$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: rotZe07VtXgUtnI6OxBbOFOfQ161E3jz4+5uCYaszSs= Subject key identifier: 28:1A:72:81:58:B3:5C:F9:C6:FF:B9:87:73:1F:94:E8:0E:09:A2:B0 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 60915669BD6EA98C312247124F4F8946C29F4718 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 0271 Signing time: Sat 18 Oct 2025 10:02:28 +0000 Manifest this update: Sat 18 Oct 2025 09:57:28 +0000 Manifest next update: Tue 21 Oct 2025 13:25:28 +0000 Files and hashes: 1: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=) 2: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=) 3: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: J/GEqOsCIVrz0jE3vuq8WQ2ODoZhgoAxatkVDFsnBY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:25:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:91:56:69:bd:6e:a9:8c:31:22:47:12:4f:4f:89:46:c2:9f:47:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Oct 18 09:57:28 2025 GMT Not After : Oct 21 13:25:28 2025 GMT Subject: CN=281A728158B35CF9C6FFB987731F94E80E09A2B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:7f:c6:c3:14:e7:51:e9:1b:25:de:ed:e3:14: 53:11:17:a6:29:e2:46:5f:c5:95:cf:14:ee:41:1c: 0a:a5:81:f5:ed:cd:95:47:a3:88:53:df:d3:a5:d2: 03:6b:db:18:39:d2:4e:6e:80:8a:70:a1:99:94:9a: 6a:3a:7c:e6:2b:16:0a:6a:c7:fe:88:cb:19:fe:06: b5:92:31:2f:93:aa:44:53:ec:69:e6:e4:42:5f:49: 71:31:78:92:61:a4:52:df:fb:36:66:12:fd:a2:80: 98:ef:c5:80:e6:67:79:59:b7:d0:3b:13:e4:d3:68: 28:de:ac:09:19:61:9c:60:b6:e7:9a:16:01:a4:d8: 8b:50:d1:84:60:2f:d1:eb:85:da:f5:94:fd:76:d0: 2f:99:c2:3b:cf:ae:06:81:8a:81:b4:76:2e:96:91: cf:49:04:d1:97:6f:38:de:30:eb:56:41:44:1c:5b: 45:17:09:3e:39:38:bc:5b:e9:1e:6c:6f:cb:86:39: 29:27:20:8d:65:a8:57:86:71:04:3f:72:a4:f8:4c: 9d:89:19:27:21:17:5a:24:7d:e0:1f:12:66:e0:68: 98:87:83:fe:30:d7:9d:5b:ad:46:be:1c:95:54:05: a9:cb:dd:27:05:db:31:ee:b8:e4:d2:6e:d7:6a:95: ff:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:1A:72:81:58:B3:5C:F9:C6:FF:B9:87:73:1F:94:E8:0E:09:A2:B0 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:d6:a2:96:29:31:dd:c6:9b:ad:96:13:ab:97:c5:1c:aa:5c: a7:2f:13:d9:72:b4:8a:31:da:e1:f7:09:7f:0d:83:6f:92:28: a6:d7:9a:f1:67:5a:2d:67:dc:08:5e:50:21:e9:10:25:f8:72: e7:c6:7f:d5:65:f6:68:fc:8d:5a:4c:6b:be:7b:06:31:31:99: e5:c8:8a:1f:82:fa:54:18:4d:6e:1d:98:21:5c:d4:38:96:64: 92:67:af:b0:54:88:86:f2:ea:b7:c3:da:61:87:a5:34:86:54: 9c:06:d6:17:2f:a5:17:16:af:a4:5f:5b:32:13:7a:78:2e:a5: f9:51:81:6f:ef:ac:86:08:c3:1d:3a:b9:7b:13:e1:d5:a5:b6: c2:3a:66:bc:7b:b4:33:92:ae:10:91:d0:8b:fa:f7:7d:76:97: e3:6d:f2:99:7a:b7:4c:57:50:75:06:56:cf:0f:14:81:cc:2b: 34:fa:24:4f:39:5a:01:42:47:b5:73:5f:6c:43:ab:b7:d8:cc: fa:b6:84:01:2b:71:31:90:9f:82:22:b6:dd:93:09:05:05:69: bc:ed:67:03:3e:3c:b9:38:5a:33:ff:24:71:37:67:a5:a8:4c: 56:6b:e9:f6:f4:71:fd:bd:ab:f2:d4:23:b4:67:9e:b8:91:84: d6:0f:7e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYJFWab1uqYwxIkcST0+JRsKfRxgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNTEwMTgwOTU3MjhaFw0yNTEwMjExMzI1MjhaMDMxMTAvBgNV BAMTKDI4MUE3MjgxNThCMzVDRjlDNkZGQjk4NzczMUY5NEU4MEUwOUEyQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6f8bDFOdR6Rsl3u3jFFMRF6Yp 4kZfxZXPFO5BHAqlgfXtzZVHo4hT39Ol0gNr2xg50k5ugIpwoZmUmmo6fOYrFgpq x/6Iyxn+BrWSMS+TqkRT7Gnm5EJfSXExeJJhpFLf+zZmEv2igJjvxYDmZ3lZt9A7 E+TTaCjerAkZYZxgtueaFgGk2ItQ0YRgL9Hrhdr1lP120C+ZwjvPrgaBioG0di6W kc9JBNGXbzjeMOtWQUQcW0UXCT45OLxb6R5sb8uGOSknII1lqFeGcQQ/cqT4TJ2J GSchF1okfeAfEmbgaJiHg/4w151brUa+HJVUBanL3ScF2zHuuOTSbtdqlf9FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKBpygVizXPnG/7mHcx+U6A4JorAwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEnWopYpMd3Gm62WE6uXxRyqXKcvE9lytIox 2uH3CX8Ng2+SKKbXmvFnWi1n3AheUCHpECX4cufGf9Vl9mj8jVpMa757BjExmeXI ih+C+lQYTW4dmCFc1DiWZJJnr7BUiIby6rfD2mGHpTSGVJwG1hcvpRcWr6RfWzIT engupflRgW/vrIYIwx06uXsT4dWltsI6Zrx7tDOSrhCR0Iv69312l+Nt8pl6t0xX UHUGVs8PFIHMKzT6JE85WgFCR7VzX2xDq7fYzPq2hAErcTGQn4Iitt2TCQUFabzt ZwM+PLk4WjP/JHE3Z6WoTFZr6fb0cf29q/LUI7RnnriRhNYPfrk= -----END CERTIFICATE-----Generated at Mon Oct 20 12:07:48 2025 by rpki-client