$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: P0kg7R5izm6f2VI9bBw/1LYNkYWCHTVgQIWiEumcb90= Subject key identifier: A0:0D:49:13:81:B2:01:A9:03:A1:CE:5A:68:C4:7C:B1:92:21:2F:A3 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 012FBDA9D13186331C511A22D3EDA70C48FF4D78 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 023E Signing time: Sat 28 Jun 2025 16:20:56 +0000 Manifest this update: Sat 28 Jun 2025 16:15:56 +0000 Manifest next update: Tue 01 Jul 2025 16:59:56 +0000 Files and hashes: 1: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: M0tR3PeMzCRtOK/Eubf18xLqQJGyaFY17/Kg/QR6iY4=) 2: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: Ffk2jetMOvzsWNB1DX1C1YGIG9ayBWUstNPnwpCzNnk=) 3: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: XAGjPx6klqHG9mK3mt7fOEzz1Ws0zqiZwmdXOKftmPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:2f:bd:a9:d1:31:86:33:1c:51:1a:22:d3:ed:a7:0c:48:ff:4d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Jun 28 16:15:56 2025 GMT Not After : Jul 1 16:59:56 2025 GMT Subject: CN=A00D491381B201A903A1CE5A68C47CB192212FA3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:8e:f5:2f:8d:16:24:50:2e:89:02:f4:63:42: 93:66:a4:e4:f4:3d:ca:55:dc:9c:7d:92:77:24:ce: 8b:48:61:8a:d8:25:74:ff:11:95:d1:27:eb:f0:d7: d4:35:b7:de:4e:93:f7:b1:a5:a7:f1:6b:5a:43:9a: bc:31:cb:f4:45:d8:68:3c:2e:97:82:62:93:ae:55: 50:37:8e:2b:1b:3f:f6:8d:75:5b:a4:d9:59:5b:b2: 4c:4e:60:dc:9c:40:c4:16:9b:1c:2b:ea:ed:46:c6: 3c:5b:75:6d:13:20:bb:ff:6a:df:ab:85:0e:9b:25: 6d:36:18:66:cc:1e:e0:4e:bd:36:66:9d:3a:4d:e5: d9:5e:eb:ba:9c:da:af:3c:9f:de:6f:e9:97:ae:c7: 75:82:8f:d6:cd:0c:ee:66:15:7e:01:c9:d6:36:b6: 8e:1f:70:87:a7:e7:2a:bc:0d:9e:67:3c:2f:ca:d4: 3f:61:4c:2f:69:5f:a9:50:8f:db:e5:98:66:41:1e: d5:b5:32:31:d0:2e:4f:f5:61:40:3a:23:d2:0f:73: 19:76:68:32:cd:ea:60:2f:3a:ea:da:12:bd:ad:4c: 38:fb:bf:89:6d:3a:5e:48:a4:4d:6d:8a:f3:a0:95: f5:fb:ab:7f:b8:f2:5a:97:67:fc:fc:04:10:f5:95: 19:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:0D:49:13:81:B2:01:A9:03:A1:CE:5A:68:C4:7C:B1:92:21:2F:A3 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d4:c3:45:f1:15:e2:a8:61:35:85:4a:6e:c8:7a:d4:9b:3a: ee:d1:54:6e:29:2a:05:83:58:9e:0e:29:86:b6:33:dd:0f:f8: c1:47:67:ff:3e:77:48:c2:68:93:d0:a3:16:4b:46:b5:61:c8: 15:4b:19:3c:1d:d4:31:a0:a6:51:8c:0b:16:91:99:a4:95:e0: 61:55:ff:39:5d:f3:78:21:1a:a8:07:c9:dd:c7:33:cc:94:08: 44:56:f0:8e:77:af:ce:28:de:78:96:0b:fd:ac:84:1a:68:a7: 25:60:be:66:db:d6:c2:70:08:4b:b5:83:be:0f:f2:9d:fd:59: e9:79:72:6a:e1:71:0d:85:df:92:82:37:b0:d9:01:38:e2:9c: e8:b2:27:ca:a3:b4:d2:32:ca:41:bc:7a:d2:6e:28:db:8b:12: 2a:e9:c5:72:28:79:32:6c:e6:81:98:ff:c8:eb:bb:c2:dc:31: b3:16:67:06:d7:44:b5:10:2c:22:28:a4:f9:3a:cb:d2:a1:98: a3:d3:83:e3:2f:40:43:6d:8d:dc:5a:44:34:12:22:7e:89:1a: 0c:16:9f:c6:ed:57:0e:76:65:c1:27:7a:fa:3d:33:c1:c7:42: b2:26:c0:c4:bf:14:d2:51:5e:d7:71:a5:ae:68:2f:06:60:da: 41:44:e5:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAS+9qdExhjMcURoi0+2nDEj/TXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNTA2MjgxNjE1NTZaFw0yNTA3MDExNjU5NTZaMDMxMTAvBgNV BAMTKEEwMEQ0OTEzODFCMjAxQTkwM0ExQ0U1QTY4QzQ3Q0IxOTIyMTJGQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/jvUvjRYkUC6JAvRjQpNmpOT0 PcpV3Jx9knckzotIYYrYJXT/EZXRJ+vw19Q1t95Ok/expafxa1pDmrwxy/RF2Gg8 LpeCYpOuVVA3jisbP/aNdVuk2VlbskxOYNycQMQWmxwr6u1GxjxbdW0TILv/at+r hQ6bJW02GGbMHuBOvTZmnTpN5dle67qc2q88n95v6Zeux3WCj9bNDO5mFX4BydY2 to4fcIen5yq8DZ5nPC/K1D9hTC9pX6lQj9vlmGZBHtW1MjHQLk/1YUA6I9IPcxl2 aDLN6mAvOuraEr2tTDj7v4ltOl5IpE1tivOglfX7q3+48lqXZ/z8BBD1lRl/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoA1JE4GyAakDoc5aaMR8sZIhL6MwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXUw0XxFeKoYTWFSm7IetSbOu7RVG4pKgWD WJ4OKYa2M90P+MFHZ/8+d0jCaJPQoxZLRrVhyBVLGTwd1DGgplGMCxaRmaSV4GFV /zld83ghGqgHyd3HM8yUCERW8I53r84o3niWC/2shBpopyVgvmbb1sJwCEu1g74P 8p39Wel5cmrhcQ2F35KCN7DZATjinOiyJ8qjtNIyykG8etJuKNuLEirpxXIoeTJs 5oGY/8jru8LcMbMWZwbXRLUQLCIopPk6y9KhmKPTg+MvQENtjdxaRDQSIn6JGgwW n8btVw52ZcEnevo9M8HHQrImwMS/FNJRXtdxpa5oLwZg2kFE5es= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:08 2025 by rpki-client