$ rpki-client -vvf repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft File: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft (raw, json) Hash identifier: sokUdciQMAmNpSQ4ZiBJp973DcPB39nK8Ra6uRgI9oI= Subject key identifier: AE:24:43:4A:0F:0E:39:39:CD:CA:57:D7:BD:E5:0F:20:5B:8F:96:ED Authority key identifier: CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 Certificate issuer: /CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Certificate serial: 71DDBD761EF3416841269DD208EA71F6AB0B72A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject info access: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft Manifest number: 0314 Signing time: Tue 24 Mar 2026 22:41:07 +0000 Manifest this update: Tue 24 Mar 2026 22:36:07 +0000 Manifest next update: Sat 28 Mar 2026 00:02:07 +0000 Files and hashes: 1: 3130332e362e3230342e302f32332d3233203d3e203538353033.roa (hash: jlDnq/pTWKcqQPtJ6VRZIg3zm8PHprvuxU+BKt4Gk08=) 2: 3130332e362e3230372e302f32342d3234203d3e203538353033.roa (hash: vyhZOBYCU2sLXrzusVlJ/gl2TYFXG6e7dBbtLFYwhDU=) 3: 3130332e362e3230362e302f32332d3233203d3e203538353033.roa (hash: T5UFtTORiPkpyQMb1pkITrlGjn812lML7gJ4GIu0cac=) 4: 3130332e362e3230342e302f32322d3232203d3e203538353033.roa (hash: eKQ/v97Slfm6pdQvkBAo8Onj1CnRgWhKWbT8e4WqBcc=) 5: CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl (hash: 5Fg/zDTuG8rTr8VqySxAujkWmLL6RPxqcKgXfOPCgH8=) 6: 3130332e362e3230352e302f32342d3234203d3e203538353033.roa (hash: +R3i1yikLZX3N7J8PecP2cVBYYEEV31MZ2NuNFEDBz0=) 7: 3130332e362e3230342e302f32342d3234203d3e203538353033.roa (hash: r9QPk/LpoJs29sx2oR7f3Ru6EP7Ni5LmyXyyS4T2T/Q=) 8: 3130332e362e3230362e302f32342d3234203d3e203538353033.roa (hash: uAtBSIDdapxegHcixT/adxYVRwIH8zS1jvQsYGI4FKs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:dd:bd:76:1e:f3:41:68:41:26:9d:d2:08:ea:71:f6:ab:0b:72:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0CF43F294A5C8416E3F7A6FDBF077B234CA446 Validity Not Before: Mar 24 22:36:07 2026 GMT Not After : Mar 28 00:02:07 2026 GMT Subject: CN=AE24434A0F0E3939CDCA57D7BDE50F205B8F96ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:58:0c:de:1e:99:ae:34:fd:65:ff:ae:88:7e: 33:b6:92:be:59:50:ff:ce:8e:c2:e7:97:3c:4a:cc: 7e:01:ef:6f:d0:38:50:6a:96:0c:40:73:2f:a4:14: ae:a2:dc:8e:1c:6f:b5:6f:9a:97:06:0f:d2:48:fb: fe:94:5e:72:82:5a:33:93:9a:13:66:a6:70:7e:b6: 0a:3a:9a:ca:7d:77:05:d0:fc:89:8f:d8:a1:68:56: 2c:63:f1:e3:bd:d1:bd:fe:e6:ba:a2:4e:98:92:f9: 31:fb:0f:57:69:e9:ea:be:25:da:83:ae:00:06:8e: 14:d6:6f:db:b2:9e:cb:61:49:10:fe:25:b8:f4:01: 72:b1:fb:aa:37:24:2b:1b:b3:c4:99:f0:d1:e3:83: 37:db:9f:94:af:77:d8:f9:bc:3f:62:e4:2c:91:e8: fb:7b:81:4a:8d:d1:98:32:0c:3a:4d:62:f4:7d:aa: 9e:80:0e:dc:e5:88:e3:fa:a8:b3:bd:c8:97:74:0b: b9:5b:ea:45:e5:9d:29:ac:95:38:e5:c1:b5:87:b0: c9:b9:32:8b:a5:f7:ea:bc:a0:ac:a2:c0:d2:aa:a3: 05:54:a7:9a:ef:7e:75:2d:0b:7f:77:e6:8b:2b:74: a3:10:ea:e7:e7:0f:aa:d5:c7:cc:3d:b2:2a:15:66: 41:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:43:4A:0F:0E:39:39:CD:CA:57:D7:BD:E5:0F:20:5B:8F:96:ED X509v3 Authority Key Identifier: keyid:CF:0C:F4:3F:29:4A:5C:84:16:E3:F7:A6:FD:BF:07:7B:23:4C:A4:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/582f2b38-addf-4bd3-9249-e5ba56cd052e/0/CF0CF43F294A5C8416E3F7A6FDBF077B234CA446.