$ rpki-client -vvf repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft File: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft (raw, json) Hash identifier: 7fmtCheX7pZOlFDOL7ZOM+tvsE9+7QrMC9WESyzdQOM= Subject key identifier: 99:15:F3:BF:FA:98:C8:E7:EB:34:7A:FF:4E:7A:BB:30:0D:CE:D2:99 Authority key identifier: 93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 Certificate issuer: /CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Certificate serial: 66817FBAD82073958CF91B3B96B96F14DC6D8275 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft Manifest number: BC Signing time: Tue 24 Mar 2026 15:31:44 +0000 Manifest this update: Tue 24 Mar 2026 15:26:44 +0000 Manifest next update: Fri 27 Mar 2026 21:55:44 +0000 Files and hashes: 1: 3130332e3135352e3139302e302f32332d3234203d3e20313431303637.roa (hash: KR+NJhq+RXT/HF9cVUOg/9gCypJUOrwEKynO5zfKYzQ=) 2: 9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl (hash: 852Mq+qsr9+hmbw+ilogylV1CT4OA+H2bvCoWN/AbiU=) 3: 323430363a373534303a3a2f33322d3438203d3e20313431303637.roa (hash: krntMtkV7itMzb7RpigawfupJFS+qvD2y8iOF/n2mS4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:55:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:81:7f:ba:d8:20:73:95:8c:f9:1b:3b:96:b9:6f:14:dc:6d:82:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9310C473EC1219DDC9911827F2B8ADB9372D55A5 Validity Not Before: Mar 24 15:26:44 2026 GMT Not After : Mar 27 21:55:44 2026 GMT Subject: CN=9915F3BFFA98C8E7EB347AFF4E7ABB300DCED299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:cc:96:72:de:b6:7e:80:7a:d9:99:ea:41:ed: 35:94:67:72:96:5b:80:d7:67:0f:b9:87:b0:77:9a: 04:ba:78:7e:70:1c:86:0a:3e:29:8f:b8:b7:73:80: fe:e0:ef:3d:ca:ac:b6:78:ff:28:2c:92:45:cf:54: b5:d5:c3:13:12:0a:de:09:bc:aa:ae:87:c7:d8:d7: d9:4b:ee:3a:31:7c:d6:93:ff:01:f9:76:62:31:b7: e4:e6:42:9c:db:d0:23:0b:2d:70:8e:f6:e0:92:f4: 12:83:4d:c6:69:9b:10:05:69:55:64:12:7a:af:ad: 5a:81:3e:a6:10:c7:ea:fa:34:cc:50:39:b0:c5:b2: 7a:a6:0b:25:5b:19:aa:0d:e9:41:8f:6e:ab:42:3a: c2:40:4e:07:31:a0:55:cc:20:67:5e:77:2d:6e:32: dd:67:fa:e1:f6:91:44:ce:e9:6f:4e:4a:d4:ef:21: 89:dd:ef:64:eb:d8:51:2a:5f:9a:4a:70:7d:3e:7a: 86:77:3b:a5:bd:5e:b1:c2:37:e8:f6:d1:89:3f:07: 0f:84:14:9a:1a:3e:da:ee:51:56:b3:ba:d8:94:4b: e7:b4:56:d5:9b:f7:6c:af:af:73:56:b4:f0:a6:52: c0:5b:de:c5:25:9c:ff:b8:dd:43:42:4b:64:e9:14: d2:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:15:F3:BF:FA:98:C8:E7:EB:34:7A:FF:4E:7A:BB:30:0D:CE:D2:99 X509v3 Authority Key Identifier: