$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: A2pcQbV/aoAgpqHGPIhJJerctDj5HGg4dzh0Yy4Y8Wo= Subject key identifier: 9A:2D:24:35:EA:DA:4C:F4:C6:EC:59:79:1A:98:42:99:4B:D5:3F:3C Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 319F1BD12582593A724CEF639C3BF36CF32C232B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 0262 Signing time: Fri 17 Apr 2026 13:52:26 +0000 Manifest this update: Fri 17 Apr 2026 13:47:26 +0000 Manifest next update: Mon 20 Apr 2026 16:06:26 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: oUOdmC4Cmz6W4S2vla43jl3ITo5LolmzHygULDLNIJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:06:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:9f:1b:d1:25:82:59:3a:72:4c:ef:63:9c:3b:f3:6c:f3:2c:23:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Apr 17 13:47:26 2026 GMT Not After : Apr 20 16:06:26 2026 GMT Subject: CN=9A2D2435EADA4CF4C6EC59791A9842994BD53F3C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:73:54:6c:da:60:51:a2:67:87:7e:99:1d:b5: 2a:9b:37:93:1e:87:db:c8:2d:cd:e2:90:8e:27:3c: fb:03:df:0a:55:5b:be:5a:d5:cf:79:34:49:90:ae: f0:44:06:c1:01:bf:fc:c9:7e:69:f5:c7:44:2c:bc: b9:36:1c:d6:e1:fd:c4:45:76:ab:83:9a:64:51:d0: c2:03:65:24:2c:8e:dd:37:af:60:79:d7:e2:50:ca: cf:ad:d8:21:c2:fc:b5:7d:6c:2d:dc:af:9b:15:e4: 3e:f2:d1:71:cd:cc:5b:94:24:bb:21:54:f6:c5:97: 81:bb:46:6a:98:06:1b:e6:9d:98:a0:13:2e:30:0d: 6c:6c:f3:4e:e3:9e:ff:67:ce:c1:55:32:ea:c3:fa: 3f:4e:22:98:66:0b:6e:13:f9:cc:f0:e1:7a:08:1b: 9b:67:1b:45:34:8f:f1:55:6d:49:52:7c:d4:bc:32: ce:a0:82:6f:c1:f4:0b:a6:ab:ac:40:cd:ed:e8:6b: 26:f3:1f:10:63:ac:82:17:a7:42:2b:46:1d:f1:77: 25:6c:36:14:a0:4f:dc:c6:aa:6a:97:2c:3d:07:c5: 31:5c:1b:65:4a:f8:ad:26:63:36:78:68:9e:74:db: b8:34:54:dd:eb:38:f3:bc:f1:25:82:b0:9c:f4:d2: cd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:2D:24:35:EA:DA:4C:F4:C6:EC:59:79:1A:98:42:99:4B:D5:3F:3C X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:dc:73:6b:bb:b0:2a:56:85:54:32:0b:f8:3e:1b:64:6b:83: b0:a0:21:89:92:9b:7e:66:a4:a7:e3:79:5f:02:6c:7d:80:da: 3e:b8:91:23:a1:40:70:89:83:79:27:48:45:8b:dc:f6:d6:6b: 76:b3:ed:a3:47:75:57:f6:f0:8b:b2:38:d9:61:a5:80:26:4c: 0c:9a:c9:f9:6c:fa:98:1a:08:6f:ad:71:e3:7e:ed:14:ec:fd: 8b:9c:48:43:be:23:b9:c7:46:e7:86:76:cc:f7:98:5b:5c:d0: 80:75:06:f7:7c:7a:b6:df:b3:d7:ed:b7:28:2d:2c:a8:de:37: de:0c:1c:c6:c6:1c:d9:6e:db:66:81:70:aa:6f:92:80:05:9d: 7b:0f:ec:07:62:12:89:03:cf:5d:d2:49:7c:bf:8a:e4:45:72: ed:64:b0:f8:a1:44:dc:4b:bc:86:2d:86:28:a7:8a:c8:18:41: fc:2f:52:27:f6:18:ed:e6:74:69:c5:c8:6f:97:dc:72:90:3b: dd:9d:7b:68:f7:28:ae:2f:64:87:a4:4e:99:d6:c6:39:5a:52: f6:60:96:ba:d3:6b:dd:b7:c1:38:0f:2d:a6:a5:f8:7a:67:83: 06:68:55:8a:3d:55:54:5c:1e:f1:eb:d9:8a:44:6b:1a:bf:d3: fa:0d:f5:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZ8b0SWCWTpyTO9jnDvzbPMsIyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNjA0MTcxMzQ3MjZaFw0yNjA0MjAxNjA2MjZaMDMxMTAvBgNV BAMTKDlBMkQyNDM1RUFEQTRDRjRDNkVDNTk3OTFBOTg0Mjk5NEJENTNGM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQc1Rs2mBRomeHfpkdtSqbN5Me h9vILc3ikI4nPPsD3wpVW75a1c95NEmQrvBEBsEBv/zJfmn1x0QsvLk2HNbh/cRF dquDmmRR0MIDZSQsjt03r2B51+JQys+t2CHC/LV9bC3cr5sV5D7y0XHNzFuUJLsh VPbFl4G7RmqYBhvmnZigEy4wDWxs807jnv9nzsFVMurD+j9OIphmC24T+czw4XoI G5tnG0U0j/FVbUlSfNS8Ms6ggm/B9Aumq6xAze3oaybzHxBjrIIXp0IrRh3xdyVs NhSgT9zGqmqXLD0HxTFcG2VK+K0mYzZ4aJ5027g0VN3rOPO88SWCsJz00s1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmi0kNeraTPTG7Fl5GphCmUvVPzwwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALcc2u7sCpWhVQyC/g+G2Rrg7CgIYmSm35m pKfjeV8CbH2A2j64kSOhQHCJg3knSEWL3PbWa3az7aNHdVf28IuyONlhpYAmTAya yfls+pgaCG+tceN+7RTs/YucSEO+I7nHRueGdsz3mFtc0IB1Bvd8erbfs9fttygt LKjeN94MHMbGHNlu22aBcKpvkoAFnXsP7AdiEokDz13SSXy/iuRFcu1ksPihRNxL vIYthiinisgYQfwvUif2GO3mdGnFyG+X3HKQO92de2j3KK4vZIekTpnWxjlaUvZg lrrTa923wTgPLaal+HpngwZoVYo9VVRcHvHr2YpEaxq/0/oN9Wk= -----END CERTIFICATE-----Generated at Sun Apr 19 11:22:29 2026 by rpki-client