$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: CxUGmM7PmmAu0MHd1yuDbJH3p58t4UsJf6l6JIDZlSM= Subject key identifier: 00:BB:9F:D9:2E:1A:93:8C:98:9E:C2:9C:AE:0C:7E:8A:50:21:53:11 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 310240C4D5E99E0B2E6F2916DB7DAD15BABC02B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 0104 Signing time: Thu 16 Apr 2026 03:40:56 +0000 Manifest this update: Thu 16 Apr 2026 03:35:56 +0000 Manifest next update: Sun 19 Apr 2026 15:20:56 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: uPrMEa12wTU41HnDNqvoeUX8iw7pI9lBfdo/vAGqFgA=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 15:20:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:02:40:c4:d5:e9:9e:0b:2e:6f:29:16:db:7d:ad:15:ba:bc:02:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Apr 16 03:35:56 2026 GMT Not After : Apr 19 15:20:56 2026 GMT Subject: CN=00BB9FD92E1A938C989EC29CAE0C7E8A50215311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:e7:c1:43:59:11:8c:11:4e:4b:00:66:c1:0e: 86:16:48:b2:3f:b9:00:d4:27:5b:dc:fb:db:a5:df: 93:52:09:bd:c9:7e:0a:c0:d2:09:20:55:6c:2f:88: 29:32:bb:0e:68:7c:5d:25:a4:17:3f:35:d7:69:16: ab:79:24:68:43:a8:51:1e:f4:1a:8c:20:a3:ff:1e: c9:c5:34:26:f1:fa:01:b5:64:52:8e:f0:5a:4c:df: e5:09:77:e2:a9:77:93:49:02:a6:22:ed:a2:85:66: 2b:57:27:df:13:4e:09:51:26:78:9f:32:db:29:2e: ea:2d:54:aa:22:09:32:47:e1:5b:fe:57:83:1b:54: 04:5e:a9:f1:eb:71:d1:c9:b3:e7:ff:db:b4:ab:ad: b8:67:c9:65:b5:5d:6c:53:cb:9e:27:f7:87:80:8e: bf:8f:1e:f6:f8:b9:86:6b:b8:0d:22:c7:ec:08:c3: 9e:a4:75:65:af:38:34:05:6e:e4:02:7b:1c:07:58: 8f:84:df:ad:a6:8c:fd:66:f4:25:1a:b9:2c:14:b7: 44:a2:c2:aa:1e:85:bd:9e:b0:6b:9f:1a:2b:fc:11: 5c:a6:3c:77:8d:5e:40:c6:58:d4:44:9e:d6:a2:8f: f8:da:7a:29:3c:cd:90:2a:b9:7a:a6:87:dd:9c:e7: 74:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:BB:9F:D9:2E:1A:93:8C:98:9E:C2:9C:AE:0C:7E:8A:50:21:53:11 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:e9:aa:86:b6:c7:5d:24:08:51:de:0b:b2:52:eb:16:e3:2f: 4c:f8:a9:be:d6:11:41:1a:d6:c4:21:7f:6a:a4:9d:94:d6:6c: a2:16:e1:03:23:50:fe:1e:19:25:a2:34:8c:96:46:9d:2e:2b: 2a:e4:89:cf:87:c9:53:7b:65:55:39:8c:26:fd:49:b2:9a:06: 1e:bf:17:88:90:9e:9d:8b:5a:b0:31:d0:70:c2:5d:94:b1:09: 14:19:89:63:d1:74:c6:f8:cb:29:26:6f:55:df:a2:89:94:c0: d6:40:35:60:d9:82:f9:28:e1:5f:38:b4:99:c2:0f:0a:c3:fc: 4a:e7:58:20:c3:c1:14:03:06:93:f1:25:e7:d0:3e:9f:61:72: 6d:b4:34:40:83:7d:31:5b:22:08:9c:11:f2:c9:d0:38:dd:6e: f4:4a:05:85:be:09:ca:ee:8d:6b:1d:e1:ff:c0:a8:a9:02:dc: d1:e7:6f:fe:9e:e9:f0:eb:3c:26:44:9f:6f:72:3a:f7:58:cd: 17:b0:73:13:da:49:d5:f1:02:b4:f1:6c:a8:b0:59:aa:f4:f4: 58:47:5b:68:93:9b:f4:58:d4:74:48:bb:3b:79:c9:0b:fc:c0: 0a:20:50:84:98:11:2d:39:1f:03:77:53:1b:16:3a:d7:2d:4b: 7e:03:ac:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMQJAxNXpngsubykW232tFbq8ArQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjA0MTYwMzM1NTZaFw0yNjA0MTkxNTIwNTZaMDMxMTAvBgNV BAMTKDAwQkI5RkQ5MkUxQTkzOEM5ODlFQzI5Q0FFMEM3RThBNTAyMTUzMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK58FDWRGMEU5LAGbBDoYWSLI/ uQDUJ1vc+9ul35NSCb3JfgrA0gkgVWwviCkyuw5ofF0lpBc/NddpFqt5JGhDqFEe 9BqMIKP/HsnFNCbx+gG1ZFKO8FpM3+UJd+Kpd5NJAqYi7aKFZitXJ98TTglRJnif MtspLuotVKoiCTJH4Vv+V4MbVAReqfHrcdHJs+f/27SrrbhnyWW1XWxTy54n94eA jr+PHvb4uYZruA0ix+wIw56kdWWvODQFbuQCexwHWI+E362mjP1m9CUauSwUt0Si wqoehb2esGufGiv8EVymPHeNXkDGWNREntaij/jaeik8zZAquXqmh92c53T3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUALuf2S4ak4yYnsKcrgx+ilAhUxEwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM/pqoa2x10kCFHeC7JS6xbjL0z4qb7WEUEa 1sQhf2qknZTWbKIW4QMjUP4eGSWiNIyWRp0uKyrkic+HyVN7ZVU5jCb9SbKaBh6/ F4iQnp2LWrAx0HDCXZSxCRQZiWPRdMb4yykmb1XfoomUwNZANWDZgvko4V84tJnC DwrD/ErnWCDDwRQDBpPxJefQPp9hcm20NECDfTFbIgicEfLJ0DjdbvRKBYW+Ccru jWsd4f/AqKkC3NHnb/6e6fDrPCZEn29yOvdYzRewcxPaSdXxArTxbKiwWar09FhH W2iTm/RY1HRIuzt5yQv8wAogUISYES05HwN3UxsWOtctS34DrPM= -----END CERTIFICATE-----Generated at Fri Apr 17 21:19:24 2026 by rpki-client