$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: IiG9SV0n09A7zakUPVol0DkVB6AhegeFTAI1LdSpNdI= Subject key identifier: CB:B7:3D:CC:EB:64:49:9E:46:43:A0:DF:2B:51:4E:CE:B6:41:4E:4F Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 541F0D4E3420191B580018375BE8795FFBC50841 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 51 Signing time: Mon 07 Apr 2025 04:51:21 +0000 Manifest this update: Mon 07 Apr 2025 04:46:21 +0000 Manifest next update: Thu 10 Apr 2025 06:56:21 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: nBSoqIcW2gVUFI4iZV57MvTjNujZ46CmYU/Smoo1n9Q=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 21:00:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1f:0d:4e:34:20:19:1b:58:00:18:37:5b:e8:79:5f:fb:c5:08:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Apr 7 04:46:21 2025 GMT Not After : Apr 10 06:56:21 2025 GMT Subject: CN=CBB73DCCEB64499E4643A0DF2B514ECEB6414E4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:84:66:86:97:ec:52:c4:73:5c:22:9e:b1:03: d3:56:cf:e6:06:fe:12:82:27:d5:79:dd:8c:b9:ce: 69:8e:9d:df:3b:86:f7:73:46:93:a1:09:3b:d2:5e: 43:c5:d5:a4:9f:0b:f4:b9:8b:68:12:cf:7c:b0:29: 5e:f3:68:76:b3:82:22:36:dc:5e:bf:0e:f1:96:fb: 6b:00:01:22:92:88:ca:21:4c:e0:1d:ba:aa:23:1a: 08:ff:7f:c4:0b:d4:f2:71:d9:6e:15:6f:3f:20:7c: 12:ac:2a:61:d1:ab:a2:2c:fa:a2:9b:ab:7e:74:c4: 1d:b3:e2:4d:e1:a7:f8:d0:34:e9:55:76:b6:97:22: c6:81:17:24:61:79:ed:15:f4:5b:ec:8e:99:23:11: 67:04:0c:cc:10:1d:8f:0b:d3:c8:e0:f7:b4:69:f8: 7b:b8:02:f3:22:2a:a9:a5:d6:8f:ef:74:8e:94:eb: ca:1f:b4:84:ee:06:c9:d2:3f:64:06:38:77:e4:74: c4:83:1f:aa:6c:08:e8:95:cf:8f:d9:fb:c5:f6:70: 95:2c:d1:57:f1:74:a5:48:47:9a:dc:b3:61:c4:b7: 50:a1:8a:80:e2:5a:55:f7:66:30:e2:d9:21:b7:d4: 9b:58:77:1f:07:ca:9f:b9:2b:27:7b:f2:c7:de:8a: 4a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B7:3D:CC:EB:64:49:9E:46:43:A0:DF:2B:51:4E:CE:B6:41:4E:4F X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:29:36:2f:ec:d2:eb:11:98:cb:e3:ed:c0:cf:3f:b9:48:08: 8c:4d:d6:cb:95:21:12:99:8e:2b:bf:17:bd:c0:2c:80:c0:da: be:2e:55:26:49:85:a4:ff:81:2f:d2:4d:0b:08:23:e8:84:32: 5e:0c:bc:18:96:25:ba:46:b3:ce:8b:ac:39:f3:4e:cb:2f:cc: 4b:0d:39:27:7f:a2:89:f7:11:7a:0e:a1:27:92:40:70:b4:f8: e5:37:69:c1:eb:c5:24:3d:d7:53:c9:94:88:01:01:94:f0:98: c2:bd:58:2d:3f:d7:ba:53:6f:fb:cd:5d:e7:b1:44:ae:cd:7b: a8:f1:94:a3:35:b7:9e:b3:cf:6a:2e:a0:1d:9c:78:47:84:23: b9:cb:84:b3:09:76:5e:b4:9f:a9:87:31:a8:3b:6e:d6:b9:b2: de:c3:5a:b6:56:0c:64:18:4a:19:96:b9:ae:41:3e:90:19:d1: 44:77:1b:3b:e1:13:22:51:aa:2c:ac:63:ac:d4:a8:60:b0:ea: 61:ac:2a:a0:f6:a8:b0:52:c7:e4:93:a2:63:23:e2:79:38:47: 55:94:68:26:9e:21:00:05:a3:db:d2:2d:e9:d1:82:fe:5b:43: f8:b1:eb:93:63:cd:ed:56:07:c2:76:9e:5b:d5:ce:e7:d6:ad: 1f:b0:f4:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVB8NTjQgGRtYABg3W+h5X/vFCEEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTA0MDcwNDQ2MjFaFw0yNTA0MTAwNjU2MjFaMDMxMTAvBgNV BAMTKENCQjczRENDRUI2NDQ5OUU0NjQzQTBERjJCNTE0RUNFQjY0MTRFNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJhGaGl+xSxHNcIp6xA9NWz+YG /hKCJ9V53Yy5zmmOnd87hvdzRpOhCTvSXkPF1aSfC/S5i2gSz3ywKV7zaHazgiI2 3F6/DvGW+2sAASKSiMohTOAduqojGgj/f8QL1PJx2W4Vbz8gfBKsKmHRq6Is+qKb q350xB2z4k3hp/jQNOlVdraXIsaBFyRhee0V9FvsjpkjEWcEDMwQHY8L08jg97Rp +Hu4AvMiKqml1o/vdI6U68oftITuBsnSP2QGOHfkdMSDH6psCOiVz4/Z+8X2cJUs 0VfxdKVIR5rcs2HEt1ChioDiWlX3ZjDi2SG31JtYdx8Hyp+5Kyd78sfeikqRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7c9zOtkSZ5GQ6DfK1FOzrZBTk8wHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEwpNi/s0usRmMvj7cDPP7lICIxN1suVIRKZ jiu/F73ALIDA2r4uVSZJhaT/gS/STQsII+iEMl4MvBiWJbpGs86LrDnzTssvzEsN OSd/oon3EXoOoSeSQHC0+OU3acHrxSQ911PJlIgBAZTwmMK9WC0/17pTb/vNXeex RK7Ne6jxlKM1t56zz2ouoB2ceEeEI7nLhLMJdl60n6mHMag7bta5st7DWrZWDGQY ShmWua5BPpAZ0UR3GzvhEyJRqiysY6zUqGCw6mGsKqD2qLBSx+STomMj4nk4R1WU aCaeIQAFo9vSLenRgv5bQ/ix65Njze1WB8J2nlvVzufWrR+w9Fk= -----END CERTIFICATE-----Generated at Tue Apr 8 11:01:12 2025 by rpki-client