$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: BRkL4YJjqvm+5YqiPzHZwHJl3gOP5+9yO3O+sm84umQ= Subject key identifier: CB:A2:28:1B:4A:05:FD:4D:C2:4A:8D:93:0B:92:8E:49:12:1D:50:8F Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 23BF9E086ECDB52C26F0AAB8DC717E1AC2CA1ECA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: A8 Signing time: Mon 20 Oct 2025 02:21:24 +0000 Manifest this update: Mon 20 Oct 2025 02:16:24 +0000 Manifest next update: Thu 23 Oct 2025 02:50:24 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) 2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: nji+j9IP+2MRE0wcciXv85/KONVPmv+SxCE2D9uVd40=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 02:50:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:bf:9e:08:6e:cd:b5:2c:26:f0:aa:b8:dc:71:7e:1a:c2:ca:1e:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Oct 20 02:16:24 2025 GMT Not After : Oct 23 02:50:24 2025 GMT Subject: CN=CBA2281B4A05FD4DC24A8D930B928E49121D508F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ac:51:29:4d:ab:3d:4b:01:62:c7:68:1c:be: e3:35:0d:ce:84:22:24:02:6b:42:82:68:de:24:da: c2:80:68:2e:8a:2d:b8:1c:7c:6e:3e:47:e9:b2:6c: d1:fc:0a:e4:5d:3b:9b:dd:c0:d2:cf:a9:33:93:56: 17:d4:9b:27:6e:1e:bf:32:f7:82:bb:df:f8:a3:c4: 4a:03:52:2c:95:04:c4:17:32:bb:d6:d3:ac:1e:c6: 84:ff:d6:d0:71:d1:a5:f2:38:27:be:8f:3c:84:6f: 98:63:22:08:57:96:07:ce:f7:b3:ce:bf:09:85:a5: 70:90:a9:d3:d2:d4:e6:18:19:51:76:24:74:e5:bb: df:dd:80:d8:51:f2:1d:86:7d:0d:b1:4e:07:1f:03: 1a:c5:e6:43:00:8a:31:87:e6:ba:b1:c9:c6:b1:89: c3:64:53:b9:f2:bc:6c:4c:79:af:d8:2e:a6:18:b0: 59:bf:19:3b:a6:9d:b5:34:e9:74:3c:3d:1b:8a:f1: 40:d3:44:e6:9f:a4:50:14:13:86:d1:4e:9d:45:7c: 83:f2:e6:b0:07:b7:2e:73:fc:b2:57:68:91:57:1f: 99:df:58:fd:4a:30:1e:e7:88:f9:49:b8:69:95:6e: 92:bf:c1:6f:02:36:b6:3b:e5:52:d2:89:1d:7e:7e: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:A2:28:1B:4A:05:FD:4D:C2:4A:8D:93:0B:92:8E:49:12:1D:50:8F X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:55:01:59:9b:33:90:f8:6a:d1:46:81:df:6a:64:1d:db:b4: 94:cb:03:bd:f9:5f:83:ea:7f:ff:6c:1e:70:3e:d3:c2:94:ca: d9:8f:eb:dc:a4:3b:03:bb:e1:37:e3:c6:78:4d:46:c0:be:2a: c9:1e:ea:f3:73:f5:ff:c3:21:7e:4c:62:6e:53:ce:e9:d3:6b: 6c:9d:51:e7:b2:2c:22:2b:7a:a6:ae:65:e9:6d:f9:9c:c8:08: bd:f4:df:94:64:84:74:8d:60:25:32:79:1e:b6:1e:20:94:d4: 23:ee:1c:ac:25:b5:b4:bb:89:45:2a:ef:51:70:c7:22:ac:5b: 55:1f:ca:e8:d7:fd:76:9c:ab:27:1e:2f:b7:2b:be:14:a9:89: 68:0e:7c:b3:f2:ca:11:49:11:19:be:4c:be:a9:3f:ae:99:03: 97:f5:14:6d:33:38:b8:9c:92:d1:c7:f6:f7:f1:d5:88:42:3f: 41:da:0c:c7:e8:68:cf:12:04:ab:c1:45:f0:09:ac:f5:e4:58: 21:ab:cf:71:7a:70:c3:78:8a:2f:b2:8b:2f:c3:3f:28:35:b9: 89:31:85:7e:56:ed:60:15:ff:29:eb:43:83:7c:2a:12:4b:84: 9b:de:60:8f:02:73:5d:c3:00:ba:3a:7b:8a:0f:6c:9b:a8:d5: c1:75:61:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7+eCG7NtSwm8Kq43HF+GsLKHsowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTEwMjAwMjE2MjRaFw0yNTEwMjMwMjUwMjRaMDMxMTAvBgNV BAMTKENCQTIyODFCNEEwNUZENERDMjRBOEQ5MzBCOTI4RTQ5MTIxRDUwOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRrFEpTas9SwFix2gcvuM1Dc6E IiQCa0KCaN4k2sKAaC6KLbgcfG4+R+mybNH8CuRdO5vdwNLPqTOTVhfUmyduHr8y 94K73/ijxEoDUiyVBMQXMrvW06wexoT/1tBx0aXyOCe+jzyEb5hjIghXlgfO97PO vwmFpXCQqdPS1OYYGVF2JHTlu9/dgNhR8h2GfQ2xTgcfAxrF5kMAijGH5rqxycax icNkU7nyvGxMea/YLqYYsFm/GTumnbU06XQ8PRuK8UDTROafpFAUE4bRTp1FfIPy 5rAHty5z/LJXaJFXH5nfWP1KMB7niPlJuGmVbpK/wW8CNrY75VLSiR1+fmvTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy6IoG0oF/U3CSo2TC5KOSRIdUI8wHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtVAVmbM5D4atFGgd9qZB3btJTLA735X4Pq f/9sHnA+08KUytmP69ykOwO74TfjxnhNRsC+Kske6vNz9f/DIX5MYm5TzunTa2yd UeeyLCIreqauZelt+ZzICL3035RkhHSNYCUyeR62HiCU1CPuHKwltbS7iUUq71Fw xyKsW1UfyujX/XacqyceL7crvhSpiWgOfLPyyhFJERm+TL6pP66ZA5f1FG0zOLic ktHH9vfx1YhCP0HaDMfoaM8SBKvBRfAJrPXkWCGrz3F6cMN4ii+yiy/DPyg1uYkx hX5W7WAV/ynrQ4N8KhJLhJveYI8Cc13DALo6e4oPbJuo1cF1YWQ= -----END CERTIFICATE-----Generated at Tue Oct 21 13:29:51 2025 by rpki-client