$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: gSE32my7AUFHpcbIwjcwPU0cCu+OHj0TgH0faSYw4iI= Subject key identifier: 54:64:7A:3D:5E:25:7C:2E:7E:B2:25:D2:7A:D8:0F:6C:76:06:E2:DB Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 2C90F1F8722BA87D6A9ECB7D37397C940DD6988B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0100 Signing time: Thu 21 Aug 2025 11:52:05 +0000 Manifest this update: Thu 21 Aug 2025 11:47:05 +0000 Manifest next update: Sun 24 Aug 2025 20:31:05 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: /VqDa3eIsp3uKueK3c+0f6V/NOcWq0JE0xf3TEnLkOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 20:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:90:f1:f8:72:2b:a8:7d:6a:9e:cb:7d:37:39:7c:94:0d:d6:98:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Aug 21 11:47:05 2025 GMT Not After : Aug 24 20:31:05 2025 GMT Subject: CN=54647A3D5E257C2E7EB225D27AD80F6C7606E2DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:d7:cb:52:ab:d7:58:a6:5d:f8:c3:35:8a:c4: 02:30:31:cc:2d:15:16:ee:93:12:f4:bd:b3:85:55: 5e:84:ac:5c:c8:ec:4a:04:27:14:ef:18:49:af:c8: 22:63:a4:81:bf:5a:1e:ce:cb:7d:b5:05:60:59:6f: 04:94:f7:99:9e:16:b0:61:92:c3:9c:48:62:c9:ef: 07:45:f3:a4:fd:ec:eb:84:c6:eb:c7:b7:ed:57:05: 9c:49:a3:6b:03:c9:95:6d:f1:43:c0:4c:2c:64:1e: 7a:d2:aa:62:47:7d:54:1c:55:f6:46:67:b8:32:46: 78:89:75:e6:6e:a1:ec:e0:b5:30:d8:86:70:04:4a: 77:07:f7:9a:82:fd:d3:e0:a8:63:69:97:99:f1:98: 0c:fd:1f:0e:0f:e1:4d:39:10:d7:4b:77:77:53:a3: 92:d9:f5:6d:79:a8:87:d3:41:f8:df:5d:b1:60:39: ab:b9:7e:e0:8f:70:76:d4:68:f3:28:ca:a6:f3:4e: 72:e5:dc:56:d4:52:40:fc:a7:fb:c3:b5:92:45:a2: f4:3e:a8:58:68:46:56:e8:70:8d:22:e7:5c:b4:2f: fe:1e:83:9d:71:a5:1b:12:79:f5:94:37:b9:5c:ec: 53:04:0e:a1:fa:82:28:15:10:42:76:3e:86:f1:bf: 8c:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:64:7A:3D:5E:25:7C:2E:7E:B2:25:D2:7A:D8:0F:6C:76:06:E2:DB X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:72:c5:ce:0d:5b:e1:b5:88:21:1d:36:76:67:46:e0:6e:fc: 22:ca:56:11:b2:fe:b0:1e:8a:bf:62:ad:53:9d:55:60:57:c8: 3c:26:05:c9:e9:9d:18:2c:9b:b2:39:b4:fe:e2:7c:ef:ef:d6: 51:02:f5:73:de:11:e1:43:a8:80:60:ff:21:de:09:d1:6d:fe: 9d:e5:d0:7d:35:6e:07:fb:ef:e9:dd:e3:81:4f:17:93:10:cc: 17:ad:dd:ba:13:57:09:07:92:9f:87:94:96:e9:f3:c4:cd:f4: 21:d1:f8:ef:cb:13:0a:92:bd:d5:c8:b6:8f:b7:54:e4:db:5c: c9:71:ef:fd:aa:10:59:11:ce:1f:6f:eb:32:53:1a:4a:ad:0f: 41:69:5e:5d:ac:c5:4b:08:47:0a:5f:4e:ff:c4:7d:49:e4:3d: ea:45:16:9f:7c:eb:d5:40:c0:0c:ba:8b:24:1f:73:8a:c0:b3: 99:79:b6:20:17:3e:c2:39:02:14:84:a7:2a:d1:2f:5c:16:2e: 2a:f6:56:34:6b:ed:a1:99:dd:64:f9:41:1d:c2:21:80:2e:4c: 6a:9e:26:df:49:b5:3b:e4:23:7f:0c:7f:fd:4a:bf:52:cd:76: 73:2a:de:bc:3f:71:68:f4:34:05:02:ee:5e:f6:c4:af:3e:73: f9:97:1d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULJDx+HIrqH1qnst9Nzl8lA3WmIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA4MjExMTQ3MDVaFw0yNTA4MjQyMDMxMDVaMDMxMTAvBgNV BAMTKDU0NjQ3QTNENUUyNTdDMkU3RUIyMjVEMjdBRDgwRjZDNzYwNkUyREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW18tSq9dYpl34wzWKxAIwMcwt FRbukxL0vbOFVV6ErFzI7EoEJxTvGEmvyCJjpIG/Wh7Oy321BWBZbwSU95meFrBh ksOcSGLJ7wdF86T97OuExuvHt+1XBZxJo2sDyZVt8UPATCxkHnrSqmJHfVQcVfZG Z7gyRniJdeZuoezgtTDYhnAESncH95qC/dPgqGNpl5nxmAz9Hw4P4U05ENdLd3dT o5LZ9W15qIfTQfjfXbFgOau5fuCPcHbUaPMoyqbzTnLl3FbUUkD8p/vDtZJFovQ+ qFhoRlbocI0i51y0L/4eg51xpRsSefWUN7lc7FMEDqH6gigVEEJ2Pobxv4zrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVGR6PV4lfC5+siXSetgPbHYG4tswHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHdyxc4NW+G1iCEdNnZnRuBu/CLKVhGy/rAe ir9irVOdVWBXyDwmBcnpnRgsm7I5tP7ifO/v1lEC9XPeEeFDqIBg/yHeCdFt/p3l 0H01bgf77+nd44FPF5MQzBet3boTVwkHkp+HlJbp88TN9CHR+O/LEwqSvdXIto+3 VOTbXMlx7/2qEFkRzh9v6zJTGkqtD0FpXl2sxUsIRwpfTv/EfUnkPepFFp9869VA wAy6iyQfc4rAs5l5tiAXPsI5AhSEpyrRL1wWLir2VjRr7aGZ3WT5QR3CIYAuTGqe Jt9JtTvkI38Mf/1Kv1LNdnMq3rw/cWj0NAUC7l72xK8+c/mXHQk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:32 2025 by rpki-client