$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: zgoLWKmbmU8227FeZEdUicBzvCm4IfXPOJXGa34aGQM= Subject key identifier: E3:B8:36:33:9E:A8:62:03:E4:7D:BD:00:B2:58:60:60:E8:46:0F:31 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 404EB48958B18DC0549F60F4B9E18DA7420C50E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 95 Signing time: Sun 07 Sep 2025 17:01:24 +0000 Manifest this update: Sun 07 Sep 2025 16:56:24 +0000 Manifest next update: Wed 10 Sep 2025 18:07:24 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: Le68bPbdh1T55hbcv3pNN/kSkYo6OT25+7Clru6gST8=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 18:07:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:4e:b4:89:58:b1:8d:c0:54:9f:60:f4:b9:e1:8d:a7:42:0c:50:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Sep 7 16:56:24 2025 GMT Not After : Sep 10 18:07:24 2025 GMT Subject: CN=E3B836339EA86203E47DBD00B2586060E8460F31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:83:fe:6c:35:96:74:fa:f6:fd:5d:1d:d4:1d: bb:ee:28:1e:dd:b2:60:a8:73:4c:dd:75:d0:66:2d: a1:f5:fe:45:20:17:c2:77:b5:d1:25:5c:49:09:f4: 70:91:1a:ba:ab:1d:03:93:a0:7a:72:77:e3:d4:e2: 97:c4:df:af:7f:11:b1:0a:96:7b:bb:24:d0:05:c7: 99:a7:b5:d8:05:23:16:d5:a4:1e:ed:87:e4:0d:b6: 59:16:bb:06:26:16:3a:0b:ff:a0:87:dc:19:e5:7d: 49:47:03:12:65:a3:ca:b8:32:22:e7:63:73:ac:30: 5e:12:fd:5c:a8:cd:09:09:a1:8c:f0:3b:cc:14:32: 2b:52:61:f2:a5:bb:30:3f:62:35:8b:41:5a:b0:53: 20:84:21:42:b3:b1:b4:d0:d0:a7:6f:69:62:da:69: 98:63:de:ef:47:ad:1d:32:51:cd:99:41:88:85:6a: 2b:c9:7b:18:f0:69:a5:91:f1:2d:2d:84:54:36:76: b6:0d:03:04:d7:32:0f:88:f2:93:af:46:9c:98:0b: e0:64:03:83:6c:c0:f3:09:c7:c4:53:67:ff:30:6c: 39:d1:53:a5:72:5f:d9:3c:58:c8:fe:e8:1d:c5:59: 83:fa:c2:53:9f:04:a0:5d:1b:f2:30:c6:60:08:a7: 66:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:B8:36:33:9E:A8:62:03:E4:7D:BD:00:B2:58:60:60:E8:46:0F:31 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:0d:ee:3e:7c:d2:7c:ee:d9:e1:df:e4:b4:bb:73:07:65:62: 8a:05:59:88:a1:c5:af:67:a3:71:ce:11:a2:21:7e:58:f7:3d: 8e:bb:a2:8b:b7:62:f9:26:7c:51:5a:c3:ec:d3:eb:b3:6a:bc: 8a:9b:77:1f:e5:03:2c:49:fa:f2:7f:23:a3:d6:26:c9:9c:f2: fc:9a:03:62:71:7c:5a:5f:6a:a9:79:7a:8e:43:5a:a8:bf:14: 9f:5d:82:4f:60:50:d6:9d:07:2c:c6:35:0d:92:6c:00:0a:96: 8b:f3:0a:06:da:15:8e:7a:3c:a8:13:27:1d:2a:e0:73:93:d3: df:02:66:09:88:b1:55:f9:a8:26:1a:73:1d:d2:1f:6e:52:47: d1:67:d8:51:38:55:e6:2a:63:99:d4:a6:bb:32:61:53:b5:c0: f1:56:73:9d:51:f7:89:bc:31:dc:c0:c2:94:02:23:0b:78:52: eb:f5:bc:4a:12:95:54:cb:48:ae:64:a7:93:ab:8a:90:24:e0: ce:84:84:1b:3c:52:46:13:13:17:4d:d7:dc:03:d3:06:49:52: 2c:ca:58:bc:9e:93:93:84:7c:a4:c8:1e:6d:57:2e:cc:0f:74: 05:bd:0a:79:f3:c7:41:b0:8c:87:a8:40:46:fa:ef:95:cb:60: ae:b6:c7:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQE60iVixjcBUn2D0ueGNp0IMUOAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTA5MDcxNjU2MjRaFw0yNTA5MTAxODA3MjRaMDMxMTAvBgNV BAMTKEUzQjgzNjMzOUVBODYyMDNFNDdEQkQwMEIyNTg2MDYwRTg0NjBGMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyg/5sNZZ0+vb9XR3UHbvuKB7d smCoc0zdddBmLaH1/kUgF8J3tdElXEkJ9HCRGrqrHQOToHpyd+PU4pfE369/EbEK lnu7JNAFx5mntdgFIxbVpB7th+QNtlkWuwYmFjoL/6CH3BnlfUlHAxJlo8q4MiLn Y3OsMF4S/VyozQkJoYzwO8wUMitSYfKluzA/YjWLQVqwUyCEIUKzsbTQ0KdvaWLa aZhj3u9HrR0yUc2ZQYiFaivJexjwaaWR8S0thFQ2drYNAwTXMg+I8pOvRpyYC+Bk A4NswPMJx8RTZ/8wbDnRU6VyX9k8WMj+6B3FWYP6wlOfBKBdG/IwxmAIp2ZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU47g2M56oYgPkfb0AslhgYOhGDzEwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABIN7j580nzu2eHf5LS7cwdlYooFWYihxa9n o3HOEaIhflj3PY67oou3YvkmfFFaw+zT67NqvIqbdx/lAyxJ+vJ/I6PWJsmc8vya A2JxfFpfaql5eo5DWqi/FJ9dgk9gUNadByzGNQ2SbAAKlovzCgbaFY56PKgTJx0q 4HOT098CZgmIsVX5qCYacx3SH25SR9Fn2FE4VeYqY5nUprsyYVO1wPFWc51R94m8 MdzAwpQCIwt4Uuv1vEoSlVTLSK5kp5OripAk4M6EhBs8UkYTExdN19wD0wZJUizK WLyek5OEfKTIHm1XLswPdAW9Cnnzx0GwjIeoQEb675XLYK62xws= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:49 2025 by rpki-client