$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: z6KcxfczU7/Agr+tQj5KC87+RRy9mDuemYsjWbjUmpw= Subject key identifier: 16:FC:7A:04:39:B9:BC:E8:10:FA:4B:8E:DE:16:F6:66:77:B1:B6:0E Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 44CC9C9F82E10A9DD0C9A2AD35E85A37F0D6357E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04DF Signing time: Sat 15 Nov 2025 17:31:17 +0000 Manifest this update: Sat 15 Nov 2025 17:26:17 +0000 Manifest next update: Wed 19 Nov 2025 03:30:17 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: owrqhx4IBC9pKH0pHQx3MgYzzFylayvOwAoSToHawoU=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 19 Nov 2025 03:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:cc:9c:9f:82:e1:0a:9d:d0:c9:a2:ad:35:e8:5a:37:f0:d6:35:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Nov 15 17:26:17 2025 GMT Not After : Nov 19 03:30:17 2025 GMT Subject: CN=16FC7A0439B9BCE810FA4B8EDE16F66677B1B60E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ac:bc:d9:24:73:b3:b5:03:ab:6d:57:f6:b3: a6:fe:c5:e2:4a:50:4a:42:01:d6:98:47:0d:9f:33: 6f:7f:23:3d:f2:83:43:91:5a:b3:d1:fe:c9:eb:92: 6f:a3:65:c9:ed:5d:9f:a1:20:ef:ba:64:c4:ca:b3: ef:2a:de:ae:a1:85:13:bd:60:07:4f:c2:2e:44:6f: 5a:03:30:32:be:e0:a4:b4:ac:2a:c1:d0:85:c6:e9: e0:38:8b:8f:e4:db:b7:c5:a2:52:c2:a7:76:e6:ea: 2a:77:d8:1a:06:b7:20:16:14:29:f6:5b:9e:35:ca: eb:b6:db:e5:9c:07:0d:39:6f:17:aa:44:39:25:13: 49:c0:71:df:cd:a0:86:c1:45:97:6e:8a:ae:62:82: 0e:f5:43:b0:0d:71:a7:43:ad:86:f1:e7:f6:5f:e8: 69:bc:46:61:f5:cd:54:ab:7a:80:8c:88:76:52:92: 71:a1:75:05:e5:df:ea:1c:ee:a1:9e:c2:fb:0f:78: 73:c8:d5:2d:a0:b4:dd:18:23:46:ee:ad:96:23:81: f6:a6:22:4e:e4:60:49:cb:72:2f:b6:79:f0:6a:44: 5b:fb:31:af:43:18:97:d8:3e:13:a3:02:30:d8:ef: bb:06:9f:7d:67:d7:ce:58:7f:8d:22:b4:05:a5:f7: 86:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:FC:7A:04:39:B9:BC:E8:10:FA:4B:8E:DE:16:F6:66:77:B1:B6:0E X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:ff:44:0a:19:11:03:ce:5c:b0:cc:72:76:8d:29:72:1f:d8: c4:95:86:00:aa:6e:c9:75:54:5b:49:bc:93:d1:54:86:d9:f9: a9:6f:ea:8b:7b:a3:15:c8:4e:21:fc:b2:30:83:c6:32:ef:0e: 26:4c:d7:ae:2b:31:49:a9:8e:d9:62:9e:74:c3:e0:55:2a:d4: c6:a0:77:1b:40:ae:22:a9:68:3c:21:0a:02:4b:7d:00:36:d4: 4b:7e:ba:6a:61:63:46:4c:80:cb:82:70:13:e9:df:cb:d2:f7: 43:6f:34:ca:23:73:0d:3d:70:ed:02:dd:d2:69:d5:84:f6:e3: 3f:a9:86:e5:b0:b0:c7:28:43:ee:14:e6:89:76:c4:ad:67:3a: bd:6b:b8:5f:83:54:6b:a0:0e:b5:2f:f7:6a:a8:05:3f:b0:f3: a6:cc:20:af:c0:ab:21:bb:b7:67:29:5b:eb:f8:7d:ea:e3:4a: 6b:43:01:e8:89:57:cd:75:80:7c:31:fe:81:73:ed:5e:1b:76: bc:c8:ce:7a:af:ee:56:42:59:0d:2a:b1:af:fe:ce:f1:ec:2e: fa:16:5d:61:32:6c:0d:fe:f2:36:30:20:f9:fb:d0:d9:dc:89: a3:30:17:c7:cc:e5:36:4f:0d:ac:f0:27:99:c7:53:fc:8e:ff: 60:a7:a6:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURMycn4LhCp3QyaKtNehaN/DWNX4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTExMTUxNzI2MTdaFw0yNTExMTkwMzMwMTdaMDMxMTAvBgNV BAMTKDE2RkM3QTA0MzlCOUJDRTgxMEZBNEI4RURFMTZGNjY2NzdCMUI2MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqrLzZJHOztQOrbVf2s6b+xeJK UEpCAdaYRw2fM29/Iz3yg0ORWrPR/snrkm+jZcntXZ+hIO+6ZMTKs+8q3q6hhRO9 YAdPwi5Eb1oDMDK+4KS0rCrB0IXG6eA4i4/k27fFolLCp3bm6ip32BoGtyAWFCn2 W541yuu22+WcBw05bxeqRDklE0nAcd/NoIbBRZduiq5igg71Q7ANcadDrYbx5/Zf 6Gm8RmH1zVSreoCMiHZSknGhdQXl3+oc7qGewvsPeHPI1S2gtN0YI0burZYjgfam Ik7kYEnLci+2efBqRFv7Ma9DGJfYPhOjAjDY77sGn31n185Yf40itAWl94bLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFvx6BDm5vOgQ+kuO3hb2Znextg4wHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEj/RAoZEQPOXLDMcnaNKXIf2MSVhgCqbsl1 VFtJvJPRVIbZ+alv6ot7oxXITiH8sjCDxjLvDiZM164rMUmpjtlinnTD4FUq1Mag dxtAriKpaDwhCgJLfQA21Et+umphY0ZMgMuCcBPp38vS90NvNMojcw09cO0C3dJp 1YT24z+phuWwsMcoQ+4U5ol2xK1nOr1ruF+DVGugDrUv92qoBT+w86bMIK/AqyG7 t2cpW+v4ferjSmtDAeiJV811gHwx/oFz7V4bdrzIznqv7lZCWQ0qsa/+zvHsLvoW XWEybA3+8jYwIPn70NnciaMwF8fM5TZPDazwJ5nHU/yO/2CnpjU= -----END CERTIFICATE-----Generated at Tue Nov 18 01:37:34 2025 by rpki-client