$ rpki-client -vvf repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft File: CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft (raw, json) Hash identifier: bo/k+5JuaLCl5hHkgCiVurb7x4iIRG0bsJCFNFYAFv8= Subject key identifier: 81:ED:7A:33:14:E3:64:12:CE:DE:B8:AE:CF:6D:3E:2B:4C:A4:9B:F5 Authority key identifier: CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B Certificate issuer: /CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Certificate serial: 0786E6486B3F19B3627C11CAEC91979DAC4E80D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft Manifest number: 024D Signing time: Mon 02 Mar 2026 01:52:24 +0000 Manifest this update: Mon 02 Mar 2026 01:47:24 +0000 Manifest next update: Thu 05 Mar 2026 02:03:24 +0000 Files and hashes: 1: CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl (hash: nJn2NCb3G0NmWivXyrPrdIfJ/G5gC7jkfvQM/N/TlXU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:03:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:86:e6:48:6b:3f:19:b3:62:7c:11:ca:ec:91:97:9d:ac:4e:80:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDFE133F77DC562013919C4AA2BC6F5E2688946B Validity Not Before: Mar 2 01:47:24 2026 GMT Not After : Mar 5 02:03:24 2026 GMT Subject: CN=81ED7A3314E36412CEDEB8AECF6D3E2B4CA49BF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:b3:90:93:d3:81:cc:d9:9f:72:0a:b8:2f:ab: b9:68:de:89:f4:9f:5f:df:97:8c:3f:b8:d9:66:31: e0:44:a6:d5:54:62:2d:5a:0b:bf:6e:c6:48:5d:0e: 52:08:c9:c0:74:30:ef:6e:ee:ab:5b:ee:58:98:95: 87:55:d5:71:65:bf:53:db:03:a6:03:69:88:54:bf: 83:f7:7a:c8:33:24:17:24:8a:c9:ba:37:22:9c:9f: 13:8a:09:af:7f:d8:ab:ba:fb:d9:61:58:58:3c:cf: 34:0d:ac:ab:33:1c:fd:ce:d8:fe:2e:1f:eb:08:95: c0:d5:e5:13:42:21:cd:48:e3:99:95:d0:57:bc:d6: 65:d0:ac:b7:39:ce:eb:b3:92:bf:34:76:11:43:f6: 4b:a6:ed:c0:82:fb:f6:4d:dd:e1:e4:aa:7e:4a:63: 23:96:ff:9a:b3:fa:d6:1c:3f:30:51:8f:5f:86:93: e9:20:32:46:f7:d9:d5:da:a3:d9:6e:62:ea:4a:95: ad:cf:b6:5f:9d:04:9a:1f:4b:44:40:72:a9:35:d6: 24:2e:f2:8b:d0:e3:6a:27:6f:51:9c:8b:58:a4:8e: 5f:da:aa:ea:98:9a:44:50:c7:9d:49:c7:c7:f8:78: cc:d9:44:d6:ee:de:97:97:3c:fa:ad:14:6d:02:5b: 2c:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:ED:7A:33:14:E3:64:12:CE:DE:B8:AE:CF:6D:3E:2B:4C:A4:9B:F5 X509v3 Authority Key Identifier: keyid:CD:FE:13:3F:77:DC:56:20:13:91:9C:4A:A2:BC:6F:5E:26:88:94:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDFE133F77DC562013919C4AA2BC6F5E2688946B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c5bf89c7-5071-4c12-8c3c-92aeb6dc3bbc/0/CDFE133F77DC562013919C4AA2BC6F5E2688946B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:aa:07:74:7f:9f:80:5d:a0:31:7e:86:e0:f4:21:cf:3a:6d: