$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: RKijJdCrzK4wHzTTrc7j/Msw53Y7B85gGHhLi2kmhkI= Subject key identifier: 10:7C:74:C3:F2:A4:E7:82:17:59:6B:53:14:8B:5E:FC:9F:90:FC:CD Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 7BE934320E7807D7850B85A415782BBA1B2502F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 0170 Signing time: Sun 19 Apr 2026 06:21:40 +0000 Manifest this update: Sun 19 Apr 2026 06:16:40 +0000 Manifest next update: Wed 22 Apr 2026 14:42:40 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: 7zA8QinAgGWzLJbo2D28nM4/fz02lNnHif2mhoMSkJE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:e9:34:32:0e:78:07:d7:85:0b:85:a4:15:78:2b:ba:1b:25:02:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Apr 19 06:16:40 2026 GMT Not After : Apr 22 14:42:40 2026 GMT Subject: CN=107C74C3F2A4E78217596B53148B5EFC9F90FCCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:76:1b:e8:c2:94:34:99:6c:59:bf:e9:42:d2: 13:5e:45:07:f7:79:4d:26:bf:53:d9:61:5d:1b:a4: a0:98:69:db:bd:af:8c:8a:5a:b1:f5:35:e9:87:6b: 73:03:c5:db:a7:c9:9d:a3:3a:f2:31:5b:4f:94:e5: 09:64:81:b7:3d:44:c0:22:1c:f7:20:ca:30:45:3e: 8f:70:61:19:9f:f1:1c:dd:41:33:1b:77:f2:5b:26: 07:2d:66:a4:ce:11:5c:28:86:20:e3:36:85:b6:e4: a3:fa:c5:96:36:69:9c:7f:31:fb:50:be:9f:eb:2e: 5d:1b:17:42:99:53:31:00:a2:4d:f4:a4:9f:8b:46: 4f:d7:3c:9a:af:b2:46:22:93:a5:77:c9:7d:0f:2d: dd:a8:0c:a1:8f:8c:f0:90:34:c8:c9:78:da:d0:ea: a8:2a:34:13:6a:3d:75:c1:58:8b:ff:5a:25:95:f0: e8:3f:ce:d9:06:4b:86:7d:e6:e1:22:5c:d5:43:2e: 67:d0:17:ed:22:27:2d:4d:36:45:f2:33:15:77:9d: 18:5b:f0:9c:ff:ca:e2:17:76:34:4a:67:32:ae:ce: 55:7f:7b:c6:d4:84:5f:3d:c9:d9:3b:5b:3e:c0:ff: 37:55:04:a0:9b:c7:4e:64:55:8b:1f:8f:5f:83:49: 12:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7C:74:C3:F2:A4:E7:82:17:59:6B:53:14:8B:5E:FC:9F:90:FC:CD X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:75:3a:10:9f:25:ee:e7:d7:89:2d:07:49:05:64:fd:eb:b7: 6a:db:ff:27:10:ed:37:61:aa:8f:51:2e:10:63:43:98:7f:29: d3:50:aa:a5:69:91:66:85:53:70:b0:ea:06:46:ca:d1:c1:14: e5:90:68:a2:e6:6e:1a:7b:78:de:95:25:24:6c:92:76:58:65: 28:10:cd:e1:f6:9b:30:4f:5c:ca:44:24:dc:22:5c:ad:a1:64: 9d:8c:db:d9:a4:28:96:8b:72:b0:fe:7e:f0:c9:da:58:a6:be: e9:86:a2:68:90:29:f6:b7:39:5c:a2:d6:22:fe:a7:53:77:93: f1:29:72:cc:81:6c:41:02:d0:92:1b:70:c4:cd:a9:31:b2:fe: 0c:31:e1:9b:4d:53:c2:88:13:b4:83:93:fa:3e:9e:9e:48:24: e6:76:07:86:0d:6f:e3:d7:84:e5:06:9b:0f:ab:8e:b3:f5:57: c4:9a:7e:5f:9e:12:38:0c:8c:70:ec:9e:a4:33:f1:5e:24:20: 2b:25:5c:5a:53:3e:99:74:ac:90:0d:b7:6d:54:c2:f2:21:ea: f5:f1:4e:31:7f:1a:81:1f:f7:7d:45:38:6b:c3:97:8f:58:d9: 1d:ab:ec:ed:7a:38:a2:6b:64:93:27:c1:39:4a:4f:b8:19:01: 77:71:9e:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe+k0Mg54B9eFC4WkFXgruhslAvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNjA0MTkwNjE2NDBaFw0yNjA0MjIxNDQyNDBaMDMxMTAvBgNV BAMTKDEwN0M3NEMzRjJBNEU3ODIxNzU5NkI1MzE0OEI1RUZDOUY5MEZDQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYdhvowpQ0mWxZv+lC0hNeRQf3 eU0mv1PZYV0bpKCYadu9r4yKWrH1NemHa3MDxdunyZ2jOvIxW0+U5Qlkgbc9RMAi HPcgyjBFPo9wYRmf8RzdQTMbd/JbJgctZqTOEVwohiDjNoW25KP6xZY2aZx/MftQ vp/rLl0bF0KZUzEAok30pJ+LRk/XPJqvskYik6V3yX0PLd2oDKGPjPCQNMjJeNrQ 6qgqNBNqPXXBWIv/WiWV8Og/ztkGS4Z95uEiXNVDLmfQF+0iJy1NNkXyMxV3nRhb 8Jz/yuIXdjRKZzKuzlV/e8bUhF89ydk7Wz7A/zdVBKCbx05kVYsfj1+DSRKXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHx0w/Kk54IXWWtTFIte/J+Q/M0wHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF91OhCfJe7n14ktB0kFZP3rt2rb/ycQ7Tdh qo9RLhBjQ5h/KdNQqqVpkWaFU3Cw6gZGytHBFOWQaKLmbhp7eN6VJSRsknZYZSgQ zeH2mzBPXMpEJNwiXK2hZJ2M29mkKJaLcrD+fvDJ2limvumGomiQKfa3OVyi1iL+ p1N3k/EpcsyBbEEC0JIbcMTNqTGy/gwx4ZtNU8KIE7SDk/o+np5IJOZ2B4YNb+PX hOUGmw+rjrP1V8Safl+eEjgMjHDsnqQz8V4kICslXFpTPpl0rJANt21UwvIh6vXx TjF/GoEf931FOGvDl49Y2R2r7O16OKJrZJMnwTlKT7gZAXdxnoQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:18 2026 by rpki-client