$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: 7+rI7eA1W1QBUSZqhJHvEZUaG1Co5n4KYsr/NGDp8VY= Subject key identifier: BA:4D:59:8F:02:2D:95:FA:DE:DB:AD:74:56:20:6B:E0:EC:6B:59:69 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 647AD9CF52230F5C85B8516036E9134C87FBDD08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02A7 Signing time: Sun 02 Nov 2025 17:22:26 +0000 Manifest this update: Sun 02 Nov 2025 17:17:26 +0000 Manifest next update: Wed 05 Nov 2025 19:21:26 +0000 Files and hashes: 1: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: 8YMYHKA4Xgmy0pM7ktecqkzQd4fTAJUeD55IGV52dDs=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 19:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:7a:d9:cf:52:23:0f:5c:85:b8:51:60:36:e9:13:4c:87:fb:dd:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Nov 2 17:17:26 2025 GMT Not After : Nov 5 19:21:26 2025 GMT Subject: CN=BA4D598F022D95FADEDBAD7456206BE0EC6B5969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:54:b5:d2:b1:23:b9:5b:aa:fb:3b:a3:28:4b: ca:25:b3:8f:2e:45:a9:ec:e8:84:08:67:00:20:4b: 7a:68:5f:94:15:2f:1b:a9:bd:27:bb:fd:d7:11:c7: 45:cc:e0:e5:88:a4:c6:40:5f:b6:96:3b:6b:c9:ee: f4:0b:4e:5f:ca:c0:d2:9e:c2:ba:48:b5:9d:80:43: 5c:c0:ff:7c:99:ae:35:f3:94:b0:eb:c2:b8:8e:ea: 79:ea:29:6f:c4:9c:d0:e0:f3:2d:94:56:46:30:83: 7f:9e:88:eb:76:ec:1c:9d:98:11:5d:f8:9c:ab:8a: 43:fe:3a:04:24:f8:a8:82:28:96:0b:03:b8:f6:03: c6:7b:e4:77:1e:a3:58:f0:be:92:25:31:9f:34:47: ca:25:25:f3:93:ff:30:c5:9b:5b:65:bd:5d:73:3e: 49:ab:a1:f8:70:55:c6:d2:7d:75:67:16:25:c8:03: dd:60:da:3a:67:06:86:45:12:0f:5b:25:61:b0:8e: c2:e7:26:4e:96:86:21:0e:a9:27:2f:ab:e0:fc:39: 54:ea:b4:da:11:55:87:fe:52:a5:09:63:3d:d0:9e: e2:0c:40:cd:69:27:9a:37:a9:b0:83:09:84:d4:80: 98:2f:c5:a4:5e:9f:ad:c8:c5:16:48:2a:8e:2a:49: ad:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:4D:59:8F:02:2D:95:FA:DE:DB:AD:74:56:20:6B:E0:EC:6B:59:69 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:a5:fe:de:34:51:4f:0b:9e:a0:a0:d9:b1:62:a9:00:bc:59: 85:6d:bc:6f:db:72:9c:c7:4f:7e:3f:4a:dc:40:19:9a:32:32: 85:4d:53:00:c0:88:81:f5:9c:45:02:3c:28:1c:89:5c:20:de: d2:90:62:c0:d2:a9:3e:57:65:24:60:15:80:10:b4:f5:cd:25: c1:c8:b3:47:a8:a4:a2:bd:5a:7a:c2:d5:6e:9c:2e:4f:fd:2a: 96:57:d6:8b:e7:1e:ad:49:68:4d:02:df:29:43:43:a2:04:02: 02:b8:e6:d4:f3:82:d7:f7:5f:a4:f2:40:4b:41:af:53:13:41: e5:02:30:25:39:97:16:b4:5d:7f:0c:58:44:df:d5:30:b8:32: 3a:f0:b1:80:34:ef:2c:c5:76:47:d2:16:ed:f9:87:86:cf:33: 26:79:6a:86:6d:33:6f:cc:68:8a:56:ce:34:c0:8e:56:b8:75: 36:56:24:97:80:c8:1d:d2:b3:25:94:d6:b9:6b:09:94:10:dd: 4c:a1:fa:45:1b:f9:16:eb:cc:8a:e5:38:eb:3f:3f:64:40:cf: 84:83:0d:58:42:14:8b:e3:5f:ea:1f:e1:d3:f9:b7:f7:36:d1: cf:84:01:0a:6b:50:47:f7:9c:ff:30:ee:a4:0c:75:83:01:19: 32:e7:fc:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHrZz1IjD1yFuFFgNukTTIf73QgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTExMDIxNzE3MjZaFw0yNTExMDUxOTIxMjZaMDMxMTAvBgNV BAMTKEJBNEQ1OThGMDIyRDk1RkFERURCQUQ3NDU2MjA2QkUwRUM2QjU5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAVLXSsSO5W6r7O6MoS8ols48u Rans6IQIZwAgS3poX5QVLxupvSe7/dcRx0XM4OWIpMZAX7aWO2vJ7vQLTl/KwNKe wrpItZ2AQ1zA/3yZrjXzlLDrwriO6nnqKW/EnNDg8y2UVkYwg3+eiOt27BydmBFd +JyrikP+OgQk+KiCKJYLA7j2A8Z75Hceo1jwvpIlMZ80R8olJfOT/zDFm1tlvV1z PkmrofhwVcbSfXVnFiXIA91g2jpnBoZFEg9bJWGwjsLnJk6WhiEOqScvq+D8OVTq tNoRVYf+UqUJYz3QnuIMQM1pJ5o3qbCDCYTUgJgvxaRen63IxRZIKo4qSa0/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuk1ZjwItlfre2610ViBr4OxrWWkwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKl/t40UU8LnqCg2bFiqQC8WYVtvG/bcpzH T34/StxAGZoyMoVNUwDAiIH1nEUCPCgciVwg3tKQYsDSqT5XZSRgFYAQtPXNJcHI s0eopKK9WnrC1W6cLk/9KpZX1ovnHq1JaE0C3ylDQ6IEAgK45tTzgtf3X6TyQEtB r1MTQeUCMCU5lxa0XX8MWETf1TC4MjrwsYA07yzFdkfSFu35h4bPMyZ5aoZtM2/M aIpWzjTAjla4dTZWJJeAyB3SsyWU1rlrCZQQ3Uyh+kUb+RbrzIrlOOs/P2RAz4SD DVhCFIvjX+of4dP5t/c20c+EAQprUEf3nP8w7qQMdYMBGTLn/Ow= -----END CERTIFICATE-----Generated at Tue Nov 4 16:36:11 2025 by rpki-client