$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: QXwO6pFH98jT8BdZGar1YHase1G7U56+cbObm7gKooQ= Subject key identifier: 87:4E:70:8E:11:03:FD:40:3A:92:13:64:D8:CF:54:B8:D8:6B:33:B3 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 040E6041ACDA33EFC1A820B868D1B6E672FEC234 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 0257 Signing time: Sat 23 Aug 2025 03:40:57 +0000 Manifest this update: Sat 23 Aug 2025 03:35:57 +0000 Manifest next update: Tue 26 Aug 2025 11:02:57 +0000 Files and hashes: 1: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: J6vDAT+xWxGtt+jCot5nxwBveCQT3nZ0BSwselpl0QA=) 2: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: Ffk2jetMOvzsWNB1DX1C1YGIG9ayBWUstNPnwpCzNnk=) 3: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: M0tR3PeMzCRtOK/Eubf18xLqQJGyaFY17/Kg/QR6iY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:02:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:0e:60:41:ac:da:33:ef:c1:a8:20:b8:68:d1:b6:e6:72:fe:c2:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Aug 23 03:35:57 2025 GMT Not After : Aug 26 11:02:57 2025 GMT Subject: CN=874E708E1103FD403A921364D8CF54B8D86B33B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c9:99:b1:ec:8e:1a:d7:f3:61:9e:17:12:29: 75:59:da:81:df:cb:c0:b5:00:5d:34:ea:e4:02:9e: f1:cb:8d:ab:2c:68:34:07:52:b7:67:f3:05:7b:02: 49:a4:3e:6e:b9:ec:2d:2c:34:32:bd:43:f0:25:61: e0:95:d2:da:5a:5d:17:70:cf:ed:73:75:a2:13:88: c5:76:f6:38:9c:b0:c1:f6:04:9a:32:ee:59:c3:e1: 44:99:36:49:9a:8d:12:09:16:0a:87:40:24:fc:cc: 0b:c7:0f:5c:3e:08:18:2f:17:27:84:91:ca:91:1a: 04:22:d7:20:1a:75:9c:8f:ba:09:61:a2:57:87:1b: c2:49:6a:b0:de:e9:d4:2b:d7:e2:95:9b:bb:62:7d: 48:70:ac:90:ca:ce:a6:76:62:78:6f:90:dd:28:c7: cf:0e:d1:84:e5:b2:ea:fe:01:f0:bb:16:e5:f4:74: be:bc:fa:1a:2b:ad:2f:a2:0b:df:5a:46:47:97:52: 94:17:0b:06:33:d7:df:52:90:c9:69:0e:02:31:f8: 54:2a:d6:33:f1:f5:5c:c6:9b:b3:89:c7:3d:49:bd: db:92:48:8d:8e:fd:39:a4:02:cc:09:63:db:c8:b3: 29:40:0b:5c:01:fd:cc:23:ee:a5:aa:33:f5:10:cf: 2b:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:4E:70:8E:11:03:FD:40:3A:92:13:64:D8:CF:54:B8:D8:6B:33:B3 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:7b:33:a6:d2:5b:ce:f1:0b:2d:f3:1a:27:25:8e:5b:f5:00: 59:1f:b4:25:33:87:4a:ee:32:ea:e2:9a:16:40:d3:96:ff:3e: f3:40:ea:8b:b1:06:06:96:2f:7b:82:39:dc:e6:01:ff:51:c9: 23:71:b8:00:bf:89:82:20:2b:fa:a7:64:ee:71:7b:db:01:b5: b4:6f:e9:9b:92:97:31:65:42:01:11:6a:e3:9f:76:43:79:9b: a2:02:65:7d:0b:c1:f9:5f:9e:75:bb:e3:a5:70:c9:91:b4:b6: 4c:a2:bf:f7:67:dc:c8:fa:cb:ec:2a:6d:de:27:b7:38:45:4f: e7:b0:97:5e:47:dd:35:f6:87:14:f8:22:db:ae:d3:b1:d7:83: 1b:5f:a1:7b:7f:b5:9c:23:85:3c:14:24:29:9a:1e:4c:02:37: 6f:5c:56:9c:6d:15:2e:f2:78:bd:44:fe:d4:8f:af:6b:b3:52: 94:24:e6:67:36:fe:92:86:b6:2e:35:24:47:3e:1d:a5:f4:08: c9:8f:21:af:04:b8:89:70:09:7a:18:6c:7c:90:10:c5:39:70: 43:2b:d3:40:aa:cb:7e:fb:b0:bf:d3:d2:11:f6:24:7d:f1:48: 1a:6b:43:64:51:ed:a3:1e:b3:87:73:1a:90:15:be:f8:93:fe: fd:2e:e0:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBA5gQazaM+/BqCC4aNG25nL+wjQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNTA4MjMwMzM1NTdaFw0yNTA4MjYxMTAyNTdaMDMxMTAvBgNV BAMTKDg3NEU3MDhFMTEwM0ZENDAzQTkyMTM2NEQ4Q0Y1NEI4RDg2QjMzQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsyZmx7I4a1/NhnhcSKXVZ2oHf y8C1AF006uQCnvHLjassaDQHUrdn8wV7AkmkPm657C0sNDK9Q/AlYeCV0tpaXRdw z+1zdaITiMV29jicsMH2BJoy7lnD4USZNkmajRIJFgqHQCT8zAvHD1w+CBgvFyeE kcqRGgQi1yAadZyPuglholeHG8JJarDe6dQr1+KVm7tifUhwrJDKzqZ2YnhvkN0o x88O0YTlsur+AfC7FuX0dL68+horrS+iC99aRkeXUpQXCwYz199SkMlpDgIx+FQq 1jPx9VzGm7OJxz1JvduSSI2O/TmkAswJY9vIsylAC1wB/cwj7qWqM/UQzyuTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh05wjhED/UA6khNk2M9UuNhrM7MwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHN7M6bSW87xCy3zGicljlv1AFkftCUzh0ru MurimhZA05b/PvNA6ouxBgaWL3uCOdzmAf9RySNxuAC/iYIgK/qnZO5xe9sBtbRv 6ZuSlzFlQgERauOfdkN5m6ICZX0LwflfnnW746VwyZG0tkyiv/dn3Mj6y+wqbd4n tzhFT+ewl15H3TX2hxT4Ituu07HXgxtfoXt/tZwjhTwUJCmaHkwCN29cVpxtFS7y eL1E/tSPr2uzUpQk5mc2/pKGti41JEc+HaX0CMmPIa8EuIlwCXoYbHyQEMU5cEMr 00Cqy377sL/T0hH2JH3xSBprQ2RR7aMes4dzGpAVvviT/v0u4L4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:12 2025 by rpki-client