$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: MtPJUZBMXyfY5gsj49DnVvzadn3AySlXP3UErFSKi9g= Subject key identifier: 9C:43:6B:83:B1:99:AC:0D:B4:A3:56:10:1C:42:B1:F2:7E:5E:9E:15 Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 466B94AF8F894CBE5B9FBB16A17B0519251FCB8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 014E Signing time: Wed 15 Apr 2026 14:52:38 +0000 Manifest this update: Wed 15 Apr 2026 14:47:38 +0000 Manifest next update: Sat 18 Apr 2026 18:00:38 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: sDRQGmc+8r9oeY7UpezCNGmfHKCjsXbj4w6nj9dSnMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 18:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6b:94:af:8f:89:4c:be:5b:9f:bb:16:a1:7b:05:19:25:1f:cb:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Apr 15 14:47:38 2026 GMT Not After : Apr 18 18:00:38 2026 GMT Subject: CN=9C436B83B199AC0DB4A356101C42B1F27E5E9E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:a2:90:93:92:06:43:36:fc:c9:33:f7:af:0c: 14:1b:dd:b2:7b:92:b8:97:ea:dc:aa:c8:0d:c2:3a: 3a:8c:9d:fb:6e:b4:21:9b:c8:1b:fa:f3:47:05:09: d4:14:39:58:63:03:c1:32:44:94:a5:03:fa:ca:a5: 3b:1b:bd:1d:95:58:b5:68:ca:8e:d4:c7:62:c7:a3: ad:ad:b7:50:c0:9c:06:a9:95:f3:d1:1c:97:57:24: ca:1d:39:cb:aa:d1:7f:8e:ce:b6:41:5f:8d:21:91: 41:9a:55:71:70:f3:93:da:73:68:f4:06:e8:db:e6: ee:fb:c9:12:a2:eb:9c:71:7a:54:cc:7f:d0:cf:5a: 0f:25:82:a9:d0:f0:e5:96:4c:cb:30:5e:d3:8b:8f: 52:cb:fb:c6:4d:3f:43:d4:1c:cf:88:4f:be:a6:7d: ed:32:95:eb:43:9c:fe:1e:e0:09:ff:7b:6a:e0:2d: 25:f9:a3:c0:8f:26:85:ea:31:43:25:7b:2a:bd:49: ef:71:dc:ac:7d:67:81:cd:49:d5:78:1b:96:8f:73: 0b:7c:ac:77:ba:cc:1f:18:e9:6e:73:b0:2e:f7:67: 6f:df:b1:29:59:84:da:c0:6e:67:f9:16:6f:82:3b: 61:c6:0c:1d:8a:33:fb:39:b7:d2:0c:f5:bf:40:96: bd:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:43:6B:83:B1:99:AC:0D:B4:A3:56:10:1C:42:B1:F2:7E:5E:9E:15 X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:77:61:99:f7:c1:70:6b:8e:3e:d2:bc:6a:8c:18:ed:f8:3d: c3:d2:e0:2e:82:76:d8:3c:a2:8c:0a:35:95:86:4e:0e:3d:3c: b2:39:32:f0:96:23:49:07:27:71:0c:89:40:5e:a4:d1:b4:59: 83:ab:28:2f:0f:82:14:fa:68:8c:b6:1e:55:9f:4a:23:04:55: 22:bd:ae:0d:89:bc:d7:73:b9:6f:6e:0b:7b:00:eb:0b:91:b0: 6e:df:9b:fa:2c:4a:fe:9a:45:74:c8:6c:c8:28:87:7b:7a:1c: b8:48:8a:f5:8f:a3:47:a2:83:a4:ad:79:71:ef:ad:6e:ec:ec: 85:c2:06:81:5a:91:d1:c5:17:ac:3f:f2:57:56:88:c4:95:f6: 8b:36:5f:05:bd:bc:8f:78:d6:b4:d1:ec:c9:17:95:92:d2:6d: 5d:36:51:b0:13:b3:ca:10:59:56:02:f2:5e:2c:ed:56:61:a7: d8:f5:65:c5:c2:0f:a9:3c:d6:31:8b:a1:83:3d:34:b2:af:cf: 50:dc:6d:a7:b7:32:ea:f5:b3:6b:23:72:9d:f7:28:dd:c2:ab: 23:e9:91:fd:e3:47:18:06:ba:31:fb:6c:96:96:bf:a0:6e:d1: 8a:52:15:6d:7a:bf:33:83:0a:cb:2b:21:d4:d3:9f:9f:5c:e8: 17:6b:e8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURmuUr4+JTL5bn7sWoXsFGSUfy44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNjA0MTUxNDQ3MzhaFw0yNjA0MTgxODAwMzhaMDMxMTAvBgNV BAMTKDlDNDM2QjgzQjE5OUFDMERCNEEzNTYxMDFDNDJCMUYyN0U1RTlFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9opCTkgZDNvzJM/evDBQb3bJ7 kriX6tyqyA3COjqMnftutCGbyBv680cFCdQUOVhjA8EyRJSlA/rKpTsbvR2VWLVo yo7Ux2LHo62tt1DAnAaplfPRHJdXJModOcuq0X+OzrZBX40hkUGaVXFw85Pac2j0 Bujb5u77yRKi65xxelTMf9DPWg8lgqnQ8OWWTMswXtOLj1LL+8ZNP0PUHM+IT76m fe0yletDnP4e4An/e2rgLSX5o8CPJoXqMUMleyq9Se9x3Kx9Z4HNSdV4G5aPcwt8 rHe6zB8Y6W5zsC73Z2/fsSlZhNrAbmf5Fm+CO2HGDB2KM/s5t9IM9b9Alr21AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnENrg7GZrA20o1YQHEKx8n5enhUwHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEV3YZn3wXBrjj7SvGqMGO34PcPS4C6Cdtg8 oowKNZWGTg49PLI5MvCWI0kHJ3EMiUBepNG0WYOrKC8PghT6aIy2HlWfSiMEVSK9 rg2JvNdzuW9uC3sA6wuRsG7fm/osSv6aRXTIbMgoh3t6HLhIivWPo0eig6SteXHv rW7s7IXCBoFakdHFF6w/8ldWiMSV9os2XwW9vI941rTR7MkXlZLSbV02UbATs8oQ WVYC8l4s7VZhp9j1ZcXCD6k81jGLoYM9NLKvz1Dcbae3Mur1s2sjcp33KN3CqyPp kf3jRxgGujH7bJaWv6Bu0YpSFW16vzODCssrIdTTn59c6Bdr6C4= -----END CERTIFICATE-----Generated at Fri Apr 17 13:13:00 2026 by rpki-client