$ rpki-client -vvf repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft File: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft (raw, json) Hash identifier: BmrXsUDZ64Cg9aCDavtH3uo0fWntPkHxcP+Ackcuaqc= Subject key identifier: A9:D4:43:D5:6B:D9:42:BA:6C:14:13:4A:0D:E2:D5:C0:36:14:4A:18 Authority key identifier: E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C Certificate issuer: /CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Certificate serial: 403864DBAEC44F88E75067F87E3D508DCF5B6716 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft Manifest number: F9 Signing time: Tue 05 Aug 2025 18:02:07 +0000 Manifest this update: Tue 05 Aug 2025 17:57:07 +0000 Manifest next update: Fri 08 Aug 2025 22:59:07 +0000 Files and hashes: 1: E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl (hash: 6vbwEcTCCX+cHMgZEzLrxLXOlsgx3jDFtr+tUZ6PSig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 22:59:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:38:64:db:ae:c4:4f:88:e7:50:67:f8:7e:3d:50:8d:cf:5b:67:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E336CD495C4F480EC4FA92EB0B5942D98DE4B88C Validity Not Before: Aug 5 17:57:07 2025 GMT Not After : Aug 8 22:59:07 2025 GMT Subject: CN=A9D443D56BD942BA6C14134A0DE2D5C036144A18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ea:7a:a2:b6:60:be:74:c1:b1:f8:5d:62:af: 98:9a:6d:b3:ec:44:72:3e:4c:c4:55:1a:5f:e4:4f: 0e:cb:4d:85:68:b6:99:51:26:5f:26:5c:db:cc:d0: 1c:9c:fa:68:f7:a5:e9:e3:a4:16:48:a1:b0:4c:ee: 9c:c4:de:3a:ee:fd:13:fc:9c:f8:1f:a9:e5:e1:8f: 8e:53:33:bf:70:ae:74:e2:2c:3d:e4:e2:ba:5d:7b: dc:fb:69:66:1e:a0:5d:d9:a2:3c:77:a3:8b:55:46: 04:eb:3e:f8:ef:a1:c5:aa:48:bd:33:cf:1f:65:06: cc:71:83:da:82:cd:67:a6:9a:e3:7f:cf:72:07:13: 83:52:3b:42:f2:51:92:74:4d:78:18:a8:97:67:88: e5:dc:7c:dd:72:1a:eb:82:6d:43:ab:d4:c8:8a:1f: 65:30:7d:38:4f:d3:9e:ea:f3:43:d2:46:8a:7e:a3: d7:85:0a:3b:d1:f2:53:e9:ea:f9:b6:a4:27:f1:85: 97:df:53:0e:84:d6:fe:6a:48:a4:d1:1d:97:0d:ad: 76:86:6f:35:ee:9f:22:68:fd:68:84:76:20:f1:99: 21:43:3c:93:93:cc:b8:82:18:60:ce:03:75:2c:e8: 56:bb:50:5a:3b:3c:e9:03:ab:6a:80:56:ca:1e:c6: 25:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:D4:43:D5:6B:D9:42:BA:6C:14:13:4A:0D:E2:D5:C0:36:14:4A:18 X509v3 Authority Key Identifier: keyid:E3:36:CD:49:5C:4F:48:0E:C4:FA:92:EB:0B:59:42:D9:8D:E4:B8:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f7bd944-017a-43a3-94f3-ff47af038980/0/E336CD495C4F480EC4FA92EB0B5942D98DE4B88C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:0d:23:54:91:17:59:4a:f0:12:e9:e6:e6:76:81:68:e2:20: 