$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft File: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft (raw, json) Hash identifier: 4UfI+WanswdHguYp3h218Fi6Np55WpIFEOy3lfBEdHU= Subject key identifier: 6C:41:CA:07:6F:12:3B:6E:6A:8F:8A:DC:06:C3:24:5C:B6:61:EB:E1 Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 Certificate issuer: /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Certificate serial: 520A0548753602EDA9B29A825D0FF4F20C1E8BD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft Manifest number: 02AC Signing time: Sat 28 Feb 2026 06:31:01 +0000 Manifest this update: Sat 28 Feb 2026 06:26:01 +0000 Manifest next update: Tue 03 Mar 2026 08:57:01 +0000 Files and hashes: 1: 31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl (hash: 9s01shZ8mDTpFkJYO2d4HnnCuQq/YF1hm5CUamfn8iA=) 2: 3130332e3136352e3135312e302f32342d3234203d3e20313431393232.roa (hash: P54230MRe8jXsR9/tDE0mXAjQzfMJ7+VOpxd/HYoK8g=) 3: 3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (hash: m1hw2GRN+iLpyVg6XiDt4RtT/6y32baLZ0nUXwtu9/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:57:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:0a:05:48:75:36:02:ed:a9:b2:9a:82:5d:0f:f4:f2:0c:1e:8b:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52 Validity Not Before: Feb 28 06:26:01 2026 GMT Not After : Mar 3 08:57:01 2026 GMT Subject: CN=6C41CA076F123B6E6A8F8ADC06C3245CB661EBE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:dc:97:0f:4c:29:75:fe:00:35:1b:19:32:d6: 64:57:d5:e6:f1:98:6b:3a:4c:3c:10:92:e1:82:4b: 0f:c9:df:26:83:fa:5d:42:44:93:b9:10:3b:2d:01: 0c:3b:f5:83:81:18:ae:fa:ba:ef:48:26:90:d5:08: 59:dd:a3:3b:66:14:34:0f:8f:20:c6:6d:08:20:77: 0d:be:18:a2:05:d7:94:40:30:ff:9b:8d:b4:93:ad: 87:2d:7c:d4:a0:12:b7:f4:64:c1:32:57:09:19:f0: 79:ce:84:e0:a9:61:cf:38:08:68:d2:a1:9b:5a:99: ca:18:7f:96:64:0c:57:f8:eb:57:fa:9e:3e:0e:fd: 4a:f3:68:2a:6f:2e:fc:32:ab:4a:e7:73:a1:2d:c1: 80:39:eb:66:b6:fb:0f:49:58:5e:46:01:1e:71:28: 27:dd:a0:8c:f8:49:23:36:3c:1d:8a:1b:be:d1:89: 34:83:05:75:a7:f2:31:34:10:ac:df:1f:cd:ee:26: 07:e6:e4:8a:54:86:53:82:5d:17:fd:a4:7f:f9:bb: 5d:21:f8:98:86:16:a2:8a:48:7b:eb:27:34:04:d6: 0e:2e:31:8b:85:f0:61:d9:ea:b0:c7:17:a9:7b:8e: 7b:48:61:45:0b:0d:4f:42:df:28:6b:3c:e1:dd:70: 77:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:41:CA:07:6F:12:3B:6E:6A:8F:8A:DC:06:C3:24:5C:B6:61:EB:E1 X509v3 Authority Key Identifier: keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:41:3e:57:d1:4e:19:8b:80:e4:66:e2:8c:86:b3:7c:ba:19: a9:4b:df:72:8e:c1:76:2a:80:8d:63:9f:ef:c9:4b:2f:12:45: ab:f0:32:fc:ea:0c:ed:60:1d:10:99:e7:08:e3:30:b1:19:22: 4b:61:84:bc:91:bb:0c:8d:ac:5f:41:45:7b:f3:a7:9c:24:c4: d1:fd:e5:cd:2d:82:3a:0b:3b:9e:24:d5:cc:ee:b1:38:e0:e3: 1c:be:65:dc:7b:b5:72:07:04:0c:41:b8:80:db:9e:0c:4d:fe: 07:8d:9b:a0:19:e3:f8:7d:52:77:6c:59:86:d6:11:de:45:49: fb:88:fc:53:16:a4:6c:db:5a:9d:a7:b4:8f:da:f5:ec:2d:6a: 6d:f4:8a:f4:06:34:b8:44:0c:45:88:78:ca:9e:ce:90:96:f6: 9f:d8:79:5f:96:4f:f7:ff:17:d6:21:47:5d:e0:6d:a8:a1:fd: 29:a3:74:89:5a:a8:8d:9d:45:7e:a4:74:b1:14:7c:3c:3b:b8: af:c9:23:04:2f:f0:72:03:b2:e0:e1:92:d8:40:71:a1:19:85: f8:cc:e4:30:ff:af:85:45:3b:b9:a2:57:ef:a6:8f:2d:b2:51: 10:ae:30:d5:d2:38:9b:cb:1b:84:8f:6a:f1:a4:f6:d8:2e:7c: f7:84:68:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgoFSHU2Au2pspqCXQ/08gwei9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD QjhBOEY1MjAeFw0yNjAyMjgwNjI2MDFaFw0yNjAzMDMwODU3MDFaMDMxMTAvBgNV BAMTKDZDNDFDQTA3NkYxMjNCNkU2QThGOEFEQzA2QzMyNDVDQjY2MUVCRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc3JcPTCl1/gA1Gxky1mRX1ebx mGs6TDwQkuGCSw/J3yaD+l1CRJO5EDstAQw79YOBGK76uu9IJpDVCFndoztmFDQP jyDGbQggdw2+GKIF15RAMP+bjbSTrYctfNSgErf0ZMEyVwkZ8HnOhOCpYc84CGjS oZtamcoYf5ZkDFf461f6nj4O/UrzaCpvLvwyq0rnc6EtwYA562a2+w9JWF5GAR5x KCfdoIz4SSM2PB2KG77RiTSDBXWn8jE0EKzfH83uJgfm5IpUhlOCXRf9pH/5u10h +JiGFqKKSHvrJzQE1g4uMYuF8GHZ6rDHF6l7jntIYUULDU9C3yhrPOHdcHfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbEHKB28SO25qj4rcBsMkXLZh6+EwHwYDVR0j BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB OEY1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlhYmQ4NjktOTM1ZC00MzlkLThm ODMtZGM3NjUyODFjYzljLzAvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5 N0JDQjhBOEY1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1BPlfRThmLgORm4oyGs3y6GalL33KOwXYq gI1jn+/JSy8SRavwMvzqDO1gHRCZ5wjjMLEZIkthhLyRuwyNrF9BRXvzp5wkxNH9 5c0tgjoLO54k1czusTjg4xy+Zdx7tXIHBAxBuIDbngxN/geNm6AZ4/h9UndsWYbW Ed5FSfuI/FMWpGzbWp2ntI/a9ewtam30ivQGNLhEDEWIeMqezpCW9p/YeV+WT/f/ F9YhR13gbaih/SmjdIlaqI2dRX6kdLEUfDw7uK/JIwQv8HIDsuDhkthAcaEZhfjM 5DD/r4VFO7miV++mjy2yURCuMNXSOJvLG4SPavGk9tgufPeEaKA= -----END CERTIFICATE-----Generated at Mon Mar 2 03:58:08 2026 by rpki-client