$ rpki-client -vvf repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft File: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft (raw, json) Hash identifier: FITWbP/1hUHEmu9ba/9FBN03AUcXUKArzA2j8CaxdD4= Subject key identifier: 75:E0:5F:C1:A8:97:54:9E:17:CA:47:A9:6A:4D:B4:3E:65:3F:EA:8F Authority key identifier: CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 Certificate issuer: /CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Certificate serial: 49F1B304F59D2F43AFA7F2B4C4E56B8E8006F73F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft Manifest number: 026E Signing time: Wed 25 Mar 2026 06:11:17 +0000 Manifest this update: Wed 25 Mar 2026 06:06:16 +0000 Manifest next update: Sat 28 Mar 2026 14:24:16 +0000 Files and hashes: 1: 3130332e3138372e3136332e302f32342d3234203d3e20313439373434.roa (hash: /SzWYqZUMsg47vwYbafB1G0qt1wr0vCK02LHAWPClVk=) 2: 3130332e3138372e3136322e302f32342d3234203d3e20313439373434.roa (hash: Dn1TWs8KInIikwDEUwL4D4avm/veFQbAcGAcTpLQx70=) 3: CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl (hash: QqMYLp/0sGvu0NEHhxBdHc6AGXYkzuH6D8TO5gufA1s=) 4: 3130332e3138372e3136322e302f32332d3233203d3e20313439373434.roa (hash: SXu6y5hAHpLUxTpHQELosLw/ezbeelmjazY+x7480hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:24:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:f1:b3:04:f5:9d:2f:43:af:a7:f2:b4:c4:e5:6b:8e:80:06:f7:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1 Validity Not Before: Mar 25 06:06:16 2026 GMT Not After : Mar 28 14:24:16 2026 GMT Subject: CN=75E05FC1A897549E17CA47A96A4DB43E653FEA8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:92:99:9b:9f:48:4d:be:f4:81:35:56:b4:a0: 0c:dc:44:d8:d8:05:fd:2e:8f:1e:89:3c:94:ac:62: 1e:8b:ac:c1:3d:31:69:3f:c8:08:9d:21:af:5e:78: 63:c0:b4:25:d9:b6:31:66:11:b7:1f:c9:6d:37:68: db:d5:7d:2e:67:a2:9f:bf:b2:8b:31:44:8b:4f:ba: c0:b1:8b:60:0b:49:40:17:6b:68:a4:1c:12:91:dc: a1:b7:cf:fc:7b:50:4e:cf:30:05:eb:40:fd:d4:29: 3e:48:43:28:3a:93:6a:ee:74:ed:68:80:d9:b4:2d: d9:13:b8:df:5e:df:a9:26:b3:44:f2:69:b0:7d:bd: b0:dd:56:a7:c5:cf:5a:14:62:ac:fa:b2:ef:d3:7e: 38:7a:96:b6:e6:4c:5a:ae:3a:ee:04:45:79:6f:34: 9b:43:11:5b:7e:9b:9c:02:94:b3:3d:1d:63:52:70: 12:1f:ea:a5:dc:a2:70:d4:cd:35:10:e2:36:a5:cd: 43:cd:ae:f0:97:4c:e1:c1:48:da:10:42:87:81:b2: f8:29:a1:1e:c0:d4:43:5b:68:81:c4:d2:1a:bc:d0: e5:f9:58:f7:1b:bd:0b:b3:df:18:75:e4:ed:a8:4a: 50:10:fc:f6:9b:12:bc:f9:19:89:a0:ba:31:5a:f2: c4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:E0:5F:C1:A8:97:54:9E:17:CA:47:A9:6A:4D:B4:3E:65:3F:EA:8F X509v3 Authority Key Identifier: