$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: 5S+x92wn9lp+jYeJuyaaa4Q51G0mCE2vmF6tbhjw3hM= Subject key identifier: B0:4A:DE:3F:E3:88:BA:2E:57:ED:DB:59:7D:93:D4:FB:7D:F9:99:F1 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 2B71F0173F35E6CBFEC6F696C668328BFA9DC36B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 0278 Signing time: Tue 22 Jul 2025 04:22:20 +0000 Manifest this update: Tue 22 Jul 2025 04:17:20 +0000 Manifest next update: Fri 25 Jul 2025 11:26:20 +0000 Files and hashes: 1: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: TRTQxZqWJQ1PxMAehiNLtK8OR5g17BTQCQvsrrxrD9w=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 4: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 11:26:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:71:f0:17:3f:35:e6:cb:fe:c6:f6:96:c6:68:32:8b:fa:9d:c3:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Jul 22 04:17:20 2025 GMT Not After : Jul 25 11:26:20 2025 GMT Subject: CN=B04ADE3FE388BA2E57EDDB597D93D4FB7DF999F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:23:96:2b:fb:c8:2d:8a:d6:cd:2e:61:d0:3f: ac:ca:5e:09:87:ae:34:e9:87:bc:b5:fc:fb:bb:70: 97:3d:1d:c9:68:76:5b:f0:e1:55:c9:f3:4a:7a:15: e9:ce:ff:cd:8b:46:0d:e5:45:59:d3:5b:52:82:e7: 50:84:69:d5:3e:3b:a3:7d:fe:6d:8d:f7:95:4f:9c: a3:83:ae:48:2d:16:6a:27:da:65:59:5c:77:29:c2: 55:cb:13:a5:0c:58:8c:4e:a6:f6:a4:cc:a0:be:86: a9:1b:55:06:ea:fa:96:d2:42:92:69:5b:b3:52:f2: c1:2a:30:2a:93:f7:a3:41:4d:22:c6:c9:c8:19:48: 5a:0a:83:f8:55:d7:9b:3d:f4:a7:78:c8:4c:80:9c: aa:12:d3:e2:e5:46:51:ad:14:94:a0:10:3f:d9:bc: 03:db:d2:8f:81:0b:4a:9b:87:96:97:44:1c:de:24: fe:c6:05:cd:d4:7d:cd:f2:a0:d0:41:3a:cf:3b:34: 7b:ed:9f:13:8e:6b:e2:6b:62:5b:db:6c:dd:d9:e8: 16:dc:f2:25:d7:3b:bb:c0:c3:79:88:47:82:43:48: 8f:5d:06:4e:9a:ca:6d:7a:12:f1:dc:97:16:81:d7: a7:4d:9b:73:43:f5:16:10:5d:14:c8:59:ca:41:b7: 76:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:4A:DE:3F:E3:88:BA:2E:57:ED:DB:59:7D:93:D4:FB:7D:F9:99:F1 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:6d:9c:80:52:da:07:50:80:4a:62:fa:38:22:2d:40:b1:29: a7:8a:b0:c1:bb:13:1e:9b:d3:40:62:e2:e5:a0:fa:1a:71:05: 7f:4a:a4:60:cf:fa:40:2a:6f:ba:77:01:75:37:18:cf:9a:1e: 92:e6:89:60:d1:a0:ea:24:87:7c:47:90:c0:d6:15:26:52:cf: c6:03:5f:87:5b:83:d7:f7:52:20:f5:22:0f:bb:86:5a:a8:1e: a1:f8:6e:c9:1e:05:14:7d:82:bc:88:86:95:58:e7:fa:37:dc: 52:d0:87:73:9d:7d:50:e7:65:c2:b3:32:fa:f9:c4:54:20:2d: 83:1a:f1:9d:3b:a4:85:a9:97:a6:94:f8:54:56:31:36:e8:be: c7:9d:e4:96:d0:3c:84:12:a0:55:c0:10:37:10:3f:cf:d0:1a: e0:c8:71:0d:56:e3:f2:32:e1:af:83:78:1c:96:9f:3f:85:cb: 3d:b0:fe:f1:83:a1:f0:74:f7:ed:d9:d0:2c:44:51:c2:37:64: 1d:80:d8:70:14:13:65:ad:25:fa:37:14:d6:e6:68:32:f2:af: a2:1a:82:1a:17:d1:fc:58:60:9a:87:d0:45:ae:50:a3:b9:95: 88:e9:f7:a9:4b:97:74:02:e3:c4:f7:a3:36:ac:eb:52:0d:43: 62:0a:9e:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3HwFz815sv+xvaWxmgyi/qdw2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA3MjIwNDE3MjBaFw0yNTA3MjUxMTI2MjBaMDMxMTAvBgNV BAMTKEIwNEFERTNGRTM4OEJBMkU1N0VEREI1OTdEOTNENEZCN0RGOTk5RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVI5Yr+8gtitbNLmHQP6zKXgmH rjTph7y1/Pu7cJc9Hclodlvw4VXJ80p6FenO/82LRg3lRVnTW1KC51CEadU+O6N9 /m2N95VPnKODrkgtFmon2mVZXHcpwlXLE6UMWIxOpvakzKC+hqkbVQbq+pbSQpJp W7NS8sEqMCqT96NBTSLGycgZSFoKg/hV15s99Kd4yEyAnKoS0+LlRlGtFJSgED/Z vAPb0o+BC0qbh5aXRBzeJP7GBc3Ufc3yoNBBOs87NHvtnxOOa+JrYlvbbN3Z6Bbc 8iXXO7vAw3mIR4JDSI9dBk6aym16EvHclxaB16dNm3ND9RYQXRTIWcpBt3bzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEreP+OIui5X7dtZfZPU+335mfEwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG9tnIBS2gdQgEpi+jgiLUCxKaeKsMG7Ex6b 00Bi4uWg+hpxBX9KpGDP+kAqb7p3AXU3GM+aHpLmiWDRoOokh3xHkMDWFSZSz8YD X4dbg9f3UiD1Ig+7hlqoHqH4bskeBRR9gryIhpVY5/o33FLQh3OdfVDnZcKzMvr5 xFQgLYMa8Z07pIWpl6aU+FRWMTbovsed5JbQPIQSoFXAEDcQP8/QGuDIcQ1W4/Iy 4a+DeByWnz+Fyz2w/vGDofB09+3Z0CxEUcI3ZB2A2HAUE2WtJfo3FNbmaDLyr6Ia ghoX0fxYYJqH0EWuUKO5lYjp96lLl3QC48T3ozas61INQ2IKnnE= -----END CERTIFICATE-----Generated at Wed Jul 23 18:10:52 2025 by rpki-client