$ rpki-client -vvf repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft File: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft (raw, json) Hash identifier: Sv09KP480TcsYm1W/W4j8S/03s0jcRrcN2o88vDN9NU= Subject key identifier: 03:40:81:27:84:F2:11:D5:4A:2D:03:E0:B0:A1:C8:B8:1E:9C:F7:29 Authority key identifier: CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A Certificate issuer: /CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Certificate serial: 624D53C2B7766355C258E8E5E529E80D80F38EB9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft Manifest number: 0118 Signing time: Sat 18 Apr 2026 07:02:01 +0000 Manifest this update: Sat 18 Apr 2026 06:57:01 +0000 Manifest next update: Tue 21 Apr 2026 10:31:01 +0000 Files and hashes: 1: CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl (hash: bC/AwH2VDOqlRmbZ5TJkMyFRNPgmSHxZbfrKM5v0S0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:31:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4d:53:c2:b7:76:63:55:c2:58:e8:e5:e5:29:e8:0d:80:f3:8e:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A Validity Not Before: Apr 18 06:57:01 2026 GMT Not After : Apr 21 10:31:01 2026 GMT Subject: CN=0340812784F211D54A2D03E0B0A1C8B81E9CF729 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:97:6f:be:9a:45:ca:c1:79:67:00:ae:10:ff: be:ae:ac:7c:2b:1c:10:c1:da:41:79:d0:df:35:85: c7:e1:1e:52:28:e3:16:f0:51:61:d2:e2:45:3b:88: e0:50:5a:3d:09:c7:5e:e7:26:c2:c6:3f:3f:08:ec: bb:1c:60:a9:e3:b9:56:66:95:47:22:ac:44:f7:86: b2:f8:8a:8d:eb:54:82:77:93:6e:8c:ec:2c:3e:3b: e9:5f:38:f4:d2:37:06:7f:85:f7:b9:c7:81:00:85: 21:fe:de:b3:e4:f8:88:52:5d:1b:4f:91:f7:76:5a: 8d:0a:e5:96:3c:2e:58:e9:ac:a2:c3:67:d7:70:9c: c9:4a:c0:db:67:f9:31:6b:28:de:16:b0:47:ac:15: 3c:d2:cc:0a:a5:c2:a6:3a:aa:79:c5:8e:65:64:b7: e3:4b:50:20:d2:18:1a:43:88:d3:ba:bc:ce:8c:71: 5c:04:0d:27:58:fb:54:8a:09:09:b6:81:ec:76:b9: ba:ed:3a:f9:50:6e:43:3f:c9:b6:f1:4e:08:31:67: c5:b1:9e:35:de:e2:6d:eb:3d:8e:b9:99:6a:f8:eb: 86:06:c3:e6:34:ec:bb:64:2c:64:e1:fd:78:bf:89: bb:f8:e5:3c:d9:34:9d:44:90:66:be:9b:16:39:91: 3d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:40:81:27:84:F2:11:D5:4A:2D:03:E0:B0:A1:C8:B8:1E:9C:F7:29 X509v3 Authority Key Identifier: keyid:CF:0F:FF:D4:7B:D1:49:C7:07:0F:D3:FF:BB:1B:08:AE:FC:18:87:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0199e541-1861-4d6a-8e28-b02845861496/1/CF0FFFD47BD149C7070FD3FFBB1B08AEFC18875A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:c1:4b:1a:c6:9c:db:63:e3:27:49:6b:72:74:f9:e7:38:b2: 