
$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json)
Hash identifier: ntGKSbtGROht1LXygDbCnAmZ1NoEYVz1vbcOp15fU3c=
Subject key identifier: 62:5E:D3:79:FF:E2:D1:68:97:BE:3B:46:57:0B:B7:5A:1F:FB:7D:98
Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Certificate serial: 3FE50729A8610370ED17825169C9372216A3F902
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
Manifest number: CF
Signing time: Sat 28 Feb 2026 19:21:39 +0000
Manifest this update: Sat 28 Feb 2026 19:16:39 +0000
Manifest next update: Tue 03 Mar 2026 22:31:39 +0000
Files and hashes: 1: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: qRvLdGpBeO9ktabZud6KsQstLZEQq8ulAxFcmVluVb0=)
2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl
rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3f:e5:07:29:a8:61:03:70:ed:17:82:51:69:c9:37:22:16:a3:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2
Validity
Not Before: Feb 28 19:16:39 2026 GMT
Not After : Mar 3 22:31:39 2026 GMT
Subject: CN=625ED379FFE2D16897BE3B46570BB75A1FFB7D98
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:cc:2d:30:f3:1b:05:26:75:ff:a7:45:1d:df:
8c:40:55:ea:ab:42:2a:04:b6:4b:64:bc:e9:ec:99:
d4:a1:c7:5d:1b:0a:96:2e:3a:ff:1b:9d:2b:33:c4:
3f:b3:0d:05:77:e8:9f:44:56:32:4f:cc:a4:9c:b9:
a4:ef:a9:52:e4:df:10:08:36:77:94:07:f5:9c:f0:
d3:8f:9c:5b:2c:f5:5b:88:c0:4d:3d:a8:c6:8e:06:
5f:2b:35:e5:55:f3:71:5d:d1:7b:53:69:a0:bb:9e:
7a:5d:3e:07:80:cb:72:02:cf:1a:bc:43:ed:4e:98:
44:0f:5d:2c:cd:4e:10:07:6c:83:57:b4:e7:92:4e:
04:2b:bd:aa:82:e4:8d:93:38:21:50:2a:9a:7e:fe:
e3:82:e5:e8:05:ef:3a:38:e8:9e:9c:c3:55:f4:78:
2d:2d:49:45:af:8e:66:3a:37:e8:c5:65:4c:a4:ac:
aa:66:c4:71:32:1b:42:ee:25:cb:5d:be:4a:88:f7:
42:c9:12:b9:5d:09:e9:f8:16:d3:7b:55:d3:0a:83:
15:cc:8b:47:7b:f3:d2:84:aa:c0:8f:31:97:11:d9:
40:ac:dd:ce:17:35:1b:b4:c0:cd:0b:62:a1:27:df:
c1:95:77:c1:4c:72:e6:ab:5e:ca:09:f3:da:cd:98:
8c:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:5E:D3:79:FF:E2:D1:68:97:BE:3B:46:57:0B:B7:5A:1F:FB:7D:98
X509v3 Authority Key Identifier:
keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:04:5e:cb:50:11:79:aa:02:99:5c:b3:3f:ed:ea:14:fd:69:
af:5c:19:99:bd:f3:5b:5b:95:ac:e2:9b:1d:8b:a3:a0:65:54:
01:a0:6e:37:5a:7b:e3:32:0f:22:2d:ba:00:75:0d:82:e9:f4:
5c:15:6b:99:fc:91:32:b9:57:7c:1f:ea:00:be:e0:ce:c8:9a:
ce:eb:3a:62:1b:9b:9d:c0:50:59:8e:85:55:61:1e:88:2b:3a:
c6:4e:14:9b:48:2f:05:0c:4b:02:28:74:7b:d2:68:10:3f:2d:
82:7c:d2:ef:ec:c4:f7:32:2f:da:44:4d:a0:00:3a:e3:14:78:
ab:85:de:c8:c8:96:5e:0f:e7:d0:4d:55:e4:50:c6:30:29:f5:
82:06:e9:5b:1d:70:32:14:fd:a3:d4:62:b6:d9:42:66:46:2b:
5c:e7:0f:77:e2:b3:f6:81:5e:3b:55:05:08:f8:b6:d9:f4:57:
b9:34:85:95:96:7a:f4:56:ef:12:f8:0c:2e:d0:12:9b:fc:d6:
09:76:b4:6a:82:41:46:d2:ad:22:8f:07:23:5d:5b:31:60:ad:
16:26:44:8c:8a:a3:d9:86:2b:74:f5:aa:18:6e:50:c3:71:af:
e1:fb:97:be:1c:0c:9f:68:ad:df:b4:c9:f1:38:81:ba:e2:1c:
5a:25:1b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:24:24 2026 by rpki-client