$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: kFumv+5c+l0rNQdNMca4Sca37fRdNSwUwG2ecGvSXrc= Subject key identifier: C8:B3:1F:E2:B3:4D:50:41:68:DB:00:29:B8:10:81:48:72:84:9B:AC Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 162F8DC1FFC79B008645F36DD8C6C5068398B50E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: AF Signing time: Tue 04 Nov 2025 11:11:23 +0000 Manifest this update: Tue 04 Nov 2025 11:06:23 +0000 Manifest next update: Fri 07 Nov 2025 13:20:23 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: js3pha3EHHeg5m2v2moh8BYJJUZVRcZ+bV4mxOYeUdc=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 10:49:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:2f:8d:c1:ff:c7:9b:00:86:45:f3:6d:d8:c6:c5:06:83:98:b5:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Nov 4 11:06:23 2025 GMT Not After : Nov 7 13:20:23 2025 GMT Subject: CN=C8B31FE2B34D504168DB0029B810814872849BAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ea:38:09:a3:ee:f9:b3:fe:06:51:26:cb:77: 48:a0:71:62:d2:9a:ac:46:36:b2:c6:9c:48:c8:6c: b4:0a:28:97:99:1a:10:85:f2:0f:32:fc:ad:92:6c: 49:6d:52:85:6e:39:3f:36:08:9a:43:e8:c8:bf:a6: 61:7b:73:14:e7:0c:9d:ae:6f:9e:11:fa:d3:4f:1d: 47:21:f4:05:cc:4d:c7:a3:86:53:af:89:8b:8f:e7: fe:ee:a6:4c:c9:f7:b5:54:0a:41:6f:43:15:2c:de: 5f:70:87:14:c8:30:0d:92:5c:ca:52:1d:8d:34:45: af:a6:cd:ee:41:5c:5d:bf:3f:a1:8d:43:df:c0:e2: cd:60:51:10:39:65:e7:dd:9c:f8:a9:e2:03:98:f4: ca:6d:3f:63:0f:48:ae:62:79:09:71:d0:da:a4:22: f1:6f:a3:af:c3:50:2a:c7:70:8a:55:8b:67:e8:d0: 47:2d:bd:1c:a2:0e:27:f0:c3:c1:08:1e:d0:81:6d: 41:70:cd:95:41:7f:c1:19:a0:1f:fa:ff:6f:0a:e3: 48:70:09:db:46:a5:e5:ad:7e:e1:8c:0c:08:c5:09: ce:03:4e:05:35:62:41:93:20:2c:39:5e:c2:0b:2d: 4c:9b:14:af:02:d4:0f:93:21:9d:dd:4f:9a:af:6d: 32:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:B3:1F:E2:B3:4D:50:41:68:DB:00:29:B8:10:81:48:72:84:9B:AC X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f8:db:40:9e:03:04:71:4b:5d:06:b4:f5:2d:6f:f9:18:36: fb:1b:47:20:08:5d:fa:a5:78:5c:7d:3d:a2:27:02:14:06:e4: 51:f5:cc:f3:c2:a1:c8:b8:29:58:2b:c0:1c:85:16:c4:aa:fd: ab:c8:1f:16:94:ca:30:38:d1:1f:c4:2d:d6:75:d8:d7:84:23: ec:d4:6c:48:2d:78:39:07:b2:ff:62:11:7d:90:ea:5c:1c:16: 55:01:85:54:bd:07:a5:93:64:25:3b:5f:b7:e6:7d:37:ca:01: 4a:9e:2f:67:43:19:c9:4b:01:77:99:fd:e4:f9:95:d8:50:35: 98:b9:27:09:38:f3:f2:c7:25:36:a3:ba:c6:4d:41:07:88:d8: bd:0e:30:6c:cd:1c:b1:42:e6:a1:71:c0:5b:2c:09:64:32:c7: f5:26:9c:f4:09:cf:9c:24:e3:a2:09:f1:75:1d:b1:a6:64:dc: bf:50:4c:e0:0d:a3:f9:49:d6:bd:98:21:2a:80:57:d2:64:bb: 57:4f:00:1a:51:f3:87:0b:e0:65:5b:b5:49:86:55:28:6b:46: e1:fb:3c:d8:b2:48:3f:f8:f8:10:59:a8:e3:8f:33:f5:10:ed: ba:d1:b7:85:02:cb:0a:98:5b:2a:f4:b5:76:f2:5f:a0:6c:93: 4d:36:83:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFi+Nwf/HmwCGRfNt2MbFBoOYtQ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTExMDQxMTA2MjNaFw0yNTExMDcxMzIwMjNaMDMxMTAvBgNV BAMTKEM4QjMxRkUyQjM0RDUwNDE2OERCMDAyOUI4MTA4MTQ4NzI4NDlCQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi6jgJo+75s/4GUSbLd0igcWLS mqxGNrLGnEjIbLQKKJeZGhCF8g8y/K2SbEltUoVuOT82CJpD6Mi/pmF7cxTnDJ2u b54R+tNPHUch9AXMTcejhlOviYuP5/7upkzJ97VUCkFvQxUs3l9whxTIMA2SXMpS HY00Ra+mze5BXF2/P6GNQ9/A4s1gURA5ZefdnPip4gOY9MptP2MPSK5ieQlx0Nqk IvFvo6/DUCrHcIpVi2fo0EctvRyiDifww8EIHtCBbUFwzZVBf8EZoB/6/28K40hw CdtGpeWtfuGMDAjFCc4DTgU1YkGTICw5XsILLUybFK8C1A+TIZ3dT5qvbTJNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyLMf4rNNUEFo2wApuBCBSHKEm6wwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX420CeAwRxS10GtPUtb/kYNvsbRyAIXfql eFx9PaInAhQG5FH1zPPCoci4KVgrwByFFsSq/avIHxaUyjA40R/ELdZ12NeEI+zU bEgteDkHsv9iEX2Q6lwcFlUBhVS9B6WTZCU7X7fmfTfKAUqeL2dDGclLAXeZ/eT5 ldhQNZi5Jwk48/LHJTajusZNQQeI2L0OMGzNHLFC5qFxwFssCWQyx/UmnPQJz5wk 46IJ8XUdsaZk3L9QTOANo/lJ1r2YISqAV9Jku1dPABpR84cL4GVbtUmGVShrRuH7 PNiySD/4+BBZqOOPM/UQ7brRt4UCywqYWyr0tXbyX6Bsk002g6k= -----END CERTIFICATE-----Generated at Tue Nov 4 21:21:04 2025 by rpki-client