$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: WI4e7K/q9Zz5ly8iB7fBm1nvSCPBHA4wjq8/y9gxWYI= Subject key identifier: 18:3B:D5:DE:29:89:65:CF:1A:18:71:86:B8:39:4B:DF:E1:16:CC:86 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 52569118F8B943D967A5DCF8FDFD9F696B96B8E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: 0121 Signing time: Mon 03 Nov 2025 04:52:15 +0000 Manifest this update: Mon 03 Nov 2025 04:47:15 +0000 Manifest next update: Thu 06 Nov 2025 13:22:15 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: TStr0DmJE8k6oVeIAtrdO1Gwf/0WVJ9sqfuBKe5jdGo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 13:22:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:56:91:18:f8:b9:43:d9:67:a5:dc:f8:fd:fd:9f:69:6b:96:b8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Nov 3 04:47:15 2025 GMT Not After : Nov 6 13:22:15 2025 GMT Subject: CN=183BD5DE298965CF1A187186B8394BDFE116CC86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ad:46:5e:bf:45:4b:1d:80:12:71:9f:91:6e: 68:4e:33:33:31:3e:49:a6:3a:65:15:f4:6e:41:1f: 65:b3:5b:50:48:72:55:91:a9:7d:9e:ee:f5:b3:b6: 0a:c6:66:ba:2f:96:0d:5f:0f:49:9b:b8:71:8c:aa: 12:6b:38:c3:ef:be:4c:59:4c:bf:cb:76:9a:9f:5e: 50:cd:b7:11:43:7c:b9:1a:87:d2:78:bd:e2:30:9b: 61:a3:1d:db:d3:49:99:e2:de:32:aa:f3:9d:ae:31: e8:bf:ff:ff:1f:13:eb:ea:21:96:9e:00:80:69:42: 98:20:52:2a:58:ce:ff:68:9a:74:53:ea:75:24:3f: 11:01:b1:7d:4e:c0:e6:2b:c3:ca:21:90:f3:b3:e0: 65:9e:45:ee:a1:bf:25:6a:4d:f6:33:e2:c2:c8:70: e0:27:ae:08:f5:16:6d:f4:b1:e1:75:b8:44:82:6e: fc:6b:1b:62:58:ef:9e:8b:1e:81:76:7c:9a:38:08: 3f:99:3e:dd:78:1b:93:61:43:13:6b:ad:7d:37:88: c6:05:24:b9:6c:39:7d:13:40:3d:57:ff:13:9d:d1: f6:e6:3f:9c:55:35:4f:3d:10:68:f5:59:6e:79:46: 72:d7:9b:23:db:e7:53:de:7d:20:7e:cc:b5:ce:bc: 5f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3B:D5:DE:29:89:65:CF:1A:18:71:86:B8:39:4B:DF:E1:16:CC:86 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:ad:41:0f:94:78:fd:40:c4:71:b4:49:86:ae:ca:89:e8:88: 94:88:70:f5:72:5b:22:d6:e0:3f:05:7e:6d:eb:70:f1:56:a0: 13:fe:0d:d1:6a:71:dd:ea:cf:ac:f7:04:91:d9:fb:fc:df:0b: 23:da:e0:2e:2b:55:a7:9b:27:c3:27:7a:99:05:b4:1c:b9:82: d2:30:95:30:43:32:7f:95:cf:3e:04:58:41:db:14:a9:df:d7: 93:9a:ae:e6:64:d6:9b:46:f9:a5:cf:f2:b3:05:52:2b:e4:a3: e8:c2:f6:a6:fb:55:3c:05:fe:fb:50:f6:ce:96:51:2b:ad:01: 90:cf:35:ca:7b:39:47:5b:f6:27:b3:3d:f3:ea:34:75:cb:1b: 1e:17:ab:93:c2:cf:de:3e:0a:39:a7:5f:f5:f5:da:20:44:50: 83:d4:65:dc:b7:9a:23:c2:7f:fb:8f:3e:c0:fe:8d:71:a1:28: 1b:3d:86:fd:14:6e:38:80:aa:52:1e:f6:11:0b:4b:5b:a6:48: 5f:b5:20:d5:26:98:07:b5:e7:37:3a:96:8a:f7:79:68:c1:58: 23:b8:08:28:dd:ac:dc:7b:27:de:4b:48:e5:89:f1:4c:f6:d7: d4:e5:32:bb:7a:69:6b:dc:45:02:8c:56:3e:74:cc:2e:a1:47: 9b:e7:a7:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlaRGPi5Q9lnpdz4/f2faWuWuOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTExMDMwNDQ3MTVaFw0yNTExMDYxMzIyMTVaMDMxMTAvBgNV BAMTKDE4M0JENURFMjk4OTY1Q0YxQTE4NzE4NkI4Mzk0QkRGRTExNkNDODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrUZev0VLHYAScZ+RbmhOMzMx PkmmOmUV9G5BH2WzW1BIclWRqX2e7vWztgrGZrovlg1fD0mbuHGMqhJrOMPvvkxZ TL/LdpqfXlDNtxFDfLkah9J4veIwm2GjHdvTSZni3jKq852uMei///8fE+vqIZae AIBpQpggUipYzv9omnRT6nUkPxEBsX1OwOYrw8ohkPOz4GWeRe6hvyVqTfYz4sLI cOAnrgj1Fm30seF1uESCbvxrG2JY756LHoF2fJo4CD+ZPt14G5NhQxNrrX03iMYF JLlsOX0TQD1X/xOd0fbmP5xVNU89EGj1WW55RnLXmyPb51PefSB+zLXOvF/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGDvV3imJZc8aGHGGuDlL3+EWzIYwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWtQQ+UeP1AxHG0SYauyonoiJSIcPVyWyLW 4D8Ffm3rcPFWoBP+DdFqcd3qz6z3BJHZ+/zfCyPa4C4rVaebJ8MnepkFtBy5gtIw lTBDMn+Vzz4EWEHbFKnf15OaruZk1ptG+aXP8rMFUivko+jC9qb7VTwF/vtQ9s6W USutAZDPNcp7OUdb9iezPfPqNHXLGx4Xq5PCz94+CjmnX/X12iBEUIPUZdy3miPC f/uPPsD+jXGhKBs9hv0UbjiAqlIe9hELS1umSF+1INUmmAe15zc6lor3eWjBWCO4 CCjdrNx7J95LSOWJ8Uz219TlMrt6aWvcRQKMVj50zC6hR5vnp6A= -----END CERTIFICATE-----Generated at Tue Nov 4 21:18:10 2025 by rpki-client