$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: pCN70F2AmwuIf5cQ/CjXPZYUtQGxt4UNMT1aZut7ots= Subject key identifier: 7B:49:5E:0C:73:21:A4:70:2F:D3:40:2F:66:9E:02:BA:63:8E:FA:F0 Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 28F79D0F71326B0A79B84EAE368297EA3DA7BB16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 0A Signing time: Mon 30 Jun 2025 03:12:15 +0000 Manifest this update: Mon 30 Jun 2025 03:07:15 +0000 Manifest next update: Thu 03 Jul 2025 06:21:15 +0000 Files and hashes: 1: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) 2: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: Z0jsJZ30U8bpcPnIQgLWmC1v5mD1jec2XFgYOr8sIQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 06:21:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:f7:9d:0f:71:32:6b:0a:79:b8:4e:ae:36:82:97:ea:3d:a7:bb:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Jun 30 03:07:15 2025 GMT Not After : Jul 3 06:21:15 2025 GMT Subject: CN=7B495E0C7321A4702FD3402F669E02BA638EFAF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:70:47:fd:be:59:e6:81:e6:05:80:d5:7c:76: eb:70:35:2f:24:69:78:3e:62:32:e9:99:8c:4f:d7: 82:02:5d:50:cc:c7:86:58:a0:27:c2:b0:5c:0b:86: d9:e2:be:93:27:a4:7c:69:0f:f2:98:72:d0:51:6d: b4:33:f0:2f:3f:37:53:f1:80:d5:63:ab:ee:83:77: 8f:c9:47:07:23:cb:ec:ed:50:f0:06:93:23:51:94: 78:36:87:e6:bf:70:91:56:a4:5c:a3:e7:69:c4:32: 82:fa:4e:d3:42:22:f0:64:31:b8:42:f4:09:d2:b0: 3e:3d:bc:84:ec:ac:32:9c:99:b4:ec:30:8d:59:4b: 01:da:5b:24:d5:42:5e:75:2e:76:fb:27:34:26:92: 7d:fb:8a:b0:2f:d3:7c:e7:dd:d8:88:da:59:41:ad: b9:10:c7:00:8b:52:ba:ee:98:b2:e6:52:93:d8:29: c7:85:9c:40:0c:bd:ef:34:56:68:b2:48:21:b5:1c: df:48:df:36:7e:cb:04:07:96:37:4c:d9:28:e2:7a: 9b:b3:c3:90:b5:97:28:30:a7:9d:f8:df:50:d6:eb: 21:0a:6c:6e:18:42:3b:ac:cf:87:a4:a4:d1:69:f4: 41:17:db:a5:76:df:19:de:32:64:60:9a:67:c8:0d: 1e:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:49:5E:0C:73:21:A4:70:2F:D3:40:2F:66:9E:02:BA:63:8E:FA:F0 X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:15:48:e8:eb:ec:b2:16:88:f3:ba:42:0b:08:87:af:b6:87: 30:23:fa:b9:0f:45:df:f7:82:b3:e3:e9:e7:8a:c9:c6:0c:c7: 8a:5a:47:a2:b0:43:a6:e9:5d:ac:08:bc:bb:c1:d0:ad:46:11: ff:9d:a9:a9:45:70:4d:0a:ee:14:0b:54:f9:d8:35:dd:65:ac: 38:a0:56:66:18:07:25:d4:a8:5f:fe:4d:e6:cb:71:af:2c:e1: b4:24:3d:62:65:d7:ff:af:16:8f:91:0b:4d:c2:3d:f0:cd:3c: af:de:fe:63:ee:46:c4:8f:b5:c3:e8:c0:3e:68:67:a2:e7:53: c2:af:41:3a:07:50:0b:60:46:67:f2:08:ab:de:f9:76:6e:af: c9:54:0c:09:1f:69:d7:a2:66:47:20:e1:f6:0b:df:48:1f:a9: 32:c4:25:4f:05:65:1a:f7:b5:b5:90:27:3e:3f:bb:f6:d9:cc: 7d:ab:2e:44:e2:4c:77:09:34:4a:d5:ff:c9:3b:5f:b5:a6:2b: 94:11:6c:30:98:46:ae:d6:91:c9:d3:02:2c:58:d6:2a:45:35: 4b:0c:00:42:9c:ae:c4:5a:be:f5:b1:60:5d:aa:35:bb:ef:2c: 8b:97:a4:6b:13:d0:2d:cb:af:f1:87:ed:84:fc:f9:f3:85:a8: 17:66:26:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKPedD3Eyawp5uE6uNoKX6j2nuxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTA2MzAwMzA3MTVaFw0yNTA3MDMwNjIxMTVaMDMxMTAvBgNV BAMTKDdCNDk1RTBDNzMyMUE0NzAyRkQzNDAyRjY2OUUwMkJBNjM4RUZBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCncEf9vlnmgeYFgNV8dutwNS8k aXg+YjLpmYxP14ICXVDMx4ZYoCfCsFwLhtnivpMnpHxpD/KYctBRbbQz8C8/N1Px gNVjq+6Dd4/JRwcjy+ztUPAGkyNRlHg2h+a/cJFWpFyj52nEMoL6TtNCIvBkMbhC 9AnSsD49vITsrDKcmbTsMI1ZSwHaWyTVQl51Lnb7JzQmkn37irAv03zn3diI2llB rbkQxwCLUrrumLLmUpPYKceFnEAMve80VmiySCG1HN9I3zZ+ywQHljdM2Sjiepuz w5C1lygwp53431DW6yEKbG4YQjusz4ekpNFp9EEX26V23xneMmRgmmfIDR6JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0leDHMhpHAv00AvZp4CumOO+vAwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAVSOjr7LIWiPO6QgsIh6+2hzAj+rkPRd/3 grPj6eeKycYMx4paR6KwQ6bpXawIvLvB0K1GEf+dqalFcE0K7hQLVPnYNd1lrDig VmYYByXUqF/+TebLca8s4bQkPWJl1/+vFo+RC03CPfDNPK/e/mPuRsSPtcPowD5o Z6LnU8KvQToHUAtgRmfyCKve+XZur8lUDAkfadeiZkcg4fYL30gfqTLEJU8FZRr3 tbWQJz4/u/bZzH2rLkTiTHcJNErV/8k7X7WmK5QRbDCYRq7WkcnTAixY1ipFNUsM AEKcrsRavvWxYF2qNbvvLIuXpGsT0C3Lr/GH7YT8+fOFqBdmJnM= -----END CERTIFICATE-----Generated at Mon Jun 30 18:54:12 2025 by rpki-client