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:56:9e:54:33:34:66:8b:1c:61:e1:4a:1d:90:a4:f9:cf:0f: 03:1a:a1:77:7a:4c:85:7b:ce:5a:15:1f:37:e5:a0:e3:a7:79: 2a:8f:d9:68:51:27:0e:a8:fd:3f:49:3f:7e:85:85:96:bc:6b: a1:8d:91:11:da:c7:ca:89:46:5e:fd:2c:92:32:d6:2a:a7:ff: f3:18:86:18:c4:e9:f8:fb:4e:bd:5c:92:e8:11:31:0b:21:1f: db:5b:be:59:30:2d:88:80:0d:46:30:cb:20:73:fc:33:79:3c: 84:9e:43:29:4d:4c:b6:e9:78:91:50:a2:27:43:8e:fe:0f:88: e8:81:34:37:50:c8:c2:8b:a9:c1:72:ce:d9:1b:99:60:b7:30: ae:18:19:d2:5f:16:1c:f4:c3:87:16:67:21:e2:ef:0c:8c:91: fe:09:24:03:d6:e7:1a:6e:24:ac:2a:f3:42:38:c6:78:5c:0b: ab:f9:16:15:5d:96:be:16:36:58:92:47:a9:f1:85:90:2c:da: d1:79:c8:75:13:80:c9:eb:ae:a5:e3:3d:7e:5e:1b:4a:a6:da: f1:ac:4b:89:3d:60:2a:a1:6f:02:9a:90:43:b2:8f:3e:db:f3: 50:d6:ac:02:0c:70:ff:38:51:86:2e:0c:62:29:6c:d9:10:83: 69:04:29:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcd29dh7zQWhBJp3SCOpx9qsLcqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0Iy MzRDQTQ0NjAeFw0yNjAzMjQyMjM2MDdaFw0yNjAzMjgwMDAyMDdaMDMxMTAvBgNV BAMTKEFFMjQ0MzRBMEYwRTM5MzlDRENBNTdEN0JERTUwRjIwNUI4Rjk2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmWAzeHpmuNP1l/66IfjO2kr5Z UP/OjsLnlzxKzH4B72/QOFBqlgxAcy+kFK6i3I4cb7VvmpcGD9JI+/6UXnKCWjOT mhNmpnB+tgo6msp9dwXQ/ImP2KFoVixj8eO90b3+5rqiTpiS+TH7D1dp6eq+JdqD rgAGjhTWb9uynsthSRD+Jbj0AXKx+6o3JCsbs8SZ8NHjgzfbn5Svd9j5vD9i5CyR 6Pt7gUqN0ZgyDDpNYvR9qp6ADtzliOP6qLO9yJd0C7lb6kXlnSmslTjlwbWHsMm5 Moul9+q8oKyiwNKqowVUp5rvfnUtC3935osrdKMQ6ufnD6rVx8w9sioVZkHFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUriRDSg8OOTnNylfXveUPIFuPlu0wHwYDVR0j BBgwFoAUzwz0PylKXIQW4/em/b8HeyNMpEYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODJmMmIzOC1hZGRmLTRiZDMtOTI0OS1lNWJhNTZjZDA1MmUvMC9DRjBDRjQzRjI5 NEE1Qzg0MTZFM0Y3QTZGREJGMDc3QjIzNENBNDQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3N0IyMzRD QTQ0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTgyZjJiMzgtYWRkZi00YmQzLTky NDktZTViYTU2Y2QwNTJlLzAvQ0YwQ0Y0M0YyOTRBNUM4NDE2RTNGN0E2RkRCRjA3 N0IyMzRDQTQ0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBWnlQzNGaLHGHhSh2QpPnPDwMaoXd6TIV7 zloVHzfloOOneSqP2WhRJw6o/T9JP36FhZa8a6GNkRHax8qJRl79LJIy1iqn//MY hhjE6fj7Tr1ckugRMQshH9tbvlkwLYiADUYwyyBz/DN5PISeQylNTLbpeJFQoidD jv4PiOiBNDdQyMKLqcFyztkbmWC3MK4YGdJfFhz0w4cWZyHi7wyMkf4JJAPW5xpu JKwq80I4xnhcC6v5FhVdlr4WNliSR6nxhZAs2tF5yHUTgMnrrqXjPX5eG0qm2vGs S4k9YCqhbwKakEOyjz7b81DWrAIMcP84UYYuDGIpbNkQg2kEKZs= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:21 2026 by rpki-client