$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: 9oNVswQF+VJXTX01sxwjnUH7BXqsKDIwscUTyDozPbE= Subject key identifier: 1A:EB:CE:80:AC:7D:C6:E9:99:77:3A:8A:80:7C:CF:0C:C5:2F:3B:03 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 0FA9AE58C71B60CADF074052CCDD66E46346AF96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04AA Signing time: Sat 19 Jul 2025 06:01:32 +0000 Manifest this update: Sat 19 Jul 2025 05:56:32 +0000 Manifest next update: Tue 22 Jul 2025 07:49:32 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: NiN1sBYThPSyHH/35e2c8NYm9kRSlv9jYuUsH7Tq3sQ=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:49:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:a9:ae:58:c7:1b:60:ca:df:07:40:52:cc:dd:66:e4:63:46:af:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Jul 19 05:56:32 2025 GMT Not After : Jul 22 07:49:32 2025 GMT Subject: CN=1AEBCE80AC7DC6E999773A8A807CCF0CC52F3B03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:12:6a:95:1f:0d:8f:ef:bf:11:5e:42:68:37: 18:3d:9a:f6:0e:a3:d8:8a:ca:f7:c9:96:f4:e8:e0: 60:56:dc:7b:2b:9a:9a:21:40:cb:e6:ff:04:b9:33: a8:d6:c4:c2:29:bc:15:09:60:0b:58:17:59:29:ec: 1a:42:91:59:c5:62:d0:cd:1a:e6:e6:42:6f:27:1c: f9:1d:19:c4:e8:c6:51:9b:93:71:44:78:d9:2d:ac: d9:d0:ef:6d:ec:a3:4a:5c:54:d6:c7:aa:b1:80:a0: 2c:15:c1:22:cf:21:e2:c9:e7:a0:13:85:e3:2e:cb: 0b:aa:82:68:cd:d2:0c:92:d6:12:a7:d1:8d:da:c6: 9e:5c:c8:7a:9b:b8:80:d7:9b:0a:f8:f9:6d:8d:d2: ad:d2:17:70:8d:07:1f:40:83:72:84:d1:07:b6:74: e7:2b:dc:c0:3e:73:60:b7:5c:61:76:5b:58:7e:9a: 52:65:00:7a:0f:b4:96:01:52:49:48:af:72:dc:fc: 7f:bd:ad:af:8d:7e:18:44:4d:8b:14:2c:43:29:85: 26:49:2c:ad:e6:6b:08:06:c2:9c:16:ce:3c:38:00: 1b:41:ad:f4:17:ae:7a:3f:d1:85:26:c0:6e:05:e3: ad:9f:02:79:a8:53:4f:c3:b1:cf:74:36:c4:63:04: 7e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:EB:CE:80:AC:7D:C6:E9:99:77:3A:8A:80:7C:CF:0C:C5:2F:3B:03 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:01:ab:4b:37:a2:b1:e2:04:e5:1c:87:b8:4a:ee:bf:58:21: 7a:28:94:cd:4d:a3:28:22:68:3c:b3:1f:37:4c:dd:d9:a0:72: a0:bc:0c:b7:f9:3b:26:62:66:53:b2:b5:bc:29:aa:a9:73:62: 7e:0a:b6:90:a4:ec:18:49:b6:7e:0b:a1:e5:42:20:6b:21:f9: b2:b0:fc:7e:42:e8:e7:d9:42:ec:67:07:69:42:7f:39:37:13: 12:d7:52:88:dc:cb:7c:74:4a:9e:46:1b:48:98:27:5a:15:9e: ce:f3:9e:17:9d:ce:e7:10:5f:11:16:72:b2:58:af:d3:96:8c: ef:92:79:25:bb:62:a1:ae:94:43:27:fe:bb:50:e5:3b:11:9c: 87:0a:df:c3:45:cd:42:1f:7c:23:a6:0e:37:3a:cd:6f:ce:15: 2e:e6:7b:52:ab:50:71:5c:82:63:1a:47:1d:5a:09:9c:1e:d2: 34:93:02:d5:44:df:e0:ad:47:04:66:35:9a:5b:23:78:58:bb: 7d:3d:2d:7e:2d:e0:06:ca:71:fc:df:79:ba:b3:a2:b2:40:0e: 48:06:4b:d8:d9:78:3d:5c:48:a5:f7:3e:82:29:2a:12:8a:43: 2d:26:c7:77:6b:27:75:a4:2e:59:5b:8f:6e:14:87:d9:32:59: e0:e7:91:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD6muWMcbYMrfB0BSzN1m5GNGr5YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA3MTkwNTU2MzJaFw0yNTA3MjIwNzQ5MzJaMDMxMTAvBgNV BAMTKDFBRUJDRTgwQUM3REM2RTk5OTc3M0E4QTgwN0NDRjBDQzUyRjNCMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoEmqVHw2P778RXkJoNxg9mvYO o9iKyvfJlvTo4GBW3HsrmpohQMvm/wS5M6jWxMIpvBUJYAtYF1kp7BpCkVnFYtDN GubmQm8nHPkdGcToxlGbk3FEeNktrNnQ723so0pcVNbHqrGAoCwVwSLPIeLJ56AT heMuywuqgmjN0gyS1hKn0Y3axp5cyHqbuIDXmwr4+W2N0q3SF3CNBx9Ag3KE0Qe2 dOcr3MA+c2C3XGF2W1h+mlJlAHoPtJYBUklIr3Lc/H+9ra+NfhhETYsULEMphSZJ LK3mawgGwpwWzjw4ABtBrfQXrno/0YUmwG4F462fAnmoU0/Dsc90NsRjBH4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGuvOgKx9xumZdzqKgHzPDMUvOwMwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIMBq0s3orHiBOUch7hK7r9YIXoolM1Noygi aDyzHzdM3dmgcqC8DLf5OyZiZlOytbwpqqlzYn4KtpCk7BhJtn4LoeVCIGsh+bKw /H5C6OfZQuxnB2lCfzk3ExLXUojcy3x0Sp5GG0iYJ1oVns7znhedzucQXxEWcrJY r9OWjO+SeSW7YqGulEMn/rtQ5TsRnIcK38NFzUIffCOmDjc6zW/OFS7me1KrUHFc gmMaRx1aCZwe0jSTAtVE3+CtRwRmNZpbI3hYu309LX4t4AbKcfzfebqzorJADkgG S9jZeD1cSKX3PoIpKhKKQy0mx3drJ3WkLllbj24Uh9kyWeDnkfg= -----END CERTIFICATE-----Generated at Sun Jul 20 22:31:52 2025 by rpki-client