$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: GtoF/dJ5SMVNYcIewRiyvkyFE7ylsdIQ0DMReKyfJZo= Subject key identifier: 27:FD:33:C8:D2:36:C5:B9:48:E1:FB:49:E6:48:1C:FC:8E:94:20:FB Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 339132C5CCAA266A2640B0415D2BC23CB51A7924 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 0257 Signing time: Sun 11 May 2025 05:22:18 +0000 Manifest this update: Sun 11 May 2025 05:17:18 +0000 Manifest next update: Wed 14 May 2025 08:41:18 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 2: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 3: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 4: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) 5: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: SMsVC9T9Zik9b4wQiWbmAaop2ZPU3vhffzzGTgSilwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 08:41:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:91:32:c5:cc:aa:26:6a:26:40:b0:41:5d:2b:c2:3c:b5:1a:79:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: May 11 05:17:18 2025 GMT Not After : May 14 08:41:18 2025 GMT Subject: CN=27FD33C8D236C5B948E1FB49E6481CFC8E9420FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:f8:ab:3e:f8:76:5a:aa:65:c1:50:da:39:e6: e0:a4:82:cf:4e:c6:61:56:15:56:35:61:df:8d:b3: 74:bb:e2:34:80:0c:75:27:b5:88:be:9a:4c:72:0b: 5f:4f:71:11:71:37:9e:cb:b3:42:42:3c:91:91:16: 08:d9:bb:85:89:62:ea:b4:6b:b6:14:04:c3:15:5d: e0:96:10:ff:26:a5:75:b5:91:21:b5:3c:1e:e4:23: 74:11:e5:c7:9b:d8:ca:36:8b:41:ac:e8:fb:cd:12: 27:92:f8:82:be:8d:4a:e2:18:2b:e4:46:a3:7b:c7: f6:08:af:e1:c7:6e:9d:e1:60:7e:d0:cb:7f:15:bf: bc:a1:9e:ab:1b:1d:3a:df:6e:78:06:04:9d:51:dc: 4b:2b:60:ab:6c:d1:5c:d1:83:42:68:6a:49:b2:10: 64:aa:eb:83:cc:ad:19:29:67:ac:9b:d8:70:f1:54: 2b:3f:18:70:24:33:09:f5:19:0d:14:9a:63:d2:17: 82:04:4d:ec:b9:07:ee:9c:67:fb:37:b4:5b:6b:9d: f1:e8:5c:59:41:49:28:8b:20:ad:c9:92:21:9f:71: 94:c8:6a:a7:0b:fb:ff:dc:af:ca:4b:a1:48:7e:11: ab:41:03:24:9d:33:67:18:2e:76:a7:56:64:bd:23: 68:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:FD:33:C8:D2:36:C5:B9:48:E1:FB:49:E6:48:1C:FC:8E:94:20:FB X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:1e:05:b0:07:be:f0:f5:dd:55:fd:18:7b:65:36:77:1a:76: ef:74:aa:b8:e0:47:57:51:41:c3:c4:3f:02:49:39:90:fa:f2: 3d:b7:8b:be:be:16:16:dc:38:35:e9:e2:70:5e:d4:0e:75:72: 23:94:a5:eb:85:9b:a7:17:ba:40:ff:4b:f8:6c:14:6d:24:02: 06:a2:e3:10:c5:58:09:c9:3f:3f:63:a3:8c:46:1c:5f:3b:0b: f0:8a:92:85:95:45:e9:5a:b0:99:59:13:06:43:b2:7b:a5:de: 38:1b:23:3f:86:d0:5f:84:52:25:bf:10:8d:e5:8a:8f:94:8d: db:a2:3e:d3:dd:b0:74:10:fb:89:45:92:be:92:d5:da:b0:86: b5:fb:bc:a5:f7:8a:7d:ba:5f:f5:e0:b3:0b:ba:e3:7c:a9:fc: f5:31:47:71:c6:4d:e2:6e:dd:da:d0:3b:4a:f5:3f:76:19:35: 12:65:f9:59:24:c0:7e:66:a6:68:43:69:90:37:01:23:b4:94: aa:6a:66:ac:96:13:b5:d2:11:ae:7a:80:83:5e:30:01:5c:d2: 99:a4:7b:80:66:28:14:31:f8:e1:d5:29:64:25:60:f8:bc:d2: df:9b:82:88:f7:4d:b9:4b:63:a8:00:fd:ac:62:8c:77:3c:b1: 4e:c0:4e:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM5EyxcyqJmomQLBBXSvCPLUaeSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA1MTEwNTE3MThaFw0yNTA1MTQwODQxMThaMDMxMTAvBgNV BAMTKDI3RkQzM0M4RDIzNkM1Qjk0OEUxRkI0OUU2NDgxQ0ZDOEU5NDIwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM+Ks++HZaqmXBUNo55uCkgs9O xmFWFVY1Yd+Ns3S74jSADHUntYi+mkxyC19PcRFxN57Ls0JCPJGRFgjZu4WJYuq0 a7YUBMMVXeCWEP8mpXW1kSG1PB7kI3QR5ceb2Mo2i0Gs6PvNEieS+IK+jUriGCvk RqN7x/YIr+HHbp3hYH7Qy38Vv7yhnqsbHTrfbngGBJ1R3EsrYKts0VzRg0Joakmy EGSq64PMrRkpZ6yb2HDxVCs/GHAkMwn1GQ0UmmPSF4IETey5B+6cZ/s3tFtrnfHo XFlBSSiLIK3JkiGfcZTIaqcL+//cr8pLoUh+EatBAySdM2cYLnanVmS9I2gXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ/0zyNI2xblI4ftJ5kgc/I6UIPswHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0eBbAHvvD13VX9GHtlNncadu90qrjgR1dR QcPEPwJJOZD68j23i76+FhbcODXp4nBe1A51ciOUpeuFm6cXukD/S/hsFG0kAgai 4xDFWAnJPz9jo4xGHF87C/CKkoWVRelasJlZEwZDsnul3jgbIz+G0F+EUiW/EI3l io+UjduiPtPdsHQQ+4lFkr6S1dqwhrX7vKX3in26X/Xgswu643yp/PUxR3HGTeJu 3drQO0r1P3YZNRJl+VkkwH5mpmhDaZA3ASO0lKpqZqyWE7XSEa56gINeMAFc0pmk e4BmKBQx+OHVKWQlYPi80t+bgoj3TblLY6gA/axijHc8sU7ATu8= -----END CERTIFICATE-----Generated at Mon May 12 15:13:43 2025 by rpki-client