e2:4c:c6:67:f3:93:68:bd:b8:0a:32:9d:a4:ee:b7:67:79:00: 1d:a0:d6:ab:d5:82:ed:75:73:ab:d5:a5:fa:78:45:f7:88:5f: 1f:3a:8d:4f:1d:f4:3e:8e:44:9f:21:11:c3:25:04:76:43:62: 4a:ae:96:cb:0c:57:e4:eb:2c:bf:f6:44:a1:6b:0c:3c:4f:25: b3:3a:98:94:3c:04:b4:54:a6:79:6e:27:6c:97:ff:fb:7a:7d: 79:3a:4c:0b:e3:5f:c8:41:88:95:bd:d5:4a:53:9f:63:7d:5a: 9a:a2:e3:76:3d:b1:45:36:4d:14:aa:33:24:b4:01:68:51:d3: 27:68:c3:7e:e6:42:3a:30:1e:bf:48:06:9d:8c:15:35:d8:7c: 10:e1:c5:10:3e:0d:68:1f:ec:2a:5e:a1:c0:cb:2d:8a:29:54: 0a:a7:70:56:f0:70:07:4d:9f:57:ad:c8:cd:5a:f5:0a:d2:a6: b6:f6:da:66:60:ed:e0:06:29:7f:f7:8a:d3:f4:3b:d7:4d:e7: 6c:ac:55:6f:af:5e:f0:33:a7:92:8f:ac:ab:53:b0:62:f8:a2: 58:77:9b:f5:ac:1a:af:10:f0:68:73:12:af:1c:a9:46:a1:72: 27:67:82:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4bmSGs/GbNifBHK7JGXnaxOgNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUy Njg4OTQ2QjAeFw0yNjAzMDIwMTQ3MjRaFw0yNjAzMDUwMjAzMjRaMDMxMTAvBgNV BAMTKDgxRUQ3QTMzMTRFMzY0MTJDRURFQjhBRUNGNkQzRTJCNENBNDlCRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHs5CT04HM2Z9yCrgvq7lo3on0 n1/fl4w/uNlmMeBEptVUYi1aC79uxkhdDlIIycB0MO9u7qtb7liYlYdV1XFlv1Pb A6YDaYhUv4P3esgzJBckism6NyKcnxOKCa9/2Ku6+9lhWFg8zzQNrKszHP3O2P4u H+sIlcDV5RNCIc1I45mV0Fe81mXQrLc5zuuzkr80dhFD9kum7cCC+/ZN3eHkqn5K YyOW/5qz+tYcPzBRj1+Gk+kgMkb32dXao9luYupKla3Ptl+dBJofS0RAcqk11iQu 8ovQ42onb1Gci1ikjl/aquqYmkRQx51Jx8f4eMzZRNbu3peXPPqtFG0CWyz/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUge16MxTjZBLO3riuz20+K0ykm/UwHwYDVR0j BBgwFoAUzf4TP3fcViATkZxKorxvXiaIlGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NWJmODljNy01MDcxLTRjMTItOGMzYy05MmFlYjZkYzNiYmMvMC9DREZFMTMzRjc3 REM1NjIwMTM5MTlDNEFBMkJDNkY1RTI2ODg5NDZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZGNUUyNjg4 OTQ2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzViZjg5YzctNTA3MS00YzEyLThj M2MtOTJhZWI2ZGMzYmJjLzAvQ0RGRTEzM0Y3N0RDNTYyMDEzOTE5QzRBQTJCQzZG NUUyNjg4OTQ2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHWqB3R/n4BdoDF+huD0Ic86beJMxmfzk2i9 uAoynaTut2d5AB2g1qvVgu11c6vVpfp4RfeIXx86jU8d9D6ORJ8hEcMlBHZDYkqu lssMV+TrLL/2RKFrDDxPJbM6mJQ8BLRUpnluJ2yX//t6fXk6TAvjX8hBiJW91UpT n2N9Wpqi43Y9sUU2TRSqMyS0AWhR0ydow37mQjowHr9IBp2MFTXYfBDhxRA+DWgf 7CpeocDLLYopVAqncFbwcAdNn1etyM1a9QrSprb22mZg7eAGKX/3itP0O9dN52ys VW+vXvAzp5KPrKtTsGL4olh3m/WsGq8Q8GhzEq8cqUahcidngnQ= -----END CERTIFICATE-----Generated at Mon Mar 2 07:31:56 2026 by rpki-client