
$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
File: 0310C64163DFFAE5A8F4065429C26B631D9834D9.mft (raw, json)
Hash identifier: 5V7J3ZBVq+H5xM0+7bkh1JyhyjEwX1Su/uI1+vLMIdE=
Subject key identifier: 70:B0:B3:A9:F5:B8:43:DA:0A:87:D2:2C:9B:FC:5D:07:25:B1:2F:0E
Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
Certificate issuer: /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Certificate serial: 5D9663E638041498DE9197B49B06FB08403394F7
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
Manifest number: 0215
Signing time: Wed 25 Mar 2026 00:30:44 +0000
Manifest this update: Wed 25 Mar 2026 00:25:44 +0000
Manifest next update: Sat 28 Mar 2026 05:29:44 +0000
Files and hashes: 1: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: 1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=)
2: 0310C64163DFFAE5A8F4065429C26B631D9834D9.crl (hash: f2mqb8zRHt4GOAy6VE/TBMzzjuB+7uNWOkEIgCJaOUg=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 28 Mar 2026 05:29:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:96:63:e6:38:04:14:98:de:91:97:b4:9b:06:fb:08:40:33:94:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Validity
Not Before: Mar 25 00:25:44 2026 GMT
Not After : Mar 28 05:29:44 2026 GMT
Subject: CN=70B0B3A9F5B843DA0A87D22C9BFC5D0725B12F0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:c6:90:f1:e3:ba:77:f1:1b:77:72:68:df:82:
e4:cd:ae:bb:ed:cd:ee:83:b9:aa:11:89:0c:72:64:
d6:8b:c5:65:82:76:61:78:d9:21:d4:be:c2:b8:7e:
b4:2e:b2:90:d1:58:e0:b7:3f:ad:4c:8a:f4:ea:d5:
2c:c6:d1:07:95:57:8c:f5:d0:05:09:b8:d6:13:ba:
03:71:64:4f:56:cf:94:97:d0:58:b2:62:bb:46:26:
4f:d3:ad:8e:48:c6:2f:c0:5b:62:60:18:0e:00:5a:
f9:a8:e3:d6:ac:79:b5:77:7d:b5:c4:7c:82:9a:dd:
52:0c:48:0c:62:34:72:48:f4:26:08:4d:61:38:5d:
41:03:94:aa:4d:38:a0:bb:f6:9b:d9:cd:54:3b:10:
38:cc:8c:c6:70:21:91:34:ab:86:79:d4:ea:85:57:
cb:35:ea:c7:6b:59:c3:07:3a:59:66:c9:8f:61:03:
b8:e1:3e:07:0e:c9:43:a2:6a:47:b9:5e:ed:52:36:
62:e6:0d:fe:9f:63:7c:d6:df:7e:fd:13:5e:a1:9b:
ad:f3:78:e3:b8:98:67:b6:6b:10:7a:d4:e2:fe:99:
de:3b:35:42:69:86:5d:87:74:db:c3:00:37:ba:f4:
b3:6b:a8:e5:f1:4a:13:24:1a:22:5e:d3:ac:44:f6:
b3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:B3:A9:F5:B8:43:DA:0A:87:D2:2C:9B:FC:5D:07:25:B1:2F:0E
X509v3 Authority Key Identifier:
keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:37:f6:11:50:5d:8b:2d:4f:59:a0:ef:7d:36:6f:27:22:87:
