$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: PEJHrssUPeJ5dZ+AVfBeaTRK73sU+47CX5JfscsgeKg= Subject key identifier: EB:70:83:B8:D7:64:1C:F4:3D:20:45:DA:20:51:AB:20:E9:D6:54:7C Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 651AC2F981A00C6FE87F17FCF37B179D225F8746 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 02C2 Signing time: Thu 16 Apr 2026 14:21:07 +0000 Manifest this update: Thu 16 Apr 2026 14:16:07 +0000 Manifest next update: Sun 19 Apr 2026 15:26:07 +0000 Files and hashes: 1: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=) 2: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: ukgZevUEP+4vfF4p3vmjhc4R+noN9dW62BdWGKAY86o=) 3: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:26:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:1a:c2:f9:81:a0:0c:6f:e8:7f:17:fc:f3:7b:17:9d:22:5f:87:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Apr 16 14:16:07 2026 GMT Not After : Apr 19 15:26:07 2026 GMT Subject: CN=EB7083B8D7641CF43D2045DA2051AB20E9D6547C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:56:43:17:bd:f6:34:94:9a:91:2f:4a:ab:d1: 65:fb:26:28:e9:d9:26:ae:aa:74:10:36:d5:71:cc: cd:d9:22:5e:e3:84:4e:d8:83:d9:a8:14:5b:f4:62: c8:01:fc:59:4c:c9:03:82:e3:eb:87:9d:9b:c5:fb: 5a:7d:30:27:0f:9f:d7:41:08:02:da:6c:ef:ff:0f: ad:26:93:b6:32:b0:41:05:48:1c:8a:cd:ff:7b:09: 7f:cf:2f:a9:44:5a:bd:26:85:d8:f2:e0:28:40:90: 26:68:02:27:58:b3:f7:57:e1:7d:c6:88:72:d1:d0: a1:1a:81:f1:d1:19:2b:77:b2:b5:ff:ad:11:d6:33: 83:38:50:a2:f1:60:f9:ef:18:22:8e:45:24:59:71: 89:64:7c:bb:d3:b2:c4:9a:b2:06:6b:3f:52:49:ae: 95:74:5b:2c:5d:3e:3a:ef:65:1e:f7:56:80:db:9c: dc:45:01:f4:aa:af:b8:9f:41:48:7a:de:ea:cc:06: d6:3e:a3:e1:d3:3e:33:c6:16:9f:66:64:13:c0:be: 75:19:53:dd:b8:5b:e0:45:25:de:8b:dc:a9:02:9f: 7f:1d:b3:a0:da:ff:5e:97:f4:5f:8f:b7:f3:95:d8: bc:0e:3d:81:2c:0c:59:6e:d5:ec:bd:6e:ee:dd:47: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:70:83:B8:D7:64:1C:F4:3D:20:45:DA:20:51:AB:20:E9:D6:54:7C X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ca:87:d2:60:9a:5c:1e:49:9a:f3:f9:74:9c:24:db:2a:d1: bb:68:a2:f6:f4:fe:b8:42:2f:9a:98:bd:88:25:a6:0c:b1:ff: b7:ba:01:18:2b:94:91:09:21:61:80:83:d1:b9:7c:a8:07:b2: c8:cc:35:fb:e0:a7:cd:10:aa:f6:52:34:a5:58:eb:4a:c7:09: 17:3a:9d:f5:0c:a0:88:49:9c:ac:95:af:c6:7c:33:6a:86:70: 39:85:f1:c9:1a:af:0d:16:48:6b:00:89:0e:44:e8:27:8d:c9: fb:93:1f:72:fa:6d:01:09:ab:76:bc:aa:da:dd:29:6e:37:e5: 6d:2c:91:2c:75:21:47:26:ed:e8:05:a2:cc:d8:81:2e:8b:02: bb:33:ed:88:86:ba:82:4e:71:e0:86:3a:dd:ce:ad:a4:01:29: dc:38:24:9d:83:92:13:6b:22:d6:ee:94:04:55:64:ec:ee:7e: ff:8c:67:03:b8:bf:be:fb:d8:81:df:0d:c3:1e:34:ca:af:cf: 4b:ac:38:85:e8:79:7d:da:c2:25:61:4b:51:0d:a7:3d:d1:a5: 15:1b:04:32:e4:05:e2:72:5a:7e:12:92:2d:fe:c6:03:03:5e: 23:ed:82:cd:d9:97:41:62:b4:dc:47:01:61:bd:9c:3b:09:48: 4c:73:16:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRrC+YGgDG/ofxf883sXnSJfh0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNjA0MTYxNDE2MDdaFw0yNjA0MTkxNTI2MDdaMDMxMTAvBgNV BAMTKEVCNzA4M0I4RDc2NDFDRjQzRDIwNDVEQTIwNTFBQjIwRTlENjU0N0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwVkMXvfY0lJqRL0qr0WX7Jijp 2SauqnQQNtVxzM3ZIl7jhE7Yg9moFFv0YsgB/FlMyQOC4+uHnZvF+1p9MCcPn9dB CALabO//D60mk7YysEEFSByKzf97CX/PL6lEWr0mhdjy4ChAkCZoAidYs/dX4X3G iHLR0KEagfHRGSt3srX/rRHWM4M4UKLxYPnvGCKORSRZcYlkfLvTssSasgZrP1JJ rpV0WyxdPjrvZR73VoDbnNxFAfSqr7ifQUh63urMBtY+o+HTPjPGFp9mZBPAvnUZ U924W+BFJd6L3KkCn38ds6Da/16X9F+Pt/OV2LwOPYEsDFlu1ey9bu7dRze1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63CDuNdkHPQ9IEXaIFGrIOnWVHwwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPKh9JgmlweSZrz+XScJNsq0btoovb0/rhC L5qYvYglpgyx/7e6ARgrlJEJIWGAg9G5fKgHssjMNfvgp80QqvZSNKVY60rHCRc6 nfUMoIhJnKyVr8Z8M2qGcDmF8ckarw0WSGsAiQ5E6CeNyfuTH3L6bQEJq3a8qtrd KW435W0skSx1IUcm7egFoszYgS6LArsz7YiGuoJOceCGOt3OraQBKdw4JJ2DkhNr ItbulARVZOzufv+MZwO4v7772IHfDcMeNMqvz0usOIXoeX3awiVhS1ENpz3RpRUb BDLkBeJyWn4Ski3+xgMDXiPtgs3Zl0FitNxHAWG9nDsJSExzFu4= -----END CERTIFICATE-----Generated at Fri Apr 17 14:57:05 2026 by rpki-client