$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: LQ4EMFfuNkxlCfqmv6kEZMzOQmjan3aNSCT3retlIBM= Subject key identifier: 3C:F4:5B:A5:B2:4C:BC:F1:85:96:D4:72:70:58:40:4A:60:31:76:F7 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 265B3385EB17AC65C78957FC77255A70766DB33E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: 0101 Signing time: Tue 21 Apr 2026 02:02:44 +0000 Manifest this update: Tue 21 Apr 2026 01:57:44 +0000 Manifest next update: Fri 24 Apr 2026 02:22:44 +0000 Files and hashes: 1: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: GZsl1/LYAjEboG6OYtbImbvTDEonNQHea20m3Bd343Q=) 2: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: I98r/YvoKJnqIbKebXKfBKywu1BzE/FQD60HTUreMMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 02:22:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5b:33:85:eb:17:ac:65:c7:89:57:fc:77:25:5a:70:76:6d:b3:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Apr 21 01:57:44 2026 GMT Not After : Apr 24 02:22:44 2026 GMT Subject: CN=3CF45BA5B24CBCF18596D4727058404A603176F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:43:65:86:6d:e9:68:74:31:76:d6:02:49:36: b4:55:50:01:01:d7:9a:a9:6b:62:bd:1a:2f:c7:9b: 02:ba:20:72:ce:d0:a0:be:00:84:36:52:fa:20:f6: a6:88:56:90:28:06:d5:f3:24:4c:59:a8:0a:41:61: df:3b:36:d2:f6:ca:fc:1e:93:86:a8:d1:16:02:dc: 7f:6f:64:f8:0f:46:a6:16:3c:73:31:4c:a3:e8:ec: 1f:87:51:e3:0b:e8:44:55:ae:50:c1:80:79:27:f1: 96:6a:b6:62:37:78:00:5a:76:ff:72:3e:7b:e5:1e: 1e:1d:df:90:5c:4d:06:81:f6:31:b2:80:3c:ba:2e: 0c:18:34:af:62:6e:c3:d8:24:52:6f:0d:b5:fe:eb: 51:d6:a6:93:50:03:74:7e:04:d6:25:9f:c2:79:66: cb:31:86:fe:04:12:be:a1:bb:07:fb:37:2d:27:82: 19:e8:8e:5b:1a:27:bc:ae:f1:87:5e:91:52:32:7b: 1c:e5:62:cc:5b:62:e9:8f:8f:3f:67:9a:13:b9:8b: a0:01:89:77:cb:18:c1:31:27:1b:3c:b3:f1:7f:0b: fd:a9:e5:c2:ae:fc:b2:b5:57:a9:76:e2:63:6b:cc: 2c:ad:1b:a0:e9:39:83:26:f9:b3:24:90:25:c1:a4: e8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:F4:5B:A5:B2:4C:BC:F1:85:96:D4:72:70:58:40:4A:60:31:76:F7 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ea:6b:28:2d:72:81:d4:ee:33:20:be:06:58:c1:74:cc:99: 3e:01:e8:d8:42:be:c8:f8:5d:a8:ee:31:d0:cc:e9:dd:bb:ef: ec:c0:0a:1f:8d:79:25:7e:50:40:13:ed:5b:f7:3a:27:0a:b3: 90:53:59:d3:85:c0:e5:e1:7d:25:38:9f:7c:66:b1:54:b9:75: 1b:52:cf:f7:8b:17:54:26:51:b8:6e:71:34:6f:52:77:14:12: 3b:d2:2a:b9:ad:c2:62:8e:2a:a6:9c:a8:5c:eb:12:b7:21:a4: ac:a6:56:98:9a:87:c5:79:08:63:83:3c:3b:ee:0b:e9:42:ec: 77:e4:a9:96:dd:a4:3d:f0:fd:20:1d:ff:2f:2c:76:7b:33:87: 89:d7:96:fb:49:eb:77:8c:95:0f:34:3d:69:6f:96:ad:2a:a3: 9b:a4:e4:46:ee:44:2d:0c:c3:f7:39:1b:fc:b9:60:2a:60:69: 53:3a:b8:c5:c0:cd:d1:9f:47:c5:34:fc:ca:e0:95:89:0a:23: 37:fb:06:ef:d3:14:21:63:72:49:88:68:aa:15:64:db:61:e3: 9f:24:3e:b1:be:e9:32:80:cc:13:0a:8c:59:a6:8e:32:8b:d9: 03:3f:f2:58:5b:54:ec:71:80:c5:7c:6a:11:9b:98:fe:19:a2: 8b:9a:a0:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJlszhesXrGXHiVf8dyVacHZtsz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNjA0MjEwMTU3NDRaFw0yNjA0MjQwMjIyNDRaMDMxMTAvBgNV BAMTKDNDRjQ1QkE1QjI0Q0JDRjE4NTk2RDQ3MjcwNTg0MDRBNjAzMTc2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhQ2WGbelodDF21gJJNrRVUAEB 15qpa2K9Gi/HmwK6IHLO0KC+AIQ2Uvog9qaIVpAoBtXzJExZqApBYd87NtL2yvwe k4ao0RYC3H9vZPgPRqYWPHMxTKPo7B+HUeML6ERVrlDBgHkn8ZZqtmI3eABadv9y PnvlHh4d35BcTQaB9jGygDy6LgwYNK9ibsPYJFJvDbX+61HWppNQA3R+BNYln8J5 Zssxhv4EEr6huwf7Ny0nghnojlsaJ7yu8YdekVIyexzlYsxbYumPjz9nmhO5i6AB iXfLGMExJxs8s/F/C/2p5cKu/LK1V6l24mNrzCytG6DpOYMm+bMkkCXBpOjDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPPRbpbJMvPGFltRycFhASmAxdvcwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGfqaygtcoHU7jMgvgZYwXTMmT4B6NhCvsj4 XajuMdDM6d277+zACh+NeSV+UEAT7Vv3OicKs5BTWdOFwOXhfSU4n3xmsVS5dRtS z/eLF1QmUbhucTRvUncUEjvSKrmtwmKOKqacqFzrErchpKymVpiah8V5CGODPDvu C+lC7HfkqZbdpD3w/SAd/y8sdnszh4nXlvtJ63eMlQ80PWlvlq0qo5uk5EbuRC0M w/c5G/y5YCpgaVM6uMXAzdGfR8U0/MrglYkKIzf7Bu/TFCFjckmIaKoVZNth458k PrG+6TKAzBMKjFmmjjKL2QM/8lhbVOxxgMV8ahGbmP4ZoouaoMU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:14 2026 by rpki-client