$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: p7CVhZ4Yd74ZropHu8JvIvpg4fXhjUX/qHnP6W5UCQo= Subject key identifier: CF:D5:8A:C8:A7:BA:FE:6C:69:0A:9F:B2:87:4D:BA:B8:FB:A6:A8:18 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 28818B970FAC53B99D2CA9818BB11507E1440E35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 0485 Signing time: Sat 26 Apr 2025 15:31:11 +0000 Manifest this update: Sat 26 Apr 2025 15:26:11 +0000 Manifest next update: Wed 30 Apr 2025 02:02:11 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 3s9izHZvX30ivIwGD6cxF+bLXKJ/mXBxlFkGDWIws+k=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:02:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:81:8b:97:0f:ac:53:b9:9d:2c:a9:81:8b:b1:15:07:e1:44:0e:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Apr 26 15:26:11 2025 GMT Not After : Apr 30 02:02:11 2025 GMT Subject: CN=CFD58AC8A7BAFE6C690A9FB2874DBAB8FBA6A818 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:88:71:42:b6:96:85:69:09:7e:88:b5:89:27: ca:d9:3f:0f:b9:4f:5a:31:7a:80:8c:a7:54:e0:e9: c9:8d:e0:50:5e:86:2d:a5:53:04:27:5e:71:c2:32: 84:78:18:2f:e1:0b:c1:7d:70:5e:db:83:ee:06:e2: 54:b9:9f:57:b6:ea:b9:37:4a:0b:e3:fd:8e:7c:e6: fc:2e:9e:67:3d:d6:46:95:7e:0b:99:e2:57:90:0c: 66:5c:fb:b4:92:fd:a1:3c:08:04:12:69:5f:2e:e4: c3:1f:84:05:9b:84:1a:f1:9c:3c:89:68:1d:20:e0: 0d:6b:7b:8c:5d:40:d9:b5:74:b3:3a:6e:56:f3:e0: b1:33:37:eb:34:42:a8:41:c7:d2:e5:af:fc:03:cf: a5:28:48:2f:d9:f8:6b:b8:58:76:03:fa:de:c3:ef: 20:66:f3:e8:a4:26:c7:94:2e:10:72:01:c0:04:dd: 4d:ba:d6:32:41:ec:e1:29:4a:c8:c0:1d:14:6e:61: 68:24:ac:47:2e:1f:b3:8d:e1:74:be:a4:4f:53:0d: b3:37:02:a5:64:8a:e4:69:74:f4:05:e2:63:9c:92: 2c:68:c0:74:ab:68:f1:e4:77:41:0a:8c:6d:9e:ee: 00:2b:ed:c0:ab:91:22:de:4f:82:93:54:78:27:3a: 0b:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D5:8A:C8:A7:BA:FE:6C:69:0A:9F:B2:87:4D:BA:B8:FB:A6:A8:18 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:b0:a9:4b:90:55:c1:33:0d:ce:ea:b5:c3:cd:3a:e6:61:4a: 1b:1e:16:7c:cc:4c:10:ff:2c:14:da:2c:df:fe:9e:99:7a:1f: c4:a7:ed:e8:58:eb:60:a6:8e:87:87:06:9a:46:6f:85:7e:6c: ea:8f:8c:fe:8b:eb:65:c3:61:66:13:bb:da:38:be:52:14:0e: 99:9d:51:8b:4c:03:5d:41:0c:97:34:8e:67:2d:ed:17:52:27: f1:2b:d3:ae:6b:02:9a:03:ca:cc:37:46:d3:33:51:1d:c5:66: 98:94:bc:28:4e:73:ed:1d:ea:3f:81:47:51:26:12:84:07:3e: 64:d9:16:bd:5d:af:bd:ab:0b:a9:87:60:2b:a8:ee:1d:80:cc: 5a:e5:11:2d:0c:85:35:59:7b:32:82:6d:42:a4:e8:09:7d:d4: f0:df:a5:b8:53:36:a6:11:44:10:af:68:a5:15:98:96:0c:6c: ec:10:0d:07:09:f1:96:f9:49:f2:ed:35:25:47:d1:af:02:3f: 1b:99:2a:aa:b2:30:61:6d:95:6f:56:1d:99:b0:80:66:e0:76: 8f:66:a7:ce:d5:d3:d5:05:22:63:d3:4e:b2:f4:48:cf:6b:41: fd:15:56:8e:61:cf:a8:3e:6f:13:02:be:25:f4:55:36:a8:80: 52:9c:bc:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIGLlw+sU7mdLKmBi7EVB+FEDjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA0MjYxNTI2MTFaFw0yNTA0MzAwMjAyMTFaMDMxMTAvBgNV BAMTKENGRDU4QUM4QTdCQUZFNkM2OTBBOUZCMjg3NERCQUI4RkJBNkE4MTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiHFCtpaFaQl+iLWJJ8rZPw+5 T1oxeoCMp1Tg6cmN4FBehi2lUwQnXnHCMoR4GC/hC8F9cF7bg+4G4lS5n1e26rk3 Sgvj/Y585vwunmc91kaVfguZ4leQDGZc+7SS/aE8CAQSaV8u5MMfhAWbhBrxnDyJ aB0g4A1re4xdQNm1dLM6blbz4LEzN+s0QqhBx9Llr/wDz6UoSC/Z+Gu4WHYD+t7D 7yBm8+ikJseULhByAcAE3U261jJB7OEpSsjAHRRuYWgkrEcuH7ON4XS+pE9TDbM3 AqVkiuRpdPQF4mOckixowHSraPHkd0EKjG2e7gAr7cCrkSLeT4KTVHgnOgvNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz9WKyKe6/mxpCp+yh026uPumqBgwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFewqUuQVcEzDc7qtcPNOuZhShseFnzMTBD/ LBTaLN/+npl6H8Sn7ehY62CmjoeHBppGb4V+bOqPjP6L62XDYWYTu9o4vlIUDpmd UYtMA11BDJc0jmct7RdSJ/Er065rApoDysw3RtMzUR3FZpiUvChOc+0d6j+BR1Em EoQHPmTZFr1dr72rC6mHYCuo7h2AzFrlES0MhTVZezKCbUKk6Al91PDfpbhTNqYR RBCvaKUVmJYMbOwQDQcJ8Zb5SfLtNSVH0a8CPxuZKqqyMGFtlW9WHZmwgGbgdo9m p87V09UFImPTTrL0SM9rQf0VVo5hz6g+bxMCviX0VTaogFKcvAw= -----END CERTIFICATE-----Generated at Sun Apr 27 04:04:29 2025 by rpki-client