$ rpki-client -vvf repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft File: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft (raw, json) Hash identifier: ojw/7FnX4lYMhYjtpUcgDvpF51DL0J4Z3jL86KGbQ6s= Subject key identifier: CB:A7:EC:1D:ED:DF:3D:C5:EE:49:9D:D6:40:A1:40:AE:69:4F:FB:5D Authority key identifier: 36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 Certificate issuer: /CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Certificate serial: 65C0FB76906C21E6311B92D07CEE675539D8AAF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft Manifest number: FF Signing time: Sun 15 Jun 2025 23:30:49 +0000 Manifest this update: Sun 15 Jun 2025 23:25:49 +0000 Manifest next update: Thu 19 Jun 2025 06:27:49 +0000 Files and hashes: 1: 36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl (hash: 7FSWKLi8KQihkJSZg7ECK7l2/iPz07j5p+4xp8x0d5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:c0:fb:76:90:6c:21:e6:31:1b:92:d0:7c:ee:67:55:39:d8:aa:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5 Validity Not Before: Jun 15 23:25:49 2025 GMT Not After : Jun 19 06:27:49 2025 GMT Subject: CN=CBA7EC1DEDDF3DC5EE499DD640A140AE694FFB5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ee:6d:d9:05:17:dc:d1:47:d8:7e:56:3d:76: 51:94:8b:ad:b8:54:f1:df:88:2d:67:74:e3:f2:a8: db:82:f3:bb:45:a1:63:c6:12:50:3d:ea:69:a5:4c: a0:94:43:bd:0a:c0:7d:c5:ff:7d:ce:13:36:ae:4a: a3:9a:88:ff:bf:2d:ee:42:f3:85:cd:05:40:82:7c: f8:60:61:d3:4f:ef:08:95:09:a3:a9:cc:ff:c9:b4: ec:5c:46:f1:f4:2e:f7:84:31:ee:14:21:a7:5b:27: 42:03:f6:75:3d:18:0f:59:16:fa:17:8e:00:5e:9b: 90:d3:b9:61:9c:5a:4b:bb:19:f2:08:e9:8a:58:ae: 11:af:06:95:19:f9:71:e1:7e:25:b9:1f:31:3f:be: 70:a1:33:2e:cb:4e:68:34:34:44:75:ba:74:b8:10: c0:42:28:b1:be:66:7a:ed:42:9e:63:4a:53:b5:a4: d5:b0:5d:7d:49:e5:fe:6b:68:d3:69:a5:7c:c5:b6: c4:57:2f:8f:61:30:c0:75:2f:ac:53:97:5f:a6:fe: 32:c8:f5:12:56:62:7b:3e:b1:5e:ff:f1:06:c8:48: f1:71:55:ce:65:e0:51:3a:3e:2f:23:14:03:84:ec: eb:a1:eb:d5:c1:62:f1:05:65:d2:82:53:95:0d:f4: e3:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A7:EC:1D:ED:DF:3D:C5:EE:49:9D:D6:40:A1:40:AE:69:4F:FB:5D X509v3 Authority Key Identifier: keyid:36:CA:75:AD:60:14:BF:F6:D4:DD:CA:B6:7E:67:E1:16:D3:DB:9C:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b610c8d-a935-44c3-8935-b63b48f833f0/0/36CA75AD6014BFF6D4DDCAB67E67E116D3DB9CD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:95:a7:84:29:ec:70:94:6f:66:da:d9:c6:6a:5e:16:c6:ac: 