$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: /r1vB+uQhjm+bFDoVwyoptNOIt0zPV0zr59WlEWp4Kc= Subject key identifier: C5:79:8E:5C:7C:9E:43:1E:D2:6E:88:98:64:18:FE:75:AA:AF:9E:96 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 7D0C62F45EEF109CBAA06657CA980F2E56A72687 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 0226 Signing time: Sun 04 May 2025 21:40:55 +0000 Manifest this update: Sun 04 May 2025 21:35:55 +0000 Manifest next update: Thu 08 May 2025 00:10:55 +0000 Files and hashes: 1: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: M0tR3PeMzCRtOK/Eubf18xLqQJGyaFY17/Kg/QR6iY4=) 2: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: hPEifDi+A4gjtCJcE4XzNoleg/VgmN+4bWTCTTEuMuI=) 3: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: Ffk2jetMOvzsWNB1DX1C1YGIG9ayBWUstNPnwpCzNnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 00:10:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:0c:62:f4:5e:ef:10:9c:ba:a0:66:57:ca:98:0f:2e:56:a7:26:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: May 4 21:35:55 2025 GMT Not After : May 8 00:10:55 2025 GMT Subject: CN=C5798E5C7C9E431ED26E88986418FE75AAAF9E96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4f:64:92:11:8f:97:ec:17:16:da:2a:c2:b1: 71:5c:f0:7e:9f:0b:09:a6:92:d9:b4:86:c8:db:bd: ed:5b:a9:75:cf:97:eb:9d:92:ec:57:93:b2:49:8e: 0d:08:b6:12:69:2f:0c:72:74:e5:76:d0:4c:ec:56: dc:cb:b1:14:29:a6:cb:82:77:b7:c7:4f:0d:75:71: 30:d5:d3:38:44:51:74:27:6a:b6:bb:c6:c7:25:86: ac:47:82:cc:2f:3d:8a:7d:65:eb:2c:f0:37:58:0d: a3:69:5c:ea:e9:80:dc:c7:95:fe:3d:38:b7:bd:f0: 80:8a:1d:42:e5:16:ea:c4:c4:fe:11:0b:f8:df:78: 20:ec:aa:07:e8:bd:bf:be:07:c1:dc:95:f9:ff:85: 19:4f:1f:c7:a8:94:4b:15:d2:d3:01:2e:da:ee:3f: 94:b9:d8:09:85:ca:59:67:60:62:a5:12:6e:77:fc: 6f:1c:7c:f0:db:ca:07:31:33:26:e0:62:32:fe:52: 5d:9a:a0:c0:09:8d:c3:71:2a:3e:88:92:15:e2:bd: 58:d6:27:06:52:21:19:4b:ad:83:8f:79:6f:89:e7: 60:4a:bb:f2:fd:f5:bb:7f:ef:40:55:97:70:37:9f: 80:b0:af:44:2f:aa:5b:cc:03:e9:ea:70:6f:3c:85: 7e:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:79:8E:5C:7C:9E:43:1E:D2:6E:88:98:64:18:FE:75:AA:AF:9E:96 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:97:d3:6b:c3:6d:29:2b:09:df:61:0d:70:2f:8b:d0:81:ce: cc:de:b8:b7:4d:92:4c:e0:85:b3:54:48:5b:cd:f2:fe:6d:ed: 3a:8c:3b:f5:13:de:83:07:24:91:f8:44:ed:78:86:3d:97:34: 64:98:ef:ce:57:6d:1e:80:88:52:da:4e:54:c4:53:3a:64:ab: b2:e8:dc:1e:79:2d:1c:40:28:b9:35:66:38:ad:4f:d6:86:67: 3a:1f:8a:b3:ed:a1:f6:32:e6:a8:c5:85:8c:81:8a:54:08:88: 52:b6:2e:bc:28:d1:09:7a:5d:e8:1b:d1:b6:01:3f:74:d5:c3: 47:b6:29:5c:01:cc:34:fe:ba:2e:ee:af:73:7a:52:59:48:5d: 84:12:f1:8e:4a:f3:ce:73:7b:b5:a1:18:0c:e0:31:80:3c:1f: f1:be:df:be:65:6a:00:02:0d:22:ed:a1:e5:fc:b0:65:6f:8a: 9f:5c:36:7f:5c:0c:bb:04:b3:54:55:74:09:93:e0:6a:58:bc: b9:76:f1:0c:ed:55:48:9f:1c:b3:db:31:ec:de:17:19:0b:2f: 2e:de:fd:e6:b7:a4:19:79:1d:ca:c0:de:01:91:4f:10:02:06: 3f:f0:fb:2e:de:24:56:6c:7c:40:46:de:df:39:09:7d:a4:cc: 57:7d:45:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfQxi9F7vEJy6oGZXypgPLlanJocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNTA1MDQyMTM1NTVaFw0yNTA1MDgwMDEwNTVaMDMxMTAvBgNV BAMTKEM1Nzk4RTVDN0M5RTQzMUVEMjZFODg5ODY0MThGRTc1QUFBRjlFOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaT2SSEY+X7BcW2irCsXFc8H6f Cwmmktm0hsjbve1bqXXPl+udkuxXk7JJjg0IthJpLwxydOV20EzsVtzLsRQppsuC d7fHTw11cTDV0zhEUXQnara7xsclhqxHgswvPYp9Zess8DdYDaNpXOrpgNzHlf49 OLe98ICKHULlFurExP4RC/jfeCDsqgfovb++B8Hclfn/hRlPH8eolEsV0tMBLtru P5S52AmFyllnYGKlEm53/G8cfPDbygcxMybgYjL+Ul2aoMAJjcNxKj6IkhXivVjW JwZSIRlLrYOPeW+J52BKu/L99bt/70BVl3A3n4Cwr0QvqlvMA+nqcG88hX5HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXmOXHyeQx7SboiYZBj+daqvnpYwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKX02vDbSkrCd9hDXAvi9CBzszeuLdNkkzg hbNUSFvN8v5t7TqMO/UT3oMHJJH4RO14hj2XNGSY785XbR6AiFLaTlTEUzpkq7Lo 3B55LRxAKLk1ZjitT9aGZzofirPtofYy5qjFhYyBilQIiFK2Lrwo0Ql6Xegb0bYB P3TVw0e2KVwBzDT+ui7ur3N6UllIXYQS8Y5K885ze7WhGAzgMYA8H/G+375lagAC DSLtoeX8sGVvip9cNn9cDLsEs1RVdAmT4GpYvLl28QztVUifHLPbMezeFxkLLy7e /ea3pBl5HcrA3gGRTxACBj/w+y7eJFZsfEBG3t85CX2kzFd9Rb8= -----END CERTIFICATE-----Generated at Mon May 5 23:49:39 2025 by rpki-client