$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: AgKRWAPzBvpjC6XrRT0ypywZB8QagBGpKxCjEYVg7PM= Subject key identifier: 47:45:11:1E:10:1D:2D:94:71:41:3E:20:52:62:0D:D5:EA:70:D2:5C Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 4EAD80390A71A541B032BF7A1BF82002B1E6449F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 4B Signing time: Wed 25 Mar 2026 13:11:46 +0000 Manifest this update: Wed 25 Mar 2026 13:06:46 +0000 Manifest next update: Sat 28 Mar 2026 23:47:46 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: N0nZ87gCusQbhow/N6b+xfX+BRMS7GTxsYoI/e6gsSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:ad:80:39:0a:71:a5:41:b0:32:bf:7a:1b:f8:20:02:b1:e6:44:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Mar 25 13:06:46 2026 GMT Not After : Mar 28 23:47:46 2026 GMT Subject: CN=4745111E101D2D9471413E2052620DD5EA70D25C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5f:cb:62:79:98:0a:35:c6:4f:13:87:d3:a4: ac:3a:54:e4:d4:0b:6c:80:ff:d6:9c:35:02:f4:4b: ad:ca:b0:ff:32:82:6a:4d:0b:21:f5:07:ca:f5:30: 14:4e:5a:a5:e9:50:9e:15:c6:8d:34:f8:ec:60:90: c4:f3:70:a3:50:3c:a9:e0:a8:f3:2f:6f:56:cb:f9: a6:fc:40:dc:28:9c:ea:37:77:7d:ec:27:78:7c:c2: 3c:1b:e3:6b:eb:b2:71:1a:2d:2d:58:30:6b:eb:fa: 2c:e1:ef:07:ee:9d:c4:81:0b:6b:cc:ae:16:81:5b: c3:bb:30:1d:6b:fe:31:d6:eb:5a:6e:09:27:3c:cf: c1:81:c5:23:65:30:32:c4:2f:35:4a:1f:9c:77:c9: 80:73:4a:b0:e9:cd:dd:d0:29:2f:7f:86:a8:0e:37: b4:37:96:75:43:99:24:a8:a2:ca:33:45:d1:4d:5a: b5:17:54:1e:50:56:bd:e6:40:7e:7e:75:56:a9:5e: ba:c2:2a:de:7b:a7:29:b0:e9:ea:08:fe:9b:16:d1: b3:eb:9a:18:46:9d:1d:87:b0:66:b8:b0:2d:a9:af: 95:90:e9:cd:b2:48:ef:8b:52:ad:21:b1:0d:f4:24: 4f:dc:2c:19:5e:82:86:96:75:78:48:ca:7f:12:71: da:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:45:11:1E:10:1D:2D:94:71:41:3E:20:52:62:0D:D5:EA:70:D2:5C X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:4f:f3:9a:11:cd:8c:ea:9d:9c:14:53:4f:7b:7c:8d:e0:e9: bd:2b:ad:2b:9b:0d:b8:d6:3a:92:5f:5b:85:05:f6:6c:56:a0: 7f:7e:c9:cf:b7:93:4a:30:44:88:d2:80:ce:07:af:a5:74:f7: 88:fc:59:c1:8d:d4:c0:6a:4f:cd:a2:06:f5:59:e4:c5:54:d0: 2d:0c:92:a9:eb:67:4e:3f:9c:a1:ad:7f:16:15:1f:92:22:05: 32:16:c7:9d:85:84:bd:18:90:f4:30:2e:9b:a0:58:be:ad:dd: ce:dc:2b:d7:84:f0:a1:32:67:59:c3:b9:2d:41:12:f2:c8:c6: bc:81:10:27:e5:28:13:5d:fc:9e:cf:d2:5b:6c:df:ce:2f:91: 39:6a:7b:7e:05:e8:96:d7:18:38:e1:36:5d:3f:43:41:fa:0b: fd:a2:93:cd:6b:19:e9:33:da:08:85:ae:36:65:2f:f5:ae:76: c9:6f:41:16:5f:35:43:5f:0b:b3:17:1d:b1:55:73:6c:34:93: c3:af:9c:07:9d:7d:42:c1:51:1c:6d:58:fa:a0:4c:1e:e8:86: a4:75:84:cb:dc:20:3b:31:f8:86:f0:46:07:ac:1c:9c:a8:ec: dd:61:70:8d:14:7a:15:c1:d1:e1:2b:4d:e1:b7:5a:29:9e:8b: 55:13:82:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTq2AOQpxpUGwMr96G/ggArHmRJ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNjAzMjUxMzA2NDZaFw0yNjAzMjgyMzQ3NDZaMDMxMTAvBgNV BAMTKDQ3NDUxMTFFMTAxRDJEOTQ3MTQxM0UyMDUyNjIwREQ1RUE3MEQyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClX8tieZgKNcZPE4fTpKw6VOTU C2yA/9acNQL0S63KsP8ygmpNCyH1B8r1MBROWqXpUJ4Vxo00+OxgkMTzcKNQPKng qPMvb1bL+ab8QNwonOo3d33sJ3h8wjwb42vrsnEaLS1YMGvr+izh7wfuncSBC2vM rhaBW8O7MB1r/jHW61puCSc8z8GBxSNlMDLELzVKH5x3yYBzSrDpzd3QKS9/hqgO N7Q3lnVDmSSoosozRdFNWrUXVB5QVr3mQH5+dVapXrrCKt57pymw6eoI/psW0bPr mhhGnR2HsGa4sC2pr5WQ6c2ySO+LUq0hsQ30JE/cLBlegoaWdXhIyn8Scdp5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR0URHhAdLZRxQT4gUmIN1epw0lwwHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACFP85oRzYzqnZwUU097fI3g6b0rrSubDbjW OpJfW4UF9mxWoH9+yc+3k0owRIjSgM4Hr6V094j8WcGN1MBqT82iBvVZ5MVU0C0M kqnrZ04/nKGtfxYVH5IiBTIWx52FhL0YkPQwLpugWL6t3c7cK9eE8KEyZ1nDuS1B EvLIxryBECflKBNd/J7P0lts384vkTlqe34F6JbXGDjhNl0/Q0H6C/2ik81rGekz 2giFrjZlL/WudslvQRZfNUNfC7MXHbFVc2w0k8OvnAedfULBURxtWPqgTB7ohqR1 hMvcIDsx+IbwRgesHJyo7N1hcI0UehXB0eErTeG3Wimei1UTgr4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:26 2026 by rpki-client