$ rpki-client -vvf repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft File: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft (raw, json) Hash identifier: Pjng5xE+Q4wr8iyX5K40KRqDGt5WEOzsvK+zJxzC4Qo= Subject key identifier: 2A:FE:49:8F:51:30:1A:DB:BC:1B:1F:58:BC:27:BC:03:60:DB:E5:DA Authority key identifier: 36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 Certificate issuer: /CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Certificate serial: 37A86F3AA5FEB1B15A9CB55270CB0115452AE9D6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft Manifest number: 42 Signing time: Mon 03 Nov 2025 09:42:17 +0000 Manifest this update: Mon 03 Nov 2025 09:37:17 +0000 Manifest next update: Thu 06 Nov 2025 16:25:17 +0000 Files and hashes: 1: 36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl (hash: 4XqSLiQoOdtal6qgazWeEXEwSP2EfHvwlOgOkkfR0qg=) 2: 3130332e3134352e3232322e302f32332d3233203d3e20313339343533.roa (hash: WfyKy7SGgw1ll4gSjGcypbLZ+xtgURJsabsZ3eqwV20=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 16:25:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:a8:6f:3a:a5:fe:b1:b1:5a:9c:b5:52:70:cb:01:15:45:2a:e9:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36058F001B4EB8C36AC0C178096CB2C2CB5D6223 Validity Not Before: Nov 3 09:37:17 2025 GMT Not After : Nov 6 16:25:17 2025 GMT Subject: CN=2AFE498F51301ADBBC1B1F58BC27BC0360DBE5DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:34:c3:d7:85:fe:f3:4c:cb:c4:ee:85:f4:0d: 98:a1:12:ec:31:14:70:42:71:75:97:09:02:17:45: 7d:65:fd:ad:27:ee:3a:f4:6d:42:35:6d:f8:74:ff: 2e:b8:f9:bc:46:7a:46:de:fe:ca:7b:59:b7:df:51: aa:df:9f:0b:3f:22:e9:aa:a7:7c:ee:43:e5:e8:c8: 9e:df:90:f0:88:37:e5:d7:d4:18:eb:84:28:f5:50: 49:cd:a0:21:42:f1:c0:9b:59:6f:2d:18:66:04:24: a7:c7:af:9c:ae:d9:0d:37:6f:c5:c2:57:93:97:1e: 7f:a6:a6:47:b6:66:be:77:26:04:50:a2:83:9a:a6: 40:37:03:61:9a:a7:9d:9e:e4:f4:61:71:f1:5b:b1: 2f:f8:58:4e:1d:da:8b:a5:33:31:53:13:91:b7:68: 26:15:2a:fb:6d:ee:c5:b1:ef:5d:83:01:60:a5:62: a8:ca:07:0f:c6:38:23:dd:41:a4:1f:af:52:ba:60: 4e:bc:9a:f9:bb:e2:8d:88:96:cd:b6:8f:0e:d5:33: d6:58:23:d4:8f:55:94:a7:80:f0:f5:44:24:7b:b7: 3e:f3:68:e2:c1:91:f2:bb:8c:11:e2:d9:2a:80:5d: 37:34:2e:73:9c:8b:4c:72:ad:7b:4c:1e:8c:77:5b: 46:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:FE:49:8F:51:30:1A:DB:BC:1B:1F:58:BC:27:BC:03:60:DB:E5:DA X509v3 Authority Key Identifier: keyid:36:05:8F:00:1B:4E:B8:C3:6A:C0:C1:78:09:6C:B2:C2:CB:5D:62:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ff5dd0aa-fa7a-4da4-a1c7-1dbc88b2c169/0/36058F001B4EB8C36AC0C178096CB2C2CB5D6223.