$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: 316hS1cezDr11ODkwdQXB5QQuTl8LeP4HnXkYEJRrFs= Subject key identifier: D7:C0:14:AC:CF:70:60:65:5A:42:E9:F9:78:3F:13:16:9C:68:FA:62 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 0EA7E9FE17FDB44E9A2D68925FA98CE07CF686F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 0518 Signing time: Thu 26 Mar 2026 10:21:23 +0000 Manifest this update: Thu 26 Mar 2026 10:16:23 +0000 Manifest next update: Sun 29 Mar 2026 21:13:23 +0000 Files and hashes: 1: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: E5EIdABN5OvBDXuEWRej615cpd4tPVmC1Rj7ThGEVvI=) 2: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) 3: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:a7:e9:fe:17:fd:b4:4e:9a:2d:68:92:5f:a9:8c:e0:7c:f6:86:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Mar 26 10:16:23 2026 GMT Not After : Mar 29 21:13:23 2026 GMT Subject: CN=D7C014ACCF7060655A42E9F9783F13169C68FA62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:48:e7:53:2c:76:f3:46:a2:64:2c:b5:6d:6c: 4c:b9:88:5c:18:46:26:8f:16:05:16:29:d8:cd:9a: e0:87:e8:10:c5:5c:d6:f8:7b:a2:27:a9:6c:72:02: 01:e6:34:47:c9:3f:24:37:2b:64:23:57:0e:5d:88: 63:66:40:dd:c8:25:1f:f6:3a:a1:89:28:4a:23:ee: e8:9a:40:e5:12:8e:87:84:2a:9b:52:aa:a0:d8:79: 2c:c3:a1:ac:6b:f5:24:1d:7f:77:dc:7a:6a:22:45: 95:4c:9a:7d:71:c8:1a:14:da:9f:fa:bf:d6:c1:07: ea:b2:1a:6b:3f:6b:6e:fe:94:8f:4f:05:aa:91:a1: bb:61:e2:c8:78:56:43:b9:17:66:6c:81:2c:b7:49: c3:08:0e:e8:29:44:68:ea:12:19:7b:59:e0:1a:06: b4:d8:23:29:bf:49:e6:33:79:f1:b9:b7:b8:65:c0: 13:54:07:e0:de:55:32:a9:b2:76:f0:2c:df:c7:76: f2:b3:da:f0:bf:41:0f:08:1a:db:54:de:d5:49:7e: 23:a6:74:76:dc:40:e0:22:8b:bd:66:ad:4f:02:2f: 6d:31:eb:7a:60:ab:73:be:3e:b7:85:9d:0d:09:40: 91:ac:f0:b5:da:4a:4c:6f:98:51:90:a4:a9:88:63: 64:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C0:14:AC:CF:70:60:65:5A:42:E9:F9:78:3F:13:16:9C:68:FA:62 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:d1:94:cc:6b:91:d1:b9:aa:f8:92:7e:13:92:c7:2a:e2:a6: ec:83:43:f0:cb:c0:f5:23:e1:5a:3c:a1:cb:1c:7c:a8:75:1d: a6:ab:44:e5:12:8a:3e:90:a5:52:96:6b:46:73:ee:9c:eb:3f: c8:cc:b0:cd:fe:10:9c:ec:34:e9:3f:6f:59:a3:d2:ec:03:dc: 33:98:c3:07:9f:7b:b5:aa:b8:47:dd:34:be:fe:61:9b:12:ce: c3:c1:df:ea:dc:54:e9:d6:be:09:fa:76:b0:ff:ba:57:73:fa: a4:db:97:45:44:25:6f:13:52:04:88:d4:68:2e:e9:54:bf:a4: af:18:89:aa:0d:ec:ed:1a:f9:b7:c6:e3:1e:e3:27:a0:cc:2d: d4:c0:18:20:62:ce:e3:16:5a:d0:4b:b7:58:f9:f8:d4:14:ca: ab:9a:74:7a:20:3a:d3:7b:54:dc:50:ef:b5:21:cf:f2:f2:18: bc:5f:e9:46:34:4d:a5:65:cb:05:6d:ff:05:c5:16:df:ec:60: 6a:03:d9:84:c1:77:40:99:22:b7:fa:39:b8:52:d1:af:ce:88: 42:ee:fe:54:a5:cd:28:8f:50:9d:3d:a4:d1:a8:27:83:b4:7f: a2:d9:a4:1d:c4:32:53:94:98:fb:7c:6b:f3:2d:a9:80:f2:a6: a2:b0:4b:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDqfp/hf9tE6aLWiSX6mM4Hz2hvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNjAzMjYxMDE2MjNaFw0yNjAzMjkyMTEzMjNaMDMxMTAvBgNV BAMTKEQ3QzAxNEFDQ0Y3MDYwNjU1QTQyRTlGOTc4M0YxMzE2OUM2OEZBNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvSOdTLHbzRqJkLLVtbEy5iFwY RiaPFgUWKdjNmuCH6BDFXNb4e6InqWxyAgHmNEfJPyQ3K2QjVw5diGNmQN3IJR/2 OqGJKEoj7uiaQOUSjoeEKptSqqDYeSzDoaxr9SQdf3fcemoiRZVMmn1xyBoU2p/6 v9bBB+qyGms/a27+lI9PBaqRobth4sh4VkO5F2ZsgSy3ScMIDugpRGjqEhl7WeAa BrTYIym/SeYzefG5t7hlwBNUB+DeVTKpsnbwLN/HdvKz2vC/QQ8IGttU3tVJfiOm dHbcQOAii71mrU8CL20x63pgq3O+PreFnQ0JQJGs8LXaSkxvmFGQpKmIY2TTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU18AUrM9wYGVaQun5eD8TFpxo+mIwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3RlMxrkdG5qviSfhOSxyripuyDQ/DLwPUj 4Vo8ocscfKh1HaarROUSij6QpVKWa0Zz7pzrP8jMsM3+EJzsNOk/b1mj0uwD3DOY wwefe7WquEfdNL7+YZsSzsPB3+rcVOnWvgn6drD/uldz+qTbl0VEJW8TUgSI1Ggu 6VS/pK8YiaoN7O0a+bfG4x7jJ6DMLdTAGCBizuMWWtBLt1j5+NQUyquadHogOtN7 VNxQ77Uhz/LyGLxf6UY0TaVlywVt/wXFFt/sYGoD2YTBd0CZIrf6ObhS0a/OiELu /lSlzSiPUJ09pNGoJ4O0f6LZpB3EMlOUmPt8a/MtqYDypqKwS6I= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:36 2026 by rpki-client