$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: DzWgNJv9DJhNcpqKNgNJHJAyXey/1cgXzEmD2hIaTsg= Subject key identifier: CB:82:AB:AB:E0:D5:93:B0:52:41:A2:F6:0D:11:C5:13:93:3E:F2:9C Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 3A008C8436DFE08DB330B9717AC6FD67D6D3727B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 22 Signing time: Fri 22 Aug 2025 14:12:16 +0000 Manifest this update: Fri 22 Aug 2025 14:07:16 +0000 Manifest next update: Mon 25 Aug 2025 20:08:16 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: a8gDj9BQgCrxBg8wg2nPAIieyQ5fFIJhMnrw8oV3Tb4=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 20:08:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:00:8c:84:36:df:e0:8d:b3:30:b9:71:7a:c6:fd:67:d6:d3:72:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Aug 22 14:07:16 2025 GMT Not After : Aug 25 20:08:16 2025 GMT Subject: CN=CB82ABABE0D593B05241A2F60D11C513933EF29C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a8:e9:38:b4:34:79:53:3b:82:57:2b:f2:65: a8:15:b4:37:69:dc:93:12:59:d0:22:87:f6:55:13: 41:d2:99:18:de:8a:c9:e1:6d:87:16:60:c9:bc:1e: 53:b9:5c:9c:91:d0:b4:a2:91:6d:9a:c7:24:cd:4d: 47:d3:53:5c:79:47:4b:44:cf:7e:cc:fe:5d:cc:a1: a8:3e:d4:ea:db:95:4e:de:0e:4a:76:b3:51:eb:2f: fb:b0:45:30:10:b7:93:0c:a9:b0:99:55:f0:5c:2f: 5e:fe:28:e0:2b:e1:79:3b:90:d8:9f:87:c4:94:e8: 69:a2:13:6a:b6:47:42:fc:f9:1e:2d:aa:88:07:9b: 38:e9:14:83:64:c5:cb:4c:2b:22:47:90:fb:a5:2c: aa:8b:78:fc:3a:a7:6b:a6:1b:73:e7:8b:bd:a6:e5: 86:74:99:5c:c2:fd:77:e1:ee:0b:42:f3:a8:be:20: fe:3a:1f:3c:d7:18:46:f8:5a:12:41:e7:8e:99:ab: 12:9f:d0:94:5a:bb:c2:84:44:20:5e:a6:22:4b:fe: 3c:b1:47:4c:13:ea:84:c2:5c:6a:48:3a:d4:74:50: 36:dc:fa:68:fb:54:b2:6e:6a:bf:74:f3:ca:97:43: eb:c1:58:8a:21:38:da:58:80:c5:b4:ed:41:80:46: 2c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:82:AB:AB:E0:D5:93:B0:52:41:A2:F6:0D:11:C5:13:93:3E:F2:9C X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:bc:7f:f2:0f:80:34:3c:0e:c6:f5:af:03:11:15:d7:46:03: f4:96:5f:12:4b:85:6e:96:f3:6a:2f:f7:f1:b9:e5:66:28:86: d5:ae:db:a8:91:18:03:55:b3:ed:4a:11:cc:48:a6:9f:c9:e2: 8a:60:80:ff:90:72:22:46:44:76:b1:06:e0:3f:2e:c3:68:1b: 19:8f:81:82:14:13:3e:fe:c2:ca:99:1d:9f:1d:84:56:2c:8a: 17:e8:e2:9e:59:63:50:e9:57:65:50:81:e4:a5:fb:3e:98:56: 28:8c:ff:72:0a:4c:3a:b0:6f:da:b4:26:c1:e2:1f:ae:6f:c0: 3c:ce:96:01:a9:59:13:7e:5c:32:d7:36:cd:5b:0c:dd:a9:b2: 5e:69:6d:84:5a:88:18:a2:c5:a2:72:5e:3e:93:27:fd:84:a6: 88:54:6a:65:d7:d5:8e:4f:63:fe:71:1a:d3:01:7a:26:82:75: c2:e3:ac:ca:bc:62:38:17:a6:e4:5b:7d:b8:d8:9a:28:00:f2: c2:fc:43:dd:7f:6a:77:86:be:f8:55:04:84:21:86:98:f5:c7: e9:2d:e0:e5:fb:df:5f:fb:d7:94:3c:d2:af:b2:d3:6f:b9:1b: 54:83:10:21:be:b6:18:31:b5:3f:dd:76:06:b9:e1:ed:79:a8: 6f:0a:e0:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOgCMhDbf4I2zMLlxesb9Z9bTcnswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTA4MjIxNDA3MTZaFw0yNTA4MjUyMDA4MTZaMDMxMTAvBgNV BAMTKENCODJBQkFCRTBENTkzQjA1MjQxQTJGNjBEMTFDNTEzOTMzRUYyOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPqOk4tDR5UzuCVyvyZagVtDdp 3JMSWdAih/ZVE0HSmRjeisnhbYcWYMm8HlO5XJyR0LSikW2axyTNTUfTU1x5R0tE z37M/l3Moag+1OrblU7eDkp2s1HrL/uwRTAQt5MMqbCZVfBcL17+KOAr4Xk7kNif h8SU6GmiE2q2R0L8+R4tqogHmzjpFINkxctMKyJHkPulLKqLePw6p2umG3Pni72m 5YZ0mVzC/Xfh7gtC86i+IP46HzzXGEb4WhJB546ZqxKf0JRau8KERCBepiJL/jyx R0wT6oTCXGpIOtR0UDbc+mj7VLJuar9088qXQ+vBWIohONpYgMW07UGARizFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy4Krq+DVk7BSQaL2DRHFE5M+8pwwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF68f/IPgDQ8Dsb1rwMRFddGA/SWXxJLhW6W 82ov9/G55WYohtWu26iRGANVs+1KEcxIpp/J4opggP+QciJGRHaxBuA/LsNoGxmP gYIUEz7+wsqZHZ8dhFYsihfo4p5ZY1DpV2VQgeSl+z6YViiM/3IKTDqwb9q0JsHi H65vwDzOlgGpWRN+XDLXNs1bDN2psl5pbYRaiBiixaJyXj6TJ/2EpohUamXX1Y5P Y/5xGtMBeiaCdcLjrMq8YjgXpuRbfbjYmigA8sL8Q91/aneGvvhVBIQhhpj1x+kt 4OX731/715Q80q+y02+5G1SDECG+thgxtT/ddga54e15qG8K4Hw= -----END CERTIFICATE-----Generated at Sat Aug 23 17:29:02 2025 by rpki-client