$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: fKpJtnh+8EMU++UdycDHc7r8qd+tDzeEZR/gWQ8tzhI= Subject key identifier: AE:7E:F8:12:D5:9D:24:C8:EB:8B:CA:BD:F5:5A:BA:58:A7:D2:40:54 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 4C13D9997A0F7BC7B992D626D84F99735334B4C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 048B Signing time: Sat 10 May 2025 04:21:11 +0000 Manifest this update: Sat 10 May 2025 04:16:11 +0000 Manifest next update: Tue 13 May 2025 15:06:11 +0000 Files and hashes: 1: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=) 2: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 8rxkjxbslqzN2Mi4NkfMxQ9Wdci6xASnOe+tSBOahOA=) 3: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: 4T77KaoUvaRPYPMqBNQGRP61mMChsc9aq4bjDBgOYQk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:13:d9:99:7a:0f:7b:c7:b9:92:d6:26:d8:4f:99:73:53:34:b4:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: May 10 04:16:11 2025 GMT Not After : May 13 15:06:11 2025 GMT Subject: CN=AE7EF812D59D24C8EB8BCABDF55ABA58A7D24054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1a:2b:84:c2:af:62:31:6e:be:da:c6:8c:44: f0:a6:ce:13:91:f4:86:00:6d:97:11:de:c2:99:83: 35:06:d5:25:7a:af:cc:ae:65:96:2a:b3:ab:84:69: ce:ed:08:81:a8:6a:a4:22:4b:9a:9b:16:8f:be:7d: c8:69:cf:d7:9a:47:88:b8:69:ad:a9:01:aa:9b:55: 2a:66:12:29:d7:2b:88:ef:73:9a:2d:a5:18:26:63: 14:44:b2:3c:97:bf:0c:b0:d6:f0:e2:ec:65:df:0e: 08:9d:0a:34:be:4b:73:00:20:0e:a5:6b:7d:ab:b1: 4c:ae:83:52:55:5f:21:85:b9:f6:fa:eb:96:2f:43: 46:c1:a3:08:86:52:08:38:a0:ee:01:2a:0f:15:d6: e2:24:50:73:f4:d4:0a:74:2c:74:00:fb:b9:6f:a0: ea:1f:f2:d2:86:46:e2:b2:7b:72:73:5c:76:32:75: 11:f6:75:47:bf:b3:b8:4c:66:88:46:3f:d6:8f:43: be:6f:c8:af:21:d4:8e:17:63:c6:d3:61:53:a3:fe: a8:41:13:03:d8:59:d9:7e:3f:c5:b7:56:14:65:67: 74:66:8e:98:a0:2a:43:01:9b:41:0c:f3:48:5a:41: 66:bc:ec:32:c9:cf:c3:f5:0a:29:31:52:14:70:91: 34:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:7E:F8:12:D5:9D:24:C8:EB:8B:CA:BD:F5:5A:BA:58:A7:D2:40:54 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:9f:cc:cf:ca:30:92:b9:dd:d0:0e:cf:b6:63:09:96:5b:5b: 01:c9:c3:31:a9:64:e9:6b:26:e4:b6:9c:84:a2:72:c9:ae:22: a3:6c:1e:43:92:08:86:e2:df:e5:9d:95:8f:e7:a1:4b:9c:a0: cc:8f:a4:a9:21:0f:49:41:b0:e5:f6:50:b9:71:28:13:c1:87: a4:e7:b4:14:0c:10:ee:be:48:f9:61:a5:10:2b:2b:be:4d:11: e5:63:34:d4:25:ac:7a:cf:96:6b:d9:7a:93:7c:a5:24:f6:54: 4f:da:f0:1d:f7:27:1c:c8:f9:c2:de:4a:1c:5a:9b:cb:2e:ca: 3c:9a:88:2e:9b:f7:93:90:10:8a:e1:c2:22:1c:4e:e5:7c:bd: 92:12:e2:57:38:78:21:d6:ae:4c:8e:24:70:8f:88:6a:90:f5: 7e:1e:52:28:dc:8f:0b:12:c8:47:60:b5:68:f4:da:d3:63:d8: 33:b1:76:64:8e:75:2f:85:5c:58:4c:e8:0b:f6:c8:e3:eb:ea: da:59:80:89:59:6f:d6:1f:0a:28:b8:91:36:20:77:7b:8d:75: 9f:6f:90:21:ac:49:3e:d2:22:50:1e:98:17:25:c3:8e:c1:4d: 43:49:dd:74:71:19:4d:ca:3a:9b:c3:ba:f0:54:78:69:5d:9e: 03:e5:20:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTBPZmXoPe8e5ktYm2E+Zc1M0tMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNTA1MTAwNDE2MTFaFw0yNTA1MTMxNTA2MTFaMDMxMTAvBgNV BAMTKEFFN0VGODEyRDU5RDI0QzhFQjhCQ0FCREY1NUFCQTU4QTdEMjQwNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3GiuEwq9iMW6+2saMRPCmzhOR 9IYAbZcR3sKZgzUG1SV6r8yuZZYqs6uEac7tCIGoaqQiS5qbFo++fchpz9eaR4i4 aa2pAaqbVSpmEinXK4jvc5otpRgmYxREsjyXvwyw1vDi7GXfDgidCjS+S3MAIA6l a32rsUyug1JVXyGFufb665YvQ0bBowiGUgg4oO4BKg8V1uIkUHP01Ap0LHQA+7lv oOof8tKGRuKye3JzXHYydRH2dUe/s7hMZohGP9aPQ75vyK8h1I4XY8bTYVOj/qhB EwPYWdl+P8W3VhRlZ3RmjpigKkMBm0EM80haQWa87DLJz8P1CikxUhRwkTQzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrn74EtWdJMjri8q99Vq6WKfSQFQwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALmfzM/KMJK53dAOz7ZjCZZbWwHJwzGpZOlr JuS2nISicsmuIqNsHkOSCIbi3+WdlY/noUucoMyPpKkhD0lBsOX2ULlxKBPBh6Tn tBQMEO6+SPlhpRArK75NEeVjNNQlrHrPlmvZepN8pST2VE/a8B33JxzI+cLeShxa m8suyjyaiC6b95OQEIrhwiIcTuV8vZIS4lc4eCHWrkyOJHCPiGqQ9X4eUijcjwsS yEdgtWj02tNj2DOxdmSOdS+FXFhM6Av2yOPr6tpZgIlZb9YfCii4kTYgd3uNdZ9v kCGsST7SIlAemBclw47BTUNJ3XRxGU3KOpvDuvBUeGldngPlIPA= -----END CERTIFICATE-----Generated at Sun May 11 09:13:38 2025 by rpki-client