$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: Jh5JGp4h5X7QG0jRjJZvn6ZrijXwoGpNQ+U3oGgUkxk= Subject key identifier: 3A:F6:20:0A:C2:1A:21:7F:60:F5:A8:8F:72:58:1F:A1:68:71:31:04 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 385B7374FD85199F1A5A26BD2F1DA8109621F91A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04A1 Signing time: Sun 29 Jun 2025 19:01:21 +0000 Manifest this update: Sun 29 Jun 2025 18:56:21 +0000 Manifest next update: Thu 03 Jul 2025 02:57:21 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 51gAQalN+N7DenF28u901Vqlfk0xIv9jl3HckaO/u54=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 02:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:5b:73:74:fd:85:19:9f:1a:5a:26:bd:2f:1d:a8:10:96:21:f9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Jun 29 18:56:21 2025 GMT Not After : Jul 3 02:57:21 2025 GMT Subject: CN=3AF6200AC21A217F60F5A88F72581FA168713104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:22:13:a5:bd:a2:84:47:bb:27:cb:e0:ff:8c: 51:29:0c:38:76:35:46:80:ae:11:67:de:0e:00:a6: c6:f0:46:0e:f6:5a:d9:34:70:a7:ec:90:20:a5:5d: 4e:cd:b1:43:31:1c:6b:02:c9:14:a1:49:43:35:f4: 7e:c7:58:7c:51:dd:3c:54:5a:10:e4:b5:57:39:b6: f9:86:05:8f:77:07:65:f0:d0:e8:e3:0a:58:c5:92: fa:57:1c:00:9d:e7:1b:23:a8:97:62:98:19:cd:f0: f4:e7:9d:c1:23:13:c2:e7:c9:65:3a:f7:89:c1:f5: c8:01:7b:a9:11:f6:48:47:55:fe:f1:6b:3a:cb:f2: 56:46:f0:03:3b:a9:4d:02:98:ce:64:38:7d:11:9c: 4c:96:c0:78:ca:ab:26:63:e7:35:0d:26:46:15:71: ac:43:c3:bf:3a:75:d7:34:42:ea:58:1b:08:11:82: da:e4:02:e5:d4:e3:c4:21:73:a6:17:99:1e:9b:01: 41:b9:48:4b:4a:08:73:80:38:78:38:34:0e:62:5c: d7:13:66:53:e5:5a:e0:c6:6a:ec:68:ac:35:37:ac: 78:20:72:bf:67:d9:41:1f:99:01:0b:d2:d7:8f:cd: de:59:3a:60:0a:12:05:b0:a2:ee:e8:aa:ec:65:61: 2e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F6:20:0A:C2:1A:21:7F:60:F5:A8:8F:72:58:1F:A1:68:71:31:04 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:74:35:e1:c2:a3:73:df:32:3f:22:08:65:e7:de:88:86:39: 38:07:be:01:2a:09:4a:9f:76:17:5d:1e:a2:85:2a:b3:64:db: be:6a:cd:ff:72:6a:dc:d8:7e:db:34:f6:f6:f4:ce:87:c7:1d: 88:f3:aa:12:ad:d1:29:06:cc:ac:27:ef:d5:b9:58:7d:01:7a: f1:bf:f1:f4:e1:4c:5e:55:88:f2:e3:0b:6e:58:23:9b:d3:bd: 0d:a3:f4:21:27:2f:9e:21:77:1f:99:e5:c4:51:59:7d:be:9f: 13:58:e1:f8:60:f0:8c:5a:44:16:18:80:60:fe:56:b5:8d:81: b4:f2:ec:2e:06:c1:d7:59:da:8c:36:18:72:17:c6:b7:7a:a5: 4b:25:31:20:86:fc:3d:c4:01:98:58:70:c2:c3:82:69:16:a1: b6:35:e0:8c:c8:0a:37:7b:ea:48:fe:d3:1e:20:4c:b7:b0:eb: 16:8f:97:a8:c9:b7:51:ec:cc:d2:d2:4d:30:01:17:4a:2d:27: 16:9e:e8:7a:5b:ba:9d:07:e5:94:39:4a:8b:af:3d:03:ab:ce: e3:ab:5b:59:45:92:a2:1b:64:f0:20:ef:e8:93:b0:90:89:ed: 43:38:89:e7:bf:4c:7a:bc:24:58:af:4b:18:91:14:1f:7a:1c: 3b:dc:0c:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOFtzdP2FGZ8aWia9Lx2oEJYh+RowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA2MjkxODU2MjFaFw0yNTA3MDMwMjU3MjFaMDMxMTAvBgNV BAMTKDNBRjYyMDBBQzIxQTIxN0Y2MEY1QTg4RjcyNTgxRkExNjg3MTMxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIhOlvaKER7sny+D/jFEpDDh2 NUaArhFn3g4ApsbwRg72Wtk0cKfskCClXU7NsUMxHGsCyRShSUM19H7HWHxR3TxU WhDktVc5tvmGBY93B2Xw0OjjCljFkvpXHACd5xsjqJdimBnN8PTnncEjE8LnyWU6 94nB9cgBe6kR9khHVf7xazrL8lZG8AM7qU0CmM5kOH0RnEyWwHjKqyZj5zUNJkYV caxDw786ddc0QupYGwgRgtrkAuXU48Qhc6YXmR6bAUG5SEtKCHOAOHg4NA5iXNcT ZlPlWuDGauxorDU3rHggcr9n2UEfmQEL0tePzd5ZOmAKEgWwou7oquxlYS4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvYgCsIaIX9g9aiPclgfoWhxMQQwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEB0NeHCo3PfMj8iCGXn3oiGOTgHvgEqCUqf dhddHqKFKrNk275qzf9yatzYfts09vb0zofHHYjzqhKt0SkGzKwn79W5WH0BevG/ 8fThTF5ViPLjC25YI5vTvQ2j9CEnL54hdx+Z5cRRWX2+nxNY4fhg8IxaRBYYgGD+ VrWNgbTy7C4GwddZ2ow2GHIXxrd6pUslMSCG/D3EAZhYcMLDgmkWobY14IzICjd7 6kj+0x4gTLew6xaPl6jJt1HszNLSTTABF0otJxae6Hpbup0H5ZQ5SouvPQOrzuOr W1lFkqIbZPAg7+iTsJCJ7UM4iee/THq8JFivSxiRFB96HDvcDIM= -----END CERTIFICATE-----Generated at Tue Jul 1 20:18:02 2025 by rpki-client