3f:a6:8b:29:38:04:86:84:a9:e8:33:ed:fe:03:d4:02:c0:7a:
83:56:97:8b:48:a7:6a:15:62:f4:7f:c1:c1:c5:2b:22:d8:b9:
09:97:a8:6f:7b:39:fe:2f:7f:ba:ca:59:39:fc:35:76:d5:b9:
06:c0:9d:63:50:96:d8:d6:0c:46:4a:6c:39:75:f3:5a:ab:91:
ce:a7:b0:8a:5b:7a:60:ca:8c:3c:1b:03:fe:52:fa:52:42:99:
bb:7d:33:b0:e3:e6:8b:38:ed:d9:de:a6:37:cd:8d:07:50:89:
09:bc:11:2e:51:23:15:f8:ed:fd:ba:23:87:f7:be:28:10:9e:
62:1d:4a:6f:0d:9d:c3:09:15:19:7b:8f:8e:78:6f:5b:29:07:
8d:f2:8a:35:bf:b5:74:04:50:76:74:89:14:43:6c:cc:e2:57:
3c:39:60:74:d6:fa:df:19:76:4e:11:9f:f1:6d:1a:b2:a6:6f:
83:ba:92:01:0d:23:ad:d6:44:5f:91:22:f8:82:57:19:e9:f2:
89:b8:eb:db:c7:1c:59:5f:c0:0b:18:c1:1f:94:0a:23:af:a7:
0d:1c:9a:76:88:8d:db:e9:ea:8b:83:5d:34:a1:6e:f7:eb:05:
a5:e3:e1:04
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUXZZj5jgEFJjekZe0mwb7CEAzlPcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMx
RDk4MzREOTAeFw0yNjAzMjUwMDI1NDRaFw0yNjAzMjgwNTI5NDRaMDMxMTAvBgNV
BAMTKDcwQjBCM0E5RjVCODQzREEwQTg3RDIyQzlCRkM1RDA3MjVCMTJGMEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6xpDx47p38Rt3cmjfguTNrrvt
ze6DuaoRiQxyZNaLxWWCdmF42SHUvsK4frQuspDRWOC3P61MivTq1SzG0QeVV4z1
0AUJuNYTugNxZE9Wz5SX0FiyYrtGJk/TrY5Ixi/AW2JgGA4AWvmo49asebV3fbXE
fIKa3VIMSAxiNHJI9CYITWE4XUEDlKpNOKC79pvZzVQ7EDjMjMZwIZE0q4Z51OqF
V8s16sdrWcMHOllmyY9hA7jhPgcOyUOiake5Xu1SNmLmDf6fY3zW3379E16hm63z
eOO4mGe2axB61OL+md47NUJphl2HdNvDADe69LNrqOXxShMkGiJe06xE9rO9AgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUcLCzqfW4Q9oKh9Ism/xdByWxLw4wHwYDVR0j
BBgwFoAUAxDGQWPf+uWo9AZUKcJrYx2YNNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
MDk4MTk3Yy1hNTI2LTQ1YmQtOWNlOS0xNTM4M2M1ZDk1MzYvMC8wMzEwQzY0MTYz
REZGQUU1QThGNDA2NTQyOUMyNkI2MzFEOTgzNEQ5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZCNjMxRDk4
MzREOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA5ODE5N2MtYTUyNi00NWJkLTlj
ZTktMTUzODNjNWQ5NTM2LzAvMDMxMEM2NDE2M0RGRkFFNUE4RjQwNjU0MjlDMjZC
NjMxRDk4MzREOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAD439hFQXYstT1mg7302bycihz+miyk4BIaE
qegz7f4D1ALAeoNWl4tIp2oVYvR/wcHFKyLYuQmXqG97Of4vf7rKWTn8NXbVuQbA
nWNQltjWDEZKbDl181qrkc6nsIpbemDKjDwbA/5S+lJCmbt9M7Dj5os47dnepjfN
jQdQiQm8ES5RIxX47f26I4f3vigQnmIdSm8NncMJFRl7j454b1spB43yijW/tXQE
UHZ0iRRDbMziVzw5YHTW+t8Zdk4Rn/FtGrKmb4O6kgENI63WRF+RIviCVxnp8om4
69vHHFlfwAsYwR+UCiOvpw0cmnaIjdvp6ouDXTShbvfrBaXj4QQ=
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:20:37 2026 by rpki-client