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:74:a0:99:53:fb:02:74:98:2f:59:27:53:09:57:0c:48:ca: e3:7b:7e:6f:7b:86:79:6d:1d:4a:b4:b0:c8:4b:84:20:7b:07: d0:ed:48:c9:18:d0:a6:48:2e:09:a8:4b:95:ab:24:8a:a5:94: bf:01:a5:ed:38:95:ea:20:6d:ba:da:79:6b:3d:b2:18:ea:d0: ba:1b:07:66:45:30:1b:1c:12:90:a9:b0:5c:ff:eb:a2:f6:b0: 7b:46:32:ae:77:a0:88:dd:63:23:ee:16:a7:b6:7f:ff:1a:9f: c3:00:f0:b3:03:46:4c:26:3a:e8:ef:cb:20:19:13:c6:bf:f0: 80:e9:0c:f6:1b:83:ed:6a:da:cc:01:00:92:d3:bb:24:79:fb: 0d:21:b1:05:ba:31:4a:67:80:d2:a0:77:53:c5:cb:89:13:95: 8a:f9:ef:66:95:4f:a4:82:93:c8:81:5c:64:0d:2c:37:98:4f: 82:64:49:57:96:17:ee:f1:e5:6c:a2:71:a0:a8:17:3a:e6:c2: fa:54:49:25:cf:a2:ba:0e:5f:d0:03:66:d5:96:40:b0:d8:67: ff:61:fb:2b:75:eb:f8:6b:49:cf:b7:10:67:d5:a3:49:b8:84: bf:95:83:bf:ad:82:02:bc:73:79:d0:c3:66:c5:80:87:19:dd: 9b:b1:bd:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6hvOqX+sbFanLVScMsBFUUq6dYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJD QjVENjIyMzAeFw0yNTExMDMwOTM3MTdaFw0yNTExMDYxNjI1MTdaMDMxMTAvBgNV BAMTKDJBRkU0OThGNTEzMDFBREJCQzFCMUY1OEJDMjdCQzAzNjBEQkU1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzNMPXhf7zTMvE7oX0DZihEuwx FHBCcXWXCQIXRX1l/a0n7jr0bUI1bfh0/y64+bxGekbe/sp7WbffUarfnws/Iumq p3zuQ+XoyJ7fkPCIN+XX1BjrhCj1UEnNoCFC8cCbWW8tGGYEJKfHr5yu2Q03b8XC V5OXHn+mpke2Zr53JgRQooOapkA3A2Gap52e5PRhcfFbsS/4WE4d2oulMzFTE5G3 aCYVKvtt7sWx712DAWClYqjKBw/GOCPdQaQfr1K6YE68mvm74o2Ils22jw7VM9ZY I9SPVZSngPD1RCR7tz7zaOLBkfK7jBHi2SqAXTc0LnOci0xyrXtMHox3W0aXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKv5Jj1EwGtu8Gx9YvCe8A2Db5dowHwYDVR0j BBgwFoAUNgWPABtOuMNqwMF4CWyywstdYiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZjVkZDBhYS1mYTdhLTRkYTQtYTFjNy0xZGJjODhiMmMxNjkvMC8zNjA1OEYwMDFC NEVCOEMzNkFDMEMxNzgwOTZDQjJDMkNCNUQ2MjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0IyQzJDQjVE NjIyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmY1ZGQwYWEtZmE3YS00ZGE0LWEx YzctMWRiYzg4YjJjMTY5LzAvMzYwNThGMDAxQjRFQjhDMzZBQzBDMTc4MDk2Q0Iy QzJDQjVENjIyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABx0oJlT+wJ0mC9ZJ1MJVwxIyuN7fm97hnlt HUq0sMhLhCB7B9DtSMkY0KZILgmoS5WrJIqllL8Bpe04leogbbraeWs9shjq0Lob B2ZFMBscEpCpsFz/66L2sHtGMq53oIjdYyPuFqe2f/8an8MA8LMDRkwmOujvyyAZ E8a/8IDpDPYbg+1q2swBAJLTuyR5+w0hsQW6MUpngNKgd1PFy4kTlYr572aVT6SC k8iBXGQNLDeYT4JkSVeWF+7x5WyicaCoFzrmwvpUSSXPoroOX9ADZtWWQLDYZ/9h +yt16/hrSc+3EGfVo0m4hL+Vg7+tggK8c3nQw2bFgIcZ3Zuxvcc= -----END CERTIFICATE-----Generated at Tue Nov 4 23:09:04 2025 by rpki-client