$ rpki-client -vvf repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft File: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft (raw, json) Hash identifier: 8xaAbKAegIY2NdSeVK87lHAquvHb/nxFjISwyWVE3Qk= Subject key identifier: 6C:E6:BF:97:20:9C:59:16:71:66:19:29:7A:FA:A0:79:A0:78:F3:8E Authority key identifier: CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA Certificate issuer: /CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Certificate serial: 01D70603E2B28831D8F5E66F8582517CA2C77F2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft Manifest number: 015B Signing time: Mon 02 Mar 2026 05:21:35 +0000 Manifest this update: Mon 02 Mar 2026 05:16:35 +0000 Manifest next update: Thu 05 Mar 2026 12:32:35 +0000 Files and hashes: 1: CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl (hash: qISjTg9Nyx5dV4g2mRZjngzYwzwcV7ktise/9hNUp2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:d7:06:03:e2:b2:88:31:d8:f5:e6:6f:85:82:51:7c:a2:c7:7f:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA Validity Not Before: Mar 2 05:16:35 2026 GMT Not After : Mar 5 12:32:35 2026 GMT Subject: CN=6CE6BF97209C5916716619297AFAA079A078F38E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:24:ee:1e:44:59:d3:36:07:2d:77:2e:37:6b: d4:7f:36:da:dc:bf:b0:04:29:ee:1a:24:21:5d:2d: 4e:b9:47:00:6c:8d:24:71:a5:f2:f7:86:dd:fb:6c: 1d:94:eb:82:d9:2c:5c:7d:d3:11:d8:f9:29:51:f9: 02:0e:ca:f7:72:9a:e6:38:d1:02:5e:88:61:b0:24: 30:99:e3:45:3b:73:86:63:f8:c6:be:ff:7f:b2:98: 87:38:f6:02:8d:ec:ad:94:19:df:d5:bc:ac:89:1c: 31:f6:b1:2c:cb:5b:4c:fb:9d:f0:79:40:60:8e:72: 54:99:45:7a:36:48:38:a1:38:28:54:56:4b:b9:c3: e3:93:6b:ba:08:d4:d1:13:d3:42:40:20:06:c1:45: 38:f1:80:f1:42:97:eb:bb:28:fe:6f:8e:12:95:8b: 6f:2f:d7:10:25:37:10:b0:3d:fc:8e:af:0c:84:cf: 4e:fb:b2:3b:cb:28:11:18:9f:7c:c8:79:0a:3e:9e: 3f:ae:80:5a:7c:d3:0c:6a:c3:e1:e7:b5:90:ab:20: b7:7d:b2:c8:45:32:b6:6d:76:3e:c4:42:62:ad:57: 1e:ba:b6:66:09:c7:8e:d7:4c:71:55:bd:ec:5f:a4: f0:68:df:e4:b5:e1:04:bd:38:2d:41:ed:b4:97:67: 24:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:E6:BF:97:20:9C:59:16:71:66:19:29:7A:FA:A0:79:A0:78:F3:8E X509v3 Authority Key Identifier: keyid:CF:FE:9C:8F:BE:15:24:63:00:A6:C1:B1:A8:B2:2E:CF:63:C6:23:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/CFFE9C8FBE15246300A6C1B1A8B22ECF63C623FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:32:6e:32:3a:8f:d4:10:80:49:c8:fc:0b:c0:06:77:4d:ae: 48:6e:a0:46:03:1c:f9:50:89:03:c6:50:5a:fe:c9:3f:0c:ee: 9b:67:51:8b:d1:58:e0:2d:51:84:37:eb:2b:ea:c1:e9:39:c3: 3a:d9:3f:11:18:7e:e8:40:5c:2f:f7:13:4f:ba:78:6a:a5:02: 3b:1c:c6:1a:5e:53:86:8e:e1:4e:c3:72:e9:93:ba:c1:56:58: 4a:52:07:bb:6e:1e:e8:cf:52:23:26:ab:31:10:22:72:a1:1b: 15:54:f8:27:cf:89:95:aa:31:62:46:0a:61:c1:05:02:52:83: a7:e2:cb:bd:a7:3a:08:9a:79:ef:00:7c:5e:9e:fe:a4:cf:05: cf:29:09:cd:39:9a:05:a7:76:e9:cd:16:0c:a3:f6:c2:3a:87: a1:09:f8:42:95:ce:24:42:f8:90:5e:0b:9c:5d:5a:cf:8b:19: 47:f5:ab:b0:73:d6:7c:b8:5b:0d:85:a7:23:fd:f6:05:e0:85: 1f:3b:de:42:50:1a:6d:99:5f:84:b4:33:2c:f5:a7:f5:e0:05: 15:22:cb:6e:ea:2f:f8:c4:b2:b7:08:dc:58:42:c3:15:38:5e: 29:a5:c6:6c:f6:7f:bc:13:d7:78:7f:7a:dd:de:a1:d5:60:0a: d6:63:60:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAdcGA+KyiDHY9eZvhYJRfKLHfyowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2 M0M2MjNGQTAeFw0yNjAzMDIwNTE2MzVaFw0yNjAzMDUxMjMyMzVaMDMxMTAvBgNV BAMTKDZDRTZCRjk3MjA5QzU5MTY3MTY2MTkyOTdBRkFBMDc5QTA3OEYzOEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwJO4eRFnTNgctdy43a9R/Ntrc v7AEKe4aJCFdLU65RwBsjSRxpfL3ht37bB2U64LZLFx90xHY+SlR+QIOyvdymuY4 0QJeiGGwJDCZ40U7c4Zj+Ma+/3+ymIc49gKN7K2UGd/VvKyJHDH2sSzLW0z7nfB5 QGCOclSZRXo2SDihOChUVku5w+OTa7oI1NET00JAIAbBRTjxgPFCl+u7KP5vjhKV i28v1xAlNxCwPfyOrwyEz077sjvLKBEYn3zIeQo+nj+ugFp80wxqw+HntZCrILd9 sshFMrZtdj7EQmKtVx66tmYJx47XTHFVvexfpPBo3+S14QS9OC1B7bSXZyT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbOa/lyCcWRZxZhkpevqgeaB4844wHwYDVR0j BBgwFoAUz/6cj74VJGMApsGxqLIuz2PGI/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDgyMDIwYy0zYzQ2LTRiZmItOTRjMi0zMjkyZjU2YTY1MmEvMC9DRkZFOUM4RkJF MTUyNDYzMDBBNkMxQjFBOEIyMkVDRjYzQzYyM0ZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJFQ0Y2M0M2 MjNGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvQ0ZGRTlDOEZCRTE1MjQ2MzAwQTZDMUIxQThCMjJF Q0Y2M0M2MjNGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIcybjI6j9QQgEnI/AvABndNrkhuoEYDHPlQ iQPGUFr+yT8M7ptnUYvRWOAtUYQ36yvqwek5wzrZPxEYfuhAXC/3E0+6eGqlAjsc xhpeU4aO4U7DcumTusFWWEpSB7tuHujPUiMmqzEQInKhGxVU+CfPiZWqMWJGCmHB BQJSg6fiy72nOgiaee8AfF6e/qTPBc8pCc05mgWndunNFgyj9sI6h6EJ+EKVziRC +JBeC5xdWs+LGUf1q7Bz1ny4Ww2FpyP99gXghR873kJQGm2ZX4S0Myz1p/XgBRUi y27qL/jEsrcI3FhCwxU4Ximlxmz2f7wT13h/et3eodVgCtZjYC0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:03 2026 by rpki-client