$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: m4C1599H4EhdG4gQui1iJcFkenj4zM2a35KwbZ8EQNw= Subject key identifier: 96:3F:8E:17:5F:B3:B4:C4:12:00:E1:4F:3D:89:FF:62:D1:58:D6:6A Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 225B25A4B36F1B28E9DE7AEDFEEE2DF6AA86C99D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: ED Signing time: Wed 25 Mar 2026 09:21:35 +0000 Manifest this update: Wed 25 Mar 2026 09:16:35 +0000 Manifest next update: Sat 28 Mar 2026 13:51:35 +0000 Files and hashes: 1: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) 2: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: eVp8qIJyDtD1Q0o8DUIFo9rMrby0XTUmzDkyGu6Cb90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:51:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5b:25:a4:b3:6f:1b:28:e9:de:7a:ed:fe:ee:2d:f6:aa:86:c9:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Mar 25 09:16:35 2026 GMT Not After : Mar 28 13:51:35 2026 GMT Subject: CN=963F8E175FB3B4C41200E14F3D89FF62D158D66A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d9:ae:ea:58:13:bd:fe:e3:32:9e:ef:d4:3f: bf:54:33:85:1e:75:df:dc:a7:c8:b5:a6:11:f1:68: 08:98:24:bb:41:25:58:5e:e6:98:46:d3:2a:3e:ed: 39:a1:0a:ad:50:44:37:45:87:04:c7:69:7d:a8:af: 36:5a:59:5d:07:f2:3d:11:34:49:89:18:38:e1:97: ae:c3:4c:f1:d9:51:52:17:4d:f8:cd:13:7e:2d:43: 75:25:98:77:0e:d2:a1:df:3b:31:fb:43:5c:2e:d3: 35:0a:99:71:f1:98:3a:44:1d:c8:be:dd:d7:86:ea: dc:e8:3d:ea:0e:0c:91:fd:4e:f7:23:a4:c7:bb:0c: 9e:4b:6b:15:4c:ad:1f:b1:42:84:e9:89:8d:a4:fb: f0:d4:d2:03:f1:42:ac:e6:d2:8f:f9:21:ed:b1:ec: 7f:ae:25:1a:83:41:bb:f1:f6:e3:db:2a:ee:ed:fd: 6c:0c:e2:3e:40:c4:b8:ae:d9:e6:6c:9d:69:45:3d: e4:c8:d4:d7:d1:1c:8d:3d:77:c5:10:a9:70:2e:54: ef:51:36:7f:a8:ff:5c:ed:74:a3:ab:23:07:a7:ad: a3:cb:c1:3c:c0:ae:33:f1:3a:99:2c:00:81:e4:2b: 58:7b:f4:dc:f4:53:04:d2:68:b2:d5:e1:8b:ab:ec: 87:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:3F:8E:17:5F:B3:B4:C4:12:00:E1:4F:3D:89:FF:62:D1:58:D6:6A X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:1e:58:6f:88:ef:30:0d:b8:59:22:27:0c:7e:a2:6c:e2:17: 72:02:1e:60:2d:bc:72:37:d9:73:50:bf:d7:4c:50:01:20:39: 28:b0:2a:cf:b1:74:f5:a5:d8:64:7f:41:bd:e6:8e:3d:ff:16: ca:d2:52:90:fa:a2:8a:d0:44:7a:47:48:58:e3:4c:4d:29:9b: 29:f3:da:c9:52:12:05:65:a8:8f:0f:13:bb:13:9c:c7:dc:90: 03:6b:6e:9b:3c:00:f1:26:2e:b1:79:76:74:24:04:2a:d5:88: 21:33:e2:87:66:30:60:a9:77:99:d9:3b:85:18:07:f7:65:63: e0:0c:a7:71:60:6a:47:4b:66:8a:af:1d:d0:74:7f:d0:a0:96: 74:50:a4:4f:63:fe:e5:3e:a8:be:da:13:1e:c3:c2:0b:6a:c8: 9a:40:7f:b2:90:c5:f6:9a:23:45:35:6b:95:ae:4c:8f:a3:ab: 30:ff:32:6d:4d:6b:51:87:b0:2c:98:60:28:cc:b3:51:cf:9e: cb:2a:e7:ea:01:ab:06:92:82:8b:f3:c4:c0:45:e4:a3:89:6f: 06:38:18:5d:01:48:68:85:7d:6a:a4:cf:23:9a:57:2a:5f:cb: 6e:8f:d4:0e:98:98:2c:75:60:ad:b4:ca:e4:ee:28:65:6d:69: 87:5d:f3:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlslpLNvGyjp3nrt/u4t9qqGyZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNjAzMjUwOTE2MzVaFw0yNjAzMjgxMzUxMzVaMDMxMTAvBgNV BAMTKDk2M0Y4RTE3NUZCM0I0QzQxMjAwRTE0RjNEODlGRjYyRDE1OEQ2NkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN2a7qWBO9/uMynu/UP79UM4Ue dd/cp8i1phHxaAiYJLtBJVhe5phG0yo+7TmhCq1QRDdFhwTHaX2orzZaWV0H8j0R NEmJGDjhl67DTPHZUVIXTfjNE34tQ3UlmHcO0qHfOzH7Q1wu0zUKmXHxmDpEHci+ 3deG6tzoPeoODJH9TvcjpMe7DJ5LaxVMrR+xQoTpiY2k+/DU0gPxQqzm0o/5Ie2x 7H+uJRqDQbvx9uPbKu7t/WwM4j5AxLiu2eZsnWlFPeTI1NfRHI09d8UQqXAuVO9R Nn+o/1ztdKOrIwenraPLwTzArjPxOpksAIHkK1h79Nz0UwTSaLLV4Yur7IflAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlj+OF1+ztMQSAOFPPYn/YtFY1mowHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkeWG+I7zANuFkiJwx+omziF3ICHmAtvHI3 2XNQv9dMUAEgOSiwKs+xdPWl2GR/Qb3mjj3/FsrSUpD6oorQRHpHSFjjTE0pmynz 2slSEgVlqI8PE7sTnMfckANrbps8APEmLrF5dnQkBCrViCEz4odmMGCpd5nZO4UY B/dlY+AMp3FgakdLZoqvHdB0f9CglnRQpE9j/uU+qL7aEx7DwgtqyJpAf7KQxfaa I0U1a5WuTI+jqzD/Mm1Na1GHsCyYYCjMs1HPnssq5+oBqwaSgovzxMBF5KOJbwY4 GF0BSGiFfWqkzyOaVypfy26P1A6YmCx1YK20yuTuKGVtaYdd8xA= -----END CERTIFICATE-----Generated at Thu Mar 26 16:58:16 2026 by rpki-client