keyid:93:10:C4:73:EC:12:19:DD:C9:91:18:27:F2:B8:AD:B9:37:2D:55:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9310C473EC1219DDC9911827F2B8ADB9372D55A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7819cddf-6dd9-4d9c-b538-8b76b7c9ce61/0/9310C473EC1219DDC9911827F2B8ADB9372D55A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e2:18:fe:3c:71:1a:87:a3:6a:5d:e3:b1:88:f0:3a:3e:df: 67:0e:20:bf:67:62:ba:0b:c4:66:60:ec:4a:bf:b5:4f:82:65: f8:f1:ff:d7:8c:93:d8:6b:53:8b:1c:cf:4f:cd:9c:1d:dd:ea: fd:0b:9e:d7:ee:f2:02:3e:66:da:b1:b5:07:21:a3:24:2d:f6: 31:7c:b3:cf:57:03:50:08:17:fb:b8:c1:1f:b5:90:d7:c2:4c: e0:ee:61:47:ac:70:7e:e2:2d:9b:dd:32:27:67:09:b7:c6:6b: 85:02:3a:8e:2a:98:85:13:e9:82:12:43:c3:d4:59:a3:bc:3d: 49:05:9c:df:c8:ef:2a:8a:b9:f4:a5:5e:1e:92:55:b8:34:0d: 8b:d3:ab:c7:d6:7c:c0:5c:9a:62:43:ff:e4:9f:8f:4d:36:17: d3:41:aa:7f:6c:1a:15:89:46:94:ba:ce:cd:54:5f:ab:44:26: 03:f8:ec:39:a3:33:5a:33:e9:d3:00:f3:2b:a0:52:4c:ce:a4: da:22:63:2d:5c:b9:f1:c0:8a:b1:27:f2:9d:38:35:04:dd:96: 54:2a:37:9b:b3:d1:af:7f:5d:dd:5c:b0:b5:3a:41:c8:63:c4: e5:86:95:fb:6e:57:1e:89:77:f6:c7:b9:03:1f:cf:89:54:d9: 5b:f8:25:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoF/utggc5WM+Rs7lrlvFNxtgnUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkz NzJENTVBNTAeFw0yNjAzMjQxNTI2NDRaFw0yNjAzMjcyMTU1NDRaMDMxMTAvBgNV BAMTKDk5MTVGM0JGRkE5OEM4RTdFQjM0N0FGRjRFN0FCQjMwMERDRUQyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLzJZy3rZ+gHrZmepB7TWUZ3KW W4DXZw+5h7B3mgS6eH5wHIYKPimPuLdzgP7g7z3KrLZ4/ygskkXPVLXVwxMSCt4J vKquh8fY19lL7joxfNaT/wH5dmIxt+TmQpzb0CMLLXCO9uCS9BKDTcZpmxAFaVVk EnqvrVqBPqYQx+r6NMxQObDFsnqmCyVbGaoN6UGPbqtCOsJATgcxoFXMIGdedy1u Mt1n+uH2kUTO6W9OStTvIYnd72Tr2FEqX5pKcH0+eoZ3O6W9XrHCN+j20Yk/Bw+E FJoaPtruUVazutiUS+e0VtWb92yvr3NWtPCmUsBb3sUlnP+43UNCS2TpFNJPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRXzv/qYyOfrNHr/Tnq7MA3O0pkwHwYDVR0j BBgwFoAUkxDEc+wSGd3JkRgn8rituTctVaUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ODE5Y2RkZi02ZGQ5LTRkOWMtYjUzOC04Yjc2YjdjOWNlNjEvMC85MzEwQzQ3M0VD MTIxOUREQzk5MTE4MjdGMkI4QURCOTM3MkQ1NUE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFEQjkzNzJE NTVBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzgxOWNkZGYtNmRkOS00ZDljLWI1 MzgtOGI3NmI3YzljZTYxLzAvOTMxMEM0NzNFQzEyMTlEREM5OTExODI3RjJCOEFE QjkzNzJENTVBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7iGP48cRqHo2pd47GI8Do+32cOIL9nYroL xGZg7Eq/tU+CZfjx/9eMk9hrU4scz0/NnB3d6v0Lntfu8gI+ZtqxtQchoyQt9jF8 s89XA1AIF/u4wR+1kNfCTODuYUescH7iLZvdMidnCbfGa4UCOo4qmIUT6YISQ8PU WaO8PUkFnN/I7yqKufSlXh6SVbg0DYvTq8fWfMBcmmJD/+Sfj002F9NBqn9sGhWJ RpS6zs1UX6tEJgP47DmjM1oz6dMA8yugUkzOpNoiYy1cufHAirEn8p04NQTdllQq N5uz0a9/Xd1csLU6QchjxOWGlftuVx6Jd/bHuQMfz4lU2Vv4JXU= -----END CERTIFICATE-----Generated at Thu Mar 26 07:37:32 2026 by rpki-client