$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: 1G1j3EAOV1P2Ge+8uSIT064rfE4v31po36Y2kt8NP6w= Subject key identifier: 98:4B:0E:36:5A:C9:BA:4B:05:1E:9E:22:40:5C:2A:31:73:3D:C7:2B Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 40F75EC7771555BFA333A5E8B75CB86F384BD31F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 013D Signing time: Sun 02 Nov 2025 21:30:50 +0000 Manifest this update: Sun 02 Nov 2025 21:25:50 +0000 Manifest next update: Thu 06 Nov 2025 00:11:50 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: B5SJWaA/l3z++GJFUh8BFdKj55+EmGY412HgV32nBX0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 00:11:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:f7:5e:c7:77:15:55:bf:a3:33:a5:e8:b7:5c:b8:6f:38:4b:d3:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Nov 2 21:25:50 2025 GMT Not After : Nov 6 00:11:50 2025 GMT Subject: CN=984B0E365AC9BA4B051E9E22405C2A31733DC72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b9:36:f8:67:ec:d4:0e:ed:73:6e:3b:f3:08: c1:c7:f1:3d:c4:9c:be:d7:48:a3:bb:10:68:8d:8d: d1:4e:2b:12:9f:38:a8:33:2f:42:84:ce:da:45:87: a6:2d:f3:62:70:0e:89:ea:e1:7d:4c:bb:0e:19:e1: e1:8e:02:f6:21:72:b3:ff:96:9c:52:07:63:d5:2b: da:a9:c0:4d:c7:93:59:a9:c5:38:7b:55:56:e0:5b: f4:e3:e2:7c:8c:a9:ea:f3:fd:2c:87:3c:94:29:9c: 12:d0:dd:db:39:bf:c5:3c:3d:5b:8e:e5:9b:bd:a6: 19:14:08:b4:1a:c0:06:d7:ee:3d:05:a7:31:7e:f2: b0:da:19:2d:d4:00:f3:9f:83:f8:34:be:01:c7:2b: 8f:bb:dd:4a:67:61:85:8f:bd:bf:ab:9e:9c:84:4d: 5e:8b:bb:58:f1:fc:f1:84:10:1d:e4:f9:cc:5b:8d: 49:8f:29:34:93:10:f0:18:8c:24:63:6e:49:ca:9f: c5:0a:a7:ab:44:f5:46:64:cb:3a:ab:4f:ac:b8:75: 72:78:22:59:ee:51:09:3d:18:85:49:2e:fb:0b:20: bf:d4:cb:cf:f1:ef:68:29:ab:a6:97:10:14:b5:a8: a9:a6:06:41:b3:d3:91:7a:5a:8f:7a:27:4e:55:ca: 19:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:4B:0E:36:5A:C9:BA:4B:05:1E:9E:22:40:5C:2A:31:73:3D:C7:2B X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:41:39:dc:19:9b:cf:aa:28:6c:ec:d4:3a:95:1a:60:25:02: 14:10:81:97:fe:f6:a2:26:12:41:98:6f:9e:2c:6d:65:cc:59: 38:ac:19:52:6f:1b:50:ff:ec:1f:75:7a:56:cf:db:bf:27:58: 38:51:3c:fa:69:eb:e1:af:f1:13:c9:6d:f5:dc:d1:3c:f1:f1: d9:47:01:de:f4:d9:dc:c5:ba:67:14:83:b2:e3:17:18:36:55: 4e:70:0c:a9:8d:39:12:4a:4e:a8:17:ee:57:d1:0e:c9:d2:37: 00:47:c4:b1:88:16:3b:88:02:ae:ad:fe:fb:88:36:34:ea:df: d4:ac:a2:c5:79:71:c0:9f:ad:ce:14:75:5a:b1:99:dc:f9:22: f0:14:c7:b7:a9:2a:45:5f:91:f6:17:8f:5b:02:bf:80:b1:91: bb:d9:0c:07:5a:8f:36:43:40:70:03:c7:b7:5d:d9:a5:67:1f: f3:ef:13:c7:14:fe:fb:88:f9:74:07:67:25:22:59:5b:64:83: f6:96:75:99:0c:e6:fc:00:c7:cc:0f:db:e1:df:29:6b:72:be: 8d:99:e6:b9:e5:d7:fb:d6:f1:d6:12:02:25:02:27:0a:01:b9: df:3d:81:f5:3c:f8:dc:06:be:d7:bb:2e:c3:20:3f:6b:1c:34: be:44:a5:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQPdex3cVVb+jM6Xot1y4bzhL0x8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTExMDIyMTI1NTBaFw0yNTExMDYwMDExNTBaMDMxMTAvBgNV BAMTKDk4NEIwRTM2NUFDOUJBNEIwNTFFOUUyMjQwNUMyQTMxNzMzREM3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uTb4Z+zUDu1zbjvzCMHH8T3E nL7XSKO7EGiNjdFOKxKfOKgzL0KEztpFh6Yt82JwDonq4X1Muw4Z4eGOAvYhcrP/ lpxSB2PVK9qpwE3Hk1mpxTh7VVbgW/Tj4nyMqerz/SyHPJQpnBLQ3ds5v8U8PVuO 5Zu9phkUCLQawAbX7j0FpzF+8rDaGS3UAPOfg/g0vgHHK4+73UpnYYWPvb+rnpyE TV6Lu1jx/PGEEB3k+cxbjUmPKTSTEPAYjCRjbknKn8UKp6tE9UZkyzqrT6y4dXJ4 IlnuUQk9GIVJLvsLIL/Uy8/x72gpq6aXEBS1qKmmBkGz05F6Wo96J05VyhmLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmEsONlrJuksFHp4iQFwqMXM9xyswHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9BOdwZm8+qKGzs1DqVGmAlAhQQgZf+9qIm EkGYb54sbWXMWTisGVJvG1D/7B91elbP278nWDhRPPpp6+Gv8RPJbfXc0Tzx8dlH Ad702dzFumcUg7LjFxg2VU5wDKmNORJKTqgX7lfRDsnSNwBHxLGIFjuIAq6t/vuI NjTq39SsosV5ccCfrc4UdVqxmdz5IvAUx7epKkVfkfYXj1sCv4CxkbvZDAdajzZD QHADx7dd2aVnH/PvE8cU/vuI+XQHZyUiWVtkg/aWdZkM5vwAx8wP2+HfKWtyvo2Z 5rnl1/vW8dYSAiUCJwoBud89gfU8+NwGvte7LsMgP2scNL5EpVI= -----END CERTIFICATE-----Generated at Tue Nov 4 12:54:44 2025 by rpki-client