$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: Y6WhLuyLl61qgQOuWC/L4tDpkn9wK7qylkdCZl8NrWE= Subject key identifier: 2F:2E:FE:28:06:24:12:13:F9:F6:27:6D:BB:4B:AE:D1:FA:6B:DB:9D Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 261AF652596B12CE92D7E4D505E3E9B7224EB164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: 0172 Signing time: Mon 02 Mar 2026 00:30:58 +0000 Manifest this update: Mon 02 Mar 2026 00:25:58 +0000 Manifest next update: Thu 05 Mar 2026 00:45:58 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: dPC4arN8u77pQqs9zmwdzggH2akP96c3kh3Q3liXkQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:45:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:1a:f6:52:59:6b:12:ce:92:d7:e4:d5:05:e3:e9:b7:22:4e:b1:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Mar 2 00:25:58 2026 GMT Not After : Mar 5 00:45:58 2026 GMT Subject: CN=2F2EFE2806241213F9F6276DBB4BAED1FA6BDB9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:d1:35:5d:56:65:21:f6:1d:69:b8:81:f2:ea: bb:1e:81:1e:a8:d9:53:89:0d:ed:50:94:6e:e8:34: 84:34:98:fd:2a:54:b9:bb:c5:53:e8:e4:b4:86:74: e0:27:7e:2a:91:9b:78:9f:5d:df:76:da:88:ab:1f: 6a:2a:d3:5c:47:07:cb:6f:c6:04:0a:42:d9:bd:31: f2:32:b8:c9:d2:c6:2e:fa:ae:76:d1:a9:25:c5:0a: 2d:73:e5:0e:5d:35:48:95:d9:c5:d2:17:19:6d:89: 9a:dd:c5:01:a6:78:0e:87:33:2a:a2:4d:41:cf:d1: cf:94:b0:8e:fb:0a:6c:f6:b7:1d:c7:97:45:06:0c: d2:7b:90:64:e7:65:f8:5e:6e:ee:39:16:ef:96:31: c3:a1:20:85:b0:64:5f:e1:a0:1c:15:95:c6:da:7f: 21:cf:aa:2c:b5:10:bb:e2:27:0e:ff:e3:07:fe:ff: 04:25:ab:b4:cc:5b:a5:d2:9f:25:a1:5c:50:ca:6c: 88:b9:72:15:09:48:c1:9d:97:64:62:91:a0:f3:6e: a7:4b:c2:6d:c1:bb:17:5e:46:aa:1b:06:cf:45:f5: 84:57:8e:c5:81:f7:8d:a2:7f:f1:ba:54:0d:bc:0a: 3b:e5:fd:b4:85:18:0e:03:6e:98:dd:4b:9f:1c:d2: d8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:2E:FE:28:06:24:12:13:F9:F6:27:6D:BB:4B:AE:D1:FA:6B:DB:9D X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:36:d9:b8:96:7f:ef:66:9b:f7:72:2e:ac:21:2f:6f:f2:32: d8:44:e4:ca:c9:d5:79:d8:56:ce:9d:42:42:af:c2:4c:f6:66: 2e:b3:db:b1:86:58:a6:c5:37:ec:2e:2d:5b:b1:ab:84:b3:02: 60:9f:02:33:29:4c:dc:82:39:26:75:f0:f2:75:c1:db:4b:24: c6:84:4f:b8:a2:be:11:bf:8b:7d:93:25:e0:56:0e:8c:44:2c: 9b:d2:7a:17:db:75:a2:f6:f0:c4:f6:7f:ba:3d:bc:bd:e6:95: e5:07:37:a0:0b:88:66:19:0b:a3:c7:65:cb:d9:d3:c7:ec:7a: 4d:63:4f:91:08:31:bb:2c:15:1e:68:98:36:37:8e:5b:d4:75: 43:47:e5:89:0d:05:b9:e3:8d:82:73:05:c0:47:62:26:c3:a1: b6:41:58:13:75:f0:96:1c:07:77:ab:12:f6:e4:da:90:90:e8: 2f:bf:e4:b1:af:8f:45:ad:91:81:1d:49:c9:a1:45:c2:9d:d6: 7b:ad:7d:50:09:1c:0f:df:57:5e:6b:6f:d0:a8:55:7b:ac:41: 36:31:ff:8f:45:c5:1f:03:60:8b:61:c8:44:ba:fe:90:5e:f2: 0e:f1:56:5d:b3:b0:13:cc:ad:78:2b:5f:05:04:a2:26:82:50: 11:eb:a9:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJhr2UllrEs6S1+TVBePptyJOsWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNjAzMDIwMDI1NThaFw0yNjAzMDUwMDQ1NThaMDMxMTAvBgNV BAMTKDJGMkVGRTI4MDYyNDEyMTNGOUY2Mjc2REJCNEJBRUQxRkE2QkRCOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb0TVdVmUh9h1puIHy6rsegR6o 2VOJDe1QlG7oNIQ0mP0qVLm7xVPo5LSGdOAnfiqRm3ifXd922oirH2oq01xHB8tv xgQKQtm9MfIyuMnSxi76rnbRqSXFCi1z5Q5dNUiV2cXSFxltiZrdxQGmeA6HMyqi TUHP0c+UsI77Cmz2tx3Hl0UGDNJ7kGTnZfhebu45Fu+WMcOhIIWwZF/hoBwVlcba fyHPqiy1ELviJw7/4wf+/wQlq7TMW6XSnyWhXFDKbIi5chUJSMGdl2RikaDzbqdL wm3BuxdeRqobBs9F9YRXjsWB942if/G6VA28Cjvl/bSFGA4DbpjdS58c0tgnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULy7+KAYkEhP59idtu0uu0fpr250wHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFs22biWf+9mm/dyLqwhL2/yMthE5MrJ1XnY Vs6dQkKvwkz2Zi6z27GGWKbFN+wuLVuxq4SzAmCfAjMpTNyCOSZ18PJ1wdtLJMaE T7iivhG/i32TJeBWDoxELJvSehfbdaL28MT2f7o9vL3mleUHN6ALiGYZC6PHZcvZ 08fsek1jT5EIMbssFR5omDY3jlvUdUNH5YkNBbnjjYJzBcBHYibDobZBWBN18JYc B3erEvbk2pCQ6C+/5LGvj0WtkYEdScmhRcKd1nutfVAJHA/fV15rb9CoVXusQTYx /49FxR8DYIthyES6/pBe8g7xVl2zsBPMrXgrXwUEoiaCUBHrqZg= -----END CERTIFICATE-----Generated at Mon Mar 2 16:44:51 2026 by rpki-client