$ rpki-client -vvf repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft File: 31C2F0F25531E3524E0E0E901310435F2F406AC6.mft (raw, json) Hash identifier: qE+In9u+WfNi4RcTDe34YYV+RW6D0Z8c5kxPaU09dfA= Subject key identifier: 27:69:75:34:6A:3B:03:DF:A9:F7:33:FC:55:D6:68:75:09:04:6F:F7 Authority key identifier: 31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 Certificate issuer: /CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Certificate serial: 38645134EC1DAD49874F6BF1B2AAE862DEE08062 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft Manifest number: F9 Signing time: Mon 20 Apr 2026 11:51:36 +0000 Manifest this update: Mon 20 Apr 2026 11:46:36 +0000 Manifest next update: Thu 23 Apr 2026 12:14:36 +0000 Files and hashes: 1: 31C2F0F25531E3524E0E0E901310435F2F406AC6.crl (hash: aoFDvLjvAtFGXlJo2r3AsUwDrpKBBpd6rG9i0zcTc+4=) 2: 3136302e3138372e3134342e302f32332d3233203d3e20313533313231.roa (hash: UX4GTYxgh3sTP6mJveFmG7hH/tpmW/UH4U2z8tOQWto=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:14:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:64:51:34:ec:1d:ad:49:87:4f:6b:f1:b2:aa:e8:62:de:e0:80:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31C2F0F25531E3524E0E0E901310435F2F406AC6 Validity Not Before: Apr 20 11:46:36 2026 GMT Not After : Apr 23 12:14:36 2026 GMT Subject: CN=276975346A3B03DFA9F733FC55D6687509046FF7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:33:e0:ad:c6:0b:fd:04:84:c4:ee:bd:7a:93: c5:7e:bc:55:b7:6e:4a:0f:d3:1a:1b:e0:8f:fc:3d: b7:12:0e:fc:55:b9:26:74:5e:0a:12:f0:b4:f6:7e: 31:9a:5c:c5:76:6a:23:1f:40:a6:5e:5b:8e:ac:0b: 43:71:93:54:23:e9:ba:17:72:a9:42:93:b6:75:39: ec:be:bc:28:1a:3e:11:22:ec:4b:b4:47:ed:36:34: f0:f0:14:41:50:22:b7:b2:8f:43:f4:97:ed:6b:ac: 74:81:4b:c0:82:d9:f9:e7:7d:e9:db:0b:3a:17:39: cd:3f:b7:f6:04:46:78:50:a9:b2:f7:33:83:87:40: 78:e1:b8:f6:1d:da:20:1c:ce:00:86:eb:e0:9a:2d: 8c:8c:9f:15:7b:e4:58:70:80:3e:e1:47:dc:40:67: 8b:af:5a:ca:8a:71:62:ee:cb:68:c2:15:1d:e9:72: 8b:04:a8:2a:5e:80:9f:4e:05:ea:db:d4:89:2e:9c: d4:34:9e:9c:30:1b:1b:ba:8a:69:0b:27:87:b7:a6: ef:b4:d7:d7:5f:fc:27:0f:42:76:87:3c:c2:c7:63: a9:84:c8:4e:f5:24:8f:50:79:7c:82:53:d2:a5:9c: 1d:64:db:f5:54:27:dc:af:fe:e9:ca:c6:2b:87:fc: aa:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:69:75:34:6A:3B:03:DF:A9:F7:33:FC:55:D6:68:75:09:04:6F:F7 X509v3 Authority Key Identifier: keyid:31:C2:F0:F2:55:31:E3:52:4E:0E:0E:90:13:10:43:5F:2F:40:6A:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/31C2F0F25531E3524E0E0E901310435F2F406AC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba89b7dd-99a7-450e-be84-b3bfc7340f1f/0/31C2F0F25531E3524E0E0E901310435F2F406AC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:eb:c4:da:a2:ad:67:36:fe:11:73:ef:66:b6:1a:51:c0:4e: 