$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft File: 31F2586537E4318089C855DE0883A690E2FB398B.mft (raw, json) Hash identifier: T2j21n0to6sIoUAv1cy04zd+1f2JdWjMi/r+8+VqXyU= Subject key identifier: 4A:5A:E4:14:DF:2C:19:77:25:C9:DC:32:38:23:AE:26:1C:06:C8:E8 Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B Certificate issuer: /CN=31F2586537E4318089C855DE0883A690E2FB398B Certificate serial: 47867C00EEC15AC1F5700D2ACF7AFD5D4810D8EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft Manifest number: 02DC Signing time: Sun 01 Mar 2026 07:52:39 +0000 Manifest this update: Sun 01 Mar 2026 07:47:39 +0000 Manifest next update: Wed 04 Mar 2026 17:38:39 +0000 Files and hashes: 1: 3130332e3137382e3134362e302f32342d3234203d3e20313439333430.roa (hash: XsAec4SOEx7qpC5WVPbnA9nSuS1rJNtOhcZNqJpjn6s=) 2: 31F2586537E4318089C855DE0883A690E2FB398B.crl (hash: OypKEwZkftMl7Zt0OtDn/lDWah/5w/TTxHzTRkipGP4=) 3: 3130332e3137382e3134372e302f32342d3234203d3e20313439333430.roa (hash: UFUo2CEH/QyRH5YpLbR8IVknUh3zTAlympjca5grnvE=) 4: 3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (hash: LYBTairu6UY/h0duxUTBs1bcIHmIxIyCcqxzD3ik+Y4=) 5: 3130332e3137382e3134362e302f32332d3233203d3e20313439333430.roa (hash: DPG8sfkMvod68KPbF1WWeABYPsFLah31yyX2BoWywwI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:86:7c:00:ee:c1:5a:c1:f5:70:0d:2a:cf:7a:fd:5d:48:10:d8:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B Validity Not Before: Mar 1 07:47:39 2026 GMT Not After : Mar 4 17:38:39 2026 GMT Subject: CN=4A5AE414DF2C197725C9DC323823AE261C06C8E8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:96:34:ca:d1:a9:68:68:e1:48:ae:1c:ce:16: 35:47:5f:39:67:b4:76:b5:5d:a3:95:d9:41:89:5c: 5b:f4:8d:93:32:9f:1f:80:9a:ca:b5:7e:d3:68:96: a4:83:67:8b:0c:1e:e1:56:db:09:33:ad:f3:5c:e9: dd:61:e9:0c:de:55:2f:a4:7d:a7:56:73:17:d4:09: 44:75:02:cd:cc:ea:9f:c8:34:b8:f6:99:89:66:0c: e3:0e:ce:1d:42:2f:05:8e:d3:47:01:0e:27:f5:c7: ac:cc:bb:6a:6a:3a:92:d8:c0:18:3f:4e:98:1f:07: 4c:70:00:7e:cb:1f:10:60:6c:1c:92:33:0a:10:9a: 1e:c4:c4:8d:5d:d4:b0:06:c4:7a:9f:35:42:bf:5e: de:db:03:6f:70:e2:b6:61:b6:5e:cd:18:db:a0:7f: 12:be:f4:32:cd:6e:1e:82:e5:fb:1a:b5:50:7b:4f: b8:34:0e:86:b2:8d:ee:a3:3c:89:7c:88:dd:58:07: 7f:1b:8e:21:3d:c9:76:56:c9:eb:9d:b7:84:f4:fa: 40:81:38:fe:28:b9:9e:96:1c:52:d4:62:94:ec:c8: 43:d5:98:6a:e4:9c:b4:19:fb:c1:1a:6d:42:44:a1: 5b:8c:36:31:07:c4:ae:12:72:f0:fa:1a:8e:31:27: 00:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:5A:E4:14:DF:2C:19:77:25:C9:DC:32:38:23:AE:26:1C:06:C8:E8 X509v3 Authority Key Identifier: keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:00:12:4d:b4:55:7c:66:4e:06:54:a2:d4:25:ec:15:3e:f0: 98:4e:4c:84:db:8d:1d:64:f5:c4:eb:32:21:b8:6f:15:ad:f4: b4:97:7d:e6:7f:2d:16:28:c3:ea:8e:41:38:f0:68:c2:48:7e: 5e:ac:43:11:53:6b:45:f8:13:f9:59:e9:78:08:c6:1b:49:b7: 05:41:a3:f3:b4:2b:09:e2:ac:1c:98:f8:3b:1d:78:73:96:be: 1f:16:c3:1b:4a:e1:0f:c7:23:e3:e4:18:07:5b:3f:d3:c5:56: 98:5c:c2:8e:5b:c0:21:2e:c9:ab:d0:be:38:6f:dd:cd:4f:77: 07:5d:c3:2d:52:1d:56:8b:40:09:e5:9c:b0:0c:0a:90:d1:f8: 45:c2:30:2c:50:df:20:48:e0:e9:35:e7:8d:90:77:5b:35:67: 50:03:20:b5:ba:e5:2f:da:99:a1:4e:45:42:2b:10:c6:cc:b4: 1a:bf:2e:26:7c:7b:45:a5:02:17:b4:3c:30:39:26:8c:fe:05: a9:52:e1:4b:b6:94:cb:7a:85:7a:ac:bb:e7:f9:87:00:3e:9c: f5:a9:3a:00:da:ee:2b:79:63:5a:b8:cf:ca:ce:a5:02:0c:26: 25:5a:92:62:8c:3b:4a:fc:2e:0b:d5:00:b4:fa:dc:09:53:5a: d6:30:f2:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4Z8AO7BWsH1cA0qz3r9XUgQ2OowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF MkZCMzk4QjAeFw0yNjAzMDEwNzQ3MzlaFw0yNjAzMDQxNzM4MzlaMDMxMTAvBgNV BAMTKDRBNUFFNDE0REYyQzE5NzcyNUM5REMzMjM4MjNBRTI2MUMwNkM4RTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBljTK0aloaOFIrhzOFjVHXzln tHa1XaOV2UGJXFv0jZMynx+Amsq1ftNolqSDZ4sMHuFW2wkzrfNc6d1h6QzeVS+k fadWcxfUCUR1As3M6p/INLj2mYlmDOMOzh1CLwWO00cBDif1x6zMu2pqOpLYwBg/ TpgfB0xwAH7LHxBgbBySMwoQmh7ExI1d1LAGxHqfNUK/Xt7bA29w4rZhtl7NGNug fxK+9DLNbh6C5fsatVB7T7g0Doayje6jPIl8iN1YB38bjiE9yXZWyeudt4T0+kCB OP4ouZ6WHFLUYpTsyEPVmGrknLQZ+8EabUJEoVuMNjEHxK4ScvD6Go4xJwDDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSlrkFN8sGXclydwyOCOuJhwGyOgwHwYDVR0j BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3 RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC Mzk4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJhYjgwNDItMGUxYy00M2IxLWI3 MDMtNjM0MzhiZTIzMjViLzAvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2 OTBFMkZCMzk4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAAEk20VXxmTgZUotQl7BU+8JhOTITbjR1k 9cTrMiG4bxWt9LSXfeZ/LRYow+qOQTjwaMJIfl6sQxFTa0X4E/lZ6XgIxhtJtwVB o/O0KwnirByY+DsdeHOWvh8WwxtK4Q/HI+PkGAdbP9PFVphcwo5bwCEuyavQvjhv 3c1Pdwddwy1SHVaLQAnlnLAMCpDR+EXCMCxQ3yBI4Ok1542Qd1s1Z1ADILW65S/a maFORUIrEMbMtBq/LiZ8e0WlAhe0PDA5Joz+BalS4Uu2lMt6hXqsu+f5hwA+nPWp OgDa7it5Y1q4z8rOpQIMJiVakmKMO0r8LgvVALT63AlTWtYw8vg= -----END CERTIFICATE-----Generated at Mon Mar 2 15:02:42 2026 by rpki-client