50:b4:d4:a4: ef:12:d4:eb:41:a4:a9:dc:a7:b5:f9:ae:2b:1b:3a: ef:77:f4:4f:77:77:bd:68:61:d7:34:b8:89:40:9e: 3e:32:d8:93:6a:a8:8a:a2:df:77:63:3b:b8:f9:68: b5:ea:1d:28:76:b8:e7:e8:5e:07:62:9b:47:8a:55: 68:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:B4:F4:9B:FB:5F:CC:0B:E4:D7:E3:D7:AA:5F:DB:F8:21:65:4F:22 X509v3 Authority Key Identifier: keyid:36:E6:8E:2A:26:4E:18:BF:D9:F4:9E:47:2D:0D:26:7E:E4:9E:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87d2031b-2761-4c36-b690-5b69d1569bae/0/36E68E2A264E18BFD9F49E472D0D267EE49E8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:16:c5:9a:be:c8:7b:e2:a2:ca:34:00:4d:80:96:1c:66:47: 76:ef:ab:b9:fd:39:e5:ae:91:8f:58:bf:93:81:3a:6b:03:ca: c5:aa:b1:ec:85:7a:12:6b:e9:f7:6b:69:09:07:f9:b9:a9:fe: db:ed:f2:3e:57:5f:c3:e8:67:d9:d7:7e:28:54:89:8c:97:1e: 51:6d:a2:cb:91:c3:b7:e9:63:f5:d9:16:44:ee:ed:3c:2c:9b: 11:2b:45:41:8f:89:b1:7e:38:64:af:5c:56:a8:82:e2:e0:b2: 07:a3:e9:96:4a:ca:b8:5c:c4:37:b3:ca:9c:3e:7b:78:86:fc: cc:c9:3a:cd:9b:8d:30:d3:1b:30:74:fd:8a:9e:b9:4d:e7:3a: e4:fe:49:8c:ba:96:49:00:0e:c2:49:28:fa:a8:b6:13:a1:93: 5f:57:17:f8:92:f2:ee:8c:5f:3e:b0:76:23:8f:23:c7:ce:8d: d7:9a:8a:ed:c5:a9:40:59:9c:54:cd:b7:1e:f7:cc:73:80:82: 0b:2d:0e:ff:81:6c:98:57:90:20:7f:65:98:b1:31:f6:05:08: 38:fb:0a:de:91:bf:1a:e4:91:95:a2:54:8c:37:b3:68:7e:d8: d6:fd:5b:e5:eb:48:eb:56:2a:b8:da:5f:9f:a0:bb:2f:91:64: 84:3b:f7:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2BCvFkX9OQWpZioGTttpHlBuMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VF NDlFOEExNzAeFw0yNTA5MDQwNDI2MzJaFw0yNTA5MDcwODA0MzJaMDMxMTAvBgNV BAMTKDAwQjRGNDlCRkI1RkNDMEJFNEQ3RTNEN0FBNUZEQkY4MjE2NTRGMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/tRfrORyNHPEmXbNNwPpvggto Pc/Abn4Qs/cmXFDSwpghyt1lvJ/8R5cQ3+3w8rD39ujDAc/ejdyGpdPrGD3LaGUO eFNMwZIjK4n/B504tROTDBVXoC3wKtO+YFhu7oqoji6FLiomiXn8P0wxjkEUQl5N 324mTHslDUWDlu0EdKsHybySP4YV6UIsHIF/0fNzjOUfY0G8RsOA6mWcA9Brs494 zU4UjqvLm2e6pCw3ExVUMKVuBSJ6Uxt9H6CXULTUpO8S1OtBpKncp7X5risbOu93 9E93d71oYdc0uIlAnj4y2JNqqIqi33djO7j5aLXqHSh2uOfoXgdim0eKVWhhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALT0m/tfzAvk1+PXql/b+CFlTyIwHwYDVR0j BBgwFoAUNuaOKiZOGL/Z9J5HLQ0mfuSeihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 N2QyMDMxYi0yNzYxLTRjMzYtYjY5MC01YjY5ZDE1NjliYWUvMC8zNkU2OEUyQTI2 NEUxOEJGRDlGNDlFNDcyRDBEMjY3RUU0OUU4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2N0VFNDlF OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODdkMjAzMWItMjc2MS00YzM2LWI2 OTAtNWI2OWQxNTY5YmFlLzAvMzZFNjhFMkEyNjRFMThCRkQ5RjQ5RTQ3MkQwRDI2 N0VFNDlFOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgWxZq+yHvioso0AE2AlhxmR3bvq7n9OeWu kY9Yv5OBOmsDysWqseyFehJr6fdraQkH+bmp/tvt8j5XX8PoZ9nXfihUiYyXHlFt osuRw7fpY/XZFkTu7TwsmxErRUGPibF+OGSvXFaoguLgsgej6ZZKyrhcxDezypw+ e3iG/MzJOs2bjTDTGzB0/YqeuU3nOuT+SYy6lkkADsJJKPqothOhk19XF/iS8u6M Xz6wdiOPI8fOjdeaiu3FqUBZnFTNtx73zHOAggstDv+BbJhXkCB/ZZixMfYFCDj7 Ct6RvxrkkZWiVIw3s2h+2Nb9W+XrSOtWKrjaX5+guy+RZIQ7970= -----END CERTIFICATE-----Generated at Fri Sep 5 12:41:12 2025 by rpki-client