$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: jvLXRq5jpQFNogk630aain0y3iBBc4aDX+r2aQUkOPo= Subject key identifier: 8D:E7:C0:22:F1:4B:FE:4F:9B:A4:6D:E9:84:78:69:D8:26:97:3C:9F Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 7B141C25A5C238644C6D043BD98D466E1F996350 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: EF Signing time: Fri 27 Feb 2026 22:30:54 +0000 Manifest this update: Fri 27 Feb 2026 22:25:54 +0000 Manifest next update: Tue 03 Mar 2026 09:05:54 +0000 Files and hashes: 1: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) 2: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: nIIQZacmq3A1h6Pl4YhJJDkpYbKBmOVe0X0+cOijcr0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:14:1c:25:a5:c2:38:64:4c:6d:04:3b:d9:8d:46:6e:1f:99:63:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Feb 27 22:25:54 2026 GMT Not After : Mar 3 09:05:54 2026 GMT Subject: CN=8DE7C022F14BFE4F9BA46DE9847869D826973C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:18:db:cc:2e:84:da:98:81:4d:bb:ae:c7:f3: 4a:da:61:29:ce:3a:89:80:f9:80:eb:24:ab:aa:e8: 78:ab:25:92:f4:1f:eb:c3:52:e6:b7:88:74:bd:f9: 12:1e:69:8c:65:c9:17:30:0b:28:52:8e:7a:00:2b: 47:58:18:61:fc:87:d0:23:72:dc:d5:99:47:2f:52: e3:cf:b8:ef:6d:95:cd:81:55:9b:08:3b:6f:bd:43: a9:02:9e:f8:3b:36:ba:93:0d:30:b4:f3:0b:56:7e: 2d:39:b1:11:49:cd:c3:73:cc:b4:6e:0c:67:74:b3: 04:78:62:69:b1:47:e3:9e:3b:17:3a:b4:20:60:7b: b2:34:b8:08:19:f3:2d:ec:f0:dc:73:1c:66:cf:7f: cb:0d:be:43:b1:6b:66:82:d2:bc:df:a1:08:88:e5: c0:08:96:1c:cd:d4:cf:8b:a6:ce:9d:21:1c:19:a4: a0:94:66:73:dc:bc:59:7b:98:9f:47:22:8a:cb:e5: ad:53:f8:9f:07:7e:e7:9d:74:ca:4d:3c:2a:2e:85: f9:cc:2e:5b:d2:56:8d:63:c5:20:50:f4:82:0d:98: 7e:b4:f9:a2:68:87:fb:80:f5:ae:86:5a:be:93:c1: 7d:81:3e:aa:09:cb:fa:74:59:c0:3d:be:55:3b:92: 4a:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:E7:C0:22:F1:4B:FE:4F:9B:A4:6D:E9:84:78:69:D8:26:97:3C:9F X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:70:e6:32:02:be:93:68:4e:5d:e3:74:c7:eb:2b:31:ab:bb: 0f:b6:1a:34:ef:3d:2a:b4:37:1c:11:64:4c:9a:a2:74:c2:35: 86:b5:83:9d:52:21:5e:e4:ca:9b:40:2b:ee:9f:0d:d8:13:45: 14:bb:1d:61:25:e4:8a:b1:2d:43:25:2e:5f:5f:c3:1b:ba:45: 8b:4c:de:d8:8b:da:00:9d:ab:a7:18:1c:01:b9:23:bf:ea:f7: 54:98:87:0e:00:b2:c5:40:4b:c8:f1:e4:9c:5f:8a:3b:eb:69: 1e:05:0b:49:75:86:30:af:29:36:16:a6:6e:25:df:29:c7:a8: 98:b4:b6:f4:9a:c1:d3:e1:fc:a2:d5:8c:15:98:2d:a3:b4:48: 63:6d:c9:5d:78:d9:45:9b:3d:a1:ad:12:37:05:9b:5b:0c:fc: c1:28:03:0a:23:76:59:a5:89:0f:72:a9:b2:f0:1a:9f:6d:af: cd:62:a8:09:f2:fd:82:bc:aa:84:ae:e0:52:25:e3:d2:58:51: d4:29:c3:7c:46:99:95:c5:32:4e:c1:4a:d3:4b:b6:29:05:d3: bd:9c:33:e7:75:c1:35:b2:6b:00:94:9b:f2:75:a7:ce:0a:6d: 38:34:5b:5e:f3:9f:c5:37:11:9c:3b:e4:cb:51:19:a5:b0:3e: f0:c2:16:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUexQcJaXCOGRMbQQ72Y1Gbh+ZY1AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjAyMjcyMjI1NTRaFw0yNjAzMDMwOTA1NTRaMDMxMTAvBgNV BAMTKDhERTdDMDIyRjE0QkZFNEY5QkE0NkRFOTg0Nzg2OUQ4MjY5NzNDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5GNvMLoTamIFNu67H80raYSnO OomA+YDrJKuq6HirJZL0H+vDUua3iHS9+RIeaYxlyRcwCyhSjnoAK0dYGGH8h9Aj ctzVmUcvUuPPuO9tlc2BVZsIO2+9Q6kCnvg7NrqTDTC08wtWfi05sRFJzcNzzLRu DGd0swR4YmmxR+OeOxc6tCBge7I0uAgZ8y3s8NxzHGbPf8sNvkOxa2aC0rzfoQiI 5cAIlhzN1M+Lps6dIRwZpKCUZnPcvFl7mJ9HIorL5a1T+J8HfueddMpNPCouhfnM LlvSVo1jxSBQ9IINmH60+aJoh/uA9a6GWr6TwX2BPqoJy/p0WcA9vlU7kkozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjefAIvFL/k+bpG3phHhp2CaXPJ8wHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAARw5jICvpNoTl3jdMfrKzGruw+2GjTvPSq0 NxwRZEyaonTCNYa1g51SIV7kyptAK+6fDdgTRRS7HWEl5IqxLUMlLl9fwxu6RYtM 3tiL2gCdq6cYHAG5I7/q91SYhw4AssVAS8jx5JxfijvraR4FC0l1hjCvKTYWpm4l 3ynHqJi0tvSawdPh/KLVjBWYLaO0SGNtyV142UWbPaGtEjcFm1sM/MEoAwojdlml iQ9yqbLwGp9tr81iqAny/YK8qoSu4FIl49JYUdQpw3xGmZXFMk7BStNLtikF072c M+d1wTWyawCUm/J1p84KbTg0W17zn8U3EZw75MtRGaWwPvDCFic= -----END CERTIFICATE-----Generated at Mon Mar 2 10:44:19 2026 by rpki-client