$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: 2v+xLBjg8yyQGoPy24vp18LoJXAWxJCgPqn1Gsilg/I= Subject key identifier: 62:7B:BA:AC:01:CE:4D:A9:F4:2D:A4:B8:DA:01:EC:23:28:6B:FD:99 Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 7094EEB19FDC3E0D38A3BAA5D0AFA70433612F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 55 Signing time: Fri 17 Apr 2026 10:01:48 +0000 Manifest this update: Fri 17 Apr 2026 09:56:48 +0000 Manifest next update: Mon 20 Apr 2026 14:33:48 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: WZ6FXqKTs76xbumMuEM4onR3NCtdPjsu1V0LBFPLBl8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:94:ee:b1:9f:dc:3e:0d:38:a3:ba:a5:d0:af:a7:04:33:61:2f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Apr 17 09:56:48 2026 GMT Not After : Apr 20 14:33:48 2026 GMT Subject: CN=627BBAAC01CE4DA9F42DA4B8DA01EC23286BFD99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:52:22:05:a3:92:47:64:a2:cb:23:66:f2:ee: 13:c5:73:de:05:07:2a:9f:cc:9b:17:41:cd:d1:fa: fd:7b:f2:b2:f7:bc:ea:ab:9e:c3:57:08:10:78:39: 95:fa:48:fb:ca:f2:ba:07:ab:0d:75:47:ee:f4:6b: 04:aa:42:bd:70:43:a9:73:c3:9a:84:1d:87:b6:bc: 85:a7:0b:66:61:b1:82:a4:96:25:6c:c1:fe:43:6e: 5f:71:29:d1:7c:f6:fd:76:ff:25:72:94:06:14:6c: 21:ae:97:13:6c:03:8c:98:03:e4:98:ed:8b:23:57: bf:8a:e3:ff:f4:bf:a2:62:2e:d5:63:79:f2:00:5d: d1:9b:90:80:e3:7e:54:ba:05:9b:03:38:4e:ae:71: ba:30:d9:21:be:d8:b5:ca:41:47:45:a2:35:d1:9b: 7f:af:d1:28:63:d8:bf:69:b1:c5:05:c1:d7:a3:4d: 7e:24:4c:71:c0:14:d9:67:e2:78:fe:0b:84:27:5e: 7c:fa:61:fe:85:0b:2e:85:98:35:c8:85:cd:a1:21: e6:7a:67:e0:89:57:b6:dc:ed:e3:86:87:09:df:41: 27:9a:06:1d:29:e7:47:19:30:67:c3:46:77:df:17: fb:6b:40:50:a2:c9:a7:dd:03:6e:d5:d8:40:f1:e7: 43:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:7B:BA:AC:01:CE:4D:A9:F4:2D:A4:B8:DA:01:EC:23:28:6B:FD:99 X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:6b:0a:50:14:25:cb:10:5d:7d:73:19:f8:65:2b:a4:9b:e4: 8b:44:dd:8c:fe:5f:d2:48:d4:10:e8:b1:22:ec:c6:69:ff:e8: 70:f4:eb:b9:17:de:20:65:11:44:b4:3e:68:df:3c:ea:e2:36: 7d:15:61:96:b1:a4:73:d2:88:96:70:63:65:81:ec:07:9c:66: 78:70:92:34:0c:44:48:f3:4b:68:bc:b0:a0:38:8e:7a:fd:d5: 1a:b3:28:3c:ee:9c:e6:85:52:59:17:4e:03:b9:fd:9b:65:70: 9f:65:d1:12:97:03:e6:55:ca:6d:4a:3c:c1:e1:f6:8e:35:50: 80:ff:1d:ab:ab:de:40:04:17:13:3b:80:52:23:af:0d:f5:6e: 82:91:b0:9a:6e:e4:47:19:22:4d:e3:41:c0:40:ee:02:b4:15: 00:03:91:48:36:92:53:a0:67:34:fb:d9:ef:ba:44:f3:02:c2: d2:23:17:2e:42:f5:3d:7b:9b:0e:ab:42:ad:9f:18:36:2b:c7: 44:7c:53:ff:9a:07:bc:55:83:45:e8:0a:ba:d1:50:f4:fc:c2: 87:6c:df:9c:53:0a:a0:b8:17:64:89:7c:eb:77:47:58:20:dd: 44:6b:75:cc:c7:e5:b7:92:1d:d5:5c:02:f5:d7:88:a1:2e:38: 2b:93:0e:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcJTusZ/cPg04o7ql0K+nBDNhLw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNjA0MTcwOTU2NDhaFw0yNjA0MjAxNDMzNDhaMDMxMTAvBgNV BAMTKDYyN0JCQUFDMDFDRTREQTlGNDJEQTRCOERBMDFFQzIzMjg2QkZEOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOUiIFo5JHZKLLI2by7hPFc94F ByqfzJsXQc3R+v178rL3vOqrnsNXCBB4OZX6SPvK8roHqw11R+70awSqQr1wQ6lz w5qEHYe2vIWnC2ZhsYKkliVswf5Dbl9xKdF89v12/yVylAYUbCGulxNsA4yYA+SY 7YsjV7+K4//0v6JiLtVjefIAXdGbkIDjflS6BZsDOE6ucbow2SG+2LXKQUdFojXR m3+v0Shj2L9pscUFwdejTX4kTHHAFNln4nj+C4QnXnz6Yf6FCy6FmDXIhc2hIeZ6 Z+CJV7bc7eOGhwnfQSeaBh0p50cZMGfDRnffF/trQFCiyafdA27V2EDx50PXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYnu6rAHOTan0LaS42gHsIyhr/ZkwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK5rClAUJcsQXX1zGfhlK6Sb5ItE3Yz+X9JI 1BDosSLsxmn/6HD067kX3iBlEUS0PmjfPOriNn0VYZaxpHPSiJZwY2WB7AecZnhw kjQMREjzS2i8sKA4jnr91RqzKDzunOaFUlkXTgO5/ZtlcJ9l0RKXA+ZVym1KPMHh 9o41UID/Haur3kAEFxM7gFIjrw31boKRsJpu5EcZIk3jQcBA7gK0FQADkUg2klOg ZzT72e+6RPMCwtIjFy5C9T17mw6rQq2fGDYrx0R8U/+aB7xVg0XoCrrRUPT8wods 35xTCqC4F2SJfOt3R1gg3URrdczH5beSHdVcAvXXiKEuOCuTDic= -----END CERTIFICATE-----Generated at Fri Apr 17 16:39:10 2026 by rpki-client