
$ rpki-client -vvf repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
File: 09461F85D577EF79DE072EECCA1E12135A3715C0.mft (raw, json)
Hash identifier: By4KYD2b2VrG3hhDBb6nonswRZkANarnuV0url+YoPo=
Subject key identifier: C4:45:6D:D5:90:36:76:9B:1C:1A:28:A4:54:7B:32:5E:2B:0B:42:76
Authority key identifier: 09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0
Certificate issuer: /CN=09461F85D577EF79DE072EECCA1E12135A3715C0
Certificate serial: 6FAE6DC9C31A68FD5D2E141C71379C85E15C647B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
Manifest number: 0214
Signing time: Sun 01 Mar 2026 18:42:26 +0000
Manifest this update: Sun 01 Mar 2026 18:37:26 +0000
Manifest next update: Wed 04 Mar 2026 20:33:26 +0000
Files and hashes: 1: 09461F85D577EF79DE072EECCA1E12135A3715C0.crl (hash: Ks+SG/rMx4YF3fB6fuebcyNr8bvIILAJX34wTKAARKc=)
2: 3130332e3134372e3134362e302f32332d3234203d3e203137373639.roa (hash: h3TV+XhpTe6M1r47P8xg6LJKc7ssK2BZBj+55BbrRCw=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl
rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 20:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6f:ae:6d:c9:c3:1a:68:fd:5d:2e:14:1c:71:37:9c:85:e1:5c:64:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09461F85D577EF79DE072EECCA1E12135A3715C0
Validity
Not Before: Mar 1 18:37:26 2026 GMT
Not After : Mar 4 20:33:26 2026 GMT
Subject: CN=C4456DD59036769B1C1A28A4547B325E2B0B4276
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:db:f3:d6:97:8d:32:e6:fe:e2:6b:69:40:cf:
0b:d6:b4:73:b7:80:f0:f6:91:35:8b:1a:43:27:ee:
7f:b4:f5:2b:b7:3c:fa:dd:88:1e:ff:1f:73:23:19:
8c:96:90:f8:ce:e2:96:8b:c9:82:42:82:1c:4d:a3:
f1:86:15:91:00:c1:28:87:36:cf:77:9c:57:4d:71:
a0:46:e6:c6:cc:ea:f5:04:2c:e7:93:51:bc:9e:38:
51:16:57:3a:71:11:3b:e4:e4:9c:9f:fc:74:05:6b:
a1:cd:8b:5a:33:ea:3a:2c:fd:f8:8f:0e:95:f3:10:
1d:87:36:e5:5b:31:f6:b6:53:99:7c:17:d1:a1:51:
28:10:60:27:bf:25:87:56:58:bb:86:8a:69:c0:5e:
d7:a8:71:ed:9f:93:ee:cc:0e:fc:22:c9:c3:fd:82:
c0:c2:71:05:f5:62:9f:bd:ee:88:d2:20:78:31:a8:
29:ed:13:62:f7:c3:a7:c7:c7:7e:5d:38:fa:16:be:
86:4e:16:c2:04:fa:f6:98:5c:47:0f:88:1c:a0:f3:
da:16:03:11:77:b4:d2:c5:da:4f:fc:c1:dd:ba:d2:
ef:e1:77:a2:18:8b:dd:2b:fd:e4:47:7a:1d:00:e4:
ae:0f:40:1d:85:75:78:e9:7c:da:5d:43:d7:65:0a:
6f:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:45:6D:D5:90:36:76:9B:1C:1A:28:A4:54:7B:32:5E:2B:0B:42:76
X509v3 Authority Key Identifier:
keyid:09:46:1F:85:D5:77:EF:79:DE:07:2E:EC:CA:1E:12:13:5A:37:15:C0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09461F85D577EF79DE072EECCA1E12135A3715C0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/573b959e-ff52-4028-b534-1d605fa3a80b/0/09461F85D577EF79DE072EECCA1E12135A3715C0.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:7f:33:17:98:63:37:cd:6e:18:c1:5e:10:f5:75:31:7c:4f:
a8:3c:83:ec:c8:e4:7a:df:58:ab:c0:d5:89:41:70:da:48:42:
4c:f8:8d:e9:fb:e2:57:eb:c1:59:f7:ca:0a:a6:32:11:31:04:
c9:d7:85:c4:9b:df:bc:4b:28:91:b3:c6:2a:15:2c:f5:08:4a:
2b:9e:13:cc:0b:af:6c:f0:99:5b:8f:49:2c:5e:88:3d:36:57:
8a:38:e4:3f:18:a3:b0:60:bb:fb:be:e0:81:95:39:49:92:da:
8f:4d:c3:4c:1c:ad:37:67:cf:83:16:a4:0a:17:10:ae:93:aa:
de:47:84:b6:23:6f:09:2b:55:17:d9:b7:a8:d7:51:05:c9:3e:
15:a3:9f:9a:47:86:9f:a0:de:d9:22:0c:dd:96:aa:1e:0c:0d:
69:e9:08:c8:a3:06:25:d1:60:0f:69:bc:3f:f4:73:39:fb:27:
ca:e1:5b:27:ab:de:b4:dd:69:21:f8:64:47:00:62:4f:aa:11:
f5:db:8c:59:51:b6:6c:b7:ed:c9:26:8a:12:4f:b5:c2:0a:03:
a8:49:6c:b3:03:16:80:ac:bb:cb:aa:f5:23:9b:2d:c4:a9:2a:
51:2c:ca:7b:12:35:5d:f4:2a:6e:9f:15:ac:ad:a1:31:b6:a2:
28:21:9e:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:08:39 2026 by rpki-client