$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: igTE9jLhFn14a8ngwdXit49BXoSYuC89Jg1n8UdsrRI= Subject key identifier: 58:17:AD:B2:CF:97:FA:BE:28:0A:36:BB:1A:4D:21:D2:74:62:ED:E8 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 4425E3C0D6E043C93CB475860C0E21D4E7F81DE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 026E Signing time: Mon 30 Jun 2025 05:02:17 +0000 Manifest this update: Mon 30 Jun 2025 04:57:17 +0000 Manifest next update: Thu 03 Jul 2025 14:36:17 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: BesJ63Q+sb5VHMuwqQthX+SIUHUnWEJKlEDOUKKS0cQ=) 2: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: duUY2vblLuCVb9NYVOXQ73Q4z7Ly22cZAH5UV1P/g0o=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: XPrMiakQWz1+58F96cQJIMqzXWnQGcsXbwb1TD5FjwI=) 4: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: koEma0QVeIm5mNEO3yMe/JOPX0dWv/tva+FLPAgHWmc=) 5: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: dqkRuGkCIt9QOUsyi8rTp/z3U+ZUrvC0oRajtG04QBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 14:36:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:25:e3:c0:d6:e0:43:c9:3c:b4:75:86:0c:0e:21:d4:e7:f8:1d:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Jun 30 04:57:17 2025 GMT Not After : Jul 3 14:36:17 2025 GMT Subject: CN=5817ADB2CF97FABE280A36BB1A4D21D27462EDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:a5:da:d0:1e:63:d1:dd:09:16:9c:1b:64:c3: b0:da:27:4b:46:e1:73:5f:51:16:0c:af:9c:81:4c: e0:3d:e8:ca:9d:8d:58:96:2a:a6:84:e7:cd:83:5a: 24:57:9c:95:7c:e3:e2:54:0a:c9:de:35:c4:6b:47: 2e:c0:ea:08:4e:28:e2:ae:12:48:54:d4:be:eb:b8: 9e:d2:8d:cb:67:94:ee:14:8c:bd:f1:85:c1:b0:8f: 9e:be:5a:b7:6f:55:19:04:62:f8:0e:c6:94:c2:88: 1e:9f:ed:1b:7f:c0:4a:36:0c:75:99:f5:96:19:c1: 4e:70:27:c4:72:b0:87:90:61:d5:4f:b7:d6:54:71: 4e:ee:17:41:06:5f:90:bc:f0:eb:22:9d:0c:60:fe: 7f:12:e2:14:2a:07:7f:93:50:c7:a0:c5:9f:06:ec: c0:cb:76:6e:69:8e:ba:66:e2:55:1e:8e:95:e1:98: 8a:94:be:47:0a:ea:9c:68:76:26:58:86:3e:f0:0d: 93:bc:2c:c0:36:24:71:f2:5b:28:37:db:c0:c6:d2: 63:27:8e:0b:bd:c6:ee:5c:af:6a:fc:15:cb:f0:de: fd:64:0b:76:ea:af:17:d7:68:70:b3:e8:61:4f:d4: 84:3b:c3:55:93:43:2c:cd:95:32:64:db:fc:0a:96: 99:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:17:AD:B2:CF:97:FA:BE:28:0A:36:BB:1A:4D:21:D2:74:62:ED:E8 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:ed:07:1e:ab:f8:94:47:c3:26:59:39:14:4d:a6:f9:48:d5: de:b4:9e:34:13:9b:1b:d6:12:a6:0e:40:fb:f6:13:f6:c0:37: 07:6c:58:7a:5d:f6:7f:dc:15:dc:c6:99:06:d6:7f:59:e4:d9: de:3e:8d:2b:43:bc:c1:59:c3:04:91:c8:be:01:85:b8:dd:db: 88:2b:f8:28:d7:1d:f0:76:db:c3:25:03:2d:a5:a8:42:56:76: ae:68:a6:9d:14:2a:ec:dc:f0:f4:e1:74:aa:13:e3:26:0d:b0: 52:c9:28:56:75:83:eb:c6:8e:fe:5b:70:21:d8:e3:cb:c5:ba: 45:fb:86:ff:c2:45:f7:76:e7:8b:52:5d:72:1e:eb:1a:08:db: f3:2d:f3:db:30:04:77:2f:4b:bd:ba:bb:f9:7e:29:62:e6:b5: 47:70:26:7e:f8:fe:b3:89:cc:a3:ac:03:0d:17:0d:1e:cb:0b: 63:0f:8c:fc:97:38:53:df:a8:5b:63:38:c4:05:47:8e:79:26: 21:7b:2e:2c:1c:b0:16:f7:64:27:30:2b:12:00:da:ee:51:56: 1b:7e:e4:80:0b:b9:5f:dc:d0:f0:f4:3a:38:35:0d:cf:42:6a: f6:e3:52:7a:65:2c:fd:40:f9:e8:99:9a:33:76:d5:71:35:00: 2e:a5:5b:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCXjwNbgQ8k8tHWGDA4h1Of4HeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNTA2MzAwNDU3MTdaFw0yNTA3MDMxNDM2MTdaMDMxMTAvBgNV BAMTKDU4MTdBREIyQ0Y5N0ZBQkUyODBBMzZCQjFBNEQyMUQyNzQ2MkVERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcpdrQHmPR3QkWnBtkw7DaJ0tG 4XNfURYMr5yBTOA96MqdjViWKqaE582DWiRXnJV84+JUCsneNcRrRy7A6ghOKOKu EkhU1L7ruJ7SjctnlO4UjL3xhcGwj56+WrdvVRkEYvgOxpTCiB6f7Rt/wEo2DHWZ 9ZYZwU5wJ8RysIeQYdVPt9ZUcU7uF0EGX5C88OsinQxg/n8S4hQqB3+TUMegxZ8G 7MDLdm5pjrpm4lUejpXhmIqUvkcK6pxodiZYhj7wDZO8LMA2JHHyWyg328DG0mMn jgu9xu5cr2r8Fcvw3v1kC3bqrxfXaHCz6GFP1IQ7w1WTQyzNlTJk2/wKlplRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWBetss+X+r4oCja7Gk0h0nRi7egwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7tBx6r+JRHwyZZORRNpvlI1d60njQTmxvW EqYOQPv2E/bANwdsWHpd9n/cFdzGmQbWf1nk2d4+jStDvMFZwwSRyL4Bhbjd24gr +CjXHfB228MlAy2lqEJWdq5opp0UKuzc8PThdKoT4yYNsFLJKFZ1g+vGjv5bcCHY 48vFukX7hv/CRfd254tSXXIe6xoI2/Mt89swBHcvS726u/l+KWLmtUdwJn74/rOJ zKOsAw0XDR7LC2MPjPyXOFPfqFtjOMQFR455JiF7LiwcsBb3ZCcwKxIA2u5RVht+ 5IALuV/c0PD0Ojg1Dc9CavbjUnplLP1A+eiZmjN21XE1AC6lW48= -----END CERTIFICATE-----Generated at Wed Jul 2 15:04:17 2025 by rpki-client