$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: wtFZo2pJ1NcI5De6SqWFp6jsArAzxElpCL5bwj4Ukwo= Subject key identifier: 0F:E2:0B:CA:EE:12:D2:E1:ED:9D:33:CE:66:90:AD:55:AA:54:89:67 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 6D726006ABF417CFDA6A0F9048E908AA8C6CDF4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 76 Signing time: Sun 29 Jun 2025 03:31:25 +0000 Manifest this update: Sun 29 Jun 2025 03:26:25 +0000 Manifest next update: Wed 02 Jul 2025 15:25:25 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: 16F0bFjTX+TUUJyrbjPZxt4ZX/kCgji6q86WZO8KtWA=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 15:25:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:72:60:06:ab:f4:17:cf:da:6a:0f:90:48:e9:08:aa:8c:6c:df:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Jun 29 03:26:25 2025 GMT Not After : Jul 2 15:25:25 2025 GMT Subject: CN=0FE20BCAEE12D2E1ED9D33CE6690AD55AA548967 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:ff:0b:40:6e:d0:4f:3c:b7:dc:2d:26:73:b6: 9d:21:59:29:04:f9:c8:ee:b0:a9:88:84:66:23:aa: cb:13:00:9a:82:dd:97:c2:0e:77:2a:08:6c:2d:c9: c1:9a:ab:b8:48:c4:d3:e5:49:24:05:68:40:fd:ed: 0c:78:64:55:07:8c:0d:56:99:90:77:18:38:30:70: d4:b7:8f:fd:44:ca:bf:ef:50:35:00:a2:dd:7e:7d: c7:04:6c:7e:71:db:e4:7b:35:5f:ec:82:0a:de:a1: 31:15:d2:a7:63:29:8e:2d:70:46:34:ae:26:9e:5a: 2d:a0:e0:e0:7c:41:f5:48:86:bb:79:ae:af:03:da: 3a:61:d7:36:34:75:19:5f:6a:19:09:0f:17:25:1f: bc:36:79:2b:3a:39:8f:c9:da:1e:7d:b8:b8:f8:b1: 1b:24:3b:3b:6b:c7:2c:28:9a:b4:35:a3:67:4d:1c: 52:2b:f0:93:6e:ef:32:46:83:f1:30:5c:75:23:a3: 03:63:00:28:36:40:0c:03:00:f7:2e:ee:b4:a7:5b: d9:f1:00:0f:91:0c:55:43:8d:a8:f0:4e:fb:f1:83: d5:d9:c7:6d:96:d8:5d:1b:f1:55:e6:41:f0:eb:f1: 91:9c:5d:9a:83:22:ef:49:f1:56:ad:c9:e1:dd:74: 53:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:E2:0B:CA:EE:12:D2:E1:ED:9D:33:CE:66:90:AD:55:AA:54:89:67 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:88:66:ca:0f:70:4d:5d:46:7a:f0:e7:e2:ed:6e:d4:22:2e: 96:66:de:62:b1:17:95:83:ae:37:5b:4a:66:59:7b:3a:dd:21: dc:a5:ba:be:1d:df:dc:46:61:0e:66:08:26:00:01:98:0f:93: 79:8c:63:f2:fd:46:69:58:e3:5d:aa:b5:ba:65:bb:77:94:61: 02:32:74:75:9b:1e:18:e6:44:46:00:b2:03:50:8d:8d:7d:e1: a0:4f:9e:91:51:bc:ed:ca:b6:e7:8b:55:c1:0c:de:43:95:7f: 43:dd:c9:54:75:ae:12:98:85:f6:5f:da:db:4b:50:bb:0a:fe: c5:f3:0a:a1:b9:b5:ed:fa:10:42:dd:df:69:27:cb:38:39:90: a6:08:17:33:31:84:d0:fb:b2:e9:36:66:3d:ab:e4:7e:7c:95: dd:1d:e7:e1:36:75:45:b8:6f:8e:e2:21:3f:21:fe:a6:c0:9c: d9:d6:a0:86:5e:62:28:3d:6c:be:02:4a:b3:bb:81:37:03:05: 31:a6:97:a8:3e:c9:b3:29:98:d3:fa:f1:76:c7:21:9d:74:35: fa:5d:8b:fe:0e:f1:e0:c7:e1:d8:9c:62:22:eb:04:36:b7:0c: 46:c9:cd:ab:8f:89:4b:cf:77:ec:b9:7e:99:11:a5:98:f8:94: c9:86:ac:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbXJgBqv0F8/aag+QSOkIqoxs30owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTA2MjkwMzI2MjVaFw0yNTA3MDIxNTI1MjVaMDMxMTAvBgNV BAMTKDBGRTIwQkNBRUUxMkQyRTFFRDlEMzNDRTY2OTBBRDU1QUE1NDg5NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS/wtAbtBPPLfcLSZztp0hWSkE +cjusKmIhGYjqssTAJqC3ZfCDncqCGwtycGaq7hIxNPlSSQFaED97Qx4ZFUHjA1W mZB3GDgwcNS3j/1Eyr/vUDUAot1+fccEbH5x2+R7NV/sggreoTEV0qdjKY4tcEY0 riaeWi2g4OB8QfVIhrt5rq8D2jph1zY0dRlfahkJDxclH7w2eSs6OY/J2h59uLj4 sRskOztrxywomrQ1o2dNHFIr8JNu7zJGg/EwXHUjowNjACg2QAwDAPcu7rSnW9nx AA+RDFVDjajwTvvxg9XZx22W2F0b8VXmQfDr8ZGcXZqDIu9J8VatyeHddFMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD+ILyu4S0uHtnTPOZpCtVapUiWcwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIyIZsoPcE1dRnrw5+LtbtQiLpZm3mKxF5WD rjdbSmZZezrdIdylur4d39xGYQ5mCCYAAZgPk3mMY/L9RmlY412qtbplu3eUYQIy dHWbHhjmREYAsgNQjY194aBPnpFRvO3KtueLVcEM3kOVf0PdyVR1rhKYhfZf2ttL ULsK/sXzCqG5te36EELd32knyzg5kKYIFzMxhND7suk2Zj2r5H58ld0d5+E2dUW4 b47iIT8h/qbAnNnWoIZeYig9bL4CSrO7gTcDBTGml6g+ybMpmNP68XbHIZ10Nfpd i/4O8eDH4dicYiLrBDa3DEbJzauPiUvPd+y5fpkRpZj4lMmGrM0= -----END CERTIFICATE-----Generated at Tue Jul 1 08:34:54 2025 by rpki-client