$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: IoMxULs0Bxeuoac6io8T1MEZe/jE/fPGi83xwELvxVw= Subject key identifier: 94:BD:CA:16:C0:E1:65:E8:44:BD:BD:81:64:5D:9B:DA:83:E1:95:A1 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 7A7B96B579EB35A8FF293D1B75803433516AAE12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04C0 Signing time: Sun 07 Sep 2025 03:11:13 +0000 Manifest this update: Sun 07 Sep 2025 03:06:13 +0000 Manifest next update: Wed 10 Sep 2025 08:20:13 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 3: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: NBhaAkV1wDCpTjjlS8FZocl+xW5e+oWErOxqlrFtezk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 08:20:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:7b:96:b5:79:eb:35:a8:ff:29:3d:1b:75:80:34:33:51:6a:ae:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Sep 7 03:06:13 2025 GMT Not After : Sep 10 08:20:13 2025 GMT Subject: CN=94BDCA16C0E165E844BDBD81645D9BDA83E195A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:48:9c:d2:30:14:b1:cc:53:e9:70:2a:ae:d2: 04:c5:02:c9:6c:e7:6a:0d:55:79:54:5d:da:0e:6b: 21:02:ba:55:c2:5b:d0:a0:50:fc:6d:f6:aa:42:c8: 47:96:f9:ff:af:e0:62:84:ee:83:f5:23:8c:da:3f: dd:e5:86:0d:c1:f7:32:15:45:99:f4:37:47:3a:0e: ab:69:51:31:79:37:80:9b:cf:ca:35:ca:44:3b:a9: d0:a3:d5:f5:b3:a6:c3:b7:7a:39:97:47:74:94:4c: 39:08:dc:1d:09:74:c2:c4:dc:cb:6a:29:0f:13:a2: 91:b4:1e:cc:ce:4a:9f:94:7d:65:7c:f8:79:dd:b2: 12:34:07:ce:28:da:04:ae:11:f3:93:88:60:9a:f3: 92:82:18:b9:5b:bc:b0:58:21:6c:f4:54:0b:42:57: 2f:3f:24:a9:10:6b:0e:29:8d:54:9b:b7:12:28:c7: 50:a4:b7:b9:f0:ed:4f:86:d1:2e:82:fb:c3:32:8a: 47:41:b8:37:e6:cf:4a:26:7b:10:b7:15:fa:f5:ce: 6d:b2:26:06:18:9c:2b:7b:df:15:5a:e5:49:bb:67: c2:a4:d6:de:93:9b:25:b3:f3:de:e2:07:d7:1b:08: 36:ea:b8:ab:59:7a:ab:25:bb:91:9d:2e:1e:c1:3f: 3e:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:BD:CA:16:C0:E1:65:E8:44:BD:BD:81:64:5D:9B:DA:83:E1:95:A1 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:72:57:86:bd:dd:48:38:1e:32:3a:c6:84:1a:e3:6a:73:cc: 8a:31:e4:ef:cb:f3:fd:f4:57:aa:02:c3:25:33:ea:e4:8d:e3: c5:93:d0:3c:46:f5:80:27:27:06:a9:74:d2:75:93:2f:d0:72: fb:06:9e:65:5d:01:22:3c:9f:57:1d:d1:35:92:b2:42:a3:67: b4:c8:a1:76:d8:5f:c7:af:c0:02:7f:69:cd:0b:d8:86:a2:1f: f5:ce:51:09:cd:cd:2e:07:fb:9c:d4:7f:24:25:1b:86:53:8c: 55:3a:61:6d:79:54:67:c2:db:f6:48:a9:36:7a:1a:0d:a5:b2: 66:6f:4b:3e:7c:4b:14:bf:23:a0:ec:b4:d3:ca:a7:1e:6a:b0: 19:5c:6b:db:11:be:44:b9:44:2d:23:44:1b:cd:25:b0:51:fd: b8:9b:68:26:0d:3a:dc:e9:d5:f0:7f:4a:56:e6:6d:5d:ef:a1: 1a:f3:47:9e:2a:9b:e3:89:3c:ab:7a:da:3a:f0:e1:7c:c4:a9: 67:a1:40:0a:8c:55:59:88:1a:08:1c:30:db:4f:5e:bc:b7:d5: 5c:52:7c:42:7a:f4:6c:1a:7a:a5:86:2a:2d:84:e6:e9:e3:f8: f8:4c:04:ec:b6:bb:c0:c1:97:32:96:c1:05:a8:a2:03:39:af: 23:1e:46:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenuWtXnrNaj/KT0bdYA0M1FqrhIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA5MDcwMzA2MTNaFw0yNTA5MTAwODIwMTNaMDMxMTAvBgNV BAMTKDk0QkRDQTE2QzBFMTY1RTg0NEJEQkQ4MTY0NUQ5QkRBODNFMTk1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMSJzSMBSxzFPpcCqu0gTFAsls 52oNVXlUXdoOayECulXCW9CgUPxt9qpCyEeW+f+v4GKE7oP1I4zaP93lhg3B9zIV RZn0N0c6DqtpUTF5N4Cbz8o1ykQ7qdCj1fWzpsO3ejmXR3SUTDkI3B0JdMLE3Mtq KQ8TopG0HszOSp+UfWV8+HndshI0B84o2gSuEfOTiGCa85KCGLlbvLBYIWz0VAtC Vy8/JKkQaw4pjVSbtxIox1Ckt7nw7U+G0S6C+8MyikdBuDfmz0omexC3Ffr1zm2y JgYYnCt73xVa5Um7Z8Kk1t6TmyWz897iB9cbCDbquKtZeqslu5GdLh7BPz4xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlL3KFsDhZehEvb2BZF2b2oPhlaEwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJyV4a93Ug4HjI6xoQa42pzzIox5O/L8/30 V6oCwyUz6uSN48WT0DxG9YAnJwapdNJ1ky/QcvsGnmVdASI8n1cd0TWSskKjZ7TI oXbYX8evwAJ/ac0L2IaiH/XOUQnNzS4H+5zUfyQlG4ZTjFU6YW15VGfC2/ZIqTZ6 Gg2lsmZvSz58SxS/I6DstNPKpx5qsBlca9sRvkS5RC0jRBvNJbBR/bibaCYNOtzp 1fB/SlbmbV3voRrzR54qm+OJPKt62jrw4XzEqWehQAqMVVmIGggcMNtPXry31VxS fEJ69GwaeqWGKi2E5unj+PhMBOy2u8DBlzKWwQWoogM5ryMeRpI= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:06 2025 by rpki-client