$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: d0Hg2WBOcXXsNBZj2GoFBG1BcZLx/jeNP9t8uDwznZY= Subject key identifier: CA:09:CF:4E:7F:77:5E:A3:17:A5:DB:E8:85:93:A3:A0:1E:50:8D:9D Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 7221F7DED4797020264CB72BA65F5F568B9A4582 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: F7 Signing time: Fri 06 Mar 2026 19:00:52 +0000 Manifest this update: Fri 06 Mar 2026 18:55:52 +0000 Manifest next update: Tue 10 Mar 2026 00:47:52 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: bMxckldMi9p6eU6mhAsVnajFCRD+9dMCdfpSMfCRQqw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:21:f7:de:d4:79:70:20:26:4c:b7:2b:a6:5f:5f:56:8b:9a:45:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Mar 6 18:55:52 2026 GMT Not After : Mar 10 00:47:52 2026 GMT Subject: CN=CA09CF4E7F775EA317A5DBE88593A3A01E508D9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:af:8e:ee:77:39:dd:dc:8a:1a:48:2c:3d:2e: ca:f5:fb:43:87:59:9f:e1:f9:4e:ec:b1:13:31:67: 17:cc:4e:86:83:03:50:de:a9:55:4f:d3:ff:07:5a: 74:b0:f3:0f:33:f4:8e:dd:69:0e:6e:11:dc:15:3e: ad:d1:3a:9d:61:af:3a:d5:dd:46:e6:e4:33:e2:a5: f4:11:83:c1:8a:c1:d3:d7:90:d4:a5:e6:4a:e6:f5: 14:c9:2c:23:61:c7:f3:ca:a5:b9:b3:f2:bc:40:90: 14:5e:0c:3b:a3:24:30:41:84:70:28:7c:b2:29:a0: 8c:56:e2:59:5b:91:ab:6e:db:c3:c9:18:87:9b:45: 3b:02:45:94:dc:47:fe:f0:03:da:3e:f1:85:b3:d7: 3e:10:55:cc:ae:a0:25:a4:81:43:88:9b:f9:16:01: bf:20:6a:93:8e:e6:30:3c:a9:30:80:6b:80:62:66: 02:5d:78:1b:9c:19:e6:66:51:1d:af:69:78:a9:71: 6c:58:d2:28:18:e0:69:7a:df:33:f8:de:31:ae:1d: 0e:47:43:b4:89:80:95:0d:3a:be:d4:19:da:3e:c2: 2f:b8:56:82:18:24:37:ea:fa:4f:a2:15:a9:c3:3d: 86:b5:7e:c0:8d:31:43:18:e2:30:ab:d7:4d:bf:d8: 38:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:09:CF:4E:7F:77:5E:A3:17:A5:DB:E8:85:93:A3:A0:1E:50:8D:9D X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ff:5c:06:49:43:c7:71:24:01:df:a3:48:78:79:d3:e3:f6: 72:8b:05:77:fc:aa:53:1e:46:55:db:80:27:59:c2:8d:a3:79: d4:62:d8:15:28:78:47:ef:fc:66:46:d1:80:fc:f8:5c:72:b1: 48:26:d1:b1:98:ea:d9:80:fc:1d:eb:c3:cf:d2:02:e0:4d:7d: 88:3e:b8:fc:e0:9f:67:55:5e:20:dd:3f:42:17:29:7e:8c:af: a6:ab:a1:d0:10:e6:5c:dc:ab:5c:7d:f4:7f:db:ab:a4:5b:8e: 09:91:b4:30:3c:1e:de:5a:8f:d9:7c:6a:a5:0d:0e:b7:9c:f9: 49:3b:3e:24:36:5c:29:6b:6e:96:2f:c4:c0:96:c6:7b:94:10: 87:c0:aa:4a:fa:0b:76:bb:26:cb:24:6e:ab:ff:82:75:7d:b5: 71:9c:13:12:0d:f7:b0:5b:55:c4:94:b4:e3:d3:d6:d5:7c:0b: 06:a4:fe:39:ed:c8:1e:39:89:dd:48:d1:51:dc:42:ae:b9:26: 30:df:84:ad:31:a0:7a:9c:11:92:56:9e:f7:a4:f6:06:22:0c: b7:05:17:f8:6f:5e:54:d1:64:06:40:94:32:5e:9c:d5:ed:3d: a7:ce:c8:36:c9:f1:1f:4c:a1:fc:dc:fe:e7:ab:78:53:ec:12: 9f:01:1f:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciH33tR5cCAmTLcrpl9fVouaRYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNjAzMDYxODU1NTJaFw0yNjAzMTAwMDQ3NTJaMDMxMTAvBgNV BAMTKENBMDlDRjRFN0Y3NzVFQTMxN0E1REJFODg1OTNBM0EwMUU1MDhEOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNr47udznd3IoaSCw9Lsr1+0OH WZ/h+U7ssRMxZxfMToaDA1DeqVVP0/8HWnSw8w8z9I7daQ5uEdwVPq3ROp1hrzrV 3Ubm5DPipfQRg8GKwdPXkNSl5krm9RTJLCNhx/PKpbmz8rxAkBReDDujJDBBhHAo fLIpoIxW4llbkatu28PJGIebRTsCRZTcR/7wA9o+8YWz1z4QVcyuoCWkgUOIm/kW Ab8gapOO5jA8qTCAa4BiZgJdeBucGeZmUR2vaXipcWxY0igY4Gl63zP43jGuHQ5H Q7SJgJUNOr7UGdo+wi+4VoIYJDfq+k+iFanDPYa1fsCNMUMY4jCr102/2DidAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUygnPTn93XqMXpdvohZOjoB5QjZ0wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIn/XAZJQ8dxJAHfo0h4edPj9nKLBXf8qlMe RlXbgCdZwo2jedRi2BUoeEfv/GZG0YD8+FxysUgm0bGY6tmA/B3rw8/SAuBNfYg+ uPzgn2dVXiDdP0IXKX6Mr6arodAQ5lzcq1x99H/bq6RbjgmRtDA8Ht5aj9l8aqUN Drec+Uk7PiQ2XClrbpYvxMCWxnuUEIfAqkr6C3a7Jsskbqv/gnV9tXGcExIN97Bb VcSUtOPT1tV8Cwak/jntyB45id1I0VHcQq65JjDfhK0xoHqcEZJWnvek9gYiDLcF F/hvXlTRZAZAlDJenNXtPafOyDbJ8R9Mofzc/uereFPsEp8BH74= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:34 2026 by rpki-client