$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: 5BntDJmyx9NWNw3JrWwBaMRCHi2g3Hn/sUJtg4hqMmI= Subject key identifier: 17:DE:D6:FC:73:7F:2A:94:64:3A:42:55:51:F2:07:FB:D4:94:7B:E6 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 1248A0FAA7049EB63EC8E2B7EC9B309E7F7BB016 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 02B8 Signing time: Thu 26 Mar 2026 04:21:05 +0000 Manifest this update: Thu 26 Mar 2026 04:16:05 +0000 Manifest next update: Sun 29 Mar 2026 05:02:05 +0000 Files and hashes: 1: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: 0VyOZf0yTbUEfJhTF9S3fTWJ/AGEXFjrKz/xTwRO5wM=) 2: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=) 3: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:48:a0:fa:a7:04:9e:b6:3e:c8:e2:b7:ec:9b:30:9e:7f:7b:b0:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Mar 26 04:16:05 2026 GMT Not After : Mar 29 05:02:05 2026 GMT Subject: CN=17DED6FC737F2A94643A425551F207FBD4947BE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:33:78:b9:7f:ea:4b:92:e1:e8:ae:1b:c9:c4: a9:48:75:0e:a8:79:b8:d0:25:e7:ab:f2:80:e5:c9: d0:a0:88:34:c7:28:6f:ec:8c:1b:92:9e:94:6b:f8: cd:f7:e8:55:a7:b3:f2:15:48:3d:da:45:f7:1d:0c: 5b:7e:3b:7e:3c:96:9d:5e:1b:a2:bf:ad:63:04:4b: b4:d2:f1:ab:fc:d7:a6:fe:84:48:00:ed:63:04:97: f7:8a:24:23:d1:74:ef:e8:c7:bb:4e:ed:76:e4:53: 66:01:1e:93:f9:b9:86:8d:82:b5:74:c1:9a:fe:36: 36:24:d8:6f:7c:f3:89:ab:98:be:51:2f:e5:88:54: 9d:bd:c1:5a:44:1e:5c:57:ae:0d:e7:21:62:51:0a: 09:af:aa:09:64:2c:c5:de:1d:8d:df:8b:29:25:8a: c8:8d:5a:71:54:84:ea:4d:f3:da:0f:b3:33:ca:5c: 3a:5a:15:f7:18:6e:75:b9:27:d3:5a:cf:04:77:12: 6f:eb:9d:90:97:1a:3e:9a:12:0b:af:b7:b5:a4:ee: 48:4a:2b:2d:0a:f4:1b:5d:48:3c:9a:14:73:75:f7: da:cd:31:38:6d:68:ec:f9:e3:6e:e1:3a:af:17:34: a1:e2:a9:d1:c9:bb:ce:50:17:43:b2:34:6e:e4:15: b3:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:DE:D6:FC:73:7F:2A:94:64:3A:42:55:51:F2:07:FB:D4:94:7B:E6 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:01:8c:9b:45:03:3d:5d:da:4c:64:eb:63:61:c7:8f:17:8e: 93:2e:ba:65:c0:da:4b:e8:42:59:11:2e:1d:f0:ce:c8:a5:e5: 10:40:2c:d5:c1:87:4c:02:c4:b1:72:47:17:2e:a9:19:c0:50: 27:1c:61:ff:49:6c:bf:4c:93:81:b9:a1:52:c5:7d:f3:ab:08: 29:68:a0:07:81:ee:a6:1a:ab:e9:4a:b4:a7:f8:8d:88:19:8f: f6:bb:c6:62:36:8f:38:77:57:2a:30:8f:9a:10:e3:dc:d0:a3: db:0e:57:fa:06:ed:1e:8a:b8:46:7e:71:c4:b6:ce:ab:09:04: 63:65:b6:7f:59:2f:8e:c6:51:32:91:c8:ef:da:57:e1:4b:da: ac:bc:11:d4:6e:6f:ff:45:36:9c:e0:22:33:52:63:e8:2d:9a: a0:6b:04:e8:56:80:01:9a:5e:a6:c4:ae:f0:c2:29:40:c1:df: 46:7e:5b:4f:2e:ff:7b:58:1c:00:77:4e:58:64:ab:56:68:92: 78:e1:e8:9a:37:ce:e6:01:cf:0d:79:8e:a3:49:82:1d:dd:5b: 68:84:06:02:63:70:79:56:36:ca:a3:8d:6e:bc:dc:36:0b:1c: de:f8:85:0c:e3:b3:bd:4c:73:2b:a7:9f:e8:b9:c8:fe:65:39: 8a:00:82:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEkig+qcEnrY+yOK37Jswnn97sBYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNjAzMjYwNDE2MDVaFw0yNjAzMjkwNTAyMDVaMDMxMTAvBgNV BAMTKDE3REVENkZDNzM3RjJBOTQ2NDNBNDI1NTUxRjIwN0ZCRDQ5NDdCRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsM3i5f+pLkuHorhvJxKlIdQ6o ebjQJeer8oDlydCgiDTHKG/sjBuSnpRr+M336FWns/IVSD3aRfcdDFt+O348lp1e G6K/rWMES7TS8av816b+hEgA7WMEl/eKJCPRdO/ox7tO7XbkU2YBHpP5uYaNgrV0 wZr+NjYk2G9884mrmL5RL+WIVJ29wVpEHlxXrg3nIWJRCgmvqglkLMXeHY3fiykl isiNWnFUhOpN89oPszPKXDpaFfcYbnW5J9NazwR3Em/rnZCXGj6aEguvt7Wk7khK Ky0K9BtdSDyaFHN199rNMThtaOz5427hOq8XNKHiqdHJu85QF0OyNG7kFbMjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF97W/HN/KpRkOkJVUfIH+9SUe+YwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoBjJtFAz1d2kxk62Nhx48XjpMuumXA2kvo QlkRLh3wzsil5RBALNXBh0wCxLFyRxcuqRnAUCccYf9JbL9Mk4G5oVLFffOrCClo oAeB7qYaq+lKtKf4jYgZj/a7xmI2jzh3Vyowj5oQ49zQo9sOV/oG7R6KuEZ+ccS2 zqsJBGNltn9ZL47GUTKRyO/aV+FL2qy8EdRub/9FNpzgIjNSY+gtmqBrBOhWgAGa XqbErvDCKUDB30Z+W08u/3tYHAB3Tlhkq1Zoknjh6Jo3zuYBzw15jqNJgh3dW2iE BgJjcHlWNsqjjW683DYLHN74hQzjs71Mcyunn+i5yP5lOYoAgsY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:18 2026 by rpki-client