$ rpki-client -vvf repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft File: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft (raw, json) Hash identifier: IA7xUOhUhHxLjQnG0yvyG0Q/kO9/18YAzd8mv96yuv4= Subject key identifier: 0F:D1:DC:31:B0:CF:D2:B3:2A:CC:E0:78:E1:40:29:43:AC:3A:47:DA Authority key identifier: 09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 Certificate issuer: /CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Certificate serial: 3123B4DB618E697FBA148B04A5BF24228AE9501A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft Manifest number: 013C Signing time: Sun 19 Apr 2026 03:21:09 +0000 Manifest this update: Sun 19 Apr 2026 03:16:09 +0000 Manifest next update: Wed 22 Apr 2026 10:43:09 +0000 Files and hashes: 1: 09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl (hash: SExF3P6Hb8DwhV8bxHAahcP6xY5dlnwXRs67UfKp+vA=) 2: 3130332e3134332e3139352e302f32342d3234203d3e20313339343135.roa (hash: Lr0TpG8krLyR3UynL7D81Hjm/IdBbRhWM0bWxe1aX3Q=) 3: 3130332e3134332e3139342e302f32342d3234203d3e20313339343135.roa (hash: OZ0n2s6qtpxFn22s0zNmMCuj55jMpEFTTLZdHpn0ifM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 10:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:23:b4:db:61:8e:69:7f:ba:14:8b:04:a5:bf:24:22:8a:e9:50:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8 Validity Not Before: Apr 19 03:16:09 2026 GMT Not After : Apr 22 10:43:09 2026 GMT Subject: CN=0FD1DC31B0CFD2B32ACCE078E1402943AC3A47DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:c3:07:24:21:cb:e4:1e:c7:ce:9c:7c:a7:5a: 7c:51:ea:74:63:85:21:2a:e9:92:c2:a1:29:a0:ac: 6f:f7:93:5d:e9:0c:9b:ff:5c:06:83:4f:71:f9:c5: 0a:a3:fe:7b:77:43:46:ca:c6:f1:67:71:85:d9:b7: 71:dc:93:d2:78:76:e9:98:c4:e6:e5:3e:00:ac:bb: ab:d5:6e:07:b1:2f:44:16:4d:ca:df:c5:48:95:89: a9:16:ee:dd:44:06:f2:60:2c:6f:d7:cd:85:75:e6: 30:a2:93:fb:12:ba:fd:f3:11:2a:b1:d2:39:7a:22: 7e:ba:7c:9e:1c:22:80:52:68:34:f1:64:a1:37:e5: 62:23:22:f6:7a:a8:40:b2:a4:dc:80:ea:94:06:01: c8:fc:f7:f9:b8:ec:8c:74:43:b3:60:d7:0f:28:24: c5:ed:e7:dd:1a:e9:1b:49:f8:6d:1e:17:64:81:1b: 77:e3:22:f9:45:ca:ca:fa:f8:13:67:25:0f:1c:27: 5b:09:2e:b2:1e:50:89:44:72:7e:c7:12:2f:ca:c5: ef:d4:e3:3b:04:f5:85:8c:9b:80:a5:d1:cb:ea:39: ff:de:4f:c3:72:cb:b0:83:ec:4d:e0:9c:da:b5:7c: 30:2f:83:88:ff:b0:d3:fe:01:36:60:40:c3:a5:a0: 26:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:D1:DC:31:B0:CF:D2:B3:2A:CC:E0:78:E1:40:29:43:AC:3A:47:DA X509v3 Authority Key Identifier: