$ rpki-client -vvf repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft File: 310FDC67F23478B4703C5FD6B3D222210983CA6E.mft (raw, json) Hash identifier: H3PXEcd7tKJkSZzvaGvl+HZw2/nPofhZcas6Vg7lTB0= Subject key identifier: CB:72:75:B5:6B:C5:E5:AB:76:BB:4A:F6:CE:53:CE:4B:5F:4B:18:45 Authority key identifier: 31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E Certificate issuer: /CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Certificate serial: 27424CB8B332ADB070C767DF4BA800B33264E1A5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft Manifest number: 1A Signing time: Fri 17 Apr 2026 19:51:48 +0000 Manifest this update: Fri 17 Apr 2026 19:46:48 +0000 Manifest next update: Tue 21 Apr 2026 06:37:48 +0000 Files and hashes: 1: 310FDC67F23478B4703C5FD6B3D222210983CA6E.crl (hash: IvjPTEQ91Rz3AZpU+2ZY4JJlP/ZUKVNYlNQd9suVoLg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 06:37:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:42:4c:b8:b3:32:ad:b0:70:c7:67:df:4b:a8:00:b3:32:64:e1:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=310FDC67F23478B4703C5FD6B3D222210983CA6E Validity Not Before: Apr 17 19:46:48 2026 GMT Not After : Apr 21 06:37:48 2026 GMT Subject: CN=CB7275B56BC5E5AB76BB4AF6CE53CE4B5F4B1845 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a0:79:9f:45:c4:3f:67:1f:1b:a3:63:b0:82: b4:c7:7d:6e:fb:c3:e3:84:bc:a8:7e:18:b2:f3:f6: b1:19:44:aa:3f:4b:f9:14:a5:e9:ab:f8:aa:1b:cf: 1d:13:c6:97:18:cd:f7:50:df:ae:c9:a5:8e:fe:47: e1:65:e7:b8:8b:96:03:a2:48:7d:6e:80:4b:49:41: 2d:14:99:29:23:f9:15:e0:7a:cb:cd:46:8b:4a:06: 3b:dc:97:39:b5:cd:6f:94:54:9a:b7:a2:5d:9e:29: 08:90:66:55:00:df:99:12:f7:10:cf:c0:59:2c:89: 24:aa:f5:9b:52:b4:04:54:9d:85:83:71:d9:29:89: 89:20:1d:6a:92:e5:5f:57:4f:fc:3e:6b:b6:73:e1: 4a:f5:3c:a4:3d:a6:1e:9b:08:38:06:48:bc:65:32: 38:2d:5c:e4:e0:09:86:a3:11:16:1f:76:a3:ef:64: 6e:58:17:b3:bd:c1:bb:d9:da:2b:2a:92:86:c3:90: 09:97:48:98:7b:9e:b4:eb:27:f8:d9:22:37:9c:15: 37:8b:0c:0b:44:d6:32:f0:e1:29:ff:1b:45:8e:23: 34:1c:b9:08:09:f5:20:eb:42:37:63:24:6e:44:a4: fc:47:3a:14:f6:93:b4:56:98:80:cf:68:09:9a:98: 9f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:72:75:B5:6B:C5:E5:AB:76:BB:4A:F6:CE:53:CE:4B:5F:4B:18:45 X509v3 Authority Key Identifier: keyid:31:0F:DC:67:F2:34:78:B4:70:3C:5F:D6:B3:D2:22:21:09:83:CA:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/310FDC67F23478B4703C5FD6B3D222210983CA6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a14bff2-4789-4017-8fac-ba5f623e7ebc/0/310FDC67F23478B4703C5FD6B3D222210983CA6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:e7:f8:40:69:eb:bf:43:ff:a1:1e:7c:51:6e:78:22:92:12: