$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft File: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft (raw, json) Hash identifier: F3VX+n5loxvHikpq+6pAAKaCWcxDfB2kpheU4n+pQSE= Subject key identifier: 1E:CB:C5:36:D5:3A:2C:7F:4B:26:CA:59:A4:0C:4E:FA:C0:C9:8F:D1 Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C Certificate issuer: /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Certificate serial: 7EEA099C7AED3019910F10A1BABDED850AB5B376 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft Manifest number: 050D Signing time: Sun 01 Mar 2026 11:21:21 +0000 Manifest this update: Sun 01 Mar 2026 11:16:21 +0000 Manifest next update: Wed 04 Mar 2026 22:00:21 +0000 Files and hashes: 1: 323430313a666363303a3a2f33322d3332203d3e203535363939.roa (hash: Oi7fTgBrQUHh0LCMFbO5c5/8ZtBJ6tfzSSx+iJl3WYU=) 2: 3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (hash: 4tzfw7v7zN8EuKwfSetCDIUtnJqIsP5H9YVxzc/+js4=) 3: 31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl (hash: 2ojPUh+l2T/zvwIfC/+8cRsy5vc0/Oibc5gtXdj/p64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:00:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:ea:09:9c:7a:ed:30:19:91:0f:10:a1:ba:bd:ed:85:0a:b5:b3:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C Validity Not Before: Mar 1 11:16:21 2026 GMT Not After : Mar 4 22:00:21 2026 GMT Subject: CN=1ECBC536D53A2C7F4B26CA59A40C4EFAC0C98FD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2a:73:c0:65:b3:e7:83:09:b8:ab:07:80:f8: 18:71:2a:06:f8:b4:31:d6:26:6d:1e:ac:c3:74:82: 9b:b2:99:0e:52:72:5b:16:9a:1d:ec:06:29:c6:29: 1d:62:04:cb:06:a9:d0:5d:67:d6:ff:9d:1b:45:b7: 6f:97:25:b5:a0:44:e0:e1:1d:cb:66:6f:4c:73:56: ae:54:c5:a9:77:d3:93:3f:e3:29:6f:1b:3b:44:26: f8:e9:72:92:e0:f8:29:f6:96:83:86:ce:15:bd:0e: 29:a3:54:b4:2f:c8:97:f9:d3:d7:bc:12:a3:07:ef: c8:34:43:08:e9:ca:af:fb:e5:57:4a:16:d5:05:53: 37:cf:6d:f3:ec:73:30:9a:8a:10:cf:53:61:25:dc: 70:78:a1:43:45:06:74:ea:3f:86:9e:b9:1e:46:08: f1:94:0f:33:69:1f:13:5c:1e:e7:d7:a5:36:94:39: 78:03:a7:80:61:18:cc:6d:ad:59:72:0c:9e:18:0e: 82:21:5a:51:06:ae:73:fd:81:98:a4:20:7f:9e:96: 05:fe:c9:34:f5:d9:9a:59:06:ca:ad:af:ec:68:98: d3:83:d7:28:95:00:eb:c2:e4:4a:88:10:2e:30:69: 8d:83:42:4d:1f:54:c0:cc:3d:21:a8:d1:d0:00:a7: f4:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CB:C5:36:D5:3A:2C:7F:4B:26:CA:59:A4:0C:4E:FA:C0:C9:8F:D1 X509v3 Authority Key Identifier: keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:67:26:4d:41:80:fb:b8:7b:e5:d3:86:7b:cf:df:ab:75:52: 0e:0b:2f:4a:93:9a:cb:f9:43:6a:b3:e7:08:9a:8c:67:b3:4a: 0d:64:af:3b:a2:20:79:87:a5:87:6d:b7:69:6d:c2:90:4f:c3: f0:86:5f:ef:48:76:42:d8:0b:cf:77:dd:3b:3a:68:1a:8b:69: 86:cd:94:c5:69:f7:aa:9c:54:99:81:ef:15:0c:96:71:19:be: 44:34:7b:2a:d2:da:66:35:96:6d:d2:b9:69:ce:98:88:d5:2d: 21:4f:aa:d2:81:e4:ff:1e:5f:de:e2:12:e4:19:ed:64:38:83: 34:8c:a7:06:b1:a4:fa:7b:ee:e9:cf:9f:af:74:68:48:a7:63: 1c:07:6c:a2:1c:b5:4d:85:0b:f8:84:ca:da:51:ad:4f:da:89: 74:3a:2f:77:0b:ff:c0:eb:dd:19:1a:a4:13:31:85:01:1f:ff: 13:5d:52:9e:6b:65:82:c5:5a:f6:d3:9c:41:26:2a:57:1b:3a: a0:62:50:c3:80:46:4c:15:02:f7:ad:48:30:55:1e:51:f4:8f: d8:b1:19:a7:74:0f:b5:af:23:78:56:c2:a2:f1:1b:06:e2:84: b2:93:c8:d2:46:b6:61:f9:09:00:c3:0d:61:1d:3e:63:5c:04: 20:51:95:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfuoJnHrtMBmRDxChur3thQq1s3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG MTZEMzY2QzAeFw0yNjAzMDExMTE2MjFaFw0yNjAzMDQyMjAwMjFaMDMxMTAvBgNV BAMTKDFFQ0JDNTM2RDUzQTJDN0Y0QjI2Q0E1OUE0MEM0RUZBQzBDOThGRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDKnPAZbPngwm4qweA+BhxKgb4 tDHWJm0erMN0gpuymQ5SclsWmh3sBinGKR1iBMsGqdBdZ9b/nRtFt2+XJbWgRODh Hctmb0xzVq5Uxal305M/4ylvGztEJvjpcpLg+Cn2loOGzhW9DimjVLQvyJf509e8 EqMH78g0Qwjpyq/75VdKFtUFUzfPbfPsczCaihDPU2El3HB4oUNFBnTqP4aeuR5G CPGUDzNpHxNcHufXpTaUOXgDp4BhGMxtrVlyDJ4YDoIhWlEGrnP9gZikIH+elgX+ yTT12ZpZBsqtr+xomNOD1yiVAOvC5EqIEC4waY2DQk0fVMDMPSGo0dAAp/QZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHsvFNtU6LH9LJspZpAxO+sDJj9EwHwYDVR0j BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE MzY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjZhZDA5ZjMtMDAyMy00NDQ1LTg0 MTYtNWNiZGUxM2ZkZDQwLzAvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4 QUZGMTZEMzY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlnJk1BgPu4e+XThnvP36t1Ug4LL0qTmsv5 Q2qz5wiajGezSg1krzuiIHmHpYdtt2ltwpBPw/CGX+9IdkLYC8933Ts6aBqLaYbN lMVp96qcVJmB7xUMlnEZvkQ0eyrS2mY1lm3SuWnOmIjVLSFPqtKB5P8eX97iEuQZ 7WQ4gzSMpwaxpPp77unPn690aEinYxwHbKIctU2FC/iEytpRrU/aiXQ6L3cL/8Dr 3RkapBMxhQEf/xNdUp5rZYLFWvbTnEEmKlcbOqBiUMOARkwVAvetSDBVHlH0j9ix Gad0D7WvI3hWwqLxGwbihLKTyNJGtmH5CQDDDWEdPmNcBCBRlRQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:44:15 2026 by rpki-client