$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: gJOaiHhYiri7FOZw1+V5wmSeaKBhC81wrh1vuoj14Ww= Subject key identifier: 08:77:7A:59:38:F6:DD:77:91:83:AB:8C:63:3E:17:B0:72:09:C4:50 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 54D6D3BEC9C5F7F4D163CF06559D807D0A1E012F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 0234 Signing time: Thu 05 Jun 2025 19:21:00 +0000 Manifest this update: Thu 05 Jun 2025 19:16:00 +0000 Manifest next update: Mon 09 Jun 2025 05:21:00 +0000 Files and hashes: 1: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: M0tR3PeMzCRtOK/Eubf18xLqQJGyaFY17/Kg/QR6iY4=) 2: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: 1V0T/P7VtsPYnrPpSLBN/zlK6N0AwlecAW9RYmxGnpA=) 3: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: Ffk2jetMOvzsWNB1DX1C1YGIG9ayBWUstNPnwpCzNnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 05:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:d6:d3:be:c9:c5:f7:f4:d1:63:cf:06:55:9d:80:7d:0a:1e:01:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Jun 5 19:16:00 2025 GMT Not After : Jun 9 05:21:00 2025 GMT Subject: CN=08777A5938F6DD779183AB8C633E17B07209C450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f0:69:74:70:58:5f:35:54:d9:8e:d7:12:e2: 25:10:6b:28:0b:0b:6e:69:b6:06:4c:98:88:28:6b: 5a:0f:8e:0f:a5:61:67:58:62:37:ac:cd:95:9e:3e: 9c:f4:73:72:00:40:f9:bf:9c:ef:cc:56:7a:4b:37: 53:08:f1:7d:e7:ac:59:ed:82:ce:60:03:5b:f9:e3: ab:73:4d:82:60:1f:a0:e1:1b:78:ae:35:64:e5:d5: cd:9e:5d:b5:ce:5d:40:2f:32:3e:40:7e:0e:e3:e4: 24:48:f4:07:c1:e4:57:83:6b:dd:78:70:81:67:ae: ca:1f:ab:55:58:22:e3:e5:24:ed:db:12:a4:6c:87: 7b:2b:b9:dd:5e:29:87:52:41:a4:5f:60:d3:8b:8b: 5d:37:5c:21:ca:53:89:80:8e:25:09:da:c6:5a:04: 74:11:96:2b:74:94:84:ff:8c:95:97:df:99:09:42: 5e:4f:45:24:8e:61:8c:9e:a0:01:e8:52:e9:61:2f: b5:2c:91:0a:bb:94:c7:a0:66:68:32:71:5c:6f:19: 0b:e1:ac:e4:d2:3f:fd:24:48:dd:75:b5:31:52:64: 1b:62:33:5f:b1:02:ff:c8:f6:01:d5:82:76:1b:1d: f3:fc:70:c4:1b:ad:ca:a4:02:ab:73:fb:ec:15:94: 03:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:77:7A:59:38:F6:DD:77:91:83:AB:8C:63:3E:17:B0:72:09:C4:50 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:3c:91:2f:fd:c6:16:82:cc:1d:31:f2:35:f5:5e:33:51:ae: ac:c0:c6:d4:52:11:0d:92:cb:b6:e4:a1:c5:1c:0b:0d:02:ce: bc:e3:44:28:1c:17:76:81:d6:c4:5e:c1:35:a8:0b:5b:78:7a: 4b:64:9f:2a:96:6c:be:42:34:6f:2d:d8:80:62:a8:0f:3b:46: b8:ae:7f:8b:1f:e7:d6:e2:35:0c:67:5b:0c:a9:86:fa:6b:77: 92:91:ed:7c:30:b3:6b:f7:99:ac:58:51:62:b8:8a:ae:09:b1: 26:6b:8b:a9:75:2e:b5:a6:60:25:a5:cf:80:94:90:92:8b:36: d3:09:68:86:18:c1:93:1b:cf:e0:a1:2e:56:3e:68:a5:98:f4: d7:d1:2d:38:01:40:00:5a:9b:99:c7:78:d1:f7:c9:c6:4c:24: 29:35:37:a3:21:56:d8:b2:44:69:99:15:06:53:00:15:7b:54: fb:e5:7c:4e:e9:f9:30:1d:36:18:da:4b:90:20:90:f7:a7:f7: a3:57:d9:f0:f4:2c:74:b0:95:fd:e0:54:70:07:ab:37:63:9c: 30:9b:ac:6a:1b:2a:9d:6f:4a:2c:b3:34:21:1b:d2:ae:a0:f4: 57:ff:5a:70:e7:57:fa:4a:1c:9a:24:98:ac:4d:5e:6a:9f:4e: ef:96:c7:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVNbTvsnF9/TRY88GVZ2AfQoeAS8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNTA2MDUxOTE2MDBaFw0yNTA2MDkwNTIxMDBaMDMxMTAvBgNV BAMTKDA4Nzc3QTU5MzhGNkRENzc5MTgzQUI4QzYzM0UxN0IwNzIwOUM0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF8Gl0cFhfNVTZjtcS4iUQaygL C25ptgZMmIgoa1oPjg+lYWdYYjeszZWePpz0c3IAQPm/nO/MVnpLN1MI8X3nrFnt gs5gA1v546tzTYJgH6DhG3iuNWTl1c2eXbXOXUAvMj5Afg7j5CRI9AfB5FeDa914 cIFnrsofq1VYIuPlJO3bEqRsh3srud1eKYdSQaRfYNOLi103XCHKU4mAjiUJ2sZa BHQRlit0lIT/jJWX35kJQl5PRSSOYYyeoAHoUulhL7UskQq7lMegZmgycVxvGQvh rOTSP/0kSN11tTFSZBtiM1+xAv/I9gHVgnYbHfP8cMQbrcqkAqtz++wVlAMVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCHd6WTj23XeRg6uMYz4XsHIJxFAwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF48kS/9xhaCzB0x8jX1XjNRrqzAxtRSEQ2S y7bkocUcCw0CzrzjRCgcF3aB1sRewTWoC1t4ektknyqWbL5CNG8t2IBiqA87Rriu f4sf59biNQxnWwyphvprd5KR7Xwws2v3maxYUWK4iq4JsSZri6l1LrWmYCWlz4CU kJKLNtMJaIYYwZMbz+ChLlY+aKWY9NfRLTgBQABam5nHeNH3ycZMJCk1N6MhVtiy RGmZFQZTABV7VPvlfE7p+TAdNhjaS5AgkPen96NX2fD0LHSwlf3gVHAHqzdjnDCb rGobKp1vSiyzNCEb0q6g9Ff/WnDnV/pKHJokmKxNXmqfTu+Wx+8= -----END CERTIFICATE-----Generated at Sat Jun 7 18:28:25 2025 by rpki-client