keyid:09:F5:8F:64:1C:5D:42:BD:2D:25:57:FF:A2:EA:06:1B:66:AC:BD:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b2e06f72-1323-4fbd-b26e-9ed9a9add880/0/09F58F641C5D42BD2D2557FFA2EA061B66ACBDA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:e8:90:3c:d8:6a:cf:4c:a6:a9:fd:09:10:89:87:74:4e:b3: c6:26:ab:5b:b3:a1:fa:38:47:8b:38:c6:3e:75:b2:ca:55:57: 67:bc:5f:5f:62:26:f6:ef:df:db:9e:49:a5:3c:05:d5:ff:2c: 57:f5:39:0e:ec:df:6c:98:c6:02:4c:05:a1:0d:36:94:a7:9e: f1:4b:6a:0d:5c:50:64:e9:00:cc:7b:34:a3:da:17:3c:ab:15: 9e:86:89:b0:c5:db:2a:f4:47:3c:4e:1a:54:6d:5c:16:fb:0d: c3:eb:07:8d:e9:c7:af:fa:7f:a7:0e:85:75:94:cf:0f:b9:d8: 2e:63:05:8a:ba:23:99:2d:f6:89:41:ae:97:80:2a:be:37:9c: 64:43:4d:48:8d:91:a6:c5:64:11:df:a8:cf:87:8c:7c:ca:ba: fa:2a:62:57:45:8d:04:f5:ac:08:49:3f:34:1e:5c:ac:47:5e: d9:0f:4c:87:88:3c:3f:73:b8:c6:f8:5e:99:54:3b:3e:2a:d2: 30:d2:06:4f:74:39:f5:77:2d:11:c3:1a:73:b8:37:ba:f3:81: 23:c6:f0:ca:59:80:bd:bf:dd:f9:b4:52:2f:ae:2e:30:03:16: 3a:56:58:0a:4c:50:58:5b:bb:de:fb:ae:de:2b:6a:3f:6f:c4: 31:27:dd:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMSO022GOaX+6FIsEpb8kIorpUBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2 NkFDQkRBODAeFw0yNjA0MTkwMzE2MDlaFw0yNjA0MjIxMDQzMDlaMDMxMTAvBgNV BAMTKDBGRDFEQzMxQjBDRkQyQjMyQUNDRTA3OEUxNDAyOTQzQUMzQTQ3REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswwckIcvkHsfOnHynWnxR6nRj hSEq6ZLCoSmgrG/3k13pDJv/XAaDT3H5xQqj/nt3Q0bKxvFncYXZt3Hck9J4dumY xOblPgCsu6vVbgexL0QWTcrfxUiViakW7t1EBvJgLG/XzYV15jCik/sSuv3zESqx 0jl6In66fJ4cIoBSaDTxZKE35WIjIvZ6qECypNyA6pQGAcj89/m47Ix0Q7Ng1w8o JMXt590a6RtJ+G0eF2SBG3fjIvlFysr6+BNnJQ8cJ1sJLrIeUIlEcn7HEi/Kxe/U 4zsE9YWMm4Cl0cvqOf/eT8Nyy7CD7E3gnNq1fDAvg4j/sNP+ATZgQMOloCYxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD9HcMbDP0rMqzOB44UApQ6w6R9owHwYDVR0j BBgwFoAUCfWPZBxdQr0tJVf/ouoGG2asvagwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MmUwNmY3Mi0xMzIzLTRmYmQtYjI2ZS05ZWQ5YTlhZGQ4ODAvMC8wOUY1OEY2NDFD NUQ0MkJEMkQyNTU3RkZBMkVBMDYxQjY2QUNCREE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2MUI2NkFD QkRBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjJlMDZmNzItMTMyMy00ZmJkLWIy NmUtOWVkOWE5YWRkODgwLzAvMDlGNThGNjQxQzVENDJCRDJEMjU1N0ZGQTJFQTA2 MUI2NkFDQkRBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDokDzYas9Mpqn9CRCJh3ROs8Ymq1uzofo4 R4s4xj51sspVV2e8X19iJvbv39ueSaU8BdX/LFf1OQ7s32yYxgJMBaENNpSnnvFL ag1cUGTpAMx7NKPaFzyrFZ6GibDF2yr0RzxOGlRtXBb7DcPrB43px6/6f6cOhXWU zw+52C5jBYq6I5kt9olBrpeAKr43nGRDTUiNkabFZBHfqM+HjHzKuvoqYldFjQT1 rAhJPzQeXKxHXtkPTIeIPD9zuMb4XplUOz4q0jDSBk90OfV3LRHDGnO4N7rzgSPG 8MpZgL2/3fm0Ui+uLjADFjpWWApMUFhbu977rt4raj9vxDEn3Zc= -----END CERTIFICATE-----Generated at Sun Apr 19 11:21:32 2026 by rpki-client