$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft File: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft (raw, json) Hash identifier: oETqMMXEv+Em5x8abgAgO+e246Ne4p2djTe051Jds+E= Subject key identifier: AD:F5:C7:A9:0E:09:49:47:24:B7:18:C0:FB:5D:6F:A6:3D:97:69:C6 Authority key identifier: CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C Certificate issuer: /CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Certificate serial: 10A0B1BE1F8F3F9D4AB48DD46626857C4745529A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft Manifest number: EC Signing time: Thu 05 Mar 2026 21:32:37 +0000 Manifest this update: Thu 05 Mar 2026 21:27:37 +0000 Manifest next update: Mon 09 Mar 2026 02:50:37 +0000 Files and hashes: 1: 3136302e3138372e3135302e302f32332d3234203d3e20313533313237.roa (hash: I98r/YvoKJnqIbKebXKfBKywu1BzE/FQD60HTUreMMU=) 2: CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl (hash: kMtD52OXcs2D6srtSAAFZbcNK9JzqZP6ReekeGgdhYc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 02:50:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:a0:b1:be:1f:8f:3f:9d:4a:b4:8d:d4:66:26:85:7c:47:45:52:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CAFC8825F98002AF2A3CB54EF279D59CD2E5043C Validity Not Before: Mar 5 21:27:37 2026 GMT Not After : Mar 9 02:50:37 2026 GMT Subject: CN=ADF5C7A90E09494724B718C0FB5D6FA63D9769C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9d:f2:0c:c5:36:07:f2:4a:b1:45:5a:d2:c9: 39:c9:57:33:cf:8e:4a:40:4f:bd:66:40:1a:c9:1f: a8:17:04:60:bb:b7:68:a5:f4:27:1d:9f:7a:61:a7: 03:5e:05:c9:53:f6:b1:f4:f5:ed:72:77:b3:93:98: 69:13:b4:50:79:b4:2b:2b:8c:84:6c:15:86:92:48: 1a:0d:c6:70:39:64:41:08:1a:c3:40:50:87:fa:57: f0:9e:51:f3:ac:66:6f:26:a3:fb:9d:d1:7d:23:c6: fe:16:c3:86:b1:ac:03:cb:95:af:a2:5a:84:78:22: 06:4c:ac:79:30:12:2c:e1:f0:a3:f7:50:e1:28:7c: a6:2b:e3:2d:f5:be:5a:1a:46:c0:2a:b4:ad:32:30: 74:f2:32:27:bd:8a:46:ad:6b:e6:95:85:04:15:89: 85:05:15:6b:81:dc:4f:5b:27:03:f9:46:f1:8b:8f: 14:86:04:70:45:47:a4:66:fa:f0:dd:d1:3f:dc:35: 18:3a:9b:a6:f2:d0:08:ff:c4:14:c1:03:18:c1:f9: 74:92:7a:29:a6:e0:48:86:54:a5:7d:8a:10:fa:8f: ad:45:d1:9f:fe:1e:73:71:bb:69:b5:19:ff:8e:6c: a2:26:c8:5a:d4:b9:c3:07:d2:dd:9d:64:09:57:e5: b5:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:F5:C7:A9:0E:09:49:47:24:B7:18:C0:FB:5D:6F:A6:3D:97:69:C6 X509v3 Authority Key Identifier: