$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: CMIOPdmka+yFMjMnSsaDj/1kesjrNWZC3erav2/WMpo= Subject key identifier: 28:07:B4:F2:75:5D:EE:64:B8:C0:5D:15:F0:86:AA:B3:39:DA:1C:BD Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 3E409567BE60C668B3BED4A45D1857B5D80C6504 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 0252 Signing time: Tue 29 Apr 2025 19:12:28 +0000 Manifest this update: Tue 29 Apr 2025 19:07:28 +0000 Manifest next update: Sat 03 May 2025 02:58:28 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 2: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 3: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: skpdilh/Bbxwk/Pk/Tvq4gN7dFGjGrCYMVlobSEx300=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 02:58:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:40:95:67:be:60:c6:68:b3:be:d4:a4:5d:18:57:b5:d8:0c:65:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Apr 29 19:07:28 2025 GMT Not After : May 3 02:58:28 2025 GMT Subject: CN=2807B4F2755DEE64B8C05D15F086AAB339DA1CBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:00:67:d0:4c:d6:53:d4:e0:9b:c7:8e:98:3e: 2b:ab:27:9f:35:9e:0e:14:d3:c3:2f:9d:74:bb:48: 6a:46:c7:59:96:67:50:f7:94:ef:d0:a2:79:4b:7a: 74:5a:e3:c1:d8:03:b3:f8:2f:49:42:63:9c:4d:52: 49:6f:4c:3c:8c:b9:09:38:af:ee:2d:51:60:19:20: 0b:0e:af:34:3a:8d:ec:4c:69:e3:4a:4a:63:3e:71: 2e:97:aa:9c:c4:8b:86:bc:77:c8:7a:a1:3f:cc:b7: e7:ee:2b:bb:4e:c7:f4:dc:fb:0a:f1:2d:ed:66:9a: 4b:f8:99:82:0e:f3:7b:49:37:ff:28:74:9d:f7:f2: 57:02:f7:eb:3f:e4:2f:a1:7e:57:52:43:28:47:6d: e8:88:e9:7e:51:53:04:cd:fa:ae:4f:12:9a:f6:8f: 49:2b:c8:4a:8f:d4:3e:29:1b:41:19:1f:e4:df:81: 35:e5:bb:d3:eb:a8:bb:c5:4d:6d:63:a8:79:bc:f9: 89:e6:f3:2b:14:d5:4a:d2:d1:49:98:a5:29:90:3d: 4a:ad:b4:8d:ad:52:af:82:f6:a8:48:ae:87:2f:93: 9b:87:6b:09:0b:0a:0c:4b:89:a0:ee:57:56:a0:43: 23:8e:f5:9c:c4:73:c5:8b:09:dd:04:0e:e7:58:e3: 2f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:07:B4:F2:75:5D:EE:64:B8:C0:5D:15:F0:86:AA:B3:39:DA:1C:BD X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:4e:64:67:9b:39:25:cf:c2:8b:75:56:6f:de:df:ab:5e:47: c2:39:4a:71:67:8c:f3:65:d2:8a:96:0b:62:76:28:f0:b1:be: 08:d0:62:a2:84:d7:57:2d:56:73:ee:63:30:d2:40:2f:23:0a: ee:85:32:ae:29:34:c3:c0:12:4f:a0:b8:d6:d5:31:49:2c:05: 61:bc:8a:ee:fb:2c:e4:70:6c:ad:7d:7e:cf:02:f0:9d:3e:e5: 79:4d:0c:f8:34:25:cd:c1:8c:4f:f5:58:60:bb:36:e0:01:0e: 71:c0:db:da:68:6d:23:68:e3:7a:de:cd:c3:cb:28:ca:f8:16: 5d:ea:5b:cb:40:d9:aa:3a:be:ca:e7:76:c3:ee:d0:f3:b4:2f: 6c:b4:67:8e:c3:7f:0e:54:f6:31:d2:87:53:5b:2d:01:36:49: dc:ed:0b:e5:c7:34:c9:7e:dd:cf:1e:9c:df:69:25:ed:34:69: 50:fa:c9:49:90:95:e5:a4:86:ba:57:43:09:db:f0:3f:b9:72: f8:3e:3d:a2:b3:22:4e:64:96:58:0b:69:96:20:66:ba:e1:13: c2:59:aa:16:07:e6:75:2b:93:3a:9c:45:60:4b:29:2f:34:a0: 41:ac:af:cf:47:c3:68:82:fc:08:20:b1:7c:26:54:a3:2f:60: bc:60:e0:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPkCVZ75gxmizvtSkXRhXtdgMZQQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA0MjkxOTA3MjhaFw0yNTA1MDMwMjU4MjhaMDMxMTAvBgNV BAMTKDI4MDdCNEYyNzU1REVFNjRCOEMwNUQxNUYwODZBQUIzMzlEQTFDQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXAGfQTNZT1OCbx46YPiurJ581 ng4U08MvnXS7SGpGx1mWZ1D3lO/QonlLenRa48HYA7P4L0lCY5xNUklvTDyMuQk4 r+4tUWAZIAsOrzQ6jexMaeNKSmM+cS6XqpzEi4a8d8h6oT/Mt+fuK7tOx/Tc+wrx Le1mmkv4mYIO83tJN/8odJ338lcC9+s/5C+hfldSQyhHbeiI6X5RUwTN+q5PEpr2 j0kryEqP1D4pG0EZH+TfgTXlu9PrqLvFTW1jqHm8+Ynm8ysU1UrS0UmYpSmQPUqt tI2tUq+C9qhIrocvk5uHawkLCgxLiaDuV1agQyOO9ZzEc8WLCd0EDudY4y8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKAe08nVd7mS4wF0V8IaqsznaHL0wHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKROZGebOSXPwot1Vm/e36teR8I5SnFnjPNl 0oqWC2J2KPCxvgjQYqKE11ctVnPuYzDSQC8jCu6FMq4pNMPAEk+guNbVMUksBWG8 iu77LORwbK19fs8C8J0+5XlNDPg0Jc3BjE/1WGC7NuABDnHA29pobSNo43rezcPL KMr4Fl3qW8tA2ao6vsrndsPu0PO0L2y0Z47Dfw5U9jHSh1NbLQE2SdztC+XHNMl+ 3c8enN9pJe00aVD6yUmQleWkhrpXQwnb8D+5cvg+PaKzIk5kllgLaZYgZrrhE8JZ qhYH5nUrkzqcRWBLKS80oEGsr89Hw2iC/AggsXwmVKMvYLxg4Do= -----END CERTIFICATE-----Generated at Thu May 1 11:13:24 2025 by rpki-client