
$ rpki-client -vvf repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
File: 0310C64163DFFAE5A8F4065429C26B631D9834D9.mft (raw, json)
Hash identifier: NBmyfKOmUNavGPUbMo6iHgI8+A9QYpRHugjKx9a2Xm4=
Subject key identifier: 1A:3B:9D:40:FF:01:71:C3:D5:8C:53:E4:94:9D:07:1E:23:86:0F:5D
Authority key identifier: 03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
Certificate issuer: /CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Certificate serial: 0FB64879900BFF56A41CD3E9D6CE59C7A3391A25
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
Manifest number: 020B
Signing time: Mon 02 Mar 2026 08:10:43 +0000
Manifest this update: Mon 02 Mar 2026 08:05:43 +0000
Manifest next update: Thu 05 Mar 2026 11:34:43 +0000
Files and hashes: 1: 0310C64163DFFAE5A8F4065429C26B631D9834D9.crl (hash: DNd7ibhBEU/VuasC17gnUbrzXrptoeTQdjJuC8KEMA8=)
2: 3130332e3131302e34312e302f32342d3234203d3e20313530343734.roa (hash: 1b3dsqoL7b6hua66g4HGVJQW4XuIdLfcQQvDgZALsus=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 05 Mar 2026 06:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:b6:48:79:90:0b:ff:56:a4:1c:d3:e9:d6:ce:59:c7:a3:39:1a:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0310C64163DFFAE5A8F4065429C26B631D9834D9
Validity
Not Before: Mar 2 08:05:43 2026 GMT
Not After : Mar 5 11:34:43 2026 GMT
Subject: CN=1A3B9D40FF0171C3D58C53E4949D071E23860F5D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:9d:4c:06:b7:b6:1a:62:fb:eb:03:ce:39:
10:9b:ba:be:8b:81:85:2d:80:77:ad:1a:61:0e:ae:
7c:05:d7:08:15:72:01:03:89:94:29:a4:fc:54:85:
99:14:36:e9:99:47:46:68:e7:49:8e:29:f2:63:aa:
15:72:66:ad:84:73:58:3d:b8:c0:a4:ef:b5:03:2b:
62:2b:a8:1f:12:6c:2e:3d:2e:21:ac:4e:47:df:62:
84:dd:d4:b1:7e:3e:41:72:ab:be:30:5b:51:3f:ba:
87:4f:92:ae:61:3d:9c:51:98:1c:40:22:19:21:56:
2f:66:96:f0:dd:85:42:c4:6f:6c:82:5a:b1:c0:ce:
92:c7:1e:64:b8:cf:e5:f5:7a:9c:21:59:48:e9:f6:
28:43:f0:f6:34:c5:15:9e:91:38:b7:15:b9:90:4c:
10:4e:0e:49:3c:5a:04:9e:19:96:85:55:02:bb:48:
b3:aa:88:fe:3d:88:67:b0:91:8e:de:e3:b1:98:d1:
a9:08:db:8b:3e:02:a8:35:d5:c2:2a:43:0a:21:17:
3a:fa:d9:0d:73:a9:d2:d0:93:0b:85:c4:bb:96:f1:
87:c2:9f:6c:be:7a:89:d9:21:76:ba:e7:9d:9f:f9:
8b:0b:fd:13:53:d2:46:28:bd:5d:54:17:14:35:07:
10:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:3B:9D:40:FF:01:71:C3:D5:8C:53:E4:94:9D:07:1E:23:86:0F:5D
X509v3 Authority Key Identifier:
keyid:03:10:C6:41:63:DF:FA:E5:A8:F4:06:54:29:C2:6B:63:1D:98:34:D9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0310C64163DFFAE5A8F4065429C26B631D9834D9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4098197c-a526-45bd-9ce9-15383c5d9536/0/0310C64163DFFAE5A8F4065429C26B631D9834D9.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c0:62:47:ae:83:f7:ca:d1:47:02:91:33:d4:48:f5:6d:b5:87:
cb:a3:10:5e:e6:7e:96:b8:5b:88:f4:84:e8:f0:0d:ad:aa:3f:
b3:31:63:c2:eb:22:f1:35:1c:50:68:c4:48:5a:57:15:ad:10:
78:86:c1:03:83:2a:dc:79:ef:19:c3:1d:74:84:e1:5b:63:53:
09:7e:20:3d:f8:1e:56:3f:64:e0:ca:05:0c:b7:2c:45:d6:b2:
df:18:8b:f2:40:18:b9:8b:3c:cd:13:97:93:fe:1e:76:a4:6a:
ba:8b:2f:6d:f3:e9:fa:a0:da:50:50:9f:cf:6d:9e:c3:eb:13:
3f:ff:f9:ec:5d:52:c0:ca:82:e2:74:19:7c:e0:d0:52:df:06:
be:eb:ed:20:ef:bc:55:9b:bc:ed:66:da:0b:5d:68:f8:fb:db:
b8:fa:ab:a1:bf:7d:1a:2a:c8:ce:d1:83:a3:89:28:eb:10:e0:
60:c5:da:5d:aa:dc:db:65:3d:c9:3b:68:81:72:84:34:98:2c:
b2:72:43:12:ba:4c:db:58:18:06:88:06:1a:c9:8d:f7:6f:fb:
a0:8d:03:c2:5e:e8:0c:dd:23:04:69:ae:75:a3:22:95:2c:cf:
ab:99:e7:78:0d:3b:95:25:52:26:e2:65:d4:89:c6:cb:98:89:
0c:c5:06:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:45:48 2026 by rpki-client