$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft (raw, json) Hash identifier: fvdLF7l6fRECdzMKYliySsTE1FV5Hzv0+pwx2YV/PGc= Subject key identifier: 2C:9E:57:B1:5C:FE:41:17:7D:1D:41:CE:2D:31:A2:72:46:4C:EC:65 Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Certificate serial: 0230809AE8F8F8FC80028A1833C47055E49BF848 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft Manifest number: BA Signing time: Fri 20 Mar 2026 03:31:45 +0000 Manifest this update: Fri 20 Mar 2026 03:26:45 +0000 Manifest next update: Mon 23 Mar 2026 13:19:45 +0000 Files and hashes: 1: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: krntMtkV7itMzb7RpigawfupJFS+qvD2y8iOF/n2mS4=) 2: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl (hash: 91o2yiel9VhPOotvR5NIATI9efqlGtZrGQI75txSsvk=) 3: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: KR+NJhq+RXT/HF9cVUOg/9gCypJUOrwEKynO5zfKYzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 13:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:30:80:9a:e8:f8:f8:fc:80:02:8a:18:33:c4:70:55:e4:9b:f8:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Validity Not Before: Mar 20 03:26:45 2026 GMT Not After : Mar 23 13:19:45 2026 GMT Subject: CN=2C9E57B15CFE41177D1D41CE2D31A272464CEC65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:a9:9a:2c:50:12:3f:69:a0:82:ac:86:f7:f7: bf:39:eb:76:fe:b1:dd:77:89:13:8b:18:2b:3f:2f: 9a:37:b5:81:51:4b:dc:72:af:97:65:02:ff:04:58: cb:a5:86:9b:66:89:69:91:fc:3e:d5:90:14:7f:cb: e8:5e:e5:fe:b0:49:2b:19:ef:8d:a2:6b:46:a2:ab: db:06:51:98:ab:1f:ba:50:d8:34:15:fb:55:94:ca: f8:b7:77:93:41:ab:1a:ed:c9:e1:53:26:eb:80:a6: 9a:29:33:01:8a:8a:5d:38:05:d2:9b:ae:c7:be:7e: 72:fc:dd:e7:cd:75:18:b0:04:6e:89:a0:dc:8a:57: 83:ff:fb:82:c5:56:ee:ea:e7:ed:77:74:f2:52:3e: ea:a0:a3:a7:89:9e:df:c9:a3:88:cc:39:25:9c:23: 00:1e:54:8f:bf:41:be:ae:38:80:ba:14:d0:9a:21: 23:d3:27:6b:29:03:bb:dc:cf:c1:2e:28:57:47:38: 67:33:74:59:48:75:87:a6:e6:34:45:51:9e:fd:70: 2f:23:89:96:c9:bf:de:96:08:b0:b5:95:9d:14:9d: 54:85:54:6c:5e:1d:c0:6c:9e:a9:3e:9f:89:da:a0: a4:b0:fe:a3:48:93:4c:90:a0:32:66:a3:9d:4c:ce: 6f:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:9E:57:B1:5C:FE:41:17:7D:1D:41:CE:2D:31:A2:72:46:4C:EC:65 X509v3 Authority Key Identifier: keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:09:97:2b:e9:e5:d3:1f:02:b7:c2:04:86:a4:20:c7:68:eb: d3:51:85:ae:a0:53:ed:5c:ec:07:34:ea:5a:2f:a9:36:87:f6: 94:de:56:86:04:21:4d:08:c6:9c:10:52:a6:02:e5:39:69:a5: d1:24:2d:e6:67:a2:4a:80:78:a8:b1:c7:3f:be:fa:a7:3c:33: a6:2a:3a:20:74:c5:7c:8c:32:73:c4:dc:9f:b4:99:2a:62:3b: 19:8c:07:1e:4f:0f:6d:08:07:37:5e:2a:7a:05:03:5d:97:a7: aa:89:ff:54:cc:ea:9b:e7:af:d2:24:7e:0b:95:14:ab:df:28: 3e:69:80:5e:0b:e0:fd:18:a6:e5:f3:65:70:1f:e5:97:39:77: 5a:2a:d4:5b:e2:7a:85:c4:58:b5:20:a5:99:9b:ef:02:2d:a7: ee:0b:0f:52:92:42:2b:cb:2c:4c:73:10:2c:3e:f2:7a:b4:fc: 3d:aa:7e:15:4b:e7:b0:07:25:80:87:ca:6a:c4:81:9c:5c:d0: ca:69:0b:26:dc:3f:37:d3:51:c6:ad:6a:e8:ca:17:97:98:e0: 30:28:90:d2:44:58:af:8b:b8:fc:0e:f8:a8:02:8f:cc:68:89: ce:ad:a0:aa:5e:5c:a8:1d:81:ce:52:57:c8:dc:55:5c:c1:a0: 76:9b:3f:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjCAmuj4+PyAAooYM8RwVeSb+EgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkz NzJENTVBNTAeFw0yNjAzMjAwMzI2NDVaFw0yNjAzMjMxMzE5NDVaMDMxMTAvBgNV BAMTKDJDOUU1N0IxNUNGRTQxMTc3RDFENDFDRTJEMzFBMjcyNDY0Q0VDNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwqZosUBI/aaCCrIb3978563b+ sd13iROLGCs/L5o3tYFRS9xyr5dlAv8EWMulhptmiWmR/D7VkBR/y+he5f6wSSsZ 742ia0aiq9sGUZirH7pQ2DQV+1WUyvi3d5NBqxrtyeFTJuuAppopMwGKil04BdKb rse+fnL83efNdRiwBG6JoNyKV4P/+4LFVu7q5+13dPJSPuqgo6eJnt/Jo4jMOSWc IwAeVI+/Qb6uOIC6FNCaISPTJ2spA7vcz8EuKFdHOGczdFlIdYem5jRFUZ79cC8j iZbJv96WCLC1lZ0UnVSFVGxeHcBsnqk+n4naoKSw/qNIk0yQoDJmo51Mzm9RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULJ5XsVz+QRd9HUHOLTGickZM7GUwHwYDVR0j BBgwFoAUkxDEc+wSGd3JkRgn8rituTctVaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODE5Y2RkZi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMC85MzEwQzQ3M0VD MTIxOUREQzk5MTE4MjdGMkI4QURCOTM3MkQ1NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkzNzJE NTVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFE QjkzNzJENTVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACAJlyvp5dMfArfCBIakIMdo69NRha6gU+1c 7Ac06lovqTaH9pTeVoYEIU0IxpwQUqYC5TlppdEkLeZnokqAeKixxz+++qc8M6Yq OiB0xXyMMnPE3J+0mSpiOxmMBx5PD20IBzdeKnoFA12Xp6qJ/1TM6pvnr9IkfguV FKvfKD5pgF4L4P0YpuXzZXAf5Zc5d1oq1FvieoXEWLUgpZmb7wItp+4LD1KSQivL LExzECw+8nq0/D2qfhVL57AHJYCHymrEgZxc0MppCybcPzfTUcataujKF5eY4DAo kNJEWK+LuPwO+KgCj8xoic6toKpeXKgdgc5SV8jcVVzBoHabP2E= -----END CERTIFICATE-----Generated at Sat Mar 21 10:58:11 2026 by rpki-client