$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: 78pdBvKRYxZq3YQ9SqEn/jrKFpW2yucWN64yZMsT0CA= Subject key identifier: A9:C9:35:24:DC:1E:46:F4:88:AB:69:72:49:04:D0:6B:38:C8:72:BF Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 73D434E1619B53E3DB7DB95749FD1C609BC0364E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0165 Signing time: Wed 25 Mar 2026 06:11:40 +0000 Manifest this update: Wed 25 Mar 2026 06:06:40 +0000 Manifest next update: Sat 28 Mar 2026 12:13:40 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: qUKt8neO6MlBjoXYs5mzyjReNqPAfE/2grjIyBTGXro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d4:34:e1:61:9b:53:e3:db:7d:b9:57:49:fd:1c:60:9b:c0:36:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Mar 25 06:06:40 2026 GMT Not After : Mar 28 12:13:40 2026 GMT Subject: CN=A9C93524DC1E46F488AB69724904D06B38C872BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:13:65:d3:ae:b9:54:b6:3a:04:4b:74:4a:a3: 23:33:7e:d3:38:4d:57:9e:0a:64:76:51:d6:22:5f: 09:8c:a3:8d:71:92:72:8d:5b:70:b1:c0:81:2e:ae: dc:5c:27:7a:dc:7d:40:d7:bd:22:be:c9:db:c7:94: dd:6e:3f:d5:a3:86:a6:54:40:f6:e2:67:73:5a:8f: 67:5a:b3:87:da:1e:9e:59:bf:ce:bf:3d:5d:ce:7f: f6:a1:e1:af:2d:47:20:a4:9b:f3:71:aa:f7:7c:ae: 38:1b:6c:b0:b3:02:5a:de:de:c4:89:ca:a6:f9:89: 59:f7:bd:25:e1:2a:b7:de:3b:f8:95:da:29:7d:9c: 8c:97:b4:9c:92:b7:55:3a:f4:92:76:03:53:df:19: d8:65:b4:11:eb:ca:bd:4e:c9:6a:1c:30:d2:38:d0: 49:31:85:84:04:dd:61:60:f9:ca:52:25:1a:29:81: 96:5c:14:21:7e:c1:6e:07:0a:21:2f:e3:ee:9b:dd: 3d:f8:33:08:f7:62:f3:f7:c2:ed:50:82:b9:c0:90: e2:35:49:59:41:47:b1:6c:b3:f4:a1:5a:a6:7b:a4: 8f:16:9b:04:35:39:98:5f:4a:e1:c1:90:36:47:8d: 10:43:14:b9:51:74:23:24:37:50:f9:62:0a:1e:bc: 6b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:C9:35:24:DC:1E:46:F4:88:AB:69:72:49:04:D0:6B:38:C8:72:BF X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:bf:35:7c:a0:a8:ca:90:03:4f:42:5c:e6:75:6c:de:94:3f: 72:17:06:aa:d8:9a:cc:5e:8f:af:1a:2e:1c:ec:aa:7f:0a:dd: ae:2b:93:72:78:73:50:ae:6d:19:1b:1c:fd:f2:65:4f:27:fd: 66:78:4e:3a:ef:c3:a3:3d:f0:3f:fd:94:fd:e0:81:77:84:ec: a2:a6:cc:9b:bb:1b:83:26:a7:c7:77:0f:1f:ec:61:c9:3f:46: 30:22:b3:0a:fb:a9:0a:6b:27:33:b7:a9:e8:03:de:16:d6:f9: 44:a5:db:72:e4:2f:4b:2e:0a:d2:0e:08:ce:92:38:30:d5:d7: a1:ae:71:73:60:9d:ca:6f:56:d5:33:18:d8:00:ed:7f:77:3b: 7f:5d:50:7e:0f:26:02:55:87:ce:47:93:ec:b4:2d:98:27:54: 1a:96:b2:c9:53:da:c0:83:53:4f:bc:82:4f:10:b1:32:2f:f0: 97:8e:79:9f:d8:93:83:50:cc:40:70:b2:09:fc:67:28:2c:3d: 48:0b:b9:6e:a9:32:90:3f:fb:2c:9f:a2:41:95:39:75:43:1c: 18:a5:3e:5f:14:38:f1:d5:3c:38:44:aa:f7:33:bf:b5:3d:41: 4f:4f:bc:62:83:88:8a:63:01:28:b0:17:20:0f:03:42:06:a8: 4a:76:34:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9Q04WGbU+PbfblXSf0cYJvANk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNjAzMjUwNjA2NDBaFw0yNjAzMjgxMjEzNDBaMDMxMTAvBgNV BAMTKEE5QzkzNTI0REMxRTQ2RjQ4OEFCNjk3MjQ5MDREMDZCMzhDODcyQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlE2XTrrlUtjoES3RKoyMzftM4 TVeeCmR2UdYiXwmMo41xknKNW3CxwIEurtxcJ3rcfUDXvSK+ydvHlN1uP9WjhqZU QPbiZ3Naj2das4faHp5Zv86/PV3Of/ah4a8tRyCkm/Nxqvd8rjgbbLCzAlre3sSJ yqb5iVn3vSXhKrfeO/iV2il9nIyXtJySt1U69JJ2A1PfGdhltBHryr1OyWocMNI4 0EkxhYQE3WFg+cpSJRopgZZcFCF+wW4HCiEv4+6b3T34Mwj3YvP3wu1QgrnAkOI1 SVlBR7Fss/ShWqZ7pI8WmwQ1OZhfSuHBkDZHjRBDFLlRdCMkN1D5YgoevGsrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqck1JNweRvSIq2lySQTQazjIcr8wHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa/NXygqMqQA09CXOZ1bN6UP3IXBqrYmsxe j68aLhzsqn8K3a4rk3J4c1CubRkbHP3yZU8n/WZ4Tjrvw6M98D/9lP3ggXeE7KKm zJu7G4Mmp8d3Dx/sYck/RjAiswr7qQprJzO3qegD3hbW+USl23LkL0suCtIOCM6S ODDV16GucXNgncpvVtUzGNgA7X93O39dUH4PJgJVh85Hk+y0LZgnVBqWsslT2sCD U0+8gk8QsTIv8JeOeZ/Yk4NQzEBwsgn8ZygsPUgLuW6pMpA/+yyfokGVOXVDHBil Pl8UOPHVPDhEqvczv7U9QU9PvGKDiIpjASiwFyAPA0IGqEp2NPQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:28:19 2026 by rpki-client