da:e3:e6:fa:26:31:28:a5:52:b0:a9:2b:4e:07:71:e5:56:ce: ee:01:13:50:ea:68:e2:0c:c2:01:31:90:7d:a7:99:41:b8:01: 45:d9:bc:bd:53:d5:99:19:d4:b5:ef:04:0f:40:39:ef:11:a9: 3b:9e:3c:f5:8c:be:6a:a1:5d:78:2f:74:97:e7:f4:0b:14:04: 9d:9b:59:43:8c:35:ea:a2:f0:c2:f1:ea:b5:47:38:7f:78:e0: 86:01:44:99:d7:53:3c:0b:d6:78:ab:5b:4d:53:98:fc:2a:dd: ef:72:31:6d:7e:4e:10:32:0f:38:82:31:a8:b8:16:99:7e:0b: e1:93:44:d3:ce:bf:32:da:71:e7:81:e0:60:6b:7b:a1:e5:74: 39:42:d0:9c:de:fc:c7:20:d7:f4:d8:6c:83:b6:4c:91:65:9e: bb:0d:a2:53:07:cc:0e:90:08:b7:12:87:9c:e2:55:2e:99:ac: e7:ca:2b:cf:54:e9:da:10:8a:65:42:d1:40:fd:fb:70:54:f1: f5:c2:8e:0f:d5:c2:73:ca:15:f5:81:67:b6:3c:df:7e:b2:46: 04:dc:0f:5f:d4:86:e9:d3:72:40:86:26:de:37:47:19:dd:56: bd:2b:24:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ0JMuLMyrbBwx2ffS6gAszJk4aUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEw OTgzQ0E2RTAeFw0yNjA0MTcxOTQ2NDhaFw0yNjA0MjEwNjM3NDhaMDMxMTAvBgNV BAMTKENCNzI3NUI1NkJDNUU1QUI3NkJCNEFGNkNFNTNDRTRCNUY0QjE4NDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgoHmfRcQ/Zx8bo2OwgrTHfW77 w+OEvKh+GLLz9rEZRKo/S/kUpemr+Kobzx0TxpcYzfdQ367JpY7+R+Fl57iLlgOi SH1ugEtJQS0UmSkj+RXgesvNRotKBjvclzm1zW+UVJq3ol2eKQiQZlUA35kS9xDP wFksiSSq9ZtStARUnYWDcdkpiYkgHWqS5V9XT/w+a7Zz4Ur1PKQ9ph6bCDgGSLxl MjgtXOTgCYajERYfdqPvZG5YF7O9wbvZ2isqkobDkAmXSJh7nrTrJ/jZIjecFTeL DAtE1jLw4Sn/G0WOIzQcuQgJ9SDrQjdjJG5EpPxHOhT2k7RWmIDPaAmamJ+NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy3J1tWvF5at2u0r2zlPOS19LGEUwHwYDVR0j BBgwFoAUMQ/cZ/I0eLRwPF/Ws9IiIQmDym4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTE0YmZmMi00Nzg5LTQwMTctOGZhYy1iYTVmNjIzZTdlYmMvMC8zMTBGREM2N0Yy MzQ3OEI0NzAzQzVGRDZCM0QyMjIyMTA5ODNDQTZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIyMjEwOTgz Q0E2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2ExNGJmZjItNDc4OS00MDE3LThm YWMtYmE1ZjYyM2U3ZWJjLzAvMzEwRkRDNjdGMjM0NzhCNDcwM0M1RkQ2QjNEMjIy MjEwOTgzQ0E2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/n+EBp679D/6EefFFueCKSEtrj5vomMSil UrCpK04HceVWzu4BE1DqaOIMwgExkH2nmUG4AUXZvL1T1ZkZ1LXvBA9AOe8RqTue PPWMvmqhXXgvdJfn9AsUBJ2bWUOMNeqi8MLx6rVHOH944IYBRJnXUzwL1nirW01T mPwq3e9yMW1+ThAyDziCMai4Fpl+C+GTRNPOvzLaceeB4GBre6HldDlC0Jze/Mcg 1/TYbIO2TJFlnrsNolMHzA6QCLcSh5ziVS6ZrOfKK89U6doQimVC0UD9+3BU8fXC jg/VwnPKFfWBZ7Y8336yRgTcD1/UhunTckCGJt43RxndVr0rJH4= -----END CERTIFICATE-----Generated at Sun Apr 19 11:38:45 2026 by rpki-client