$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: HgG9z56GaahT3GFnGGvE2tQDfrPgzvDUahJKisIDc4U= Subject key identifier: BD:79:AD:7F:BB:A6:2B:4C:D9:47:A1:37:0B:DD:47:1A:0E:20:10:64 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 79C2926F8A6591624F381B6043719E938510C06A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 7F Signing time: Sun 20 Jul 2025 00:01:23 +0000 Manifest this update: Sat 19 Jul 2025 23:56:23 +0000 Manifest next update: Wed 23 Jul 2025 05:12:23 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: hW9yEREgj6jeU35sV/BDmGKVk7ZkJfOQhg1INtpI0/8=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 05:12:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c2:92:6f:8a:65:91:62:4f:38:1b:60:43:71:9e:93:85:10:c0:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Jul 19 23:56:23 2025 GMT Not After : Jul 23 05:12:23 2025 GMT Subject: CN=BD79AD7FBBA62B4CD947A1370BDD471A0E201064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:50:11:ad:3e:66:53:ff:23:14:e5:9c:22:e0: 26:f2:9f:b3:55:08:de:77:f7:ed:5f:a8:68:c6:29: aa:a3:76:e7:0a:44:c1:80:d7:6a:e9:5c:35:eb:f5: a4:d3:74:cb:25:f0:e1:c9:01:36:7a:d9:7e:8f:6f: 81:81:7b:9a:cd:3d:71:dc:95:2f:c8:c6:7f:d0:eb: c8:d1:2a:20:a1:ff:6c:8c:c8:a5:3d:b2:85:d2:56: cf:49:93:12:f7:b8:df:2a:38:ee:b2:da:c6:55:8b: c9:96:20:09:b9:77:17:71:d8:6e:cd:36:44:11:37: b1:b1:8b:47:10:46:21:8f:45:69:dd:24:a5:15:15: 0a:c7:8c:7e:7f:be:2b:fd:3b:92:ba:04:95:fc:b0: bf:3c:93:4b:18:1c:4a:01:46:99:b9:1f:88:37:42: 7f:0c:ea:b8:e3:23:68:98:d5:16:b0:12:98:ff:8d: 9a:98:91:0f:23:22:40:40:e9:02:14:9e:59:7d:51: 0b:81:e7:f2:ca:e2:d0:76:c1:e6:38:10:68:ed:d2: 8b:fb:30:81:21:26:0d:3f:55:99:8e:69:f0:49:84: 02:79:ec:cb:19:77:77:91:28:29:2d:2c:8f:98:a5: 11:06:78:8a:a7:62:74:13:39:d0:07:19:29:d1:82: c8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:79:AD:7F:BB:A6:2B:4C:D9:47:A1:37:0B:DD:47:1A:0E:20:10:64 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:69:21:55:90:ce:63:29:f1:63:da:e4:39:f3:6f:95:48: 53:12:a0:87:0f:30:9d:d4:4f:72:41:a8:d4:d9:44:d5:9b:72: 1f:5e:e5:91:4e:be:57:1a:c9:ad:a8:e9:b9:5e:02:cb:0f:df: 0d:ca:ed:75:53:ec:7e:d7:8a:ce:8c:3b:5e:cc:77:de:ca:6c: a2:42:a5:18:de:42:34:ad:44:9a:2d:c0:7c:9e:97:7f:69:50: a0:61:88:7b:9b:e1:c8:ae:18:a7:47:e5:71:86:c3:b7:de:98: 14:08:d4:0c:38:9c:bc:2c:2c:4d:e6:2b:87:7e:37:41:27:cc: 19:0f:f3:9d:1c:9d:aa:79:eb:3c:00:1f:9a:b4:c7:42:a2:02: 23:85:54:6c:93:82:5e:e7:d1:8d:d5:60:03:04:80:d6:53:f2: 97:e2:c0:cd:95:f8:97:c4:6b:84:8e:d3:43:e2:53:de:d9:57: b1:7f:b8:78:9d:a8:85:4b:ad:00:c6:6a:cc:b8:9a:f2:fb:fb: 64:c1:e9:00:37:2d:34:39:c4:10:06:ad:4f:e9:44:bc:22:9e: 05:a1:d3:16:51:fc:62:11:74:33:2a:db:fc:df:b8:d1:95:df: b8:76:fb:78:aa:b7:b5:48:e3:e6:a0:bd:24:e7:a3:8b:73:c6: c7:7c:a4:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUecKSb4plkWJPOBtgQ3Gek4UQwGowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTA3MTkyMzU2MjNaFw0yNTA3MjMwNTEyMjNaMDMxMTAvBgNV BAMTKEJENzlBRDdGQkJBNjJCNENEOTQ3QTEzNzBCREQ0NzFBMEUyMDEwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdUBGtPmZT/yMU5Zwi4Cbyn7NV CN539+1fqGjGKaqjducKRMGA12rpXDXr9aTTdMsl8OHJATZ62X6Pb4GBe5rNPXHc lS/Ixn/Q68jRKiCh/2yMyKU9soXSVs9JkxL3uN8qOO6y2sZVi8mWIAm5dxdx2G7N NkQRN7Gxi0cQRiGPRWndJKUVFQrHjH5/viv9O5K6BJX8sL88k0sYHEoBRpm5H4g3 Qn8M6rjjI2iY1RawEpj/jZqYkQ8jIkBA6QIUnll9UQuB5/LK4tB2weY4EGjt0ov7 MIEhJg0/VZmOafBJhAJ57MsZd3eRKCktLI+YpREGeIqnYnQTOdAHGSnRgsitAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvXmtf7umK0zZR6E3C91HGg4gEGQwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA08aSFVkM5jKfFj2uQ582+VSFMSoIcPMJ3U T3JBqNTZRNWbch9e5ZFOvlcaya2o6bleAssP3w3K7XVT7H7Xis6MO17Md97KbKJC pRjeQjStRJotwHyel39pUKBhiHub4ciuGKdH5XGGw7femBQI1Aw4nLwsLE3mK4d+ N0EnzBkP850cnap56zwAH5q0x0KiAiOFVGyTgl7n0Y3VYAMEgNZT8pfiwM2V+JfE a4SO00PiU97ZV7F/uHidqIVLrQDGasy4mvL7+2TB6QA3LTQ5xBAGrU/pRLwingWh 0xZR/GIRdDMq2/zfuNGV37h2+3iqt7VI4+agvSTno4tzxsd8pCk= -----END CERTIFICATE-----Generated at Mon Jul 21 10:36:52 2025 by rpki-client