$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: a25BABHyTZ93FAAfOaDUZJDL5fhs4Psde6mvAaXJwTQ= Subject key identifier: 96:9F:26:CD:BB:1B:AB:45:FB:55:26:81:8B:C3:AA:B7:22:DE:24:A7 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 045E709D1210202B5B066F94264B5F47A61EB4A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: FA Signing time: Wed 25 Mar 2026 00:00:57 +0000 Manifest this update: Tue 24 Mar 2026 23:55:57 +0000 Manifest next update: Sat 28 Mar 2026 01:58:57 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: 2e4JYF3OqDRBaXlSSYo8KRo5xcG4jdBhkbkss6SRs6g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:58:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:5e:70:9d:12:10:20:2b:5b:06:6f:94:26:4b:5f:47:a6:1e:b4:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Mar 24 23:55:57 2026 GMT Not After : Mar 28 01:58:57 2026 GMT Subject: CN=969F26CDBB1BAB45FB5526818BC3AAB722DE24A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:7d:f0:ff:2f:e6:b9:85:fe:85:45:6e:80: 6f:c2:5f:4b:fa:e8:16:9a:4e:af:e5:42:b6:d9:3c: 7b:65:b0:61:9f:49:a6:b5:aa:13:5a:bb:e2:ec:bd: 66:ce:44:9f:7c:23:1b:f7:a2:ff:66:42:ca:1e:ef: df:aa:05:86:75:62:3f:fc:17:98:ff:ae:3d:25:43: 7b:27:26:f0:3c:27:44:48:92:e0:99:9e:db:1c:3d: 31:b0:2d:9a:b4:5e:05:2d:45:a5:8f:da:4a:9d:b9: 06:dd:90:25:27:39:14:c8:83:20:6b:25:eb:fb:20: 2c:73:55:04:00:8c:ec:ba:e6:5d:70:ec:4c:d5:16: 92:58:00:65:5c:d5:56:67:e6:3e:9a:f6:78:e7:de: 81:ff:64:63:d0:3d:65:89:22:bf:6a:e5:5b:3d:8e: a8:c4:2a:28:f4:cd:73:10:e7:64:93:31:15:61:03: f9:9d:83:50:8f:7f:64:ca:0b:1d:fa:e3:ae:60:1e: 55:8a:14:65:07:f2:0d:d1:cd:60:a7:96:f8:13:62: 5b:88:eb:00:e8:99:e5:e3:bf:30:e2:c7:27:4a:25: bb:4c:00:b4:ad:84:aa:29:7b:cb:7e:65:38:4e:b6: a1:96:1a:df:6d:8a:49:de:16:0b:44:d5:ec:5e:37: 72:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:9F:26:CD:BB:1B:AB:45:FB:55:26:81:8B:C3:AA:B7:22:DE:24:A7 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:ce:74:1c:7f:a3:e2:a4:ea:d3:f4:d5:96:a8:a6:f5:ff:24: aa:53:a6:8e:d7:95:04:53:6d:21:cc:82:c0:d0:5f:bd:22:53: 90:30:cd:c7:29:a6:cc:a4:6a:68:3e:72:5a:83:3c:88:b2:c9: 9c:4a:a1:29:47:a6:e8:6c:a5:b8:ca:8c:a0:75:a7:ab:47:80: b8:b0:3d:09:88:cf:6e:b0:d2:3f:16:00:b3:d8:13:a4:a0:39: 4e:fa:82:4b:de:e8:07:fd:e7:e3:6b:43:23:12:a3:a5:57:bf: 37:49:8b:4e:ba:d2:d1:56:45:e0:e2:38:a4:02:38:8c:fb:28: b4:15:ab:c0:28:1b:55:cc:be:5b:02:91:c1:be:3b:9e:94:0d: 38:a3:1e:4a:32:d4:fb:2d:8e:e2:b6:ff:3b:53:2c:1e:ce:16: cc:8b:46:cc:19:41:a1:da:43:d1:a1:7e:27:e8:99:38:a3:49: c1:e3:80:9b:84:b6:ba:d8:8f:6d:55:54:2a:cc:c3:ce:26:51: 27:4c:dc:02:84:75:c0:5f:7b:b3:7a:a0:84:6b:6e:d0:50:56: 77:25:6e:21:00:0a:15:f2:f6:ea:0f:6b:c3:02:12:b1:df:37: 04:f5:c1:1e:8e:09:0b:09:79:ed:c7:64:73:13:48:89:53:a8: bb:cc:ec:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBF5wnRIQICtbBm+UJktfR6YetKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjAzMjQyMzU1NTdaFw0yNjAzMjgwMTU4NTdaMDMxMTAvBgNV BAMTKDk2OUYyNkNEQkIxQkFCNDVGQjU1MjY4MThCQzNBQUI3MjJERTI0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT33w/y/muYX+hUVugG/CX0v6 6BaaTq/lQrbZPHtlsGGfSaa1qhNau+LsvWbORJ98Ixv3ov9mQsoe79+qBYZ1Yj/8 F5j/rj0lQ3snJvA8J0RIkuCZntscPTGwLZq0XgUtRaWP2kqduQbdkCUnORTIgyBr Jev7ICxzVQQAjOy65l1w7EzVFpJYAGVc1VZn5j6a9njn3oH/ZGPQPWWJIr9q5Vs9 jqjEKij0zXMQ52STMRVhA/mdg1CPf2TKCx36465gHlWKFGUH8g3RzWCnlvgTYluI 6wDomeXjvzDixydKJbtMALSthKope8t+ZThOtqGWGt9tikneFgtE1exeN3KXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlp8mzbsbq0X7VSaBi8OqtyLeJKcwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3OdBx/o+Kk6tP01ZaopvX/JKpTpo7XlQRT bSHMgsDQX70iU5Awzccppsykamg+clqDPIiyyZxKoSlHpuhspbjKjKB1p6tHgLiw PQmIz26w0j8WALPYE6SgOU76gkve6Af95+NrQyMSo6VXvzdJi0660tFWReDiOKQC OIz7KLQVq8AoG1XMvlsCkcG+O56UDTijHkoy1PstjuK2/ztTLB7OFsyLRswZQaHa Q9GhfifomTijScHjgJuEtrrYj21VVCrMw84mUSdM3AKEdcBfe7N6oIRrbtBQVncl biEAChXy9uoPa8MCErHfNwT1wR6OCQsJee3HZHMTSIlTqLvM7Js= -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:22 2026 by rpki-client