$ rpki-client -vvf repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft File: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft (raw, json) Hash identifier: 3DFI9uwHYlGieT2lykRpJsxUwt77wFg80Y4B1gvvDmQ= Subject key identifier: 0C:9D:71:C5:02:4A:D7:C8:7E:02:4F:93:AD:38:1E:E5:58:F4:1C:4E Authority key identifier: CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A Certificate issuer: /CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Certificate serial: 0871967A21AC976D8881FED044311745C7C97352 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft Manifest number: 01F2 Signing time: Thu 26 Mar 2026 04:44:10 +0000 Manifest this update: Thu 26 Mar 2026 04:39:10 +0000 Manifest next update: Sun 29 Mar 2026 10:32:10 +0000 Files and hashes: 1: CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl (hash: CrKj+nTKrq2pExT6sxifVUpgX3nKw1nFWt1N981bnZA=) 2: 3130332e3134372e31302e302f32332d3234203d3e20313339393435.roa (hash: m1QpsKWNC41Yh1C09h9LTHnCTbrVYQeuxu9fgYg+m8o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:32:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:71:96:7a:21:ac:97:6d:88:81:fe:d0:44:31:17:45:c7:c9:73:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF2362E92169BC7C5B93E1CA38A3BF909879C05A Validity Not Before: Mar 26 04:39:10 2026 GMT Not After : Mar 29 10:32:10 2026 GMT Subject: CN=0C9D71C5024AD7C87E024F93AD381EE558F41C4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a8:a8:97:ad:eb:58:46:dc:ff:27:3d:1b:8b: d2:6c:b8:38:b0:4a:76:d6:8c:19:9a:ba:ba:c5:e7: db:c5:64:05:cb:3a:08:ca:8a:b2:98:ab:01:40:13: 8d:30:01:87:6e:68:8d:5f:53:9b:f6:a3:86:16:0c: 88:b4:23:28:1e:e8:4a:bb:10:e2:9a:33:73:2e:ba: 38:87:2f:21:f4:c7:eb:f2:3d:a7:5b:44:08:00:f5: 23:45:ba:e9:5e:54:e8:55:fe:b3:60:ba:3e:24:30: 78:c8:1f:30:be:27:40:19:e5:fa:01:80:29:93:22: 2f:f5:42:cd:27:cb:ef:92:4f:ae:4d:c9:e5:bc:71: 8f:d7:4e:29:56:a3:66:ff:5f:66:1a:07:57:b5:04: 62:38:aa:c2:69:88:78:59:1c:27:8f:c2:fa:16:f9: f8:7e:3d:dd:dd:0d:98:4c:25:3e:bc:67:b5:6f:fc: d3:06:1a:d7:d0:2c:36:71:c3:55:24:9e:56:77:f2: 69:cf:76:25:50:20:5a:1d:3f:c6:57:d9:2c:ae:63: a5:dd:31:87:12:99:8f:a0:35:93:3c:83:4e:22:11: b2:37:3f:74:4b:90:77:8b:7c:9b:01:e8:7b:aa:16: 46:e2:e8:ad:7a:2e:f1:48:4e:1a:b7:2d:48:f8:05: f7:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:9D:71:C5:02:4A:D7:C8:7E:02:4F:93:AD:38:1E:E5:58:F4:1C:4E X509v3 Authority Key Identifier: keyid:CF:23:62:E9:21:69:BC:7C:5B:93:E1:CA:38:A3:BF:90:98:79:C0:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1562cf3d-d9f7-48a9-9159-9f0d7a476790/0/CF2362E92169BC7C5B93E1CA38A3BF909879C05A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:98:43:51:21:42:6c:f8:a1:17:74:36:c4:9d:cc:c4:59:e9: 