$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: sZcun8RJnv1ErWKR5nZlokYfLj5QLK7iNMaa6sfXl7I= Subject key identifier: 59:83:EE:35:1C:CA:49:5A:F8:C2:FB:1D:A6:4B:59:B3:88:DF:6F:0F Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 079E968D2712E57241FDAAF17FB31C73816D274B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: E3 Signing time: Mon 02 Mar 2026 03:51:39 +0000 Manifest this update: Mon 02 Mar 2026 03:46:39 +0000 Manifest next update: Thu 05 Mar 2026 08:20:39 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: ceuCeTz2GRUgaH4f1LL34Ce65GF/3C+9QU6yazEd6IA=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:9e:96:8d:27:12:e5:72:41:fd:aa:f1:7f:b3:1c:73:81:6d:27:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Mar 2 03:46:39 2026 GMT Not After : Mar 5 08:20:39 2026 GMT Subject: CN=5983EE351CCA495AF8C2FB1DA64B59B388DF6F0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:42:b1:1f:b7:7b:d8:39:ac:94:67:59:44:f7: 78:ab:33:f7:53:3f:79:01:d4:6d:da:7b:8e:60:95: 64:51:93:f4:a4:3e:c1:82:75:b0:68:a7:46:ea:39: 65:43:c4:d2:cd:37:1d:26:87:f7:1b:0d:49:e5:9f: e8:76:85:67:7e:19:75:84:54:bf:19:a0:3f:c4:a2: 56:cd:f7:10:a8:cd:48:75:a8:e6:2c:4e:44:ce:4c: f7:07:6d:af:70:37:05:90:6b:19:c1:3c:a0:74:fc: a0:45:cd:f4:7f:d5:14:d9:89:03:21:d3:fb:39:28: d8:6b:9f:03:d8:de:d7:0e:3d:6d:32:98:4a:27:e0: 1f:ea:0e:63:53:ee:ec:05:87:60:23:b9:28:5b:b7: 81:4b:9b:bb:70:95:48:ff:fa:42:1f:c2:08:ab:c7: b5:b3:7a:60:f0:6c:7e:2a:29:38:ce:62:03:d0:f1: 4a:f5:ad:b5:02:c2:b0:9b:f1:1b:08:96:14:de:f8: cd:6b:7a:f2:fb:5c:3f:c5:b8:5d:8a:20:15:af:e4: 80:f0:a5:2f:cc:0d:53:06:a1:09:d9:52:2e:a4:f0: 59:8a:c3:4e:e9:29:e9:40:0e:03:b4:0c:26:c2:69: 0e:32:58:80:b0:e1:53:32:f4:53:02:3d:3a:b6:45: a0:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:83:EE:35:1C:CA:49:5A:F8:C2:FB:1D:A6:4B:59:B3:88:DF:6F:0F X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:6d:3d:b0:54:96:27:72:cd:de:4e:d1:7d:19:b3:64:fc:e3: 33:bb:c4:e8:04:c2:1f:f5:b2:c9:06:d5:07:f6:75:f8:62:d5: 74:94:8e:d9:a9:99:5a:61:aa:ac:62:af:89:3d:2c:de:a6:ba: d2:7b:2d:68:8c:de:9f:de:b2:e6:07:5a:89:4f:42:c0:7c:4e: b5:5d:27:ab:ad:fd:85:49:95:f2:38:30:a5:71:63:00:f7:e7: d8:f7:2d:8e:8f:d4:68:bb:df:39:5f:98:4a:0d:f5:d4:b2:21: 77:a8:7f:9e:fe:14:6e:3f:08:33:3b:3d:bc:a8:83:a2:a8:59: 51:d2:9b:34:9a:c9:82:fd:8f:c5:a0:98:b6:83:8a:eb:82:2a: 65:4a:b0:56:aa:d1:04:8e:e2:12:6b:81:cc:b1:47:78:4d:53: fa:2b:4c:81:4c:83:7d:e4:ff:84:73:b6:e5:29:b7:04:5c:9b: 4c:bc:d4:03:56:d8:8b:18:c4:4c:b9:a7:a6:12:8e:44:1e:dd: e1:78:a2:b3:d6:ea:c3:4f:bd:95:ee:6b:08:6a:c5:b9:ad:18: a7:d6:69:ae:cf:16:d4:73:ff:12:1f:43:69:0c:0d:ea:71:7b: 93:7a:bc:c5:f5:aa:45:da:16:05:76:0a:85:64:31:c9:ef:d0: 08:2b:d0:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB56WjScS5XJB/arxf7Mcc4FtJ0swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNjAzMDIwMzQ2MzlaFw0yNjAzMDUwODIwMzlaMDMxMTAvBgNV BAMTKDU5ODNFRTM1MUNDQTQ5NUFGOEMyRkIxREE2NEI1OUIzODhERjZGMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQrEft3vYOayUZ1lE93irM/dT P3kB1G3ae45glWRRk/SkPsGCdbBop0bqOWVDxNLNNx0mh/cbDUnln+h2hWd+GXWE VL8ZoD/EolbN9xCozUh1qOYsTkTOTPcHba9wNwWQaxnBPKB0/KBFzfR/1RTZiQMh 0/s5KNhrnwPY3tcOPW0ymEon4B/qDmNT7uwFh2AjuShbt4FLm7twlUj/+kIfwgir x7WzemDwbH4qKTjOYgPQ8Ur1rbUCwrCb8RsIlhTe+M1revL7XD/FuF2KIBWv5IDw pS/MDVMGoQnZUi6k8FmKw07pKelADgO0DCbCaQ4yWICw4VMy9FMCPTq2RaCrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWYPuNRzKSVr4wvsdpktZs4jfbw8wHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACZtPbBUlidyzd5O0X0Zs2T84zO7xOgEwh/1 sskG1Qf2dfhi1XSUjtmpmVphqqxir4k9LN6mutJ7LWiM3p/esuYHWolPQsB8TrVd J6ut/YVJlfI4MKVxYwD359j3LY6P1Gi73zlfmEoN9dSyIXeof57+FG4/CDM7Pbyo g6KoWVHSmzSayYL9j8WgmLaDiuuCKmVKsFaq0QSO4hJrgcyxR3hNU/orTIFMg33k /4RztuUptwRcm0y81ANW2IsYxEy5p6YSjkQe3eF4orPW6sNPvZXuawhqxbmtGKfW aa7PFtRz/xIfQ2kMDepxe5N6vMX1qkXaFgV2CoVkMcnv0Agr0Pg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:08:59 2026 by rpki-client