$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: Ecpwm6Im5pO3kdLOkEmZk1Z3n20fugojMRR6hBxJsw0= Subject key identifier: 16:EA:FD:F2:BD:97:C0:ED:65:D8:1E:DD:34:B5:96:A8:DF:41:BD:60 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 1A88B622A1F354D6AF30F46CEFC84B6D1BA7B8E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 011B Signing time: Mon 20 Oct 2025 08:12:05 +0000 Manifest this update: Mon 20 Oct 2025 08:07:05 +0000 Manifest next update: Thu 23 Oct 2025 17:50:05 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 5WDzSGQKOy/jWTwUlKWLcvx5m/GkUYRjAQVY//vukIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 14:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:88:b6:22:a1:f3:54:d6:af:30:f4:6c:ef:c8:4b:6d:1b:a7:b8:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Oct 20 08:07:05 2025 GMT Not After : Oct 23 17:50:05 2025 GMT Subject: CN=16EAFDF2BD97C0ED65D81EDD34B596A8DF41BD60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:da:ee:0c:6d:4a:7c:53:00:c1:73:f8:0c:dd: ae:89:81:cc:05:b5:b0:13:de:3b:bf:58:cd:1f:03: 2b:9e:82:47:61:7f:aa:33:8a:1c:8c:b0:80:5d:5f: 6e:15:11:66:bc:99:5a:73:09:9f:50:4c:0e:26:5d: e8:0e:16:11:10:da:05:7e:c3:00:f7:8e:82:f8:58: ea:87:4e:ba:d3:bb:a0:67:c2:12:b1:68:64:22:90: c2:97:69:50:9d:c0:76:6b:ba:e3:51:77:d6:3c:88: d5:33:29:45:a2:4f:69:99:7a:3b:a8:23:18:6a:e0: 5f:d8:38:40:3b:b2:49:08:45:aa:15:96:a9:7d:fc: d7:98:b3:f8:34:a8:7a:f7:a3:a2:cf:18:9e:6f:87: 7c:27:50:93:9b:d4:bb:e3:ea:61:c0:a3:22:66:ac: 2d:d2:1d:d8:77:e4:ed:bd:84:a9:f0:90:ff:e0:6d: 51:c8:a9:df:e7:ca:bd:7a:54:0b:41:5e:32:b4:62: d4:65:ec:71:89:c5:f0:b2:ae:85:56:2f:76:ca:11: 3a:75:d4:46:38:1d:ef:0c:c7:b9:b5:11:5d:d0:8b: 93:4b:b1:b8:75:70:08:48:02:29:fc:f0:eb:9b:4e: 92:fb:f6:3d:6a:e4:a9:09:9c:6b:bb:78:40:dc:b4: 5d:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:EA:FD:F2:BD:97:C0:ED:65:D8:1E:DD:34:B5:96:A8:DF:41:BD:60 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b2:a4:4c:2b:9a:02:b0:0c:24:8c:fb:e8:15:18:69:31:19: 5f:90:9a:6c:04:c3:bb:17:76:73:9a:8f:3f:74:73:38:d6:76: 80:01:0c:f5:df:93:78:ce:49:fd:2c:83:e6:ed:75:91:26:c0: f2:44:f6:2f:6b:a2:28:0e:cb:d6:b4:51:9d:0d:8f:70:21:4e: 30:cd:8f:34:df:2e:28:58:a4:a5:b8:ac:47:fd:d3:1d:36:7e: 1f:4e:f2:69:15:cd:ec:2d:e3:51:e7:69:26:5e:70:fa:08:6c: 3b:d0:2f:4f:65:c3:e8:81:9b:8c:79:68:2a:9f:1e:87:df:d2: f5:e4:56:5b:c4:d3:d6:a6:ab:b1:f0:ab:0f:37:dc:1f:f0:fe: d3:12:99:8c:00:34:ca:a7:5e:72:8d:7f:6e:59:ba:d3:e7:59: f4:2d:42:59:d1:4d:52:0e:ad:1a:14:bb:87:37:a6:28:0d:af: 96:53:35:86:17:6b:b2:6c:2f:f3:41:53:32:64:8d:54:f8:a6: 93:ed:13:76:7a:9c:d0:40:6c:e8:60:e7:5e:ef:f5:83:76:a5: 67:41:5a:3f:99:80:31:f1:58:35:9c:0e:0d:64:22:ff:83:11: 59:a6:d9:71:13:b9:e0:34:d8:cb:d9:08:53:13:7d:09:6f:c6: ea:cd:30:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGoi2IqHzVNavMPRs78hLbRunuOYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTEwMjAwODA3MDVaFw0yNTEwMjMxNzUwMDVaMDMxMTAvBgNV BAMTKDE2RUFGREYyQkQ5N0MwRUQ2NUQ4MUVERDM0QjU5NkE4REY0MUJENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf2u4MbUp8UwDBc/gM3a6JgcwF tbAT3ju/WM0fAyuegkdhf6ozihyMsIBdX24VEWa8mVpzCZ9QTA4mXegOFhEQ2gV+ wwD3joL4WOqHTrrTu6BnwhKxaGQikMKXaVCdwHZruuNRd9Y8iNUzKUWiT2mZejuo Ixhq4F/YOEA7skkIRaoVlql9/NeYs/g0qHr3o6LPGJ5vh3wnUJOb1Lvj6mHAoyJm rC3SHdh35O29hKnwkP/gbVHIqd/nyr16VAtBXjK0YtRl7HGJxfCyroVWL3bKETp1 1EY4He8Mx7m1EV3Qi5NLsbh1cAhIAin88OubTpL79j1q5KkJnGu7eEDctF3bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFur98r2XwO1l2B7dNLWWqN9BvWAwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmypEwrmgKwDCSM++gVGGkxGV+QmmwEw7sX dnOajz90czjWdoABDPXfk3jOSf0sg+btdZEmwPJE9i9roigOy9a0UZ0Nj3AhTjDN jzTfLihYpKW4rEf90x02fh9O8mkVzewt41HnaSZecPoIbDvQL09lw+iBm4x5aCqf Hoff0vXkVlvE09amq7Hwqw833B/w/tMSmYwANMqnXnKNf25ZutPnWfQtQlnRTVIO rRoUu4c3pigNr5ZTNYYXa7JsL/NBUzJkjVT4ppPtE3Z6nNBAbOhg517v9YN2pWdB Wj+ZgDHxWDWcDg1kIv+DEVmm2XETueA02MvZCFMTfQlvxurNMOI= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:35 2025 by rpki-client