$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: PjwNoh6sH1Iadnqq6vXXgq+eSHlfvRVulARXwv7nYsY= Subject key identifier: 52:23:BA:0D:6B:99:25:46:80:DB:20:5B:B1:E2:9C:77:FA:23:11:94 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 3368C30A1FF447321904EBA142F291B4C39F5359 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04B2 Signing time: Tue 05 Aug 2025 21:11:12 +0000 Manifest this update: Tue 05 Aug 2025 21:06:12 +0000 Manifest next update: Sat 09 Aug 2025 02:05:12 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 33dYdHXZzfC0KR2Y9KD8OzAr93EOzP+84TtJMyC4fZ0=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 02:05:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:68:c3:0a:1f:f4:47:32:19:04:eb:a1:42:f2:91:b4:c3:9f:53:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Aug 5 21:06:12 2025 GMT Not After : Aug 9 02:05:12 2025 GMT Subject: CN=5223BA0D6B99254680DB205BB1E29C77FA231194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a2:5f:07:5d:e4:bb:36:3b:8f:53:41:c7:45: 19:42:39:7d:d3:ab:aa:bf:4b:2b:3b:cf:54:eb:54: 9b:fb:0d:07:58:dd:4c:a7:22:d4:0f:8a:cf:04:1e: a8:a5:fc:ec:11:7b:0d:85:ba:19:1e:f3:79:9c:7d: fd:31:c9:e1:0d:60:86:4c:85:18:d5:9a:4f:90:11: d3:16:92:94:94:16:cf:ae:d4:35:b1:52:61:50:59: 5b:c8:a9:15:b6:be:f3:ea:aa:65:c8:69:af:28:73: 40:5f:0d:25:6b:1f:c6:7f:5b:3d:d1:e0:00:0c:c1: a7:41:24:8b:5a:36:b4:eb:af:fc:4b:ab:19:eb:91: 62:41:71:06:57:63:70:b4:13:4b:78:34:9c:70:00: 3e:88:0d:e3:ab:d0:96:ba:b1:9c:d6:8d:09:85:90: 45:e8:b0:57:d8:50:46:91:0d:72:d2:88:28:80:3f: e3:8c:81:67:51:c8:4b:91:a6:ad:4a:a6:8a:7f:32: b6:f2:1f:ab:75:62:14:7d:c0:23:f4:1b:5a:91:86: 30:e5:4c:b0:a9:5f:2f:f2:4d:ec:3f:13:60:10:8c: 2d:b9:62:87:b1:a2:c6:bc:d8:06:3c:32:f4:d8:32: d8:a8:c6:34:9f:11:06:6d:3d:c7:93:64:d9:e1:8e: 16:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:BA:0D:6B:99:25:46:80:DB:20:5B:B1:E2:9C:77:FA:23:11:94 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b5:6f:ff:1f:20:fe:85:68:00:1f:38:ab:1f:24:9a:d3:95: 0e:7c:dd:2c:d3:fb:26:1a:af:17:e3:13:81:b6:51:39:3f:6c: 44:a4:26:8c:fb:c8:5d:84:18:91:15:08:f6:42:7e:a4:2b:44: bb:4e:6b:60:b4:e1:46:13:91:02:ec:c5:27:6d:6d:de:de:e1: de:89:24:74:82:94:0c:05:26:c2:01:73:22:7e:6d:d7:f2:47: c9:a4:02:92:7a:20:35:44:72:29:36:33:71:be:2b:9e:7d:f4: ec:07:6c:34:80:fc:33:d7:16:d0:ed:4a:64:d2:19:aa:80:09: d1:a4:b9:0c:68:61:9b:bd:f8:3c:d7:81:11:7c:cb:65:99:a2: 9c:56:ed:db:a8:a9:e2:3c:86:f5:fd:27:b4:b7:a6:d2:43:9f: c4:71:b1:fe:ed:7e:ca:43:e5:3f:fa:cf:10:70:b5:68:33:43: 80:7f:bd:7a:bc:f9:2a:23:af:bf:6d:24:3b:a7:34:ce:d4:5c: e6:e2:d4:c1:af:62:89:d2:7d:ca:34:af:42:ce:a2:79:35:d2: 4d:3b:4d:ee:3b:45:27:87:c9:41:be:4c:4e:18:d9:03:e9:69: b8:d8:d8:c7:70:46:4c:56:a3:1d:c4:f5:36:ef:24:d3:13:38: 8c:61:56:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM2jDCh/0RzIZBOuhQvKRtMOfU1kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA4MDUyMTA2MTJaFw0yNTA4MDkwMjA1MTJaMDMxMTAvBgNV BAMTKDUyMjNCQTBENkI5OTI1NDY4MERCMjA1QkIxRTI5Qzc3RkEyMzExOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbol8HXeS7NjuPU0HHRRlCOX3T q6q/Sys7z1TrVJv7DQdY3UynItQPis8EHqil/OwRew2Fuhke83mcff0xyeENYIZM hRjVmk+QEdMWkpSUFs+u1DWxUmFQWVvIqRW2vvPqqmXIaa8oc0BfDSVrH8Z/Wz3R 4AAMwadBJItaNrTrr/xLqxnrkWJBcQZXY3C0E0t4NJxwAD6IDeOr0Ja6sZzWjQmF kEXosFfYUEaRDXLSiCiAP+OMgWdRyEuRpq1Kpop/MrbyH6t1YhR9wCP0G1qRhjDl TLCpXy/yTew/E2AQjC25Yoexosa82AY8MvTYMtioxjSfEQZtPceTZNnhjhYbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUiO6DWuZJUaA2yBbseKcd/ojEZQwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAy1b/8fIP6FaAAfOKsfJJrTlQ583SzT+yYa rxfjE4G2UTk/bESkJoz7yF2EGJEVCPZCfqQrRLtOa2C04UYTkQLsxSdtbd7e4d6J JHSClAwFJsIBcyJ+bdfyR8mkApJ6IDVEcik2M3G+K5599OwHbDSA/DPXFtDtSmTS GaqACdGkuQxoYZu9+DzXgRF8y2WZopxW7duoqeI8hvX9J7S3ptJDn8Rxsf7tfspD 5T/6zxBwtWgzQ4B/vXq8+Sojr79tJDunNM7UXObi1MGvYonSfco0r0LOonk10k07 Te47RSeHyUG+TE4Y2QPpabjY2MdwRkxWox3E9TbvJNMTOIxhVok= -----END CERTIFICATE-----Generated at Thu Aug 7 04:29:16 2025 by rpki-client