60:24:4d:71:92:27:f2:a6:7f:8e:4d:c9:6e:a9:f9:e6:3e:33: 9c:a2:c9:d9:63:55:08:32:ca:e4:d7:b3:f3:2a:fe:f4:e5:d3: 01:4a:97:7e:a9:7f:f2:68:18:97:a7:6e:ff:61:34:2b:26:fa: 99:94:a1:e8:5c:fa:56:3c:50:c6:ca:93:09:6f:7b:ba:ca:d0: 17:1e:d9:63:33:a3:ac:01:2a:79:7e:51:f6:17:8e:7b:17:5c: 91:2e:6f:e5:bb:7d:b1:6b:8f:0d:db:88:08:9e:65:2d:18:98: eb:a2:06:8a:20:54:54:0c:a6:b3:9b:4b:a7:74:14:f8:5a:d0: 92:c7:38:22:1a:a7:a0:43:a9:a0:90:ec:32:cc:0b:e9:73:2e: 2d:fc:ee:2c:21:c5:9c:22:75:57:13:a4:42:9c:be:b0:d7:06: 0d:c6:19:2a:f7:5e:b4:8f:cd:81:aa:b8:6d:d3:55:ba:e6:98: db:50:cd:84:c9:aa:98:90:8e:f2:e1:24:e8:4a:8a:09:42:6c: 29:f9:1a:d2:27:ee:cf:aa:fd:14:75:38:d3:fb:cb:cf:b2:4e: e5:86:2b:72:49:d1:a8:12:39:1e:94:27:08:a4:1b:df:55:01: 6f:1b:a5:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCHGWeiGsl22Igf7QRDEXRcfJc1IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5 ODc5QzA1QTAeFw0yNjAzMjYwNDM5MTBaFw0yNjAzMjkxMDMyMTBaMDMxMTAvBgNV BAMTKDBDOUQ3MUM1MDI0QUQ3Qzg3RTAyNEY5M0FEMzgxRUU1NThGNDFDNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAqKiXretYRtz/Jz0bi9JsuDiw SnbWjBmaurrF59vFZAXLOgjKirKYqwFAE40wAYduaI1fU5v2o4YWDIi0Iyge6Eq7 EOKaM3MuujiHLyH0x+vyPadbRAgA9SNFuuleVOhV/rNguj4kMHjIHzC+J0AZ5foB gCmTIi/1Qs0ny++ST65NyeW8cY/XTilWo2b/X2YaB1e1BGI4qsJpiHhZHCePwvoW +fh+Pd3dDZhMJT68Z7Vv/NMGGtfQLDZxw1UknlZ38mnPdiVQIFodP8ZX2SyuY6Xd MYcSmY+gNZM8g04iEbI3P3RLkHeLfJsB6HuqFkbi6K16LvFIThq3LUj4Bfe/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDJ1xxQJK18h+Ak+TrTge5Vj0HE4wHwYDVR0j BBgwFoAUzyNi6SFpvHxbk+HKOKO/kJh5wFowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NTYyY2YzZC1kOWY3LTQ4YTktOTE1OS05ZjBkN2E0NzY3OTAvMC9DRjIzNjJFOTIx NjlCQzdDNUI5M0UxQ0EzOEEzQkY5MDk4NzlDMDVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JGOTA5ODc5 QzA1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTU2MmNmM2QtZDlmNy00OGE5LTkx NTktOWYwZDdhNDc2NzkwLzAvQ0YyMzYyRTkyMTY5QkM3QzVCOTNFMUNBMzhBM0JG OTA5ODc5QzA1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACaYQ1EhQmz4oRd0NsSdzMRZ6WAkTXGSJ/Km f45NyW6p+eY+M5yiydljVQgyyuTXs/Mq/vTl0wFKl36pf/JoGJenbv9hNCsm+pmU oehc+lY8UMbKkwlve7rK0Bce2WMzo6wBKnl+UfYXjnsXXJEub+W7fbFrjw3biAie ZS0YmOuiBoogVFQMprObS6d0FPha0JLHOCIap6BDqaCQ7DLMC+lzLi387iwhxZwi dVcTpEKcvrDXBg3GGSr3XrSPzYGquG3TVbrmmNtQzYTJqpiQjvLhJOhKiglCbCn5 GtIn7s+q/RR1ONP7y8+yTuWGK3JJ0agSOR6UJwikG99VAW8bpUI= -----END CERTIFICATE-----Generated at Thu Mar 26 19:49:19 2026 by rpki-client