58:b2:7f:50:43:67:28:af:72:16:f2:f8:f9:76:b3:9a:fc:f0: 2b:c0:a9:e1:12:7d:12:f2:41:27:39:13:5c:36:f8:9f:53:d8: 52:0b:d8:1b:6b:00:06:6e:14:2c:eb:8d:bf:b7:00:bd:68:8f: 5b:ab:ba:d4:0a:be:71:97:39:36:38:db:19:a9:c4:85:ae:56: 5c:13:34:87:b0:2c:8e:23:9a:12:79:33:08:69:06:6f:89:16: f6:57:24:a1:97:f8:29:c0:92:37:90:2a:5c:5a:25:81:54:9a: da:a0:44:85:da:f7:24:de:ee:c8:d3:3c:33:1b:a2:67:4e:d1: b2:2c:36:90:f9:a3:31:4a:f0:70:c1:9a:ca:f6:d3:e8:26:9c: 35:7a:e3:3e:e1:81:a4:55:c0:14:16:1e:16:99:dd:a3:0c:f9: 14:eb:34:6b:1c:f2:21:72:ab:da:6f:b5:58:18:d9:a5:0a:83: 1d:d8:3a:55:b2:a9:63:ba:e3:dc:aa:9d:3e:76:68:dd:8b:b5: 4f:25:a8:10:06:d9:50:68:34:06:96:75:78:f2:09:1c:cc:0b: f8:a3:6a:eb:91:46:60:28:bc:73:74:80:48:de:35:64:11:ad: cb:3b:ca:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOGRRNOwdrUmHT2vxsqroYt7ggGIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYy RjQwNkFDNjAeFw0yNjA0MjAxMTQ2MzZaFw0yNjA0MjMxMjE0MzZaMDMxMTAvBgNV BAMTKDI3Njk3NTM0NkEzQjAzREZBOUY3MzNGQzU1RDY2ODc1MDkwNDZGRjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLM+Ctxgv9BITE7r16k8V+vFW3 bkoP0xob4I/8PbcSDvxVuSZ0XgoS8LT2fjGaXMV2aiMfQKZeW46sC0Nxk1Qj6boX cqlCk7Z1Oey+vCgaPhEi7Eu0R+02NPDwFEFQIreyj0P0l+1rrHSBS8CC2fnnfenb CzoXOc0/t/YERnhQqbL3M4OHQHjhuPYd2iAczgCG6+CaLYyMnxV75FhwgD7hR9xA Z4uvWsqKcWLuy2jCFR3pcosEqCpegJ9OBerb1IkunNQ0npwwGxu6imkLJ4e3pu+0 19df/CcPQnaHPMLHY6mEyE71JI9QeXyCU9KlnB1k2/VUJ9yv/unKxiuH/KozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ2l1NGo7A9+p9zP8VdZodQkEb/cwHwYDVR0j BBgwFoAUMcLw8lUx41JODg6QExBDXy9AasYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTg5YjdkZC05OWE3LTQ1MGUtYmU4NC1iM2JmYzczNDBmMWYvMC8zMUMyRjBGMjU1 MzFFMzUyNEUwRTBFOTAxMzEwNDM1RjJGNDA2QUM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQzNUYyRjQw NkFDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmE4OWI3ZGQtOTlhNy00NTBlLWJl ODQtYjNiZmM3MzQwZjFmLzAvMzFDMkYwRjI1NTMxRTM1MjRFMEUwRTkwMTMxMDQz NUYyRjQwNkFDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3rxNqirWc2/hFz72a2GlHATliyf1BDZyiv chby+Pl2s5r88CvAqeESfRLyQSc5E1w2+J9T2FIL2BtrAAZuFCzrjb+3AL1oj1ur utQKvnGXOTY42xmpxIWuVlwTNIewLI4jmhJ5MwhpBm+JFvZXJKGX+CnAkjeQKlxa JYFUmtqgRIXa9yTe7sjTPDMbomdO0bIsNpD5ozFK8HDBmsr20+gmnDV64z7hgaRV wBQWHhaZ3aMM+RTrNGsc8iFyq9pvtVgY2aUKgx3YOlWyqWO649yqnT52aN2LtU8l qBAG2VBoNAaWdXjyCRzMC/ijauuRRmAovHN0gEjeNWQRrcs7ytc= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:52 2026 by rpki-client