$ rpki-client -vvf repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft File: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft (raw, json) Hash identifier: VBuP6dYUHPPOktjpbSXLXfz4obzZqPfR6TU3JxN8DQM= Subject key identifier: 79:DF:3C:DB:46:9C:40:1E:92:B7:59:C2:7F:7A:EA:AD:58:8A:1F:CF Authority key identifier: 30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 Certificate issuer: /CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Certificate serial: 1A65907E4B5E92D8EDC968631E88DC218ADFBBA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft Manifest number: FF Signing time: Tue 24 Mar 2026 15:51:10 +0000 Manifest this update: Tue 24 Mar 2026 15:46:10 +0000 Manifest next update: Sat 28 Mar 2026 00:46:10 +0000 Files and hashes: 1: 309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl (hash: L61KKkWnqwe9KllJCmCxexTcGxLl7Nxl0/CCzKuGVIs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:46:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:65:90:7e:4b:5e:92:d8:ed:c9:68:63:1e:88:dc:21:8a:df:bb:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=309FFE30695E76BA4952E2965B4FE24F9B9D6770 Validity Not Before: Mar 24 15:46:10 2026 GMT Not After : Mar 28 00:46:10 2026 GMT Subject: CN=79DF3CDB469C401E92B759C27F7AEAAD588A1FCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:75:4e:f2:b2:76:43:75:6f:88:8f:21:0c:20: 1d:60:3c:b8:eb:37:75:08:14:c5:bc:4e:31:52:4e: 40:27:68:77:a6:2c:da:ce:ce:da:44:b6:52:58:d7: fd:22:f3:c8:c3:0f:c7:79:7a:81:60:d1:87:be:9d: 20:48:6a:8e:e5:ae:f4:f6:09:c3:58:2b:39:32:bb: d6:da:ce:ea:1f:b2:62:bb:0f:a8:ce:bc:79:44:e5: c1:02:89:e9:d7:0e:dc:a6:25:0b:2b:94:bc:92:1b: 92:a0:58:66:c1:03:e9:9a:53:c2:8d:80:2b:87:5f: ee:22:3d:b3:99:c8:e3:69:56:2d:14:1f:80:71:55: 57:c7:d8:40:5d:83:45:d1:ff:43:be:60:e1:26:2e: 06:1b:23:19:36:83:85:bf:22:81:97:30:c8:bb:b7: 13:f0:76:bd:10:59:57:b5:a1:ee:e0:61:6a:13:b4: 15:42:be:98:14:03:39:00:b6:77:e9:5a:03:d8:ae: c6:b3:bd:52:fb:45:d0:eb:90:9a:8f:e6:ee:3b:0d: 82:7b:02:7e:64:f6:7e:cc:6c:8e:06:24:02:52:46: f0:ad:ad:b3:67:5f:da:db:63:85:bb:c0:2d:62:32: af:a8:fe:ce:67:8c:65:fd:ba:3a:fe:de:94:33:7b: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DF:3C:DB:46:9C:40:1E:92:B7:59:C2:7F:7A:EA:AD:58:8A:1F:CF X509v3 Authority Key Identifier: keyid:30:9F:FE:30:69:5E:76:BA:49:52:E2:96:5B:4F:E2:4F:9B:9D:67:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/309FFE30695E76BA4952E2965B4FE24F9B9D6770.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3cb50b0-43cc-48d0-91f4-05bbde7ac1d0/0/309FFE30695E76BA4952E2965B4FE24F9B9D6770.