$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: HknN2kGVJx14TMeQmgCqgoFMtqszBZDnfoDP8/+Jh6Y= Subject key identifier: 9E:28:05:94:D2:31:E9:50:47:5C:9F:3B:34:BC:B3:B3:6F:EC:11:C3 Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 7936624BCF10A133D0BAE71ABF6E2EAA98CE0BE1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 0104 Signing time: Fri 27 Jun 2025 06:00:49 +0000 Manifest this update: Fri 27 Jun 2025 05:55:49 +0000 Manifest next update: Mon 30 Jun 2025 17:30:49 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: VYcd4X8K+7XxjiLM34y/LCTye09LtVaXUJZO38y1/rs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 17:30:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:36:62:4b:cf:10:a1:33:d0:ba:e7:1a:bf:6e:2e:aa:98:ce:0b:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Jun 27 05:55:49 2025 GMT Not After : Jun 30 17:30:49 2025 GMT Subject: CN=9E280594D231E950475C9F3B34BCB3B36FEC11C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:dc:a8:22:24:67:1e:7a:0b:b1:32:c5:1f:54: a1:73:01:a3:db:ef:56:ba:91:50:87:bd:5b:b4:e4: 57:73:34:fc:db:d1:4d:b1:c0:70:a3:28:b6:29:9d: 4e:2a:bb:4e:ca:f3:57:ca:03:27:00:b0:3b:5b:1d: e8:da:d7:85:c2:02:0c:96:e9:9b:78:08:8b:29:47: 21:e7:1e:91:6b:d2:99:22:b7:08:99:b4:7a:a0:f0: 7b:c9:da:2d:0d:12:9f:10:34:39:c9:20:8e:15:a5: 60:d6:c7:12:74:eb:b3:f2:4a:d1:8c:a4:20:73:8a: 86:2e:e7:d5:01:a5:47:8d:7e:f0:c9:21:b1:92:3c: eb:64:e0:a0:a1:3a:ea:f0:3e:3e:c4:96:2d:18:2e: c3:0b:f3:72:94:1a:f6:f2:b0:c5:32:fd:03:d8:94: 54:40:9a:b8:b4:0e:35:54:d1:85:15:a6:d3:34:1e: 49:15:e5:63:bc:d2:2a:01:9c:0a:cb:01:a6:6b:fd: 8d:ad:54:54:26:dc:49:9c:53:94:2f:5f:e8:8f:68: fa:02:30:21:97:e0:96:2e:8d:e1:70:a4:5d:0a:f3: 85:19:32:aa:a5:05:59:82:95:57:d2:ca:d1:ec:33: b3:55:80:d3:75:2d:2f:ba:5a:a6:0c:bc:3f:f6:11: ee:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:28:05:94:D2:31:E9:50:47:5C:9F:3B:34:BC:B3:B3:6F:EC:11:C3 X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ce:cb:97:1c:8a:15:4b:79:29:b9:8d:ef:13:91:90:dc:c5: 98:b6:18:b1:07:c5:eb:89:fc:5f:be:18:0f:fe:56:8a:f8:fa: a3:cf:87:e1:23:94:78:12:5a:02:66:80:72:6a:34:64:a2:d5: e1:ed:98:c6:f5:ea:d1:51:55:98:80:6b:f7:4b:17:bd:19:8f: 9b:5d:54:7e:e8:e8:ec:ac:a2:e9:73:d0:cd:92:89:b2:92:f2: 19:a5:1b:2b:1e:bc:8b:0b:9e:ed:d5:33:c1:05:a4:13:40:64: 86:f7:35:62:af:c6:80:43:2b:f1:01:33:50:59:f1:4b:97:c3: 12:cf:34:85:d2:ec:77:a9:9d:00:2a:6b:e6:55:8b:9a:30:e6: 22:d9:5c:f0:ba:e7:38:93:6c:47:76:99:04:b9:a7:22:06:83: 51:ff:7e:b3:87:65:67:7b:b1:fb:5b:a4:b4:ac:5b:39:36:50: e5:37:d2:ff:a1:42:1c:11:1c:69:2d:dd:0c:7f:0f:56:ae:1a: 43:82:83:47:6b:78:02:b9:17:f3:e0:87:19:3d:d8:98:dd:f1: 24:2d:ff:17:d7:7f:b9:e0:67:b3:27:0a:66:1f:3c:05:47:d7: 69:bd:94:7b:5a:b1:50:d0:0c:3c:23:73:ad:52:04:9d:3e:c2: 74:0b:50:ea -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeTZiS88QoTPQuucav24uqpjOC+EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTA2MjcwNTU1NDlaFw0yNTA2MzAxNzMwNDlaMDMxMTAvBgNV BAMTKDlFMjgwNTk0RDIzMUU5NTA0NzVDOUYzQjM0QkNCM0IzNkZFQzExQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC73KgiJGceeguxMsUfVKFzAaPb 71a6kVCHvVu05FdzNPzb0U2xwHCjKLYpnU4qu07K81fKAycAsDtbHeja14XCAgyW 6Zt4CIspRyHnHpFr0pkitwiZtHqg8HvJ2i0NEp8QNDnJII4VpWDWxxJ067PyStGM pCBzioYu59UBpUeNfvDJIbGSPOtk4KChOurwPj7Eli0YLsML83KUGvbysMUy/QPY lFRAmri0DjVU0YUVptM0HkkV5WO80ioBnArLAaZr/Y2tVFQm3EmcU5QvX+iPaPoC MCGX4JYujeFwpF0K84UZMqqlBVmClVfSytHsM7NVgNN1LS+6WqYMvD/2Ee6ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnigFlNIx6VBHXJ87NLyzs2/sEcMwHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbOy5ccihVLeSm5je8TkZDcxZi2GLEHxeuJ /F++GA/+Vor4+qPPh+EjlHgSWgJmgHJqNGSi1eHtmMb16tFRVZiAa/dLF70Zj5td VH7o6Oysoulz0M2SibKS8hmlGysevIsLnu3VM8EFpBNAZIb3NWKvxoBDK/EBM1BZ 8UuXwxLPNIXS7HepnQAqa+ZVi5ow5iLZXPC65ziTbEd2mQS5pyIGg1H/frOHZWd7 sftbpLSsWzk2UOU30v+hQhwRHGkt3Qx/D1auGkOCg0dreAK5F/Pghxk92Jjd8SQt /xfXf7ngZ7MnCmYfPAVH12m9lHtasVDQDDwjc61SBJ0+wnQLUOo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:40 2025 by rpki-client