keyid:CA:FC:88:25:F9:80:02:AF:2A:3C:B5:4E:F2:79:D5:9C:D2:E5:04:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/0/CAFC8825F98002AF2A3CB54EF279D59CD2E5043C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:6a:21:96:12:74:e0:74:24:69:ee:cc:bf:3f:00:35:f2:1a: a3:5d:93:ed:17:db:e9:16:08:46:db:36:b3:90:4f:a3:5f:51: 8a:8a:81:e7:5a:b5:e4:2b:47:52:ef:2d:67:96:5c:0e:62:a4: 05:9f:1d:ff:8e:4f:d2:b5:7c:45:d8:7e:c9:45:e9:91:7e:a1: 89:f0:27:01:a5:35:f5:d7:43:25:1f:7b:dd:e0:8c:49:52:e3: df:b7:5a:11:9e:19:b7:52:7f:2e:bf:64:d4:91:49:c2:a9:dc: 94:df:8e:56:49:8d:98:9b:de:d2:c1:40:60:a4:bb:f0:5a:b9: 29:4d:30:b9:69:41:1c:cf:74:20:56:e6:56:5e:f4:2e:6c:18: e4:cf:b4:61:69:ba:bb:fc:53:50:47:0e:5c:37:6c:05:13:3b: 7e:e4:98:ac:b6:4a:1f:10:49:d8:4d:ce:d4:ce:5d:d3:64:b9: c0:94:bb:27:00:6c:e7:ad:9b:23:0c:5e:ba:08:cd:35:14:29: 40:e4:1d:83:fd:8a:d3:78:78:ae:57:33:de:65:ab:92:5c:6e: e5:f2:ec:dc:a6:41:41:7e:8a:2f:45:5d:78:7f:da:a8:9b:03: 7a:27:bc:fe:3c:82:fa:d3:05:4e:e0:fe:f3:39:53:71:b5:8c: 3f:28:8d:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEKCxvh+PP51KtI3UZiaFfEdFUpowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNE MkU1MDQzQzAeFw0yNjAzMDUyMTI3MzdaFw0yNjAzMDkwMjUwMzdaMDMxMTAvBgNV BAMTKEFERjVDN0E5MEUwOTQ5NDcyNEI3MThDMEZCNUQ2RkE2M0Q5NzY5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnfIMxTYH8kqxRVrSyTnJVzPP jkpAT71mQBrJH6gXBGC7t2il9Ccdn3phpwNeBclT9rH09e1yd7OTmGkTtFB5tCsr jIRsFYaSSBoNxnA5ZEEIGsNAUIf6V/CeUfOsZm8mo/ud0X0jxv4Ww4axrAPLla+i WoR4IgZMrHkwEizh8KP3UOEofKYr4y31vloaRsAqtK0yMHTyMie9ikata+aVhQQV iYUFFWuB3E9bJwP5RvGLjxSGBHBFR6Rm+vDd0T/cNRg6m6by0Aj/xBTBAxjB+XSS eimm4EiGVKV9ihD6j61F0Z/+HnNxu2m1Gf+ObKImyFrUucMH0t2dZAlX5bXnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrfXHqQ4JSUcktxjA+11vpj2XacYwHwYDVR0j BBgwFoAUyvyIJfmAAq8qPLVO8nnVnNLlBDwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMC9DQUZDODgyNUY5 ODAwMkFGMkEzQ0I1NEVGMjc5RDU5Q0QyRTUwNDNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1OUNEMkU1 MDQzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzAvQ0FGQzg4MjVGOTgwMDJBRjJBM0NCNTRFRjI3OUQ1 OUNEMkU1MDQzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADNqIZYSdOB0JGnuzL8/ADXyGqNdk+0X2+kW CEbbNrOQT6NfUYqKgedateQrR1LvLWeWXA5ipAWfHf+OT9K1fEXYfslF6ZF+oYnw JwGlNfXXQyUfe93gjElS49+3WhGeGbdSfy6/ZNSRScKp3JTfjlZJjZib3tLBQGCk u/BauSlNMLlpQRzPdCBW5lZe9C5sGOTPtGFpurv8U1BHDlw3bAUTO37kmKy2Sh8Q SdhNztTOXdNkucCUuycAbOetmyMMXroIzTUUKUDkHYP9itN4eK5XM95lq5JcbuXy 7NymQUF+ii9FXXh/2qibA3onvP48gvrTBU7g/vM5U3G1jD8ojaU= -----END CERTIFICATE-----Generated at Sat Mar 7 17:59:07 2026 by rpki-client