$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: 9lI9BIsdPSLkGjVZvCOwqKTTyl0ErPBoyCe36EPmLoA= Subject key identifier: 19:8F:6C:FA:04:35:77:96:E3:79:3E:E3:6E:EA:E0:B8:8D:29:B6:A7 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 6CB34D7E6B16E747198022E0772983109846CFC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: 8E Signing time: Fri 22 Aug 2025 23:51:24 +0000 Manifest this update: Fri 22 Aug 2025 23:46:24 +0000 Manifest next update: Tue 26 Aug 2025 10:31:24 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: rc0sy9i5Qal0H0etmEphoGPiphOucDpIrZFClA8xbtI=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: yfEz4xxyhhlIrThNudtzDBzlif+6LokGlIAmgcn6z/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b3:4d:7e:6b:16:e7:47:19:80:22:e0:77:29:83:10:98:46:cf:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Aug 22 23:46:24 2025 GMT Not After : Aug 26 10:31:24 2025 GMT Subject: CN=198F6CFA04357796E3793EE36EEAE0B88D29B6A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:3e:e5:c3:46:0d:7f:62:4c:83:17:74:c6:d3: b8:83:6d:87:e1:e2:93:6b:7f:6b:06:eb:22:1c:08: 6e:80:d9:ac:52:65:84:1d:bf:91:11:62:c8:f8:d8: f6:1c:2b:cf:9c:cf:de:d0:67:22:16:e5:9f:96:9b: cd:6d:f6:9d:c2:4e:3c:05:d4:2a:2d:4a:7a:cb:b3: a8:ae:e5:10:4c:40:c7:1c:5d:b3:0e:74:e7:ab:91: 78:0d:96:be:11:0d:97:75:b0:8e:05:2f:b0:b5:57: 85:fa:36:b6:a0:96:ed:f4:cc:51:e6:99:ae:d8:64: e9:d4:d1:31:70:17:85:36:07:4f:d0:fb:7e:c8:70: 6a:60:5b:e3:0e:e5:17:dc:16:71:97:a9:55:74:62: bc:1c:99:c9:b3:17:eb:90:53:82:56:9c:60:b4:ce: 25:73:5d:df:ad:66:24:00:7c:a2:87:cf:e2:37:59: 2b:d9:03:7c:17:1a:5b:9c:6e:db:c7:a2:d3:34:b3: 6a:9a:8c:c4:08:83:c9:0a:8a:2b:85:96:d9:4b:01: 5c:ed:84:8e:08:83:c0:ae:96:eb:8b:5b:08:af:c0: f7:b6:79:9f:20:35:81:38:51:cd:d6:02:4d:4a:63: 51:05:f2:82:c1:23:51:36:50:42:fe:56:5c:30:c9: cd:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:8F:6C:FA:04:35:77:96:E3:79:3E:E3:6E:EA:E0:B8:8D:29:B6:A7 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:df:be:e9:a5:3d:9f:0b:4e:c5:ae:04:88:69:fd:70:99:d0: e9:2b:75:9f:05:65:f3:38:1f:1b:2d:30:1d:91:56:31:8a:85: 75:fa:e7:21:8c:97:c0:ac:63:d9:38:92:14:e1:79:99:8e:6f: 7b:ff:06:1d:5c:c9:f3:99:da:25:86:71:db:26:c4:ab:70:79: 72:9c:ae:05:29:c0:81:bc:5c:68:4f:db:7d:c8:b2:bb:ce:76: c2:d0:2d:2f:2a:46:40:6c:96:be:3c:dd:62:15:e7:fe:21:c9: 92:c1:20:15:2c:51:11:1c:a0:12:b4:43:d1:14:e0:f8:24:b3: d8:78:ee:52:ed:ea:6d:bd:51:3e:28:bf:3a:ff:51:cb:cd:91: 69:57:26:02:07:22:6b:bf:3b:03:38:20:d9:0a:76:2e:ef:45: 96:b8:f7:1f:b5:98:28:72:53:6a:a1:6b:d5:60:c0:66:48:57: b7:34:36:f3:34:4e:53:24:70:2d:63:18:9f:b9:52:b7:d3:ee: 6e:26:1b:46:9d:2b:7c:65:e1:9b:6e:7e:d1:41:f9:a3:49:05: 7f:94:0a:bd:97:e9:09:41:b8:d1:ae:7f:59:02:77:19:88:14: 7e:7b:1e:40:68:f7:36:af:cc:e7:25:7b:b2:b5:97:0c:7d:35: 1c:0c:15:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLNNfmsW50cZgCLgdymDEJhGz8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNTA4MjIyMzQ2MjRaFw0yNTA4MjYxMDMxMjRaMDMxMTAvBgNV BAMTKDE5OEY2Q0ZBMDQzNTc3OTZFMzc5M0VFMzZFRUFFMEI4OEQyOUI2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuPuXDRg1/YkyDF3TG07iDbYfh 4pNrf2sG6yIcCG6A2axSZYQdv5ERYsj42PYcK8+cz97QZyIW5Z+Wm81t9p3CTjwF 1CotSnrLs6iu5RBMQMccXbMOdOerkXgNlr4RDZd1sI4FL7C1V4X6Nraglu30zFHm ma7YZOnU0TFwF4U2B0/Q+37IcGpgW+MO5RfcFnGXqVV0YrwcmcmzF+uQU4JWnGC0 ziVzXd+tZiQAfKKHz+I3WSvZA3wXGlucbtvHotM0s2qajMQIg8kKiiuFltlLAVzt hI4Ig8CuluuLWwivwPe2eZ8gNYE4Uc3WAk1KY1EF8oLBI1E2UEL+Vlwwyc1zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGY9s+gQ1d5bjeT7jburguI0ptqcwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnfvumlPZ8LTsWuBIhp/XCZ0OkrdZ8FZfM4 HxstMB2RVjGKhXX65yGMl8CsY9k4khTheZmOb3v/Bh1cyfOZ2iWGcdsmxKtweXKc rgUpwIG8XGhP233IsrvOdsLQLS8qRkBslr483WIV5/4hyZLBIBUsUREcoBK0Q9EU 4Pgks9h47lLt6m29UT4ovzr/UcvNkWlXJgIHImu/OwM4INkKdi7vRZa49x+1mChy U2qha9VgwGZIV7c0NvM0TlMkcC1jGJ+5UrfT7m4mG0adK3xl4ZtuftFB+aNJBX+U Cr2X6QlBuNGuf1kCdxmIFH57HkBo9zavzOcle7K1lwx9NRwMFa8= -----END CERTIFICATE-----Generated at Sun Aug 24 01:13:05 2025 by rpki-client