$ rpki-client -vvf repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft File: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft (raw, json) Hash identifier: 20IL2tDR60X2WGOQX3UVCM/mbmdWS/RmmoJ2CnuhtXg= Subject key identifier: A1:3F:05:CA:D5:63:3F:0E:4B:BA:AD:8F:86:A3:D9:EF:56:38:BA:C7 Authority key identifier: CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C Certificate issuer: /CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Certificate serial: 7D5B3F3AB393978979C3949AF42AFDDC6AB5AD96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft Manifest number: 0106 Signing time: Mon 20 Apr 2026 21:00:57 +0000 Manifest this update: Mon 20 Apr 2026 20:55:57 +0000 Manifest next update: Fri 24 Apr 2026 00:19:57 +0000 Files and hashes: 1: CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl (hash: gIB86CHMNzMEfZd9zMtukPNBTLIIZNwtzT3v2eO7gt8=) 2: 323030313a6466343a336134303a3a2f34382d3438203d3e20313533313132.roa (hash: jKBpF5n6aRwYVRtvawTuNUoC6fB2T5xMG66T9GHPZm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 00:19:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:5b:3f:3a:b3:93:97:89:79:c3:94:9a:f4:2a:fd:dc:6a:b5:ad:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C Validity Not Before: Apr 20 20:55:57 2026 GMT Not After : Apr 24 00:19:57 2026 GMT Subject: CN=A13F05CAD5633F0E4BBAAD8F86A3D9EF5638BAC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7b:ae:7f:1b:c5:13:9b:56:4f:e3:44:62:1a: b6:61:30:b8:74:c2:53:84:a8:f8:12:d1:03:5b:2e: 65:0b:84:eb:0e:32:7a:c0:6b:da:90:15:d8:06:77: 1a:6b:ce:b0:65:1d:1e:0c:01:23:55:63:d1:a7:84: 84:ac:1f:4b:cc:2b:d2:53:bc:c7:22:2c:4d:0a:d7: 13:66:5a:0f:4c:11:d3:8b:98:e4:4c:79:ff:d9:52: c4:9b:cd:5d:36:b2:9d:2c:7a:46:c2:36:43:0d:d0: d5:62:14:8a:23:3e:4b:a0:ea:5d:0a:0e:6f:0b:a7: 29:13:7a:0f:2a:7c:37:9d:b0:a3:57:ac:70:54:ca: 7b:73:56:de:e2:6b:61:fd:54:02:53:46:18:95:60: 23:97:09:8e:14:e6:eb:5d:98:7e:63:82:ed:3b:f1: 1b:4f:db:39:ad:33:27:fb:ec:40:78:a2:ee:74:6e: 15:68:c4:8e:c7:77:01:b4:47:e2:87:1d:c3:08:61: 6a:25:cd:f9:41:cf:b1:20:59:b0:eb:84:9e:cf:52: bb:9a:1e:45:90:f4:25:6a:67:b5:1b:d2:bb:2f:34: bb:a6:b4:7d:b1:da:d8:bf:69:df:ba:db:68:4e:e2: df:68:b1:ed:1e:e9:70:a7:89:e9:52:e5:65:47:22: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:05:CA:D5:63:3F:0E:4B:BA:AD:8F:86:A3:D9:EF:56:38:BA:C7 X509v3 Authority Key Identifier: keyid:CF:A4:9B:8E:5D:9A:08:B7:A0:17:E5:B0:F8:87:E8:8F:99:A6:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0456519e-ab61-4943-b3e8-10bdd6080fda/1/CFA49B8E5D9A08B7A017E5B0F887E88F99A6306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:96:81:37:d0:25:41:97:da:90:87:20:de:35:f3:7b:9b:61: 