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:72:65:2b:54:bd:ee:7c:09:66:d3:b3:c3:2b:fe:b2:42:64: 2e:ec:e1:1e:fa:db:8d:81:3c:7b:9b:76:ac:5c:41:0a:18:b2: 81:95:08:9c:2a:bd:d0:43:cd:6b:bf:7d:7c:4d:a2:a3:19:4b: 2e:7b:b6:2d:8a:11:6b:c3:2b:2f:02:10:38:56:9a:d7:10:96: 62:18:ea:ce:d6:7a:0b:69:d0:9f:04:11:45:a8:82:a4:84:f3: ca:4e:93:46:fe:c7:f3:ad:4b:49:3c:15:15:d4:ce:bf:9b:09: 3a:80:35:7a:31:64:21:b1:c8:76:fc:15:87:74:e6:3d:9d:29: bb:cd:d2:7e:c8:6f:cc:a7:96:4f:72:56:88:13:02:94:a2:c3: 6d:2b:bd:ad:ac:8f:18:e7:3d:03:d9:e7:c6:a6:f8:f5:6e:ae: 68:54:28:de:d1:36:3b:1e:1c:b6:22:4e:7e:77:c5:d6:bb:2d: c3:82:01:8b:ef:5c:b7:0c:c1:4e:ec:4d:86:eb:c3:db:92:65: d4:a2:ae:1d:0c:ef:e3:a8:4c:7b:df:49:80:ed:de:8c:7d:a1: d4:bd:94:a9:fb:f0:8b:cd:15:7f:9c:92:31:81:ea:79:e5:e9: 25:3d:62:38:7e:1f:b6:e1:b7:d2:82:c8:7a:29:64:9d:45:dd: da:e7:34:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGmWQfktektjtyWhjHojcIYrfu6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5 QjlENjc3MDAeFw0yNjAzMjQxNTQ2MTBaFw0yNjAzMjgwMDQ2MTBaMDMxMTAvBgNV BAMTKDc5REYzQ0RCNDY5QzQwMUU5MkI3NTlDMjdGN0FFQUFENTg4QTFGQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdU7ysnZDdW+IjyEMIB1gPLjr N3UIFMW8TjFSTkAnaHemLNrOztpEtlJY1/0i88jDD8d5eoFg0Ye+nSBIao7lrvT2 CcNYKzkyu9bazuofsmK7D6jOvHlE5cECienXDtymJQsrlLySG5KgWGbBA+maU8KN gCuHX+4iPbOZyONpVi0UH4BxVVfH2EBdg0XR/0O+YOEmLgYbIxk2g4W/IoGXMMi7 txPwdr0QWVe1oe7gYWoTtBVCvpgUAzkAtnfpWgPYrsazvVL7RdDrkJqP5u47DYJ7 An5k9n7MbI4GJAJSRvCtrbNnX9rbY4W7wC1iMq+o/s5njGX9ujr+3pQze4aVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUed8820acQB6St1nCf3rqrViKH88wHwYDVR0j BBgwFoAUMJ/+MGledrpJUuKWW0/iT5udZ3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2NiNTBiMC00M2NjLTQ4ZDAtOTFmNC0wNWJiZGU3YWMxZDAvMC8zMDlGRkUzMDY5 NUU3NkJBNDk1MkUyOTY1QjRGRTI0RjlCOUQ2NzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUyNEY5QjlE Njc3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNjYjUwYjAtNDNjYy00OGQwLTkx ZjQtMDViYmRlN2FjMWQwLzAvMzA5RkZFMzA2OTVFNzZCQTQ5NTJFMjk2NUI0RkUy NEY5QjlENjc3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHhyZStUve58CWbTs8Mr/rJCZC7s4R76242B PHubdqxcQQoYsoGVCJwqvdBDzWu/fXxNoqMZSy57ti2KEWvDKy8CEDhWmtcQlmIY 6s7Wegtp0J8EEUWogqSE88pOk0b+x/OtS0k8FRXUzr+bCTqANXoxZCGxyHb8FYd0 5j2dKbvN0n7Ib8ynlk9yVogTApSiw20rva2sjxjnPQPZ58am+PVurmhUKN7RNjse HLYiTn53xda7LcOCAYvvXLcMwU7sTYbrw9uSZdSirh0M7+OoTHvfSYDt3ox9odS9 lKn78IvNFX+ckjGB6nnl6SU9Yjh+H7bht9KCyHopZJ1F3drnNCc= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:16 2026 by rpki-client