$ rpki-client -vvf repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft File: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft (raw, json) Hash identifier: rtuWZt3sGHZZxzCF5pUm/hYfN7I/3nxWbpxs0lRPY0A= Subject key identifier: D4:5E:33:05:ED:5E:9A:65:5D:60:7E:C5:74:AE:61:2F:81:15:DC:99 Authority key identifier: 09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 Certificate issuer: /CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Certificate serial: 02F93C0BFA1FEB45110AE80B28890A349B10E08E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft Manifest number: E4 Signing time: Fri 17 Apr 2026 12:11:31 +0000 Manifest this update: Fri 17 Apr 2026 12:06:31 +0000 Manifest next update: Mon 20 Apr 2026 15:34:31 +0000 Files and hashes: 1: 09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl (hash: 9UgdYoivRt1lD5CsYzQfXSPx70qOr0zVOY9owP/ypoA=) 2: 323030313a6466343a386534303a3a2f34382d3438203d3e20313533313530.roa (hash: VpLoaUpt0yVfGQxrRTavIki8YrtUgZnpRbQuyi6BNMU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 15:34:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:f9:3c:0b:fa:1f:eb:45:11:0a:e8:0b:28:89:0a:34:9b:10:e0:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09E4737CEE36CCCE6819F704F9A924E3B310A5E2 Validity Not Before: Apr 17 12:06:31 2026 GMT Not After : Apr 20 15:34:31 2026 GMT Subject: CN=D45E3305ED5E9A655D607EC574AE612F8115DC99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:59:62:f9:4a:80:c7:d1:48:fc:02:4e:b6:3c: 4e:f5:b4:58:9f:20:7d:d3:26:dc:a5:ab:a0:14:8c: c3:28:9b:a2:bf:63:50:b4:9e:ca:a7:5a:40:ac:1e: c6:92:fe:1b:90:d6:d6:f1:05:54:70:a5:82:d0:48: ff:fe:54:77:84:28:b5:bc:fa:6d:e7:9a:45:7b:d3: 01:ca:0a:e4:c9:f5:0e:1d:95:20:19:67:f3:91:89: ae:de:a3:26:07:08:fb:dd:f6:a2:a3:56:49:23:36: 2d:63:67:61:e1:2d:ac:e3:1b:b5:24:f4:b1:42:1c: 16:79:63:44:29:c5:b2:68:a5:bd:38:e6:45:c2:09: e9:4c:d0:fe:46:cf:c7:cc:10:01:6e:86:99:2e:ad: 7f:01:51:a1:91:01:68:bf:9e:94:58:44:3d:23:f2: b0:65:3e:b8:36:b2:d9:88:c7:fc:79:58:11:5c:fe: da:ce:f7:69:94:70:be:c0:96:14:3b:7d:d6:dd:07: 71:2d:bf:51:73:c4:1a:95:42:e1:58:e8:2f:bf:d7: 57:5f:5a:9e:c0:5c:d9:82:20:bd:b1:0f:0f:77:90: 7e:0e:cf:da:16:db:54:9e:26:08:6d:5a:83:87:f5: 31:62:fd:e1:90:eb:d0:e3:33:9c:ad:9e:36:91:7c: bc:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:5E:33:05:ED:5E:9A:65:5D:60:7E:C5:74:AE:61:2F:81:15:DC:99 X509v3 Authority Key Identifier: keyid:09:E4:73:7C:EE:36:CC:CE:68:19:F7:04:F9:A9:24:E3:B3:10:A5:E2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/959612a2-4433-42b9-8f4f-b847776acafd/1/09E4737CEE36CCCE6819F704F9A924E3B310A5E2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:e5:3a:bb:18:f0:93:d1:30:a0:73:71:42:67:2a:c2:73:2b: