$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: QwCCAJr/e3ucK+kbxwoP4GgMcA9jHrhcNk3sVHwXM5g= Subject key identifier: 05:D0:01:02:C5:24:29:24:8D:A5:69:E7:97:49:B2:5B:12:09:52:B7 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 472436DD1B5B70368AE8A70B05102AC42F5B320F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02E7 Signing time: Thu 26 Mar 2026 06:22:40 +0000 Manifest this update: Thu 26 Mar 2026 06:17:40 +0000 Manifest next update: Sun 29 Mar 2026 08:52:40 +0000 Files and hashes: 1: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 2: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: GKliKy8GWfuTKI1JRsbDp/lMN7BcvVUyvi+Iw/noHhk=) 3: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) 5: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:52:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:24:36:dd:1b:5b:70:36:8a:e8:a7:0b:05:10:2a:c4:2f:5b:32:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Mar 26 06:17:40 2026 GMT Not After : Mar 29 08:52:40 2026 GMT Subject: CN=05D00102C52429248DA569E79749B25B120952B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d0:22:f9:9d:18:d8:3e:1e:5d:09:bc:79:5c: 84:38:e1:a4:9a:0a:f9:e2:f4:d3:16:b4:7e:90:9a: 89:a1:b2:67:bd:c1:6d:ac:c3:54:c1:fa:b5:1a:0a: 9e:a8:14:e6:ff:0d:a9:45:0f:a0:e6:2d:fd:6b:c3: 63:ab:46:8d:a1:b8:32:5e:81:88:83:da:8e:44:a5: fb:84:45:7f:22:a3:b1:b7:7b:a2:5a:8b:74:b4:80: 07:de:0c:3c:13:e5:af:60:d6:b0:16:10:d3:fa:e4: 5b:99:67:de:2d:75:be:3d:81:03:26:03:75:50:5d: 9a:9e:a7:7b:26:9c:26:2d:ca:f7:b4:91:b8:7b:6a: fa:65:fb:41:78:2d:5e:d9:05:41:4d:36:8b:1c:58: 3a:87:8e:7d:c8:d5:5f:97:d8:9e:46:ae:69:1f:24: 87:30:09:3d:ff:bc:90:8e:8d:0b:22:09:2e:90:a0: cd:2c:6c:9c:cf:30:ea:b4:93:e8:27:d4:d8:e7:64: 13:e2:82:bc:ed:69:6a:bb:7d:32:87:d4:09:9b:3c: 09:0e:a0:dc:01:88:71:ac:62:4a:2a:56:65:ab:f6: 25:62:2f:4d:70:77:8b:4b:7a:53:44:fb:72:04:75: 03:50:b3:d0:b0:52:0e:38:b2:49:5f:c6:3e:5e:b7: 51:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:D0:01:02:C5:24:29:24:8D:A5:69:E7:97:49:B2:5B:12:09:52:B7 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:1f:5e:38:41:70:36:4b:c7:cd:2c:29:9f:c3:20:93:a1:8c: 04:ca:97:d9:08:26:df:88:40:f6:7b:fd:75:95:5c:38:98:6e: 07:e9:5f:47:5e:4b:0f:43:df:fc:ea:a0:9c:51:36:37:be:67: b6:be:6d:d1:91:e6:39:71:64:b7:b0:c5:8e:89:41:82:3c:15: fb:5d:34:c1:de:1d:f2:33:17:60:79:0f:aa:7d:1c:b3:3e:9d: ca:61:c2:5a:8a:1d:a4:80:e1:21:e1:62:62:85:74:69:b5:81: d0:28:3f:32:bb:d5:80:69:b6:aa:be:16:6a:a1:6e:c9:4a:4d: 63:b9:f0:39:d9:34:9c:79:0a:a1:45:f7:ed:62:d9:ac:2d:36: ef:36:62:e3:92:1e:62:1e:ea:28:12:a4:0b:f7:d7:5f:6d:9f: da:9e:10:3f:6b:2f:c9:fa:11:5f:7f:fd:f3:9d:dd:68:4d:ec: 3f:40:9a:a2:70:68:a4:71:62:97:1f:43:59:3c:58:cb:0d:ae: 67:d8:fe:f3:e5:2d:28:a6:10:48:b4:de:e1:bc:57:2b:69:9d: 38:b4:5a:23:72:8c:19:8b:b8:18:f2:a3:7b:fb:25:42:83:44: 3b:3a:7d:8e:3d:fe:37:2f:e5:4c:a1:d6:b9:20:2f:b8:57:f9: 11:db:38:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURyQ23RtbcDaK6KcLBRAqxC9bMg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNjAzMjYwNjE3NDBaFw0yNjAzMjkwODUyNDBaMDMxMTAvBgNV BAMTKDA1RDAwMTAyQzUyNDI5MjQ4REE1NjlFNzk3NDlCMjVCMTIwOTUyQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0CL5nRjYPh5dCbx5XIQ44aSa Cvni9NMWtH6Qmomhsme9wW2sw1TB+rUaCp6oFOb/DalFD6DmLf1rw2OrRo2huDJe gYiD2o5EpfuERX8io7G3e6Jai3S0gAfeDDwT5a9g1rAWENP65FuZZ94tdb49gQMm A3VQXZqep3smnCYtyve0kbh7avpl+0F4LV7ZBUFNNoscWDqHjn3I1V+X2J5Grmkf JIcwCT3/vJCOjQsiCS6QoM0sbJzPMOq0k+gn1NjnZBPigrztaWq7fTKH1AmbPAkO oNwBiHGsYkoqVmWr9iViL01wd4tLelNE+3IEdQNQs9CwUg44sklfxj5et1HfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBdABAsUkKSSNpWnnl0myWxIJUrcwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEAfXjhBcDZLx80sKZ/DIJOhjATKl9kIJt+I QPZ7/XWVXDiYbgfpX0deSw9D3/zqoJxRNje+Z7a+bdGR5jlxZLewxY6JQYI8Fftd NMHeHfIzF2B5D6p9HLM+ncphwlqKHaSA4SHhYmKFdGm1gdAoPzK71YBptqq+Fmqh bslKTWO58DnZNJx5CqFF9+1i2awtNu82YuOSHmIe6igSpAv3119tn9qeED9rL8n6 EV9//fOd3WhN7D9AmqJwaKRxYpcfQ1k8WMsNrmfY/vPlLSimEEi03uG8VytpnTi0 WiNyjBmLuBjyo3v7JUKDRDs6fY49/jcv5Uyh1rkgL7hX+RHbOPA= -----END CERTIFICATE-----Generated at Thu Mar 26 23:04:04 2026 by rpki-client