$ rpki-client -vvf repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft File: 310FDC67F23478B4703C5FD6B3D222210983CA6E.mft (raw, json) Hash identifier: SgZXPv+Ew6WN5Op1cFEbKJn+RMpql3JJbzS0zgjpSIU= Subject key identifier: A0:BC:A6:D3:2E:EB:F1:A4:44:C6:6F:D5:B0:A6:06:0F:2E:BC:39:1D Authority key identifier: 31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E Certificate issuer: /CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Certificate serial: 3D4594CBA59703E711F4BB24EA61B2E4BB5203C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft Manifest number: 0D Signing time: Thu 19 Mar 2026 07:31:47 +0000 Manifest this update: Thu 19 Mar 2026 07:26:47 +0000 Manifest next update: Sun 22 Mar 2026 07:48:47 +0000 Files and hashes: 1: 310FDC67F23478B4703C5FD6B3D222210983CA6E.crl (hash: AFoMXIscY7bR7JPjnATXx9Fly2Mk39f0bimouseYWfw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 07:48:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:45:94:cb:a5:97:03:e7:11:f4:bb:24:ea:61:b2:e4:bb:52:03:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Validity Not Before: Mar 19 07:26:47 2026 GMT Not After : Mar 22 07:48:47 2026 GMT Subject: CN=A0BCA6D32EEBF1A444C66FD5B0A6060F2EBC391D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:ba:42:2a:d8:9d:4b:15:81:bd:cb:6a:d2:00: 15:b4:5f:85:af:dc:f5:f5:a8:28:95:ba:22:03:91: e9:37:3a:90:ea:b0:09:e2:b2:e2:0c:a8:46:48:7c: 84:c4:5a:56:c6:a7:3d:89:b5:f1:2a:07:a0:54:de: 59:dd:54:09:b3:85:30:67:1d:db:5e:86:19:4b:e3: 32:b7:eb:07:8d:3f:62:51:b4:28:0f:ef:db:74:1b: e8:cf:23:5c:af:31:2e:cf:bd:99:6e:9e:8e:40:b5: dd:57:b8:2d:2e:91:2a:18:b4:d7:46:ad:8c:6d:e3: fe:33:cf:14:50:64:70:77:31:87:ce:12:ea:c8:7f: c2:a5:e4:91:04:5b:87:d1:a1:0c:ba:f3:dc:07:6a: 04:60:f8:a3:00:08:77:c3:73:9f:5d:cd:af:a6:ca: ba:13:be:e8:46:21:c3:f6:5c:90:37:70:69:92:11: c7:9c:53:b9:5e:83:ea:ff:4c:6a:54:13:4b:5d:ab: d3:7d:04:be:c0:2f:9d:3d:57:51:f0:79:e2:3b:6d: 59:f1:c6:50:ad:c1:6b:b8:c4:fd:f0:0f:3a:e4:3e: f9:14:50:2d:24:48:66:54:63:c5:73:dc:af:ce:c1: 39:e1:25:9c:8d:ef:52:e4:cc:a0:82:13:f8:01:7a: 66:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:BC:A6:D3:2E:EB:F1:A4:44:C6:6F:D5:B0:A6:06:0F:2E:BC:39:1D X509v3 Authority Key Identifier: keyid:31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:4a:c6:83:8e:a4:47:20:3e:7a:db:2c:32:89:64:4b:8f:2f: a8:50:79:1f:16:7e:43:5a:21:de:c8:a7:f5:46:4d:3f:5d:c5: 9d:71:7c:d4:e9:10:13:2d:90:0e:a6:de:50:14:9c:ad:c2:79: 7c:92:0b:df:29:c0:33:79:11:73:f6:c9:68:9a:e8:6d:38:c3: 5e:3e:4e:40:29:f9:2e:55:4e:43:e7:7f:c3:0a:73:0b:0a:3f: e7:08:89:7a:00:9f:3c:df:ef:51:0b:a0:9c:de:d3:4f:00:91: fd:34:ef:cb:7e:48:81:50:66:a5:f7:77:70:2a:ab:77:e0:63: ff:74:1c:b2:ea:fb:aa:e9:96:c2:30:08:34:2a:40:54:4a:70: c0:10:90:69:91:3f:6b:3c:00:c3:05:bc:12:66:f6:5f:21:58: b0:dd:ee:07:bc:93:d0:9b:87:82:d9:4d:72:94:60:1c:0e:83: b9:2c:04:a5:b2:24:6b:0c:6a:2e:05:aa:b8:3a:3a:71:c9:53: 05:8b:7f:98:81:43:31:a7:b2:f1:55:5b:9e:0f:18:9e:94:81: 95:80:ca:43:e1:70:42:7d:98:a4:4c:c4:4c:c4:97:aa:01:cc: 02:96:dd:de:41:e2:60:ab:0a:25:22:51:68:38:d1:a8:87:9b: 86:05:85:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPUWUy6WXA+cR9Lsk6mGy5LtSA8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEw OTgzQ0E2RTAeFw0yNjAzMTkwNzI2NDdaFw0yNjAzMjIwNzQ4NDdaMDMxMTAvBgNV BAMTKEEwQkNBNkQzMkVFQkYxQTQ0NEM2NkZENUIwQTYwNjBGMkVCQzM5MUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsukIq2J1LFYG9y2rSABW0X4Wv 3PX1qCiVuiIDkek3OpDqsAnisuIMqEZIfITEWlbGpz2JtfEqB6BU3lndVAmzhTBn HdtehhlL4zK36weNP2JRtCgP79t0G+jPI1yvMS7PvZluno5Atd1XuC0ukSoYtNdG rYxt4/4zzxRQZHB3MYfOEurIf8Kl5JEEW4fRoQy689wHagRg+KMACHfDc59dza+m yroTvuhGIcP2XJA3cGmSEcecU7leg+r/TGpUE0tdq9N9BL7AL509V1HweeI7bVnx xlCtwWu4xP3wDzrkPvkUUC0kSGZUY8Vz3K/OwTnhJZyN71LkzKCCE/gBembRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoLym0y7r8aRExm/VsKYGDy68OR0wHwYDVR0j BBgwFoAUMQ/cZ/I0eLRwPF/Ws9IiIQmDym4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTE0YmZmMi00Nzg5LTQwMTctOGZhYy1iYTVmNjIzZTdlYmMvMC8zMTBGREM2N0Yy MzQ3OEI0NzAzQzVGRDZCM0QyMjIyMTA5ODNDQTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEwOTgz Q0E2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIy MjEwOTgzQ0E2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZKxoOOpEcgPnrbLDKJZEuPL6hQeR8WfkNa Id7Ip/VGTT9dxZ1xfNTpEBMtkA6m3lAUnK3CeXySC98pwDN5EXP2yWia6G04w14+ TkAp+S5VTkPnf8MKcwsKP+cIiXoAnzzf71ELoJze008Akf0078t+SIFQZqX3d3Aq q3fgY/90HLLq+6rplsIwCDQqQFRKcMAQkGmRP2s8AMMFvBJm9l8hWLDd7ge8k9Cb h4LZTXKUYBwOg7ksBKWyJGsMai4Fqrg6OnHJUwWLf5iBQzGnsvFVW54PGJ6UgZWA ykPhcEJ9mKRMxEzEl6oBzAKW3d5B4mCrCiUiUWg40aiHm4YFhYE= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:58 2026 by rpki-client