$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: 1fRfw+LbGU9qN83+9OjTDoDCstrBJXOGy++9Hf0Ck5Y= Subject key identifier: 20:41:7D:D7:FD:48:FD:97:AB:D7:FF:E5:16:58:7B:1C:2A:38:67:BD Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 75741EF10A2878FFF9A796AFC85D28CB9582F635 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02A3 Signing time: Sat 25 Oct 2025 07:02:26 +0000 Manifest this update: Sat 25 Oct 2025 06:57:26 +0000 Manifest next update: Tue 28 Oct 2025 11:36:26 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 3: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: ntQmH2DeGdGvw+nTzLcf94xuq2nrwzJmTgMSxt8Y56M=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 28 Oct 2025 11:36:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:74:1e:f1:0a:28:78:ff:f9:a7:96:af:c8:5d:28:cb:95:82:f6:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Oct 25 06:57:26 2025 GMT Not After : Oct 28 11:36:26 2025 GMT Subject: CN=20417DD7FD48FD97ABD7FFE516587B1C2A3867BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:f6:c4:a1:3a:d4:83:4b:87:3e:01:c5:82:b8: 92:07:d3:d0:64:cb:db:f4:a2:bf:09:92:b3:a8:20: 3a:df:ab:43:a4:e2:7c:97:72:4b:66:26:17:3a:b2: 9d:4a:0b:ec:1a:8f:9f:6b:26:9f:63:5a:fc:94:a6: ee:1c:50:7c:8a:8f:c9:0b:49:f0:66:fa:ea:af:3d: dd:53:fc:c1:ef:1c:cc:3d:93:d1:c8:05:46:f6:8e: dc:17:cd:3b:de:ec:c6:29:b9:54:98:55:e1:70:54: d0:1a:a6:93:e4:ad:80:37:f9:31:b5:72:73:3f:94: 0c:5f:67:c5:c0:d2:22:44:ec:9f:83:83:f3:a1:c9: 02:01:9e:0b:c6:a0:de:f9:24:ff:bb:11:fc:fa:54: 30:2e:07:2c:8d:d5:e1:0c:ee:36:69:41:52:1b:49: 04:93:7f:1f:92:9c:3f:0b:54:42:0b:2c:e2:8c:f2: 2d:59:3f:b2:64:44:d7:b3:3a:49:c3:50:dd:ac:2d: 93:cc:09:25:97:ef:3e:73:4e:ab:f8:15:16:9b:54: 6f:39:31:48:d1:38:77:23:74:5e:ab:09:3e:2a:47: 88:a9:4d:ee:d2:76:36:9b:fe:23:96:83:ae:b5:71: e7:e2:4b:33:66:0b:b1:52:b9:3f:0d:13:1f:6d:c6: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:41:7D:D7:FD:48:FD:97:AB:D7:FF:E5:16:58:7B:1C:2A:38:67:BD X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:18:3a:27:5e:a2:64:08:e7:ef:08:b1:f1:d2:f0:c5:b9:4a: b1:46:9b:47:85:ea:7a:c3:52:75:ca:7d:7d:e1:dc:1b:1f:26: ce:a1:4f:97:e8:b6:a4:2a:72:20:a1:7d:b4:20:e9:9f:cc:67: e0:be:44:92:e1:84:11:af:e0:3b:a1:89:53:c3:e4:ca:f4:11: 3e:0d:13:85:4b:5f:d1:d1:eb:0b:14:f6:15:21:6a:67:36:b2: f2:14:df:38:c5:2c:d8:a5:0e:ca:fc:d5:19:b5:ce:79:e0:82: 8a:5d:ed:6c:7d:a7:40:4d:eb:20:e7:8d:c2:f2:99:6c:c6:55: d0:34:86:3d:ba:e7:59:90:ca:5a:3a:08:38:30:85:92:4a:cd: cf:97:ec:a1:42:01:d7:78:f5:d7:e6:5d:ce:9a:92:4f:17:4b: 9a:9c:4b:45:3a:cd:36:ee:43:75:23:2d:45:50:b0:be:4a:88: 47:2d:0f:2a:a9:58:11:50:91:5f:1b:4e:ff:a6:4f:04:4b:8a: 1f:8b:5e:b4:e2:fd:77:55:7f:81:a0:fc:cc:54:78:14:d7:dc: f2:15:2e:72:a7:bc:6b:55:37:a7:3a:bd:28:01:15:f1:7d:d3: 3f:45:cb:fe:a9:8a:2b:72:86:60:1d:06:30:75:65:e9:67:b5: b6:b7:a0:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXQe8QooeP/5p5avyF0oy5WC9jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTEwMjUwNjU3MjZaFw0yNTEwMjgxMTM2MjZaMDMxMTAvBgNV BAMTKDIwNDE3REQ3RkQ0OEZEOTdBQkQ3RkZFNTE2NTg3QjFDMkEzODY3QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC39sShOtSDS4c+AcWCuJIH09Bk y9v0or8JkrOoIDrfq0Ok4nyXcktmJhc6sp1KC+waj59rJp9jWvyUpu4cUHyKj8kL SfBm+uqvPd1T/MHvHMw9k9HIBUb2jtwXzTve7MYpuVSYVeFwVNAappPkrYA3+TG1 cnM/lAxfZ8XA0iJE7J+Dg/OhyQIBngvGoN75JP+7Efz6VDAuByyN1eEM7jZpQVIb SQSTfx+SnD8LVEILLOKM8i1ZP7JkRNezOknDUN2sLZPMCSWX7z5zTqv4FRabVG85 MUjROHcjdF6rCT4qR4ipTe7Sdjab/iOWg661cefiSzNmC7FSuT8NEx9txrJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIEF91/1I/Zer1//lFlh7HCo4Z70wHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIYOideomQI5+8IsfHS8MW5SrFGm0eF6nrD UnXKfX3h3BsfJs6hT5fotqQqciChfbQg6Z/MZ+C+RJLhhBGv4DuhiVPD5Mr0ET4N E4VLX9HR6wsU9hUhamc2svIU3zjFLNilDsr81Rm1znnggopd7Wx9p0BN6yDnjcLy mWzGVdA0hj2651mQylo6CDgwhZJKzc+X7KFCAdd49dfmXc6akk8XS5qcS0U6zTbu Q3UjLUVQsL5KiEctDyqpWBFQkV8bTv+mTwRLih+LXrTi/XdVf4Gg/MxUeBTX3PIV LnKnvGtVN6c6vSgBFfF90z9Fy/6piityhmAdBjB1Zelntba3oAA= -----END CERTIFICATE-----Generated at Mon Oct 27 05:50:59 2025 by rpki-client