39:d3:ae:db:b5:bc:b3:a4:84:c3:82:b5:ce:20:33:8e:64:b0: 3f:f7:a7:ee:3f:19:80:c9:b3:50:8d:06:d5:9d:72:85:ab:b4: 02:4b:b7:ea:f3:06:2e:1b:bc:f1:3f:46:d4:3f:1f:91:b4:05: 6c:09:7c:37:38:aa:20:a1:11:14:35:a0:d7:c2:29:2e:83:39: d6:c5:ed:03:01:72:13:b3:1e:8d:45:83:68:4a:eb:0d:64:4b: b9:cc:1a:20:9f:38:3e:e1:90:83:bd:d8:07:34:77:9c:ec:99: dd:00:20:47:2b:27:b0:4c:60:27:78:5b:78:c7:ca:d0:ce:17: cf:6b:c3:1a:7a:b5:25:6d:04:3c:2a:06:6e:f1:fa:90:35:5a: 73:18:f4:95:e6:aa:9d:bf:c5:15:d5:4c:73:39:48:6e:92:d9: fe:49:a2:29:a3:39:25:41:b9:3e:97:3f:99:42:ec:06:49:9e: 2f:08:21:a6:b6:83:8c:d0:a9:e6:af:71:d1:72:ed:46:e8:9a: c4:6b:9b:27:b2:7f:ff:8f:bc:77:53:da:7f:11:67:ca:84:0a: 96:08:46:2d:75:d4:88:11:f5:a2:5b:ae:00:5f:eb:c8:8a:34: ef:13:30:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQDhk267ET4jnUGf4fj1Qjc9bZxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4 REU0Qjg4QzAeFw0yNTA4MDUxNzU3MDdaFw0yNTA4MDgyMjU5MDdaMDMxMTAvBgNV BAMTKEE5RDQ0M0Q1NkJEOTQyQkE2QzE0MTM0QTBERTJENUMwMzYxNDRBMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC6nqitmC+dMGx+F1ir5iabbPs RHI+TMRVGl/kTw7LTYVotplRJl8mXNvM0Byc+mj3penjpBZIobBM7pzE3jru/RP8 nPgfqeXhj45TM79wrnTiLD3k4rpde9z7aWYeoF3Zojx3o4tVRgTrPvjvocWqSL0z zx9lBsxxg9qCzWemmuN/z3IHE4NSO0LyUZJ0TXgYqJdniOXcfN1yGuuCbUOr1MiK H2UwfThP057q80PSRop+o9eFCjvR8lPp6vm2pCfxhZffUw6E1v5qSKTRHZcNrXaG bzXunyJo/WiEdiDxmSFDPJOTzLiCGGDOA3Us6Fa7UFo7POkDq2qAVsoexiV5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqdRD1WvZQrpsFBNKDeLVwDYUShgwHwYDVR0j BBgwFoAU4zbNSVxPSA7E+pLrC1lC2Y3kuIwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjdiZDk0NC0wMTdhLTQzYTMtOTRmMy1mZjQ3YWYwMzg5ODAvMC9FMzM2Q0Q0OTVD NEY0ODBFQzRGQTkyRUIwQjU5NDJEOThERTRCODhDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQyRDk4REU0 Qjg4Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y3YmQ5NDQtMDE3YS00M2EzLTk0 ZjMtZmY0N2FmMDM4OTgwLzAvRTMzNkNENDk1QzRGNDgwRUM0RkE5MkVCMEI1OTQy RDk4REU0Qjg4Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUNI1SRF1lK8BLp5uZ2gWjiIDnTrtu1vLOk hMOCtc4gM45ksD/3p+4/GYDJs1CNBtWdcoWrtAJLt+rzBi4bvPE/RtQ/H5G0BWwJ fDc4qiChERQ1oNfCKS6DOdbF7QMBchOzHo1Fg2hK6w1kS7nMGiCfOD7hkIO92Ac0 d5zsmd0AIEcrJ7BMYCd4W3jHytDOF89rwxp6tSVtBDwqBm7x+pA1WnMY9JXmqp2/ xRXVTHM5SG6S2f5JoimjOSVBuT6XP5lC7AZJni8IIaa2g4zQqeavcdFy7UbomsRr myeyf/+PvHdT2n8RZ8qECpYIRi111IgR9aJbrgBf68iKNO8TMGc= -----END CERTIFICATE-----Generated at Thu Aug 7 12:57:48 2025 by rpki-client