$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: YRIV966NNsPsV5a29QI0r4eWnjPjUdPBvhKjYT+4+ns= Subject key identifier: 27:20:11:80:F2:D2:FF:B4:0D:CB:2E:97:47:7D:E7:1B:75:9F:E3:93 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 4F0EFD3BC4126DC70BBF0FF73E7FD67FA2DB835E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 0495 Signing time: Mon 02 Jun 2025 05:41:11 +0000 Manifest this update: Mon 02 Jun 2025 05:36:11 +0000 Manifest next update: Thu 05 Jun 2025 17:27:11 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: Yd9Uo3Q8ElJGM9fICFtqEUwa7iGzwx5xrxt9PODtuRY=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:27:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:0e:fd:3b:c4:12:6d:c7:0b:bf:0f:f7:3e:7f:d6:7f:a2:db:83:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Jun 2 05:36:11 2025 GMT Not After : Jun 5 17:27:11 2025 GMT Subject: CN=27201180F2D2FFB40DCB2E97477DE71B759FE393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:4e:80:9b:16:8a:eb:61:51:0a:c0:99:93:1f: e3:f2:fb:96:d6:89:c2:42:3c:bc:fc:af:e9:1c:63: 42:fd:f7:e0:22:e5:d6:42:99:56:77:51:ba:45:22: 75:09:10:4a:d8:de:08:08:7e:0c:e3:e0:42:16:b8: 8f:03:54:2a:14:e2:bc:c5:10:94:92:e7:6a:7d:36: 5f:81:11:04:4b:a1:bc:79:87:40:91:21:9a:9e:f8: f2:2c:29:9b:38:f5:a5:13:1a:6b:ab:cf:62:67:b9: 16:16:e8:b3:2a:f3:56:e5:4f:92:59:dd:4e:ff:77: 72:41:3e:f0:3e:a9:c0:5e:9e:01:04:3c:5e:27:39: de:d7:1a:d9:cb:a3:5b:6e:20:f9:03:00:a9:92:5d: b1:d8:66:8d:7d:9d:f4:e5:fc:71:91:f2:46:66:ab: 06:5c:74:59:b2:3e:5a:02:e9:7c:61:ff:35:a8:9a: 21:c1:5c:aa:1a:62:ad:ae:5e:28:ab:94:bd:b8:bf: f6:55:9d:68:c7:52:b1:f6:09:00:c3:79:de:9f:6f: 84:dd:2d:71:6e:1d:be:20:72:a0:3a:6a:27:bb:9b: 04:f6:05:c8:a3:ce:40:19:07:d2:d8:c2:bf:43:96: a4:82:22:7b:ea:0c:80:53:2a:60:10:90:8c:d5:df: 13:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:20:11:80:F2:D2:FF:B4:0D:CB:2E:97:47:7D:E7:1B:75:9F:E3:93 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e5:a9:bd:e3:8d:ff:4b:2b:3c:bb:b5:97:ef:4a:15:e9:89:4a: 17:95:bb:3c:59:91:d3:e8:2a:25:3e:f2:f4:d4:fe:16:c8:c4: 16:a6:65:97:39:1f:32:8c:1e:99:53:ec:5d:5a:ce:c4:fb:1b: 6c:87:7d:06:d0:8a:71:3d:ce:01:89:95:30:37:c6:a6:59:ff: e9:1b:47:da:88:48:81:5b:9c:10:3c:ca:74:9a:25:86:2d:4f: 56:e4:5a:c9:45:6f:f1:18:d0:4c:2b:1b:1b:3e:44:97:e0:0d: 6b:71:3a:fd:86:fe:fb:d3:d3:c6:f6:d6:00:7d:58:d9:2a:a7: 28:a4:41:d7:ec:77:e8:21:eb:b5:97:08:d5:f4:68:2b:ab:b6: 5e:39:2a:f1:38:8a:c9:d3:a7:38:86:f6:f3:a0:9e:64:dd:f7: dd:26:08:60:fe:6d:a8:ec:25:3e:b8:bb:eb:17:9d:14:63:88: c6:4b:08:9c:a4:d3:4d:cb:30:87:14:e7:71:ee:61:06:84:4f: 8c:7c:ea:72:13:9d:4e:55:07:37:27:14:87:fe:ca:ef:1c:56: 0e:e4:da:d4:49:59:1b:41:aa:8f:cd:bf:0d:2c:4f:a0:c1:4e: 3a:be:c7:e0:7d:90:43:09:27:8a:68:3d:22:b8:30:2c:6c:99: 4f:59:0f:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTw79O8QSbccLvw/3Pn/Wf6Lbg14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA2MDIwNTM2MTFaFw0yNTA2MDUxNzI3MTFaMDMxMTAvBgNV BAMTKDI3MjAxMTgwRjJEMkZGQjQwRENCMkU5NzQ3N0RFNzFCNzU5RkUzOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaToCbForrYVEKwJmTH+Py+5bW icJCPLz8r+kcY0L99+Ai5dZCmVZ3UbpFInUJEErY3ggIfgzj4EIWuI8DVCoU4rzF EJSS52p9Nl+BEQRLobx5h0CRIZqe+PIsKZs49aUTGmurz2JnuRYW6LMq81blT5JZ 3U7/d3JBPvA+qcBengEEPF4nOd7XGtnLo1tuIPkDAKmSXbHYZo19nfTl/HGR8kZm qwZcdFmyPloC6Xxh/zWomiHBXKoaYq2uXiirlL24v/ZVnWjHUrH2CQDDed6fb4Td LXFuHb4gcqA6aie7mwT2BcijzkAZB9LYwr9DlqSCInvqDIBTKmAQkIzV3xOXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJyARgPLS/7QNyy6XR33nG3Wf45MwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOWpveON/0srPLu1l+9KFemJSheVuzxZkdPo KiU+8vTU/hbIxBamZZc5HzKMHplT7F1azsT7G2yHfQbQinE9zgGJlTA3xqZZ/+kb R9qISIFbnBA8ynSaJYYtT1bkWslFb/EY0EwrGxs+RJfgDWtxOv2G/vvT08b21gB9 WNkqpyikQdfsd+gh67WXCNX0aCurtl45KvE4isnTpziG9vOgnmTd990mCGD+bajs JT64u+sXnRRjiMZLCJyk003LMIcU53HuYQaET4x86nITnU5VBzcnFIf+yu8cVg7k 2tRJWRtBqo/Nvw0sT6DBTjq+x+B9kEMJJ4poPSK4MCxsmU9ZD10= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:30 2025 by rpki-client