$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: QgnvThqH33Fc3snn3yrs3DRUl3e6TN4t3Mz2eS7oAxY= Subject key identifier: 6E:69:88:2B:BB:27:3A:E5:D1:4B:47:C0:93:15:7B:D7:E3:06:59:D9 Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 1F7126623BBC7C83E5A3C15DBFE196A15DA306AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 40 Signing time: Sat 28 Feb 2026 15:01:47 +0000 Manifest this update: Sat 28 Feb 2026 14:56:47 +0000 Manifest next update: Wed 04 Mar 2026 00:37:47 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: l7Sgs7gqnTmBUyrPX1DMRlwOSjCof5cjdQP8IDTLOvE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:71:26:62:3b:bc:7c:83:e5:a3:c1:5d:bf:e1:96:a1:5d:a3:06:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Feb 28 14:56:47 2026 GMT Not After : Mar 4 00:37:47 2026 GMT Subject: CN=6E69882BBB273AE5D14B47C093157BD7E30659D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:5b:23:8d:6d:83:37:f9:b8:f1:fb:9e:49:09: 56:35:da:4c:38:28:36:f1:fd:31:35:3b:dd:5f:d6: 29:4f:9c:e3:a4:c4:56:b4:08:66:67:2b:a2:76:8f: 1b:15:5e:4a:40:f3:8d:74:b7:87:83:81:28:26:5c: a1:91:84:7a:43:6e:45:74:db:d8:c3:ff:7b:f6:7b: 4e:8d:b0:d6:1d:e9:31:58:05:f6:4a:43:83:e2:42: 44:c6:72:a3:ef:2c:df:65:df:3e:1b:b9:f2:7a:a1: 3e:1c:bf:0d:ba:d6:f3:0d:25:32:4f:f2:bb:a9:c0: 0b:3f:56:60:ed:29:a2:4e:e0:dc:5e:68:b6:53:f6: 87:b4:e0:27:04:11:ca:4e:03:b3:25:7a:f1:5e:31: 14:d5:ea:d2:94:0b:22:b6:a8:b7:0c:b4:87:1a:e7: e0:0d:c8:38:34:73:ae:bd:c7:da:b9:64:7e:c3:2a: 31:ef:73:3d:8a:b6:f2:e9:7b:93:5d:6c:e8:5a:fd: 2d:3d:48:2a:85:fb:a3:c2:58:ea:54:5e:00:31:3e: 31:e3:3c:5e:ed:39:66:22:cf:86:18:a8:1b:9c:89: 4d:f1:d6:5c:3f:0a:68:15:9e:e7:be:a0:2d:1b:14: 80:0e:1f:57:10:76:79:af:a9:35:32:29:7a:35:35: e3:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:69:88:2B:BB:27:3A:E5:D1:4B:47:C0:93:15:7B:D7:E3:06:59:D9 X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:d0:25:8a:7e:68:f5:cf:2b:68:85:65:b1:7e:66:86:7c:f9: d0:93:d9:43:a1:05:71:b4:91:27:ad:75:8f:4d:0e:d2:56:ac: bd:56:47:76:9d:3d:e9:d5:46:a8:67:ea:bb:88:a4:1c:b2:6b: f8:12:fa:e2:9c:bc:f4:ee:91:d9:47:d4:ad:09:72:1b:57:75: 39:14:72:4d:14:d9:7f:48:5b:d0:ca:52:ce:84:fb:d5:91:46: 34:62:c9:48:69:1a:7c:ae:5e:74:d6:83:b5:99:0d:bf:d6:d0: 1b:a7:a9:2c:d3:d4:90:95:74:9f:cb:ee:b4:62:e5:d7:98:b5: db:53:43:42:76:99:d6:6d:f7:71:14:8a:96:94:2b:d2:82:96: 25:df:36:7a:e3:d3:eb:8d:92:0e:3a:4d:74:07:22:41:ca:40: d9:dc:ba:d5:2d:a7:62:82:47:d7:81:59:86:7c:ff:da:71:a7: 3c:c7:1f:19:6f:25:0f:1c:6b:15:6b:57:26:23:1a:69:bf:ac: 50:9d:b5:32:99:4d:60:62:73:b8:11:5d:d0:d6:13:e4:ce:43: a5:e7:3b:58:d3:a9:0c:dd:bb:0d:0c:59:be:fe:f1:66:66:11: 07:85:0e:eb:7d:f9:b1:72:ac:99:6c:e0:4d:3f:05:7a:90:cf: 7d:a2:b6:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3EmYju8fIPlo8Fdv+GWoV2jBqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNjAyMjgxNDU2NDdaFw0yNjAzMDQwMDM3NDdaMDMxMTAvBgNV BAMTKDZFNjk4ODJCQkIyNzNBRTVEMTRCNDdDMDkzMTU3QkQ3RTMwNjU5RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbWyONbYM3+bjx+55JCVY12kw4 KDbx/TE1O91f1ilPnOOkxFa0CGZnK6J2jxsVXkpA8410t4eDgSgmXKGRhHpDbkV0 29jD/3v2e06NsNYd6TFYBfZKQ4PiQkTGcqPvLN9l3z4bufJ6oT4cvw261vMNJTJP 8rupwAs/VmDtKaJO4NxeaLZT9oe04CcEEcpOA7MlevFeMRTV6tKUCyK2qLcMtIca 5+ANyDg0c669x9q5ZH7DKjHvcz2KtvLpe5NdbOha/S09SCqF+6PCWOpUXgAxPjHj PF7tOWYiz4YYqBuciU3x1lw/CmgVnue+oC0bFIAOH1cQdnmvqTUyKXo1NeOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbmmIK7snOuXRS0fAkxV71+MGWdkwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPQJYp+aPXPK2iFZbF+ZoZ8+dCT2UOhBXG0 kSetdY9NDtJWrL1WR3adPenVRqhn6ruIpByya/gS+uKcvPTukdlH1K0JchtXdTkU ck0U2X9IW9DKUs6E+9WRRjRiyUhpGnyuXnTWg7WZDb/W0BunqSzT1JCVdJ/L7rRi 5deYtdtTQ0J2mdZt93EUipaUK9KCliXfNnrj0+uNkg46TXQHIkHKQNncutUtp2KC R9eBWYZ8/9pxpzzHHxlvJQ8caxVrVyYjGmm/rFCdtTKZTWBic7gRXdDWE+TOQ6Xn O1jTqQzduw0MWb7+8WZmEQeFDut9+bFyrJls4E0/BXqQz32itsM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:13:33 2026 by rpki-client