82:ba:da:ad:8b:80:31:ff:26:5a:62:ad:14:98:2f:f6:94:8c: f6:e2:b2:e9:ce:4f:dc:39:83:94:b8:80:df:d9:bb:6e:fe:80: 05:ff:72:ab:bf:ce:1d:bc:b2:8d:94:f0:65:cb:81:96:8f:fa: 92:f6:de:0b:31:ed:9e:a9:0d:08:16:13:cd:d3:fb:91:16:5e: f3:86:08:cc:05:82:6c:4e:84:1d:ae:a6:a5:c0:97:84:76:24: a6:cb:6d:fb:c7:bc:11:be:6c:90:e0:c5:1d:4c:dc:d3:8c:5c: fb:9f:c0:d7:c0:36:44:e8:50:e4:20:07:a0:0f:2e:63:67:a1: 36:6c:ae:1b:9e:ad:b3:92:3b:9d:1b:c4:ca:dd:4f:fd:74:a2: f1:ea:8b:23:d9:7c:65:b4:2f:90:73:f5:fe:dd:00:6b:83:ec: 54:b7:25:44:ab:50:85:f4:6f:a8:d6:bb:66:de:3f:a1:41:96: 98:24:82:f6:a3:ae:b2:da:94:1d:6d:81:20:99:22:18:8b:01: 54:eb:96:b5:04:c5:56:8e:79:d0:0c:6d:7b:22:04:58:fa:78: f1:ea:22:7b:a2:c5:ae:0a:92:90:fb:cd:e6:29:0c:b2:a5:95: 68:1a:40:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcD7dpBsIeYxG5LQfO5nVTnYqvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZE M0RCOUNENTAeFw0yNTA2MTUyMzI1NDlaFw0yNTA2MTkwNjI3NDlaMDMxMTAvBgNV BAMTKENCQTdFQzFERURERjNEQzVFRTQ5OURENjQwQTE0MEFFNjk0RkZCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU7m3ZBRfc0UfYflY9dlGUi624 VPHfiC1ndOPyqNuC87tFoWPGElA96mmlTKCUQ70KwH3F/33OEzauSqOaiP+/Le5C 84XNBUCCfPhgYdNP7wiVCaOpzP/JtOxcRvH0LveEMe4UIadbJ0ID9nU9GA9ZFvoX jgBem5DTuWGcWku7GfII6YpYrhGvBpUZ+XHhfiW5HzE/vnChMy7LTmg0NER1unS4 EMBCKLG+ZnrtQp5jSlO1pNWwXX1J5f5raNNppXzFtsRXL49hMMB1L6xTl1+m/jLI 9RJWYns+sV7/8QbISPFxVc5l4FE6Pi8jFAOE7Ouh69XBYvEFZdKCU5UN9OMxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6fsHe3fPcXuSZ3WQKFArmlP+10wHwYDVR0j BBgwFoAUNsp1rWAUv/bU3cq2fmfhFtPbnNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjYxMGM4ZC1hOTM1LTQ0YzMtODkzNS1iNjNiNDhmODMzZjAvMC8zNkNBNzVBRDYw MTRCRkY2RDRERENBQjY3RTY3RTExNkQzREI5Q0Q1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0UxMTZEM0RC OUNENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2MTBjOGQtYTkzNS00NGMzLTg5 MzUtYjYzYjQ4ZjgzM2YwLzAvMzZDQTc1QUQ2MDE0QkZGNkQ0RERDQUI2N0U2N0Ux MTZEM0RCOUNENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJWVp4Qp7HCUb2ba2cZqXhbGrIK62q2LgDH/ JlpirRSYL/aUjPbisunOT9w5g5S4gN/Zu27+gAX/cqu/zh28so2U8GXLgZaP+pL2 3gsx7Z6pDQgWE83T+5EWXvOGCMwFgmxOhB2upqXAl4R2JKbLbfvHvBG+bJDgxR1M 3NOMXPufwNfANkToUOQgB6APLmNnoTZsrhuerbOSO50bxMrdT/10ovHqiyPZfGW0 L5Bz9f7dAGuD7FS3JUSrUIX0b6jWu2beP6FBlpgkgvajrrLalB1tgSCZIhiLAVTr lrUExVaOedAMbXsiBFj6ePHqInuixa4KkpD7zeYpDLKllWgaQBM= -----END CERTIFICATE-----Generated at Mon Jun 16 15:46:50 2025 by rpki-client