$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: nO5dtqNdv79TjyPW4JDdLebN5kQ0V2yCAWkul08Ulug= Subject key identifier: 38:5F:B7:35:C7:89:11:E5:6E:C1:72:4F:00:7D:DD:1E:DD:59:6E:8C Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 596DF6ECEB8D1C17B80D4B2BA711D3297F5D7BAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 027F Signing time: Wed 06 Aug 2025 19:22:27 +0000 Manifest this update: Wed 06 Aug 2025 19:17:27 +0000 Manifest next update: Sun 10 Aug 2025 04:29:27 +0000 Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) 2: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 3: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: bY67sTtBXloyF2eGpKlivILE5lhZBpTuAli+8tf7MSE=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:29:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:6d:f6:ec:eb:8d:1c:17:b8:0d:4b:2b:a7:11:d3:29:7f:5d:7b:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Aug 6 19:17:27 2025 GMT Not After : Aug 10 04:29:27 2025 GMT Subject: CN=385FB735C78911E56EC1724F007DDD1EDD596E8C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:8f:a9:c8:99:6a:be:b1:73:77:94:c7:2f:12: aa:f1:8d:75:ac:d3:97:c1:64:06:7b:ac:7d:dd:7f: cf:93:c3:21:53:24:be:2d:42:3f:de:31:7e:41:7b: 16:8d:16:80:05:49:34:e3:81:75:4e:ba:7a:55:b5: 42:47:e7:66:9a:33:2e:36:fc:32:3c:2a:8d:25:f7: 65:b4:b2:7f:83:c2:ba:97:d3:ee:82:ba:5d:03:c7: a7:ef:46:00:48:e3:7b:8f:df:90:a2:10:48:61:65: fd:00:1a:0d:3a:a3:1e:4d:4a:f9:5b:b4:d4:87:dc: 7b:e0:29:f0:12:e5:23:8e:8d:4d:44:4c:8e:f8:ef: ba:e6:cf:cd:ea:6e:f4:6f:ae:9e:80:5f:fe:9a:14: 22:e6:16:d6:ac:95:c5:9f:2b:90:c6:3f:80:16:48: d6:70:38:64:69:7e:56:a3:f6:b2:e8:99:7c:8c:03: 48:b4:84:6c:54:e9:7d:cb:10:29:b1:ab:5b:a0:2b: 84:9f:59:57:9c:11:2c:3d:16:18:76:92:7b:7e:e4: a2:f8:18:14:f5:7e:6f:bc:30:b2:32:77:5e:ba:8f: 15:1c:21:73:8a:d1:e5:89:2d:56:d9:33:d3:8e:bb: 0c:4c:b2:37:d0:09:52:25:32:ce:7a:42:fe:96:89: 36:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:5F:B7:35:C7:89:11:E5:6E:C1:72:4F:00:7D:DD:1E:DD:59:6E:8C X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:90:c8:12:e0:b8:b1:ba:7f:cc:2c:3d:53:10:6b:6e:1e:75: d6:91:ac:7b:df:c4:93:ff:d8:93:4d:c5:69:90:b3:5e:e7:f1: 73:86:6d:02:42:b3:16:cb:0d:71:af:e0:d4:5c:49:e2:f3:73: 5c:87:96:c4:7e:04:6c:9c:1a:17:7b:47:a2:de:a1:16:8d:62: fe:6e:e6:45:63:01:6c:d2:2f:78:e7:75:af:36:a8:94:14:cc: 0b:a5:fe:ef:61:96:a3:db:28:8e:30:6b:f1:49:93:5f:5b:24: 93:ae:21:fe:64:bd:22:80:9d:a1:e4:c5:6c:e5:da:c4:43:8c: 10:38:e1:3c:1b:b7:77:a3:e8:67:7d:ba:0c:47:44:d0:ee:de: 5a:46:ec:65:91:6f:91:ae:9d:23:a2:d1:fc:24:30:fb:fd:e6: 5c:d0:04:a4:23:4c:0e:d1:57:54:ac:bb:88:c7:7c:96:39:e7: 12:03:40:a1:42:ce:f3:a2:c5:23:25:ae:ae:a2:56:1b:63:86: 8c:fd:4b:ed:3b:57:6f:dd:86:08:f5:97:62:20:64:62:69:f3: b1:72:b8:ef:98:d0:27:0c:84:eb:14:29:98:14:c4:b6:3a:72: 4c:c6:ed:99:cb:84:80:c7:8f:6a:af:9f:ed:44:75:9a:bd:a7: 1a:8b:a3:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWW327OuNHBe4DUsrpxHTKX9de60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA4MDYxOTE3MjdaFw0yNTA4MTAwNDI5MjdaMDMxMTAvBgNV BAMTKDM4NUZCNzM1Qzc4OTExRTU2RUMxNzI0RjAwN0RERDFFREQ1OTZFOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJj6nImWq+sXN3lMcvEqrxjXWs 05fBZAZ7rH3df8+TwyFTJL4tQj/eMX5BexaNFoAFSTTjgXVOunpVtUJH52aaMy42 /DI8Ko0l92W0sn+DwrqX0+6Cul0Dx6fvRgBI43uP35CiEEhhZf0AGg06ox5NSvlb tNSH3HvgKfAS5SOOjU1ETI7477rmz83qbvRvrp6AX/6aFCLmFtaslcWfK5DGP4AW SNZwOGRpflaj9rLomXyMA0i0hGxU6X3LECmxq1ugK4SfWVecESw9Fhh2knt+5KL4 GBT1fm+8MLIyd166jxUcIXOK0eWJLVbZM9OOuwxMsjfQCVIlMs56Qv6WiTYLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOF+3NceJEeVuwXJPAH3dHt1ZbowwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSQyBLguLG6f8wsPVMQa24eddaRrHvfxJP/ 2JNNxWmQs17n8XOGbQJCsxbLDXGv4NRcSeLzc1yHlsR+BGycGhd7R6LeoRaNYv5u 5kVjAWzSL3jnda82qJQUzAul/u9hlqPbKI4wa/FJk19bJJOuIf5kvSKAnaHkxWzl 2sRDjBA44Twbt3ej6Gd9ugxHRNDu3lpG7GWRb5GunSOi0fwkMPv95lzQBKQjTA7R V1Ssu4jHfJY55xIDQKFCzvOixSMlrq6iVhtjhoz9S+07V2/dhgj1l2IgZGJp87Fy uO+Y0CcMhOsUKZgUxLY6ckzG7ZnLhIDHj2qvn+1EdZq9pxqLo+Q= -----END CERTIFICATE-----Generated at Sat Aug 9 01:02:35 2025 by rpki-client