ae:e5:1b:bd:0a:1a:23:3e:53:4c:e6:eb:a0:4c:85:11:2f:b3: 6e:a5:d8:eb:d6:22:5d:62:e3:07:ee:35:77:e3:0a:79:a1:57: 59:94:19:61:47:f1:bc:ea:ad:33:41:53:4d:25:19:11:39:ae: 79:57:8b:9c:4d:3c:41:6b:49:11:6d:82:13:bf:93:ea:80:1f: b9:dc:c6:aa:73:0c:97:26:25:8d:e4:75:fb:dc:52:fb:9f:54: a5:79:7c:42:98:3f:24:75:54:7c:e8:2d:41:70:b7:b8:5f:ce: ab:a3:47:2f:05:33:34:e9:33:bb:4f:3c:ad:9e:18:2e:0f:96: dc:d4:33:6a:de:c2:b0:f9:46:4c:30:45:b7:55:0f:9d:70:d8: f7:09:61:a6:23:4a:54:a9:43:df:6e:94:8e:31:59:38:44:87: 21:31:43:e6:b7:13:c4:7c:5a:33:dc:da:0d:39:e6:9a:5f:92: e4:59:73:e7:7f:84:c1:ba:42:b4:44:b6:05:a6:de:e5:8e:b0: 82:ec:27:0b:9f:ae:91:04:7a:02:8e:46:26:42:80:88:db:6d: 8b:f5:94:1a:1b:ba:d9:ab:a3:8d:71:65:6d:62:cc:60:45:a3: 2d:15:5c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAvk8C/of60URCugLKIkKNJsQ4I4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNC MzEwQTVFMjAeFw0yNjA0MTcxMjA2MzFaFw0yNjA0MjAxNTM0MzFaMDMxMTAvBgNV BAMTKEQ0NUUzMzA1RUQ1RTlBNjU1RDYwN0VDNTc0QUU2MTJGODExNURDOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtWWL5SoDH0Uj8Ak62PE71tFif IH3TJtylq6AUjMMom6K/Y1C0nsqnWkCsHsaS/huQ1tbxBVRwpYLQSP/+VHeEKLW8 +m3nmkV70wHKCuTJ9Q4dlSAZZ/ORia7eoyYHCPvd9qKjVkkjNi1jZ2HhLazjG7Uk 9LFCHBZ5Y0QpxbJopb045kXCCelM0P5Gz8fMEAFuhpkurX8BUaGRAWi/npRYRD0j 8rBlPrg2stmIx/x5WBFc/trO92mUcL7AlhQ7fdbdB3Etv1FzxBqVQuFY6C+/11df Wp7AXNmCIL2xDw93kH4Oz9oW21SeJghtWoOH9TFi/eGQ69DjM5ytnjaRfLwlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1F4zBe1emmVdYH7FdK5hL4EV3JkwHwYDVR0j BBgwFoAUCeRzfO42zM5oGfcE+akk47MQpeIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTk2MTJhMi00NDMzLTQyYjktOGY0Zi1iODQ3Nzc2YWNhZmQvMS8wOUU0NzM3Q0VF MzZDQ0NFNjgxOUY3MDRGOUE5MjRFM0IzMTBBNUUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0RTNCMzEw QTVFMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU5NjEyYTItNDQzMy00MmI5LThm NGYtYjg0Nzc3NmFjYWZkLzEvMDlFNDczN0NFRTM2Q0NDRTY4MTlGNzA0RjlBOTI0 RTNCMzEwQTVFMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACXlOrsY8JPRMKBzcUJnKsJzK67lG70KGiM+ U0zm66BMhREvs26l2OvWIl1i4wfuNXfjCnmhV1mUGWFH8bzqrTNBU00lGRE5rnlX i5xNPEFrSRFtghO/k+qAH7ncxqpzDJcmJY3kdfvcUvufVKV5fEKYPyR1VHzoLUFw t7hfzqujRy8FMzTpM7tPPK2eGC4PltzUM2rewrD5RkwwRbdVD51w2PcJYaYjSlSp Q99ulI4xWThEhyExQ+a3E8R8WjPc2g055ppfkuRZc+d/hMG6QrREtgWm3uWOsILs JwufrpEEegKORiZCgIjbbYv1lBobutmro41xZW1izGBFoy0VXBg= -----END CERTIFICATE-----Generated at Sat Apr 18 05:50:06 2026 by rpki-client