keyid:CF:E5:9D:4C:7A:61:3A:B4:3F:C8:F6:8E:89:74:AB:C8:27:7B:99:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b25c7e1d-82e8-4100-b435-9954272fb7a8/0/CFE59D4C7A613AB43FC8F68E8974ABC8277B99D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:c5:93:f0:74:33:ff:cb:3a:51:25:03:04:cb:dc:78:52:de: 71:c1:4b:8d:13:6d:97:05:fb:d8:a2:9e:cb:ae:7b:86:ee:27: 4d:ed:3c:31:c5:31:d5:8b:7f:16:39:89:84:4d:b6:81:de:26: 36:04:45:cf:a7:37:b6:4e:55:84:58:95:d2:83:11:6b:05:58: 91:71:f1:18:40:c0:26:0f:d2:d4:55:f4:0f:af:e4:52:31:06: 8a:1d:ec:cd:d1:0c:44:85:fd:d5:d8:98:b5:8d:fa:81:a7:33: 06:83:77:14:b2:ae:17:1e:44:5a:28:ca:c5:bb:b6:48:4a:01: 1c:81:97:b7:70:ed:1b:c7:ac:2f:1b:d2:79:9c:a0:ef:a8:47: 6f:96:2f:42:3a:b5:a5:bc:58:e4:b4:d8:02:65:38:42:15:82: 2e:7d:95:98:17:73:f4:1c:1f:21:a6:69:60:5d:86:68:cf:c3: 20:40:db:e6:4f:b9:9f:3f:9d:b5:62:04:fd:9e:a1:a7:10:c1: c7:3c:5a:20:e1:d2:b2:49:42:cc:bc:58:86:3c:6f:18:41:85: 2b:47:c1:7d:7e:2c:32:ac:36:cd:57:cc:b5:e1:f1:fd:24:8a: 5e:e6:9c:3b:70:41:70:40:34:24:97:94:2d:8c:7a:c7:b9:94: 2e:cf:2e:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSfGzBPWdL0Ovp/K0xOVrjoAG9z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgy NzdCOTlEMTAeFw0yNjAzMjUwNjA2MTZaFw0yNjAzMjgxNDI0MTZaMDMxMTAvBgNV BAMTKDc1RTA1RkMxQTg5NzU0OUUxN0NBNDdBOTZBNERCNDNFNjUzRkVBOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCukpmbn0hNvvSBNVa0oAzcRNjY Bf0ujx6JPJSsYh6LrME9MWk/yAidIa9eeGPAtCXZtjFmEbcfyW03aNvVfS5nop+/ sosxRItPusCxi2ALSUAXa2ikHBKR3KG3z/x7UE7PMAXrQP3UKT5IQyg6k2rudO1o gNm0LdkTuN9e36kms0TyabB9vbDdVqfFz1oUYqz6su/Tfjh6lrbmTFquOu4ERXlv NJtDEVt+m5wClLM9HWNScBIf6qXconDUzTUQ4jalzUPNrvCXTOHBSNoQQoeBsvgp oR7A1ENbaIHE0hq80OX5WPcbvQuz3xh15O2oSlAQ/PabErz5GYmgujFa8sQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdeBfwaiXVJ4Xykepak20PmU/6o8wHwYDVR0j BBgwFoAUz+WdTHphOrQ/yPaOiXSryCd7mdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjVjN2UxZC04MmU4LTQxMDAtYjQzNS05OTU0MjcyZmI3YTgvMC9DRkU1OUQ0QzdB NjEzQUI0M0ZDOEY2OEU4OTc0QUJDODI3N0I5OUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFCQzgyNzdC OTlEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI1YzdlMWQtODJlOC00MTAwLWI0 MzUtOTk1NDI3MmZiN2E4LzAvQ0ZFNTlENEM3QTYxM0FCNDNGQzhGNjhFODk3NEFC QzgyNzdCOTlEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7Fk/B0M//LOlElAwTL3HhS3nHBS40TbZcF +9iinsuue4buJ03tPDHFMdWLfxY5iYRNtoHeJjYERc+nN7ZOVYRYldKDEWsFWJFx 8RhAwCYP0tRV9A+v5FIxBood7M3RDESF/dXYmLWN+oGnMwaDdxSyrhceRFooysW7 tkhKARyBl7dw7RvHrC8b0nmcoO+oR2+WL0I6taW8WOS02AJlOEIVgi59lZgXc/Qc HyGmaWBdhmjPwyBA2+ZPuZ8/nbViBP2eoacQwcc8WiDh0rJJQsy8WIY8bxhBhStH wX1+LDKsNs1XzLXh8f0kil7mnDtwQXBANCSXlC2Mese5lC7PLjQ= -----END CERTIFICATE-----Generated at Thu Mar 26 05:42:10 2026 by rpki-client