$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: X5mA+ADA+aZm/SU7C5AylL38ZOLDPwy2Z8DutuOQfyg= Subject key identifier: 6E:9D:CB:E3:A4:A5:0A:1A:B6:AF:C7:1C:B0:2D:CC:45:9F:0B:74:F2 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 352C1AAA374CE25F1C442EE47A8CF1D76B8B7625 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 047C Signing time: Sat 05 Apr 2025 15:31:10 +0000 Manifest this update: Sat 05 Apr 2025 15:26:10 +0000 Manifest next update: Wed 09 Apr 2025 00:43:10 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 5sRI5UXyNjvH3DItgCFFk82xVH1sBdqeK4gINfBKtxs=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:2c:1a:aa:37:4c:e2:5f:1c:44:2e:e4:7a:8c:f1:d7:6b:8b:76:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Apr 5 15:26:10 2025 GMT Not After : Apr 9 00:43:10 2025 GMT Subject: CN=6E9DCBE3A4A50A1AB6AFC71CB02DCC459F0B74F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:37:b2:95:30:c6:21:00:2c:b4:b6:ea:d8: 16:b1:77:18:72:04:f8:e5:99:fb:1c:16:ad:8e:8d: 9b:98:ba:16:d2:2e:b6:bc:e3:f9:ba:49:53:3b:8a: 56:8a:e8:0e:bf:be:70:7f:53:40:e5:8f:72:73:83: 13:fe:a4:ee:37:e4:8c:b0:c0:85:5b:e1:a5:3f:56: f4:e6:d2:30:14:0f:d3:d3:81:37:57:34:c5:9a:ed: 3b:e2:bf:65:ac:42:92:22:f3:6b:a5:00:fe:01:2d: ac:3a:fa:65:34:14:b4:fd:8d:3e:1c:dc:96:aa:0c: 3e:0f:90:e3:ae:0a:42:a9:8a:44:da:24:4b:2b:36: 19:d1:06:7c:2d:e1:d6:3e:3d:2c:39:fb:d1:b0:cc: 73:05:6f:f2:11:f7:0f:11:57:4a:9d:74:c0:42:fc: f5:b3:43:db:88:1a:a7:81:20:1a:83:5b:1f:aa:37: c5:6c:29:4d:74:12:37:ee:27:94:38:9b:02:1d:93: 48:68:72:57:23:03:e3:0f:40:25:1e:77:55:7f:e7: 71:22:07:b2:ee:a3:fb:2d:10:2f:0a:70:84:98:10: f7:6a:ea:ea:80:fa:91:83:7b:6b:ab:37:f7:4b:95: f0:42:8a:a0:26:18:31:f6:62:c8:35:87:38:58:18: 84:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9D:CB:E3:A4:A5:0A:1A:B6:AF:C7:1C:B0:2D:CC:45:9F:0B:74:F2 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:29:a1:21:8b:80:ad:58:71:17:98:23:65:26:d5:b7:af:8b: 5f:f6:92:9a:dd:49:3e:4a:d9:4f:67:20:ad:96:19:16:a3:02: 4b:15:bd:42:d6:f5:8e:01:65:3e:33:31:35:5b:b7:7d:c3:51: 1e:20:1f:e6:26:60:43:42:30:46:00:60:8d:fa:4c:7c:e6:71: 17:d1:ff:b3:1a:ad:e4:af:5a:13:c5:2f:04:24:0c:d7:b6:e2: 82:b7:cc:9c:80:53:6e:91:e5:59:21:44:d4:ac:e8:c2:ca:00: a1:6d:71:3c:5b:30:b4:3f:d4:c6:24:82:75:78:77:7a:ab:51: db:2c:3d:95:98:29:83:8d:dd:e1:f6:f6:1d:27:d1:19:f9:48: 07:e9:c2:a8:c4:af:74:c0:e6:a7:99:40:af:0a:42:4a:c2:0a: ff:73:f7:78:f7:4d:c1:03:a2:a4:f7:fa:9a:a0:6b:3e:b2:11: 95:05:f8:b8:54:dd:a9:13:da:04:48:27:da:02:f9:ff:2d:7c: 7d:ca:f7:f4:fd:65:93:8c:42:d5:b8:4b:40:95:ea:fc:72:e9: 11:03:a6:bb:94:da:ee:ce:02:63:44:cd:2e:73:cd:57:0e:56: 36:86:c5:74:3b:8a:89:d5:2c:83:da:6e:93:75:e0:25:96:ee: 51:39:2e:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNSwaqjdM4l8cRC7keozx12uLdiUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA0MDUxNTI2MTBaFw0yNTA0MDkwMDQzMTBaMDMxMTAvBgNV BAMTKDZFOURDQkUzQTRBNTBBMUFCNkFGQzcxQ0IwMkRDQzQ1OUYwQjc0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ezeylTDGIQAstLbq2Baxdxhy BPjlmfscFq2OjZuYuhbSLra84/m6SVM7ilaK6A6/vnB/U0Dlj3JzgxP+pO435Iyw wIVb4aU/VvTm0jAUD9PTgTdXNMWa7Tviv2WsQpIi82ulAP4BLaw6+mU0FLT9jT4c 3JaqDD4PkOOuCkKpikTaJEsrNhnRBnwt4dY+PSw5+9GwzHMFb/IR9w8RV0qddMBC /PWzQ9uIGqeBIBqDWx+qN8VsKU10EjfuJ5Q4mwIdk0hoclcjA+MPQCUed1V/53Ei B7Luo/stEC8KcISYEPdq6uqA+pGDe2urN/dLlfBCiqAmGDH2Ysg1hzhYGIRfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbp3L46SlChq2r8ccsC3MRZ8LdPIwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEpoSGLgK1YcReYI2Um1bevi1/2kprdST5K 2U9nIK2WGRajAksVvULW9Y4BZT4zMTVbt33DUR4gH+YmYENCMEYAYI36THzmcRfR /7MareSvWhPFLwQkDNe24oK3zJyAU26R5VkhRNSs6MLKAKFtcTxbMLQ/1MYkgnV4 d3qrUdssPZWYKYON3eH29h0n0Rn5SAfpwqjEr3TA5qeZQK8KQkrCCv9z93j3TcED oqT3+pqgaz6yEZUF+LhU3akT2gRIJ9oC+f8tfH3K9/T9ZZOMQtW4S0CV6vxy6RED pruU2u7OAmNEzS5zzVcOVjaGxXQ7ionVLIPabpN14CWW7lE5Lvw= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:49 2025 by rpki-client