$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: ZwhnsSOeD80u3+o7UtalsPaPNAK3FP2fEk8gUe6BqF4= Subject key identifier: F7:DB:9B:79:36:78:9C:95:3D:55:E9:13:84:04:5F:0E:E1:3B:A1:A7 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 0A382A4B0EF9A21947A80C4FC0761F5BE320B5B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 0263 Signing time: Fri 06 Jun 2025 15:12:20 +0000 Manifest this update: Fri 06 Jun 2025 15:07:20 +0000 Manifest next update: Mon 09 Jun 2025 16:21:20 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 3: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) 4: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: Ltd+CIYIqjdfC1578aX+J+e4ZfHQzLmspMwrqMteYv8=) 5: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 16:21:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:38:2a:4b:0e:f9:a2:19:47:a8:0c:4f:c0:76:1f:5b:e3:20:b5:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Jun 6 15:07:20 2025 GMT Not After : Jun 9 16:21:20 2025 GMT Subject: CN=F7DB9B7936789C953D55E91384045F0EE13BA1A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:9f:42:b2:6f:cd:1e:e4:31:d8:f4:fe:2c:72: 40:75:e7:ab:be:f9:f1:67:b0:53:be:0e:55:ee:75: 88:a9:cf:79:af:b8:17:86:39:80:74:ec:ce:b7:a8: 8e:db:1d:50:71:09:8e:c5:23:6a:9c:63:b9:99:4d: da:da:fb:09:93:0f:d8:a6:84:b6:e8:f1:55:d5:33: e8:8f:4c:b4:8a:9f:5a:4a:3c:a4:88:a4:17:82:ce: 42:d8:a8:3d:d5:39:a0:f5:3d:5b:4e:e0:05:f3:dd: 80:96:1c:c5:3e:3d:26:fe:34:bf:4e:98:18:ed:bb: d4:16:20:fc:4f:d3:ee:50:ff:40:67:75:7a:10:45: 89:64:41:b9:5e:3f:57:d5:f1:59:9e:9e:7d:2b:5f: 74:b1:6d:5e:c0:ec:80:7f:df:5a:17:6b:17:a1:56: 0f:f6:81:30:b8:26:f4:df:09:ed:43:a1:62:9c:1b: d9:f6:9f:90:1c:84:ad:7a:e2:e0:cc:1f:08:23:9d: 9d:cb:4a:84:d8:c9:2c:ab:26:7e:d4:34:ab:db:ce: b6:bc:7b:11:80:56:f9:f1:6d:f0:72:fb:6f:51:c9: 4e:2d:72:28:44:19:4a:ce:e7:9e:d6:46:3a:3d:b7: 92:f5:8b:77:52:af:b5:0a:a2:e4:20:ce:8e:dc:6c: 5d:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DB:9B:79:36:78:9C:95:3D:55:E9:13:84:04:5F:0E:E1:3B:A1:A7 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:08:7a:13:3c:0e:96:a3:45:af:d1:2d:21:a0:57:aa:4e:dc: 54:89:77:83:83:e2:b2:a0:e4:ae:35:c4:21:1e:c4:c2:1d:81: ad:d8:ce:07:d5:9a:d0:49:e4:00:bb:4a:66:52:bc:79:72:73: 61:69:60:ea:ee:38:04:98:13:1d:6a:cc:70:0b:6e:27:54:d6: 07:4f:84:dd:fc:ff:88:02:91:86:7d:e9:89:fa:96:dc:71:da: 80:ed:40:9f:24:7e:2c:c6:8d:6f:39:15:88:0d:0f:38:54:1c: 95:26:92:0e:7f:78:dc:c6:fd:f9:d9:22:8c:d2:1c:c4:e8:14: 7c:06:6b:5c:b1:d6:c9:40:71:72:3d:ce:b3:20:7b:94:32:ac: a5:fc:b2:85:16:ec:5a:b5:55:88:11:1f:e1:7f:42:e8:d9:26: 5c:ad:7f:c5:7d:6a:b2:76:58:6a:3d:c7:24:02:0c:ab:fa:d4: 16:07:3d:6d:d8:cd:9f:61:e0:b3:93:fe:32:cf:c0:8c:95:e4: fc:32:27:3a:d1:d4:a1:68:d2:9a:66:82:dc:67:4f:c1:c6:09: 97:3d:89:e4:dc:7f:ba:53:19:a6:ad:b7:7f:3b:5b:91:fd:2f: a4:ea:06:d9:6b:84:e9:6e:ed:41:b3:59:7c:e7:a3:8b:75:c0: 4a:19:14:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCjgqSw75ohlHqAxPwHYfW+MgtbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA2MDYxNTA3MjBaFw0yNTA2MDkxNjIxMjBaMDMxMTAvBgNV BAMTKEY3REI5Qjc5MzY3ODlDOTUzRDU1RTkxMzg0MDQ1RjBFRTEzQkExQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwn0Kyb80e5DHY9P4sckB156u+ +fFnsFO+DlXudYipz3mvuBeGOYB07M63qI7bHVBxCY7FI2qcY7mZTdra+wmTD9im hLbo8VXVM+iPTLSKn1pKPKSIpBeCzkLYqD3VOaD1PVtO4AXz3YCWHMU+PSb+NL9O mBjtu9QWIPxP0+5Q/0BndXoQRYlkQbleP1fV8Vmenn0rX3SxbV7A7IB/31oXaxeh Vg/2gTC4JvTfCe1DoWKcG9n2n5AchK164uDMHwgjnZ3LSoTYySyrJn7UNKvbzra8 exGAVvnxbfBy+29RyU4tcihEGUrO557WRjo9t5L1i3dSr7UKouQgzo7cbF2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99ubeTZ4nJU9VekThARfDuE7oacwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFcIehM8DpajRa/RLSGgV6pO3FSJd4OD4rKg 5K41xCEexMIdga3YzgfVmtBJ5AC7SmZSvHlyc2FpYOruOASYEx1qzHALbidU1gdP hN38/4gCkYZ96Yn6ltxx2oDtQJ8kfizGjW85FYgNDzhUHJUmkg5/eNzG/fnZIozS HMToFHwGa1yx1slAcXI9zrMge5QyrKX8soUW7Fq1VYgRH+F/QujZJlytf8V9arJ2 WGo9xyQCDKv61BYHPW3YzZ9h4LOT/jLPwIyV5PwyJzrR1KFo0ppmgtxnT8HGCZc9 ieTcf7pTGaatt387W5H9L6TqBtlrhOlu7UGzWXzno4t1wEoZFPo= -----END CERTIFICATE-----Generated at Sun Jun 8 15:54:24 2025 by rpki-client