$ rpki-client -vvf repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft File: 310FDC67F23478B4703C5FD6B3D222210983CA6E.mft (raw, json) Hash identifier: tK8U+yPV68rI5WCXucnBdj7FXd2RvSo+/D2n8jLpKUo= Subject key identifier: 72:DC:38:8C:4B:53:39:17:B5:05:CF:8C:C5:B3:C1:AC:73:E5:C2:81 Authority key identifier: 31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E Certificate issuer: /CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Certificate serial: 72BF01E97DE602B90E2F3C3651D01C92019E2758 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft Manifest number: 05 Signing time: Sun 01 Mar 2026 07:21:44 +0000 Manifest this update: Sun 01 Mar 2026 07:16:44 +0000 Manifest next update: Wed 04 Mar 2026 18:37:44 +0000 Files and hashes: 1: 310FDC67F23478B4703C5FD6B3D222210983CA6E.crl (hash: qjzkReCffBYlqW9EDQUH6ppkAB+D8AVvpe1kOAz4XVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:37:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:bf:01:e9:7d:e6:02:b9:0e:2f:3c:36:51:d0:1c:92:01:9e:27:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Validity Not Before: Mar 1 07:16:44 2026 GMT Not After : Mar 4 18:37:44 2026 GMT Subject: CN=72DC388C4B533917B505CF8CC5B3C1AC73E5C281 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:43:b1:52:c7:a2:cc:21:63:c6:57:5e:84:0e: e7:ab:4e:5c:6f:50:62:81:e8:f2:44:0a:b2:99:09: 9d:e3:77:95:cd:c2:3e:a0:1f:94:82:ed:a9:56:d1: b0:63:a1:8f:d8:89:bb:97:5a:2b:03:96:08:22:ed: 54:7e:9b:97:0f:1a:c6:56:91:e6:b4:52:38:63:ce: d7:9b:56:3e:94:e7:71:ee:5b:4a:36:b6:d7:e1:22: 2e:21:d5:24:8f:e1:4f:c4:84:3b:17:0a:a2:80:e6: e8:d5:b3:c0:8a:1c:82:f9:35:e3:15:e3:4f:4c:98: 4e:06:fb:7b:c3:95:06:d4:5d:f9:83:bd:9d:65:82: 9f:e8:a7:12:b0:4c:b9:10:26:ee:da:19:9c:52:aa: c0:74:63:f7:ab:78:15:39:ab:fa:99:8d:8e:50:f8: 3e:1e:5e:8a:cb:8f:45:8b:73:27:12:0a:af:49:65: 9a:bb:00:d8:c9:84:c1:a8:a5:67:d6:17:2a:e9:6e: 37:20:92:64:19:bf:ad:a1:50:99:d6:9f:7f:af:05: 8f:df:cf:ae:23:fb:75:72:c9:c7:18:6c:b4:01:da: 73:dd:23:01:16:28:33:d7:36:cd:5c:fb:f5:40:cd: de:58:ec:04:e5:e2:20:b5:1e:b9:b2:4b:58:aa:08: 04:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:DC:38:8C:4B:53:39:17:B5:05:CF:8C:C5:B3:C1:AC:73:E5:C2:81 X509v3 Authority Key Identifier: keyid:31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:b5:23:0f:e8:29:87:e5:3f:63:61:4f:bf:69:ac:5d:0d:cb: 2e:85:78:72:d6:99:35:b5:10:ba:77:af:33:b8:7f:10:53:29: e4:11:ac:83:15:e9:09:e8:04:12:9c:96:71:08:08:65:25:d9: 83:b2:b4:fa:8b:db:50:2e:f2:b9:c2:d4:6a:51:9c:c2:21:ec: 1e:cd:8e:0d:1f:62:ba:95:57:5c:fc:30:18:39:77:14:40:b7: 49:49:a9:f0:59:d1:ae:b9:1d:19:92:d2:4c:af:f3:e1:6f:9d: 37:35:91:45:ae:7e:3e:c0:89:30:32:f0:42:2d:2a:3b:af:ce: f7:ac:fd:fe:a1:9f:56:f4:af:3a:be:b0:cc:87:be:5a:37:be: 32:16:11:7f:70:cb:bb:96:c9:c1:13:27:e8:99:4f:5c:15:21: 26:0b:51:07:57:08:4b:b3:4d:4c:eb:87:dd:83:68:67:ee:06: 31:3e:32:96:20:74:2f:7c:f9:ed:95:0d:b0:aa:9e:53:d1:1a: 5a:b3:ca:12:ea:77:2b:9e:ca:5d:60:be:00:f2:02:0d:73:c3: 48:19:60:9a:d6:c6:3f:88:b5:1d:a8:8a:31:92:27:16:5c:53: 72:65:45:d4:27:ac:59:57:69:e3:88:21:c6:57:3c:78:d7:b7: 1e:8b:f6:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcr8B6X3mArkOLzw2UdAckgGeJ1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEw OTgzQ0E2RTAeFw0yNjAzMDEwNzE2NDRaFw0yNjAzMDQxODM3NDRaMDMxMTAvBgNV BAMTKDcyREMzODhDNEI1MzM5MTdCNTA1Q0Y4Q0M1QjNDMUFDNzNFNUMyODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKQ7FSx6LMIWPGV16EDuerTlxv UGKB6PJECrKZCZ3jd5XNwj6gH5SC7alW0bBjoY/YibuXWisDlggi7VR+m5cPGsZW kea0UjhjztebVj6U53HuW0o2ttfhIi4h1SSP4U/EhDsXCqKA5ujVs8CKHIL5NeMV 409MmE4G+3vDlQbUXfmDvZ1lgp/opxKwTLkQJu7aGZxSqsB0Y/ereBU5q/qZjY5Q +D4eXorLj0WLcycSCq9JZZq7ANjJhMGopWfWFyrpbjcgkmQZv62hUJnWn3+vBY/f z64j+3VyyccYbLQB2nPdIwEWKDPXNs1c+/VAzd5Y7ATl4iC1HrmyS1iqCAStAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUctw4jEtTORe1Bc+MxbPBrHPlwoEwHwYDVR0j BBgwFoAUMQ/cZ/I0eLRwPF/Ws9IiIQmDym4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTE0YmZmMi00Nzg5LTQwMTctOGZhYy1iYTVmNjIzZTdlYmMvMC8zMTBGREM2N0Yy MzQ3OEI0NzAzQzVGRDZCM0QyMjIyMTA5ODNDQTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEwOTgz Q0E2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIy MjEwOTgzQ0E2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFy1Iw/oKYflP2NhT79prF0Nyy6FeHLWmTW1 ELp3rzO4fxBTKeQRrIMV6QnoBBKclnEICGUl2YOytPqL21Au8rnC1GpRnMIh7B7N jg0fYrqVV1z8MBg5dxRAt0lJqfBZ0a65HRmS0kyv8+FvnTc1kUWufj7AiTAy8EIt Kjuvzves/f6hn1b0rzq+sMyHvlo3vjIWEX9wy7uWycETJ+iZT1wVISYLUQdXCEuz TUzrh92DaGfuBjE+MpYgdC98+e2VDbCqnlPRGlqzyhLqdyueyl1gvgDyAg1zw0gZ YJrWxj+ItR2oijGSJxZcU3JlRdQnrFlXaeOIIcZXPHjXtx6L9j4= -----END CERTIFICATE-----Generated at Mon Mar 2 05:32:09 2026 by rpki-client