$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: rEPGWUJMV0RsdjUGHKCLy1w35g7QC3gojti1Pb2JW58= Subject key identifier: FB:4A:B0:FE:AC:B6:F5:41:E2:3C:AE:B2:0D:F3:D8:43:C5:E8:C1:24 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 67F831B2120A44FC6AF7ABBE5A722D17641EF109 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04B9 Signing time: Thu 21 Aug 2025 20:01:17 +0000 Manifest this update: Thu 21 Aug 2025 19:56:17 +0000 Manifest next update: Mon 25 Aug 2025 05:40:17 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: gHhsiVuXmVnWUW/Z+U63JW/gvz0uiMIG3LIaluB8948=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:40:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f8:31:b2:12:0a:44:fc:6a:f7:ab:be:5a:72:2d:17:64:1e:f1:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Aug 21 19:56:17 2025 GMT Not After : Aug 25 05:40:17 2025 GMT Subject: CN=FB4AB0FEACB6F541E23CAEB20DF3D843C5E8C124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a6:8f:a3:f9:8f:fb:28:87:36:cd:49:a9:a4: 5c:46:94:00:da:88:1f:6f:4a:35:9e:e9:5c:ed:b7: 38:df:f0:15:62:39:0d:40:81:0c:76:f1:5a:96:13: 17:b9:42:4c:fd:9f:ab:2f:dd:41:db:f1:cf:bc:fd: d5:55:1e:da:7e:2b:b4:78:4b:6f:ec:e6:ff:a6:3f: 49:7b:8f:5e:8e:c2:b1:3d:3d:d6:a5:53:88:80:70: 64:01:d2:5f:ee:e8:18:a8:86:62:18:5f:0a:c2:37: 6b:ed:be:06:b9:1f:38:1e:31:26:f2:ce:37:36:de: 98:72:cd:d7:2e:01:ce:b9:65:ce:1d:93:b1:5c:62: 0b:1a:d8:bf:16:55:20:4f:de:11:7d:e3:8a:e1:61: c7:ec:34:a4:71:7f:32:c6:ce:77:76:0a:b7:c2:d4: e5:7d:f4:99:96:f8:98:24:aa:56:3f:a4:a2:e6:0e: 61:67:67:5c:81:ba:62:f3:9e:1e:e6:ef:a4:86:bb: 89:56:57:5d:fe:6c:f0:a2:33:0c:89:f8:74:92:74: 4c:fe:8a:b7:24:7b:57:c1:0e:a5:31:d3:a3:75:4d: 06:d9:8e:50:a8:ca:71:2e:d8:58:45:e7:7d:01:92: fa:b5:51:bc:2b:a6:a0:fc:dd:c0:de:dd:b3:98:48: 3e:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:4A:B0:FE:AC:B6:F5:41:E2:3C:AE:B2:0D:F3:D8:43:C5:E8:C1:24 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:f6:24:2c:63:67:9b:2f:ad:15:fb:cc:73:58:32:25:ee:f7: d6:b1:90:08:38:87:97:fa:79:0f:2b:f8:71:39:62:61:ce:a0: 85:08:dc:09:4f:76:5a:9e:c0:6b:51:9f:ae:dc:43:aa:0b:65: 29:fc:ee:64:da:3c:ce:cc:e7:de:51:40:fc:fc:00:8e:56:5b: 2d:cc:01:1e:2a:43:51:52:da:0c:30:42:a3:79:60:24:8e:12: 68:3d:0c:ae:cf:9e:ff:3c:89:01:1c:9e:56:29:0c:9a:8a:81: 1a:0e:23:c0:3f:99:91:22:e7:61:fd:25:d8:6e:77:45:70:5d: c6:c7:e6:78:d9:4e:c5:8c:d3:8d:a8:77:86:14:43:1e:41:10: 6b:59:5e:be:00:06:f2:d8:61:5f:41:77:b6:c5:1b:9e:40:81: 2a:10:59:d9:13:49:36:6d:d7:39:c5:19:71:a4:74:8a:17:f2: 56:80:c7:2e:dd:a5:05:9d:41:49:7a:26:0e:92:00:19:8e:0b: 8d:b2:6b:08:08:fc:41:c4:7f:14:d4:cf:05:89:f5:ce:85:15: 87:e4:0c:25:43:06:5a:19:98:f0:8b:ff:43:05:18:b4:ff:a0: 3a:20:d1:c5:f8:e5:92:a4:eb:fc:a8:db:5a:3d:44:1d:49:e6: 5d:59:5a:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/gxshIKRPxq96u+WnItF2Qe8QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA4MjExOTU2MTdaFw0yNTA4MjUwNTQwMTdaMDMxMTAvBgNV BAMTKEZCNEFCMEZFQUNCNkY1NDFFMjNDQUVCMjBERjNEODQzQzVFOEMxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgpo+j+Y/7KIc2zUmppFxGlADa iB9vSjWe6Vzttzjf8BViOQ1AgQx28VqWExe5Qkz9n6sv3UHb8c+8/dVVHtp+K7R4 S2/s5v+mP0l7j16OwrE9PdalU4iAcGQB0l/u6BiohmIYXwrCN2vtvga5HzgeMSby zjc23phyzdcuAc65Zc4dk7FcYgsa2L8WVSBP3hF944rhYcfsNKRxfzLGznd2CrfC 1OV99JmW+JgkqlY/pKLmDmFnZ1yBumLznh7m76SGu4lWV13+bPCiMwyJ+HSSdEz+ ircke1fBDqUx06N1TQbZjlCoynEu2FhF530Bkvq1UbwrpqD83cDe3bOYSD5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0qw/qy29UHiPK6yDfPYQ8XowSQwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGr2JCxjZ5svrRX7zHNYMiXu99axkAg4h5f6 eQ8r+HE5YmHOoIUI3AlPdlqewGtRn67cQ6oLZSn87mTaPM7M595RQPz8AI5WWy3M AR4qQ1FS2gwwQqN5YCSOEmg9DK7Pnv88iQEcnlYpDJqKgRoOI8A/mZEi52H9Jdhu d0VwXcbH5njZTsWM042od4YUQx5BEGtZXr4ABvLYYV9Bd7bFG55AgSoQWdkTSTZt 1znFGXGkdIoX8laAxy7dpQWdQUl6Jg6SABmOC42yawgI/EHEfxTUzwWJ9c6FFYfk DCVDBloZmPCL/0MFGLT/oDog0cX45ZKk6/yo21o9RB1J5l1ZWko= -----END CERTIFICATE-----Generated at Sat Aug 23 14:21:45 2025 by rpki-client