$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: YqE6H+RX3K4+7v2C8/P1GsMdQrocHBozhUG2sVfAQVE= Subject key identifier: 02:C8:3C:7A:8B:AA:98:29:9D:36:14:5C:9B:CD:E1:44:14:4B:FD:BD Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 79C8EE1191892AF2EECF789473CD3BC970E202FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 0136 Signing time: Sat 18 Oct 2025 05:50:51 +0000 Manifest this update: Sat 18 Oct 2025 05:45:51 +0000 Manifest next update: Tue 21 Oct 2025 11:30:51 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: ua0FaGZnEMBOFpx9AsrU6m52RGja0q+icQ8qoKDS+V8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:30:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c8:ee:11:91:89:2a:f2:ee:cf:78:94:73:cd:3b:c9:70:e2:02:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Oct 18 05:45:51 2025 GMT Not After : Oct 21 11:30:51 2025 GMT Subject: CN=02C83C7A8BAA98299D36145C9BCDE144144BFDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:9e:79:21:eb:c9:ed:a6:f4:c0:2e:77:21:0d: b5:7a:de:96:50:5f:bd:02:c7:21:eb:56:aa:17:db: f9:a3:10:52:a7:b1:a4:38:64:65:50:4a:9b:23:a4: 9d:ab:2e:59:ff:cb:28:ae:64:4c:35:8b:24:dc:9f: 5a:0d:66:76:c5:ea:56:82:04:83:fd:38:20:21:ff: ec:26:2b:a3:5a:7d:59:27:d3:18:e1:2e:97:a9:9f: af:bc:46:23:c2:00:2a:ce:05:ab:9f:8b:24:66:4f: ed:14:a4:d1:fe:18:a8:78:bf:e4:1e:e5:01:85:53: eb:d8:c2:9a:4a:11:fd:c1:66:27:23:21:82:44:67: e1:30:2a:c5:62:52:65:2a:09:ba:9b:bf:45:f2:a8: 57:ec:71:64:d1:9c:d5:63:c8:0f:b5:9f:23:1a:2a: 1e:aa:33:34:a7:3a:3b:0f:7a:8c:2d:9c:00:cd:7e: 91:54:f8:65:41:ae:f2:44:a3:f6:9d:b3:b9:5e:bc: 7c:4e:93:9e:ff:33:63:16:ba:dd:fa:bf:67:1f:a0: 52:e7:f8:16:01:9c:e1:c1:b5:2a:c1:1e:98:f7:3f: c7:96:21:f3:4e:b6:8d:8b:eb:1d:a4:6e:da:0f:3f: 93:20:e8:dd:7a:96:16:7f:15:2e:4d:16:56:f2:8d: fb:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C8:3C:7A:8B:AA:98:29:9D:36:14:5C:9B:CD:E1:44:14:4B:FD:BD X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:60:1c:96:f4:89:4f:97:95:59:8a:98:da:a2:1e:95:0a:26: 83:22:f2:05:4a:06:14:59:2c:13:ec:fb:64:2c:f7:25:39:b8: ae:b6:79:43:a0:16:1e:c1:b8:5a:bd:41:6b:34:d2:96:f0:a8: 9e:2b:ac:c9:90:e0:cd:ae:2a:22:a5:a1:70:15:ec:1e:34:f0: 82:7b:2d:a4:60:b8:51:37:aa:54:f2:e8:c6:d7:c0:fd:25:07: 80:03:af:c0:7e:aa:f5:d3:bf:9e:61:cf:f1:8d:f7:d5:6f:d0: 81:d3:64:f7:bd:4a:62:d1:f6:7f:cb:26:0f:e4:10:90:6d:33: 12:fe:ea:ff:e3:f8:5b:b3:f3:bf:8a:42:c9:07:bf:a1:83:ce: 49:59:42:f6:8f:3b:78:0e:a7:eb:a4:b6:a0:59:db:be:1f:f7: 17:b8:5d:da:44:8e:f4:5b:b3:5e:8e:11:c7:0b:75:12:78:be: 44:41:df:41:75:88:e4:27:9c:80:89:2d:a8:c5:3d:4c:96:77: 19:5e:5f:aa:7a:74:cc:8a:93:43:36:c1:6e:bb:02:86:5e:78: 47:e1:44:93:7a:ca:06:de:f1:7f:a6:4c:22:8e:36:51:a6:e9: 2f:ac:36:e3:92:97:92:4c:26:4c:d0:d6:c3:03:39:e6:66:8f: 7b:80:5f:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecjuEZGJKvLuz3iUc807yXDiAv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTEwMTgwNTQ1NTFaFw0yNTEwMjExMTMwNTFaMDMxMTAvBgNV BAMTKDAyQzgzQzdBOEJBQTk4Mjk5RDM2MTQ1QzlCQ0RFMTQ0MTQ0QkZEQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQnnkh68ntpvTALnchDbV63pZQ X70CxyHrVqoX2/mjEFKnsaQ4ZGVQSpsjpJ2rLln/yyiuZEw1iyTcn1oNZnbF6laC BIP9OCAh/+wmK6NafVkn0xjhLpepn6+8RiPCACrOBaufiyRmT+0UpNH+GKh4v+Qe 5QGFU+vYwppKEf3BZicjIYJEZ+EwKsViUmUqCbqbv0XyqFfscWTRnNVjyA+1nyMa Kh6qMzSnOjsPeowtnADNfpFU+GVBrvJEo/ads7levHxOk57/M2MWut36v2cfoFLn +BYBnOHBtSrBHpj3P8eWIfNOto2L6x2kbtoPP5Mg6N16lhZ/FS5NFlbyjfv9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsg8eouqmCmdNhRcm83hRBRL/b0wHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB1gHJb0iU+XlVmKmNqiHpUKJoMi8gVKBhRZ LBPs+2Qs9yU5uK62eUOgFh7BuFq9QWs00pbwqJ4rrMmQ4M2uKiKloXAV7B408IJ7 LaRguFE3qlTy6MbXwP0lB4ADr8B+qvXTv55hz/GN99Vv0IHTZPe9SmLR9n/LJg/k EJBtMxL+6v/j+Fuz87+KQskHv6GDzklZQvaPO3gOp+uktqBZ274f9xe4XdpEjvRb s16OEccLdRJ4vkRB30F1iOQnnICJLajFPUyWdxleX6p6dMyKk0M2wW67AoZeeEfh RJN6ygbe8X+mTCKONlGm6S+sNuOSl5JMJkzQ1sMDOeZmj3uAXzI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:39 2025 by rpki-client