97:bc:59:0f:65:7f:d0:d2:2d:c2:4c:3b:cd:cf:dd:60:08:4e: 1a:b5:8d:be:ae:93:08:b0:d0:26:2d:b5:8e:b3:5c:6c:70:05: 90:23:49:a9:da:08:fc:3e:a3:91:5e:34:f8:de:bb:3e:6c:b1: 20:b0:59:92:6c:7e:02:cf:4b:d7:31:40:79:00:49:ae:87:45: 61:cd:25:02:68:30:93:6b:e7:3a:74:9e:0d:75:91:1c:ef:ad: 17:57:d1:12:11:37:9c:98:59:a6:c0:e6:d8:90:4f:1e:46:60: 44:53:e5:39:2d:ef:54:e8:9f:c7:11:fe:a3:bf:4e:d3:4a:2d: e0:0f:e6:5c:aa:78:f3:5c:3a:53:02:58:0d:d8:34:20:1f:a8: 0f:95:a8:84:bb:6c:81:66:28:41:93:b3:93:66:bc:ad:d0:62: 79:42:61:7f:01:f1:d6:80:0d:13:1c:96:09:c4:0b:01:31:e8: 18:d4:75:27:05:cd:8d:34:60:9a:bd:86:66:ed:da:89:b7:9f: 1d:32:e3:cc:48:1f:1a:72:3e:fc:34:66:4b:90:9c:2b:91:89: c1:8b:ba:0a:13:82:29:7d:fe:2f:cf:96:a9:b8:14:80:0b:0c: 81:64:71:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYk1Twrd2Y1XCWOjl5SnoDYDzjrkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVG QzE4ODc1QTAeFw0yNjA0MTgwNjU3MDFaFw0yNjA0MjExMDMxMDFaMDMxMTAvBgNV BAMTKDAzNDA4MTI3ODRGMjExRDU0QTJEMDNFMEIwQTFDOEI4MUU5Q0Y3MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUl2++mkXKwXlnAK4Q/76urHwr HBDB2kF50N81hcfhHlIo4xbwUWHS4kU7iOBQWj0Jx17nJsLGPz8I7LscYKnjuVZm lUcirET3hrL4io3rVIJ3k26M7Cw+O+lfOPTSNwZ/hfe5x4EAhSH+3rPk+IhSXRtP kfd2Wo0K5ZY8LljprKLDZ9dwnMlKwNtn+TFrKN4WsEesFTzSzAqlwqY6qnnFjmVk t+NLUCDSGBpDiNO6vM6McVwEDSdY+1SKCQm2gex2ubrtOvlQbkM/ybbxTggxZ8Wx njXe4m3rPY65mWr464YGw+Y07LtkLGTh/Xi/ibv45TzZNJ1EkGa+mxY5kT0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA0CBJ4TyEdVKLQPgsKHIuB6c9ykwHwYDVR0j BBgwFoAUzw//1HvRSccHD9P/uxsIrvwYh1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTk5ZTU0MS0xODYxLTRkNmEtOGUyOC1iMDI4NDU4NjE0OTYvMS9DRjBGRkZENDdC RDE0OUM3MDcwRkQzRkZCQjFCMDhBRUZDMTg4NzVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4QUVGQzE4 ODc1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE5OWU1NDEtMTg2MS00ZDZhLThl MjgtYjAyODQ1ODYxNDk2LzEvQ0YwRkZGRDQ3QkQxNDlDNzA3MEZEM0ZGQkIxQjA4 QUVGQzE4ODc1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3BSxrGnNtj4ydJa3J0+ec4spe8WQ9lf9DS LcJMO83P3WAIThq1jb6ukwiw0CYttY6zXGxwBZAjSanaCPw+o5FeNPjeuz5ssSCw WZJsfgLPS9cxQHkASa6HRWHNJQJoMJNr5zp0ng11kRzvrRdX0RIRN5yYWabA5tiQ Tx5GYERT5Tkt71Ton8cR/qO/TtNKLeAP5lyqePNcOlMCWA3YNCAfqA+VqIS7bIFm KEGTs5NmvK3QYnlCYX8B8daADRMclgnECwEx6BjUdScFzY00YJq9hmbt2om3nx0y 48xIHxpyPvw0ZkuQnCuRicGLugoTgil9/i/Plqm4FIALDIFkcZ4= -----END CERTIFICATE-----Generated at Sun Apr 19 10:23:37 2026 by rpki-client