1c:ba:47:d7:eb:e3:dd:26:0e:4d:a5:60:c2:d1:d1:3f:6a:99: 2c:83:0d:54:06:fe:4b:aa:97:b8:42:eb:45:a8:31:f5:5f:ce: 07:5d:8f:9a:43:e3:a4:77:4b:1d:d4:bb:bb:39:07:df:4a:0a: 98:95:2b:a2:93:87:c8:f4:d4:fa:4b:bc:df:84:89:44:78:4f: 1f:b1:3e:38:35:32:d7:0f:da:8d:41:9f:38:ca:57:cd:d9:ad: 6b:c4:b2:09:3c:c6:89:36:c7:7b:fc:cc:c4:05:a4:1a:a2:a1: f6:62:e0:56:bd:f9:ad:6b:22:04:27:16:07:fb:35:b9:18:c4: 02:9d:2c:ef:f8:8e:f1:96:21:47:a5:2b:ee:31:e5:43:96:af: 00:9f:c5:96:c5:70:dc:00:77:b4:89:64:81:db:51:00:f8:fc: 29:96:b1:fd:69:61:56:35:69:c8:c6:4d:05:4a:78:06:f4:59: 51:cc:ea:9b:4c:79:5f:b5:94:f2:6c:45:34:45:1d:16:42:59: 5a:e8:bf:27:f9:d4:89:83:c0:33:89:53:4f:35:1b:50:0c:cd: 84:d9:cc:98:dd:ef:a0:60:1a:4c:ff:b2:fa:2b:05:02:08:4a: b2:03:76:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfVs/OrOTl4l5w5Sa9Cr93Gq1rZYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5 OUE2MzA2QzAeFw0yNjA0MjAyMDU1NTdaFw0yNjA0MjQwMDE5NTdaMDMxMTAvBgNV BAMTKEExM0YwNUNBRDU2MzNGMEU0QkJBQUQ4Rjg2QTNEOUVGNTYzOEJBQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGe65/G8UTm1ZP40RiGrZhMLh0 wlOEqPgS0QNbLmULhOsOMnrAa9qQFdgGdxprzrBlHR4MASNVY9GnhISsH0vMK9JT vMciLE0K1xNmWg9MEdOLmORMef/ZUsSbzV02sp0sekbCNkMN0NViFIojPkug6l0K Dm8LpykTeg8qfDedsKNXrHBUyntzVt7ia2H9VAJTRhiVYCOXCY4U5utdmH5jgu07 8RtP2zmtMyf77EB4ou50bhVoxI7HdwG0R+KHHcMIYWolzflBz7EgWbDrhJ7PUrua HkWQ9CVqZ7Ub0rsvNLumtH2x2ti/ad+622hO4t9ose0e6XCnielS5WVHIvFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoT8FytVjPw5Luq2PhqPZ71Y4uscwHwYDVR0j BBgwFoAUz6Sbjl2aCLegF+Ww+Ifoj5mmMGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDU2NTE5ZS1hYjYxLTQ5NDMtYjNlOC0xMGJkZDYwODBmZGEvMS9DRkE0OUI4RTVE OUEwOEI3QTAxN0U1QjBGODg3RTg4Rjk5QTYzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4OEY5OUE2 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ1NjUxOWUtYWI2MS00OTQzLWIz ZTgtMTBiZGQ2MDgwZmRhLzEvQ0ZBNDlCOEU1RDlBMDhCN0EwMTdFNUIwRjg4N0U4 OEY5OUE2MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMiWgTfQJUGX2pCHIN4183ubYRy6R9fr490m Dk2lYMLR0T9qmSyDDVQG/kuql7hC60WoMfVfzgddj5pD46R3Sx3Uu7s5B99KCpiV K6KTh8j01PpLvN+EiUR4Tx+xPjg1MtcP2o1BnzjKV83ZrWvEsgk8xok2x3v8zMQF pBqiofZi4Fa9+a1rIgQnFgf7NbkYxAKdLO/4jvGWIUelK+4x5UOWrwCfxZbFcNwA d7SJZIHbUQD4/CmWsf1pYVY1acjGTQVKeAb0WVHM6ptMeV+1lPJsRTRFHRZCWVro vyf51ImDwDOJU081G1AMzYTZzJjd76BgGkz/svorBQIISrIDdmA= -----END CERTIFICATE-----Generated at Wed Apr 22 10:01:15 2026 by rpki-client