$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: dv12qALA1MoTgDenzHcN9mXPvb94XKDw0DG7Y5FGryA= Subject key identifier: 6E:8B:69:27:B4:EE:39:63:7A:6C:4F:5F:2F:59:17:79:9B:83:B4:5B Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 26308C98808B36784788CBC2635919744621DAD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 017D Signing time: Thu 26 Mar 2026 03:40:58 +0000 Manifest this update: Thu 26 Mar 2026 03:35:58 +0000 Manifest next update: Sun 29 Mar 2026 11:33:58 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: D71JjrBphPo+NnWRLFk2INerrhOyEc5rdXzRGO5OQ2o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:30:8c:98:80:8b:36:78:47:88:cb:c2:63:59:19:74:46:21:da:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Mar 26 03:35:58 2026 GMT Not After : Mar 29 11:33:58 2026 GMT Subject: CN=6E8B6927B4EE39637A6C4F5F2F5917799B83B45B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:43:f2:0f:30:52:ad:2c:7d:be:51:af:0e:db: fb:a9:07:b1:7c:bd:61:73:ec:c8:57:05:e5:e7:84: 03:2c:ad:17:b9:1b:90:68:4f:24:a6:44:df:a7:c7: 84:7e:76:8c:a4:b2:bc:82:57:6e:24:9e:f1:31:8f: a0:ce:b4:a5:32:7f:57:0d:fd:4f:d8:df:47:3d:a5: 03:75:b3:24:1b:e3:b3:98:6b:74:56:03:96:2b:f3: e2:5d:5f:be:43:2d:a1:36:f7:2a:13:54:29:3b:ab: fb:ee:59:17:ec:ab:c0:c0:f6:d2:d3:d7:80:9b:8c: 00:0f:b0:65:99:b8:e3:dc:e8:c9:50:56:1a:e3:5f: 28:96:8d:32:67:97:55:00:35:bc:eb:ba:bb:30:f1: 97:18:7b:fb:73:3f:89:35:35:1a:fa:cc:2e:d4:9a: 80:62:e6:d8:4d:53:3b:4f:7d:72:7e:4c:10:48:dd: e3:ee:ca:01:ed:1a:c3:53:0c:ea:67:8a:ef:69:83: 4d:c6:cd:58:9f:51:2d:a2:f7:53:ed:db:ab:f9:3d: 17:2c:4a:5f:3e:da:94:8c:1a:ac:19:6c:ab:fa:30: ef:d8:66:54:f8:cf:a3:2f:70:55:58:92:b8:4a:41: 7f:50:13:d5:74:7d:94:87:23:6f:e9:54:3a:61:f2: 59:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:8B:69:27:B4:EE:39:63:7A:6C:4F:5F:2F:59:17:79:9B:83:B4:5B X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:79:4d:9e:01:28:13:1b:b9:49:48:63:6f:4e:93:33:cc:1e: 18:f2:7a:b1:f4:94:5a:61:bd:99:3f:fe:90:c5:8a:13:96:64: 66:99:71:53:b2:0e:99:4d:23:91:7a:d3:43:61:c1:e8:31:4b: f3:ea:a8:20:83:02:b4:04:fd:d1:b7:07:8d:ca:8a:ba:88:2b: 45:5f:b6:59:87:a5:37:f7:ef:10:6c:3c:40:7e:85:c6:79:b6: 51:7d:01:4c:83:15:0c:cd:c7:f8:f4:5c:92:8f:a7:96:08:a1: fa:a6:ab:b9:a2:3c:cc:67:c1:c1:a3:0b:dc:73:99:2e:7d:64: d5:a6:22:52:d4:59:8e:b6:ac:d0:25:0e:ed:8e:34:32:59:9b: fe:91:1c:e7:97:21:dc:37:5d:85:33:ea:1d:93:71:4c:18:3d: 2c:4b:2d:86:87:97:f0:97:29:08:e1:8e:9d:a5:4b:82:d9:97: 1d:b6:82:f4:62:b7:19:f0:2d:a7:0f:62:72:2c:b9:45:99:1c: 09:00:37:30:fe:c0:8d:9e:20:84:6c:83:69:3e:0c:d0:b8:42: 0f:22:f5:4b:f0:39:b7:b2:ef:01:a7:ff:2f:4d:3c:24:eb:24: a8:37:54:1c:62:ba:33:f3:95:d8:b3:ae:54:6c:36:42:a8:7f: 7a:46:bd:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjCMmICLNnhHiMvCY1kZdEYh2tYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNjAzMjYwMzM1NThaFw0yNjAzMjkxMTMzNThaMDMxMTAvBgNV BAMTKDZFOEI2OTI3QjRFRTM5NjM3QTZDNEY1RjJGNTkxNzc5OUI4M0I0NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjQ/IPMFKtLH2+Ua8O2/upB7F8 vWFz7MhXBeXnhAMsrRe5G5BoTySmRN+nx4R+doyksryCV24knvExj6DOtKUyf1cN /U/Y30c9pQN1syQb47OYa3RWA5Yr8+JdX75DLaE29yoTVCk7q/vuWRfsq8DA9tLT 14CbjAAPsGWZuOPc6MlQVhrjXyiWjTJnl1UANbzrursw8ZcYe/tzP4k1NRr6zC7U moBi5thNUztPfXJ+TBBI3ePuygHtGsNTDOpniu9pg03GzVifUS2i91Pt26v5PRcs Sl8+2pSMGqwZbKv6MO/YZlT4z6MvcFVYkrhKQX9QE9V0fZSHI2/pVDph8lllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbotpJ7TuOWN6bE9fL1kXeZuDtFswHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZ5TZ4BKBMbuUlIY29OkzPMHhjyerH0lFph vZk//pDFihOWZGaZcVOyDplNI5F600NhwegxS/PqqCCDArQE/dG3B43KirqIK0Vf tlmHpTf37xBsPEB+hcZ5tlF9AUyDFQzNx/j0XJKPp5YIofqmq7miPMxnwcGjC9xz mS59ZNWmIlLUWY62rNAlDu2ONDJZm/6RHOeXIdw3XYUz6h2TcUwYPSxLLYaHl/CX KQjhjp2lS4LZlx22gvRitxnwLacPYnIsuUWZHAkANzD+wI2eIIRsg2k+DNC4Qg8i 9UvwObey7wGn/y9NPCTrJKg3VBxiujPzldizrlRsNkKof3pGvQM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:57 2026 by rpki-client