$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: KRZhE80QdznSKcLsxGZFa5m4vrcncC3Yg8yeQbqCrPE= Subject key identifier: E6:51:FC:55:A1:32:24:D6:7F:3C:6F:1D:94:B7:BD:0E:A4:AA:23:95 Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 568EC0AA6C1204F419A4DE1E6697076E8894CD18 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 3C Signing time: Mon 20 Oct 2025 11:12:17 +0000 Manifest this update: Mon 20 Oct 2025 11:07:17 +0000 Manifest next update: Thu 23 Oct 2025 16:06:17 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: iL8id8+bhw3QjotLdLle/tmEhc+TtTTiH7Urh69S094=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:8e:c0:aa:6c:12:04:f4:19:a4:de:1e:66:97:07:6e:88:94:cd:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Oct 20 11:07:17 2025 GMT Not After : Oct 23 16:06:17 2025 GMT Subject: CN=E651FC55A13224D67F3C6F1D94B7BD0EA4AA2395 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bb:94:56:db:b7:26:a1:cd:59:41:4a:92:39: af:28:c5:de:3f:3a:5c:d8:83:86:b6:9c:e4:e1:85: 24:6e:44:68:41:e5:d2:ed:9a:96:35:f3:97:98:79: 4b:ea:c2:64:d6:61:b5:e8:4a:26:26:92:76:e3:a6: e1:1f:03:fa:02:c3:e1:ba:4a:51:cd:75:69:08:80: 9a:fd:39:05:33:53:84:82:56:a9:85:66:a2:d9:9b: a2:8b:c7:f6:f6:bb:7f:de:ed:e9:26:1a:af:c8:d2: 6c:09:cd:63:3e:6b:9e:01:d3:07:19:4b:f1:de:86: d5:7a:75:06:a3:d0:ad:28:46:1d:df:48:e4:b9:f1: 4a:55:fb:c2:02:3a:22:b5:13:8a:13:8d:ee:6d:52: 7c:78:78:40:ba:9d:89:d9:43:4d:01:bb:7b:85:9c: 01:02:bf:81:9b:f9:27:eb:14:d8:7a:e2:bb:45:b2: cd:a5:25:34:32:8d:2a:e4:b6:a5:b0:df:17:59:76: 63:72:03:b6:df:68:f2:f9:c2:25:64:83:32:56:83: c9:58:61:47:71:fd:cc:4e:2c:03:8c:7c:2f:86:61: 82:2e:80:09:88:c1:ad:e7:d6:e6:5e:59:85:32:ee: f9:6d:0f:fb:3d:61:f9:8a:1c:df:71:43:f8:74:72: e0:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:51:FC:55:A1:32:24:D6:7F:3C:6F:1D:94:B7:BD:0E:A4:AA:23:95 X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:6b:24:ab:6d:94:05:94:fa:d2:75:17:c8:64:59:ea:a3:ad: 08:b9:c1:00:cb:d4:62:68:5e:b6:ae:f5:b4:22:45:ac:5a:54: 6f:32:d4:e4:ec:d3:d3:42:a9:20:11:f9:0a:b9:b4:63:17:d6: 8a:a2:1b:c6:bf:18:10:62:67:ef:bc:2c:e9:ad:90:69:04:ab: ad:b8:17:c8:1b:a4:f6:52:e4:29:e9:54:3e:17:1d:a7:a2:02: 88:a5:8f:39:51:bd:4d:5c:45:fc:44:be:51:03:20:4a:40:25: 8f:a2:86:3b:12:f0:4c:5c:2f:48:20:5c:9f:a4:03:ec:64:55: 87:30:10:ad:3c:50:dd:df:9b:f7:cb:c8:52:6b:7d:4f:c6:4e: 63:b5:5d:c8:c4:d3:58:01:31:d1:b3:94:63:b7:52:f5:41:bb: 12:df:08:9f:11:94:24:03:a5:84:e5:7d:09:c4:b3:fb:98:67: f3:d6:19:0b:32:89:f4:8a:19:1c:f0:d7:e0:35:bf:47:2d:5e: 62:4c:f3:94:fb:31:0f:b3:c6:d3:79:17:e4:7c:1b:16:be:98: 0e:31:43:f1:6c:05:be:03:01:ea:48:25:ab:7d:89:ff:d3:5b: 7f:b6:4c:25:e9:f6:02:77:e7:a3:19:fd:26:3f:fc:d2:e7:1c: 9a:2c:76:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVo7AqmwSBPQZpN4eZpcHboiUzRgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTEwMjAxMTA3MTdaFw0yNTEwMjMxNjA2MTdaMDMxMTAvBgNV BAMTKEU2NTFGQzU1QTEzMjI0RDY3RjNDNkYxRDk0QjdCRDBFQTRBQTIzOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9u5RW27cmoc1ZQUqSOa8oxd4/ OlzYg4a2nOThhSRuRGhB5dLtmpY185eYeUvqwmTWYbXoSiYmknbjpuEfA/oCw+G6 SlHNdWkIgJr9OQUzU4SCVqmFZqLZm6KLx/b2u3/e7ekmGq/I0mwJzWM+a54B0wcZ S/HehtV6dQaj0K0oRh3fSOS58UpV+8ICOiK1E4oTje5tUnx4eEC6nYnZQ00Bu3uF nAECv4Gb+SfrFNh64rtFss2lJTQyjSrktqWw3xdZdmNyA7bfaPL5wiVkgzJWg8lY YUdx/cxOLAOMfC+GYYIugAmIwa3n1uZeWYUy7vltD/s9YfmKHN9xQ/h0cuA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5lH8VaEyJNZ/PG8dlLe9DqSqI5UwHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJrJKttlAWU+tJ1F8hkWeqjrQi5wQDL1GJo Xrau9bQiRaxaVG8y1OTs09NCqSAR+Qq5tGMX1oqiG8a/GBBiZ++8LOmtkGkEq624 F8gbpPZS5CnpVD4XHaeiAoiljzlRvU1cRfxEvlEDIEpAJY+ihjsS8ExcL0ggXJ+k A+xkVYcwEK08UN3fm/fLyFJrfU/GTmO1XcjE01gBMdGzlGO3UvVBuxLfCJ8RlCQD pYTlfQnEs/uYZ/PWGQsyifSKGRzw1+A1v0ctXmJM85T7MQ+zxtN5F+R8Gxa+mA4x Q/FsBb4DAepIJat9if/TW3+2TCXp9gJ356MZ/SY//NLnHJosdm0= -----END CERTIFICATE-----Generated at Mon Oct 20 20:19:05 2025 by rpki-client