$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: gwq2+abyu8oSLtmCYZgbDwVolnTrPvqPRSNAKNqwWbY= Subject key identifier: 66:FB:5A:93:B5:A1:B3:B3:A1:1C:34:D7:B4:D6:DC:E1:95:FB:F4:54 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 1F221B5177BA4C6D9E79EFA6EF8BE8EA9AEE9814 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 0103 Signing time: Sun 01 Mar 2026 13:11:55 +0000 Manifest this update: Sun 01 Mar 2026 13:06:55 +0000 Manifest next update: Wed 04 Mar 2026 15:29:55 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: x1CQwFmlsHhGP3aBZAuVx9/7BJX7bTJJkErNH0WD/lY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:29:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:22:1b:51:77:ba:4c:6d:9e:79:ef:a6:ef:8b:e8:ea:9a:ee:98:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Mar 1 13:06:55 2026 GMT Not After : Mar 4 15:29:55 2026 GMT Subject: CN=66FB5A93B5A1B3B3A11C34D7B4D6DCE195FBF454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:e4:e0:dd:f5:37:c9:3e:63:4b:26:05:bd:0a: 38:7b:2c:9c:a2:d3:ae:36:65:5c:2c:74:bf:e5:8a: ca:ef:36:d1:b4:09:5b:a1:d4:4b:13:56:47:d7:58: 83:99:3e:d3:df:47:1d:1b:ff:b2:0a:cc:08:99:27: 2c:cb:e9:bd:21:04:7e:5a:b9:7f:e7:5f:1c:66:71: 72:c3:fe:d1:2a:33:46:eb:ee:59:f2:86:cf:8c:8c: d1:39:c4:52:85:e3:6d:61:eb:fe:c0:e0:7b:28:ba: b2:bb:b6:94:13:c9:ad:41:25:fe:6b:ec:a7:5d:b3: ad:82:70:0d:b0:aa:16:05:f4:12:4b:59:fc:93:31: 52:fe:bd:1f:f1:10:78:f7:94:19:f6:0f:54:4c:40: 43:24:3a:48:a7:0e:ee:4e:24:af:b5:d5:34:d8:81: 77:aa:8e:de:8f:b5:98:35:9e:e2:c4:33:04:9c:b8: 6a:06:88:de:d4:5e:8e:b4:ea:0f:2b:00:73:4b:a8: b2:92:20:38:19:67:b4:6f:c4:70:2d:f8:e9:68:33: cd:52:09:f4:51:5e:d0:f5:20:b9:ab:d8:4a:e5:e2: 74:0e:a9:88:f3:47:4f:eb:23:37:a3:88:59:4a:8f: e3:6d:0b:76:fb:71:b5:1e:74:ac:4a:73:2c:ea:3c: 1a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:FB:5A:93:B5:A1:B3:B3:A1:1C:34:D7:B4:D6:DC:E1:95:FB:F4:54 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:6a:2e:34:7a:77:ad:42:d2:2a:10:a6:8f:4c:f3:d8:71:01: 79:b5:46:9a:3f:b0:50:6a:28:71:5e:83:c0:36:d5:6e:4e:51: 78:23:df:dd:9f:c4:21:a3:07:af:f3:a7:fd:bd:f5:90:44:ca: df:ed:ab:a6:42:00:43:1a:d1:b2:99:c4:5a:48:82:d9:f5:36: 8a:b8:20:ee:52:88:fe:df:f7:87:a5:9c:cf:88:d8:68:2d:56: 3b:34:a1:25:31:84:da:f4:cf:b9:e9:90:94:57:82:6b:8d:de: e2:10:88:35:0a:ad:74:4a:ff:2c:1d:9d:82:50:90:8c:26:75: 50:1f:a6:a2:fe:5b:ba:08:b9:36:5c:42:7d:75:16:b7:7d:48: 8d:cd:0e:52:e7:3f:d6:33:69:65:8c:5d:cb:6c:88:6b:e5:0c: cb:eb:db:0e:10:2d:79:0c:49:f6:7a:3d:00:90:33:e2:0b:57: 15:03:68:e5:e9:b1:f6:6e:de:cd:9c:8e:6d:ef:f8:b4:85:80: 6d:51:a1:80:4b:82:7c:bd:e6:e5:d2:31:e4:c2:4a:b0:55:c5: 2c:89:9f:42:8e:a0:aa:31:03:20:07:14:9a:3e:8e:20:52:09: 3b:e6:6e:4c:84:8d:87:19:3b:f0:50:38:24:7c:b8:e9:cd:dd: ad:2d:3c:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHyIbUXe6TG2eee+m74vo6prumBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNjAzMDExMzA2NTVaFw0yNjAzMDQxNTI5NTVaMDMxMTAvBgNV BAMTKDY2RkI1QTkzQjVBMUIzQjNBMTFDMzREN0I0RDZEQ0UxOTVGQkY0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC65ODd9TfJPmNLJgW9Cjh7LJyi 0642ZVwsdL/lisrvNtG0CVuh1EsTVkfXWIOZPtPfRx0b/7IKzAiZJyzL6b0hBH5a uX/nXxxmcXLD/tEqM0br7lnyhs+MjNE5xFKF421h6/7A4HsourK7tpQTya1BJf5r 7Kdds62CcA2wqhYF9BJLWfyTMVL+vR/xEHj3lBn2D1RMQEMkOkinDu5OJK+11TTY gXeqjt6PtZg1nuLEMwScuGoGiN7UXo606g8rAHNLqLKSIDgZZ7RvxHAt+OloM81S CfRRXtD1ILmr2Erl4nQOqYjzR0/rIzejiFlKj+NtC3b7cbUedKxKcyzqPBoTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZvtak7Whs7OhHDTXtNbc4ZX79FQwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJqLjR6d61C0ioQpo9M89hxAXm1Rpo/sFBq KHFeg8A21W5OUXgj392fxCGjB6/zp/299ZBEyt/tq6ZCAEMa0bKZxFpIgtn1Noq4 IO5SiP7f94elnM+I2GgtVjs0oSUxhNr0z7npkJRXgmuN3uIQiDUKrXRK/ywdnYJQ kIwmdVAfpqL+W7oIuTZcQn11Frd9SI3NDlLnP9YzaWWMXctsiGvlDMvr2w4QLXkM SfZ6PQCQM+ILVxUDaOXpsfZu3s2cjm3v+LSFgG1RoYBLgny95uXSMeTCSrBVxSyJ n0KOoKoxAyAHFJo+jiBSCTvmbkyEjYcZO/BQOCR8uOnN3a0tPAk= -----END CERTIFICATE-----Generated at Mon Mar 2 09:23:40 2026 by rpki-client