$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: VLKBMg8nEvDjGpp+wVytAP62RQw8D/zqQr4U1MzV8CM= Subject key identifier: 68:85:3F:A7:02:EF:FA:46:3B:87:92:9A:A4:A4:68:42:A6:D4:03:27 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 2438483194F5AC4750C32DC9EE0B3F10B2CEBF0F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 049B Signing time: Sun 15 Jun 2025 23:01:12 +0000 Manifest this update: Sun 15 Jun 2025 22:56:12 +0000 Manifest next update: Thu 19 Jun 2025 06:21:12 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 8pvXEWksLs/3b78Oz33T8C79XOWNGDmQ2uOUEIowyKU=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 06:21:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:38:48:31:94:f5:ac:47:50:c3:2d:c9:ee:0b:3f:10:b2:ce:bf:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Jun 15 22:56:12 2025 GMT Not After : Jun 19 06:21:12 2025 GMT Subject: CN=68853FA702EFFA463B87929AA4A46842A6D40327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:3a:31:a9:8e:36:61:49:e6:2e:6a:f1:94:1e: b1:1d:81:ba:32:b5:3e:0e:00:ce:6f:ee:e2:80:ed: dd:c2:e5:78:0d:83:86:6b:51:c3:c6:6b:1a:96:95: 40:5d:c6:ad:a7:11:a5:6b:9b:ce:04:35:eb:9c:64: d3:2f:7b:68:0a:55:b6:55:9e:4e:f3:66:38:07:d4: bf:ae:f8:3a:c2:6b:01:97:20:7e:58:c7:10:43:13: 42:83:03:bf:af:7b:c8:7d:e7:16:0b:9b:a4:8e:c9: 5f:9d:ff:88:e3:b8:c4:9f:e0:76:21:cb:56:cf:67: a6:ce:94:5c:3f:26:c7:49:1c:2f:ee:ae:5f:83:05: a9:d9:fd:ba:ed:93:1c:19:0d:25:03:2b:38:b0:49: 75:5d:27:41:62:f0:61:12:dc:37:78:7c:c2:b4:9e: 28:6f:b1:65:1a:85:b7:87:b7:02:ea:a7:16:3c:48: fd:cc:93:c9:4f:3d:e5:d1:b3:a3:91:f3:ca:67:0c: 40:e2:1f:3b:fc:bf:d5:45:92:a4:06:d6:09:3b:05: 09:17:f2:9c:32:d0:9c:62:47:95:35:7b:09:8f:a1: df:f6:31:16:3d:6d:f9:4c:c1:98:f9:c5:63:f8:28: 3c:bf:9b:f2:c5:fa:91:e6:94:5d:e8:01:ee:11:f1: 59:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:85:3F:A7:02:EF:FA:46:3B:87:92:9A:A4:A4:68:42:A6:D4:03:27 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:12:a9:32:dd:31:ad:9c:04:99:3f:f0:37:7f:19:73:e9:1c: e1:e9:ba:c3:4a:f8:a8:97:0c:d2:66:90:eb:a9:45:e8:eb:74: cc:39:e9:40:8e:d1:db:07:34:4c:c3:cc:ba:ea:71:1f:a9:0d: 39:6e:8a:fe:8b:c7:b6:77:da:1a:61:78:2b:34:4c:fd:21:57: 2d:14:a0:dd:38:9a:88:8c:83:28:1a:8c:69:72:24:d4:94:ea: 40:d5:d5:ff:94:30:ea:97:f1:6a:62:74:35:a4:7a:e0:70:f1: 8c:56:10:d8:dd:72:a0:73:51:0c:e6:0f:62:41:a5:c1:c7:31: e9:e5:75:46:e8:72:e7:37:8b:42:29:c2:e5:42:92:2d:1a:c0: a9:8b:35:a7:f8:6d:df:55:0f:e5:d0:7f:1a:ee:24:57:2c:6e: 7f:88:18:82:0c:10:b3:c3:62:db:36:1d:10:bd:df:c3:eb:34: c7:03:75:6a:4a:e3:0f:7d:30:bd:55:7d:6a:d9:6f:db:09:78: cd:6d:bd:01:89:8e:7e:a8:c2:ac:8b:0a:55:15:c6:27:ab:d2: bb:f1:2f:13:cd:e6:98:2c:18:58:9e:09:a3:d9:64:8c:cd:50: 6d:65:88:99:03:ac:3d:a5:ef:17:59:58:40:84:03:7c:6c:af: 9b:9e:f9:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDhIMZT1rEdQwy3J7gs/ELLOvw8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA2MTUyMjU2MTJaFw0yNTA2MTkwNjIxMTJaMDMxMTAvBgNV BAMTKDY4ODUzRkE3MDJFRkZBNDYzQjg3OTI5QUE0QTQ2ODQyQTZENDAzMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOjGpjjZhSeYuavGUHrEdgboy tT4OAM5v7uKA7d3C5XgNg4ZrUcPGaxqWlUBdxq2nEaVrm84ENeucZNMve2gKVbZV nk7zZjgH1L+u+DrCawGXIH5YxxBDE0KDA7+ve8h95xYLm6SOyV+d/4jjuMSf4HYh y1bPZ6bOlFw/JsdJHC/url+DBanZ/brtkxwZDSUDKziwSXVdJ0Fi8GES3Dd4fMK0 nihvsWUahbeHtwLqpxY8SP3Mk8lPPeXRs6OR88pnDEDiHzv8v9VFkqQG1gk7BQkX 8pwy0JxiR5U1ewmPod/2MRY9bflMwZj5xWP4KDy/m/LF+pHmlF3oAe4R8VnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaIU/pwLv+kY7h5KapKRoQqbUAycwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0SqTLdMa2cBJk/8Dd/GXPpHOHpusNK+KiX DNJmkOupRejrdMw56UCO0dsHNEzDzLrqcR+pDTluiv6Lx7Z32hpheCs0TP0hVy0U oN04moiMgygajGlyJNSU6kDV1f+UMOqX8WpidDWkeuBw8YxWENjdcqBzUQzmD2JB pcHHMenldUbocuc3i0IpwuVCki0awKmLNaf4bd9VD+XQfxruJFcsbn+IGIIMELPD Yts2HRC938PrNMcDdWpK4w99ML1VfWrZb9sJeM1tvQGJjn6owqyLClUVxier0rvx LxPN5pgsGFieCaPZZIzNUG1liJkDrD2l7xdZWECEA3xsr5ue+V4= -----END CERTIFICATE-----Generated at Tue Jun 17 00:52:00 2025 by rpki-client