$ rpki-client -vvf repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft File: 310FDC67F23478B4703C5FD6B3D222210983CA6E.mft (raw, json) Hash identifier: vwmA4mvSvzindXqQAtpIif6Llr6s5PJ3dO5RaIv/yP4= Subject key identifier: 4F:65:0F:AC:B9:1C:FA:5D:60:EF:23:E0:7A:B3:12:71:5E:64:DD:74 Authority key identifier: 31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E Certificate issuer: /CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Certificate serial: 3C8A2C54F3E32CAA4F6691A888E5E1177DE997A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft Manifest number: 10 Signing time: Thu 26 Mar 2026 03:01:49 +0000 Manifest this update: Thu 26 Mar 2026 02:56:49 +0000 Manifest next update: Sun 29 Mar 2026 09:16:49 +0000 Files and hashes: 1: 310FDC67F23478B4703C5FD6B3D222210983CA6E.crl (hash: 30BMzp4GvCEsmCamBvw2O8wjDFyX3S2Fn3h6qCUx0pc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:8a:2c:54:f3:e3:2c:aa:4f:66:91:a8:88:e5:e1:17:7d:e9:97:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Validity Not Before: Mar 26 02:56:49 2026 GMT Not After : Mar 29 09:16:49 2026 GMT Subject: CN=4F650FACB91CFA5D60EF23E07AB312715E64DD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:44:e3:a5:36:89:b2:11:f5:97:a0:ec:02:57: 35:9e:e8:20:c0:a4:d8:4e:c8:74:bb:55:89:f8:d1: 6e:d4:09:2b:d0:16:e5:e1:bc:0b:09:70:fa:f2:01: 07:f0:72:f9:e5:0f:98:ce:ab:0d:20:6e:4e:e1:82: 71:e8:75:54:00:ab:3f:b6:c0:cd:03:2f:5a:bb:f5: fd:c1:5f:89:ec:da:85:a8:09:e8:91:65:4a:78:f4: 69:bf:e4:5f:44:fa:d2:90:c6:90:82:86:29:0a:22: f0:71:20:75:ce:c1:17:36:fc:74:5a:43:de:9c:b8: 66:61:a8:08:c4:ee:8a:bf:4b:18:77:d1:84:cc:85: 21:db:09:32:69:1a:9f:65:44:9d:5c:d4:68:12:7b: c4:90:fa:a2:75:7f:c3:70:f1:a4:a3:2b:e7:bf:c0: 11:13:94:c0:fd:ce:a8:87:00:cb:e5:f4:64:25:90: e8:c8:c1:04:23:20:72:3c:0e:d8:93:8b:00:35:5f: 45:5a:e5:75:88:36:4a:10:e6:e0:3a:8e:08:fa:de: d1:c5:5d:90:1c:6c:19:fd:09:fb:32:3c:e0:45:4f: fc:a2:df:71:96:cf:51:6e:be:74:4b:6b:11:bb:40: 9a:91:82:38:6d:33:34:e0:47:0f:95:77:3e:81:ac: de:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:65:0F:AC:B9:1C:FA:5D:60:EF:23:E0:7A:B3:12:71:5E:64:DD:74 X509v3 Authority Key Identifier: keyid:31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:07:91:a3:26:76:e2:71:b8:02:e2:4f:38:a5:9a:07:95:6d: 6f:d1:b0:2d:0e:46:5a:36:49:7c:3b:ea:ae:0a:94:67:f4:e1: 20:8c:82:3d:43:21:6a:2e:e7:38:ec:6e:c7:cf:7b:7a:5c:21: 2e:6d:45:21:db:60:24:39:ff:1a:93:79:43:f2:c1:86:6e:7e: 53:cb:6b:b1:ea:e1:2c:ae:e8:50:60:79:dc:4f:67:02:50:0d: a5:f7:81:39:7c:7e:75:66:af:f0:1b:b6:b5:0e:54:47:ed:bf: b7:d2:64:be:ac:72:8b:24:d2:cd:d9:a0:72:33:e2:c0:d9:ba: e7:0f:49:ff:a4:c9:d7:24:8a:e9:c7:f1:3f:a0:6f:51:02:0d: cd:42:d8:54:e2:22:77:ac:b2:06:47:38:66:dd:cb:bf:cb:b8: 04:6c:19:ca:32:00:c4:8e:20:4b:88:3c:83:ac:b0:b6:c6:3c: 52:14:42:60:fa:0f:e1:20:3a:42:c4:6c:67:1b:3f:b6:92:2b: 87:bd:2e:13:8a:37:ad:17:b9:5f:f4:ca:a1:8e:47:a9:2e:56: 43:fe:6d:04:78:c6:a7:8d:63:fe:1d:39:c0:12:75:1f:43:40: ed:79:1e:f7:e7:9e:ed:5a:c6:43:bd:b9:4c:e0:a0:f3:a0:3d: f4:a1:c7:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPIosVPPjLKpPZpGoiOXhF33pl6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEw OTgzQ0E2RTAeFw0yNjAzMjYwMjU2NDlaFw0yNjAzMjkwOTE2NDlaMDMxMTAvBgNV BAMTKDRGNjUwRkFDQjkxQ0ZBNUQ2MEVGMjNFMDdBQjMxMjcxNUU2NERENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3ROOlNomyEfWXoOwCVzWe6CDA pNhOyHS7VYn40W7UCSvQFuXhvAsJcPryAQfwcvnlD5jOqw0gbk7hgnHodVQAqz+2 wM0DL1q79f3BX4ns2oWoCeiRZUp49Gm/5F9E+tKQxpCChikKIvBxIHXOwRc2/HRa Q96cuGZhqAjE7oq/Sxh30YTMhSHbCTJpGp9lRJ1c1GgSe8SQ+qJ1f8Nw8aSjK+e/ wBETlMD9zqiHAMvl9GQlkOjIwQQjIHI8DtiTiwA1X0Va5XWINkoQ5uA6jgj63tHF XZAcbBn9CfsyPOBFT/yi33GWz1FuvnRLaxG7QJqRgjhtMzTgRw+Vdz6BrN63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT2UPrLkc+l1g7yPgerMScV5k3XQwHwYDVR0j BBgwFoAUMQ/cZ/I0eLRwPF/Ws9IiIQmDym4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTE0YmZmMi00Nzg5LTQwMTctOGZhYy1iYTVmNjIzZTdlYmMvMC8zMTBGREM2N0Yy MzQ3OEI0NzAzQzVGRDZCM0QyMjIyMTA5ODNDQTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEwOTgz Q0E2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIy MjEwOTgzQ0E2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4HkaMmduJxuALiTzilmgeVbW/RsC0ORlo2 SXw76q4KlGf04SCMgj1DIWou5zjsbsfPe3pcIS5tRSHbYCQ5/xqTeUPywYZuflPL a7Hq4Syu6FBgedxPZwJQDaX3gTl8fnVmr/AbtrUOVEftv7fSZL6scosk0s3ZoHIz 4sDZuucPSf+kydckiunH8T+gb1ECDc1C2FTiInessgZHOGbdy7/LuARsGcoyAMSO IEuIPIOssLbGPFIUQmD6D+EgOkLEbGcbP7aSK4e9LhOKN60XuV/0yqGOR6kuVkP+ bQR4xqeNY/4dOcASdR9DQO15Hvfnnu1axkO9uUzgoPOgPfShx94= -----END CERTIFICATE-----Generated at Thu Mar 26 21:31:15 2026 by rpki-client