$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: LirOIWFj5JmLILzEY0LukvZhxKae8pUbDiIs2vwDXGY= Subject key identifier: C2:09:90:15:90:D7:0F:A6:77:B1:62:82:A8:0B:EA:D9:40:4C:70:3E Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 6E99B7AAD24E2E3A8C4FE269803D0CBFB305282B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 04D3 Signing time: Sun 19 Oct 2025 21:51:13 +0000 Manifest this update: Sun 19 Oct 2025 21:46:13 +0000 Manifest next update: Thu 23 Oct 2025 05:01:13 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: zl2vinx7KTk71+JkYJzwIN8rT2wuc45SC43Dyumz+r0=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 05:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:99:b7:aa:d2:4e:2e:3a:8c:4f:e2:69:80:3d:0c:bf:b3:05:28:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Oct 19 21:46:13 2025 GMT Not After : Oct 23 05:01:13 2025 GMT Subject: CN=C209901590D70FA677B16282A80BEAD9404C703E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:f1:82:99:d0:58:1c:a9:17:5e:0f:5b:ff:50: 76:67:ed:01:0e:66:78:df:01:ce:06:97:e2:92:1f: 1f:1f:48:a3:04:bf:01:7a:0b:e0:ff:b6:68:f4:91: b2:74:88:fc:d1:bf:68:6e:7e:da:83:ec:14:4b:ca: 7c:31:2f:e9:74:22:2a:9e:ed:8e:63:7c:14:30:51: 9f:e4:68:ef:42:08:93:62:25:3d:f4:8b:82:ab:73: 29:8c:07:cf:04:96:13:d1:c8:01:a4:da:32:a6:db: 4f:2e:28:fe:6d:22:f0:61:60:bc:d0:59:44:10:d4: 18:6d:4a:a3:cc:b8:e5:76:c4:b9:c8:af:f7:25:7b: ca:85:bc:3d:f8:f2:a2:96:9c:ef:5f:5d:ce:b9:99: b6:72:cc:57:b6:23:0f:4d:c2:e6:31:93:3a:e1:18: fd:b4:15:5f:ed:f9:e2:b3:24:cf:08:18:6d:8e:57: 3f:15:0f:03:b5:c9:8b:d0:c1:19:2f:1e:33:67:f4: 24:2d:4c:7a:7f:ca:c4:a9:dc:49:34:85:3a:ae:bc: 47:25:6f:6a:16:5b:c3:7c:21:38:31:9f:54:7e:2f: 9e:b6:b0:0f:6a:2b:b1:f6:5b:19:a7:0b:b6:eb:4a: 5c:bf:9f:35:c9:4a:c2:05:47:61:a2:11:2a:02:e8: 71:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:09:90:15:90:D7:0F:A6:77:B1:62:82:A8:0B:EA:D9:40:4C:70:3E X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e2:f7:13:63:cd:63:fc:57:c8:c8:0b:fb:ce:62:76:26:03:07: d2:53:83:8a:f8:57:c0:cb:f5:9a:6e:05:b3:da:e8:99:b1:af: 9e:65:43:58:2d:95:16:47:5d:0b:9c:fb:33:64:f9:3a:bb:87: f5:0c:56:8b:9b:f9:9d:08:50:89:da:f3:f0:f5:52:e9:ab:7f: a6:2a:15:23:cc:bb:32:f2:76:36:57:89:08:77:de:48:d0:01: 7b:3b:96:2d:91:9e:8e:9b:43:4a:57:de:6c:d6:87:4a:dd:2d: 9c:fb:d9:02:6f:64:d8:9e:c9:82:f2:07:ad:40:18:3f:2e:95: 17:ca:e3:6b:6b:f0:0c:34:24:d9:e4:54:1b:e0:f9:c8:a1:40: c5:29:7e:f7:8a:91:04:fb:99:1c:68:61:4b:f0:60:c4:5b:6f: 5e:cb:8d:41:fa:62:f7:40:e5:3e:2a:9a:04:81:2e:0b:05:92: 11:46:e7:2a:5c:1b:64:fc:1d:05:25:7c:dd:23:55:43:ae:22: aa:ea:cf:f1:4d:d3:b1:d7:e1:ca:48:26:a4:03:9e:52:b5:8d: 1c:ec:59:c9:af:05:13:8d:15:75:cb:23:1d:aa:4a:42:2e:ff: cd:2f:41:04:49:60:30:ee:52:98:a2:68:51:aa:c5:ca:4f:17: f3:e5:cb:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpm3qtJOLjqMT+JpgD0Mv7MFKCswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTEwMTkyMTQ2MTNaFw0yNTEwMjMwNTAxMTNaMDMxMTAvBgNV BAMTKEMyMDk5MDE1OTBENzBGQTY3N0IxNjI4MkE4MEJFQUQ5NDA0QzcwM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI8YKZ0FgcqRdeD1v/UHZn7QEO ZnjfAc4Gl+KSHx8fSKMEvwF6C+D/tmj0kbJ0iPzRv2huftqD7BRLynwxL+l0Iiqe 7Y5jfBQwUZ/kaO9CCJNiJT30i4KrcymMB88ElhPRyAGk2jKm208uKP5tIvBhYLzQ WUQQ1BhtSqPMuOV2xLnIr/cle8qFvD348qKWnO9fXc65mbZyzFe2Iw9NwuYxkzrh GP20FV/t+eKzJM8IGG2OVz8VDwO1yYvQwRkvHjNn9CQtTHp/ysSp3Ek0hTquvEcl b2oWW8N8ITgxn1R+L562sA9qK7H2WxmnC7brSly/nzXJSsIFR2GiESoC6HHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgmQFZDXD6Z3sWKCqAvq2UBMcD4wHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOL3E2PNY/xXyMgL+85idiYDB9JTg4r4V8DL 9ZpuBbPa6Jmxr55lQ1gtlRZHXQuc+zNk+Tq7h/UMVoub+Z0IUIna8/D1Uumrf6Yq FSPMuzLydjZXiQh33kjQAXs7li2Rno6bQ0pX3mzWh0rdLZz72QJvZNieyYLyB61A GD8ulRfK42tr8Aw0JNnkVBvg+cihQMUpfveKkQT7mRxoYUvwYMRbb17LjUH6YvdA 5T4qmgSBLgsFkhFG5ypcG2T8HQUlfN0jVUOuIqrqz/FN07HX4cpIJqQDnlK1jRzs WcmvBRONFXXLIx2qSkIu/80vQQRJYDDuUpiiaFGqxcpPF/Ply6w= -----END CERTIFICATE-----Generated at Mon Oct 20 13:09:04 2025 by rpki-client