$ rpki-client -vvf repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft File: 09884E2A3DACA82285AA33105FFA136D63B6B89E.mft (raw, json) Hash identifier: bUdx7ldCsY7/s6+sTIDQlGRjXpttRDew/X4vRbWirQc= Subject key identifier: 6F:66:46:CB:33:CF:98:08:91:62:66:D5:FA:70:B9:3F:54:FC:C5:7D Authority key identifier: 09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E Certificate issuer: /CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Certificate serial: 749761FA0EEB130394073C13DFEBB3004EC89955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft Manifest number: 48 Signing time: Wed 18 Mar 2026 15:01:50 +0000 Manifest this update: Wed 18 Mar 2026 14:56:50 +0000 Manifest next update: Sat 21 Mar 2026 23:56:50 +0000 Files and hashes: 1: 09884E2A3DACA82285AA33105FFA136D63B6B89E.crl (hash: Vxvq6IC6+AmElMK4bzN/vv8h0D43OaydIDmtZuQMfzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 23:56:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:97:61:fa:0e:eb:13:03:94:07:3c:13:df:eb:b3:00:4e:c8:99:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09884E2A3DACA82285AA33105FFA136D63B6B89E Validity Not Before: Mar 18 14:56:50 2026 GMT Not After : Mar 21 23:56:50 2026 GMT Subject: CN=6F6646CB33CF9808916266D5FA70B93F54FCC57D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:df:ac:7a:20:02:cc:1c:b0:15:e7:b4:8f:70: 99:1e:b9:87:62:89:c4:1a:65:ac:7e:62:1f:6d:48: 48:ef:b0:cd:12:c8:63:b6:d2:75:d1:7a:eb:0a:fe: ea:87:88:9d:d6:de:d0:6d:00:ea:e2:d2:cf:fe:02: 5d:2a:d7:4a:63:8f:1a:c3:12:96:0b:91:de:21:51: ea:d3:a8:0c:f2:53:e9:29:97:7d:0a:f8:9e:32:cf: 3e:af:d8:4c:c1:6d:5e:70:20:b3:6d:58:a8:b2:1c: b3:c9:ca:f4:54:f6:69:6c:b3:cb:f2:3e:44:8b:aa: 86:bb:53:cd:76:4b:7d:eb:c6:02:fa:6f:4c:c4:10: bf:a6:13:1e:cd:b6:7e:97:97:75:57:4b:d1:fc:f4: 8c:0a:79:23:fc:f4:fc:34:90:6f:c8:f5:34:5d:d4: 5a:cd:01:65:fe:42:7f:18:58:c4:a8:96:5c:fb:b7: 59:05:e1:bc:89:dc:68:96:0e:4a:50:9e:52:7f:91: 11:e6:cf:09:f2:86:4f:2b:11:d7:a3:f5:66:f4:6c: 43:05:90:6e:eb:b3:f5:a3:b9:79:c7:1c:fc:76:7b: 01:13:4e:a5:dc:81:1c:8d:26:b1:4b:6b:09:32:2a: f2:c0:7b:98:fd:03:71:5a:c4:59:78:de:2a:76:8d: 0f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:66:46:CB:33:CF:98:08:91:62:66:D5:FA:70:B9:3F:54:FC:C5:7D X509v3 Authority Key Identifier: keyid:09:88:4E:2A:3D:AC:A8:22:85:AA:33:10:5F:FA:13:6D:63:B6:B8:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09884E2A3DACA82285AA33105FFA136D63B6B89E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b6ad2b4-ebe5-4cc2-9d05-efdd11d60e2a/0/09884E2A3DACA82285AA33105FFA136D63B6B89E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:92:cb:db:58:96:cd:bb:cd:a7:a1:45:2e:8b:24:95:4e:3e: fb:a2:e7:87:9e:e1:ee:dd:54:d7:83:a8:d5:3b:90:fd:3e:e7: 48:d2:6a:3a:12:a3:88:64:f3:1d:c9:85:05:24:db:b5:07:3f: ab:d0:27:6f:99:fb:38:a2:db:32:b4:d6:51:28:59:12:18:5a: dd:bc:6b:1c:a3:c3:fa:d7:39:cb:18:52:93:26:4d:ed:4a:ff: 88:2f:c2:a2:35:ad:a4:ea:b8:8f:23:38:0b:85:6f:1f:1c:00: bf:9a:89:6f:73:1f:91:05:38:d7:da:2e:99:79:89:e8:50:6b: 59:ba:36:31:2a:6c:0c:b0:88:f5:61:3b:20:d2:02:8b:80:dd: a7:ea:de:31:8b:13:0d:4b:c0:62:24:38:a0:c0:59:a5:f4:b2: 1c:7a:d5:2d:21:21:9e:48:63:dd:32:f4:08:25:06:e2:ad:42: 35:4d:fa:27:b0:12:84:d9:f9:45:45:9d:54:9d:e1:c3:cf:6b: f7:b3:fd:2f:07:2c:fe:89:96:c5:2a:c2:f2:56:65:7c:78:39: 1b:74:d7:2d:19:90:2d:45:dd:db:e3:db:02:b2:5a:30:0f:47: 3f:79:11:8a:03:28:94:6f:48:03:4b:69:a6:ed:b6:8e:e9:1c: ab:e7:bc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJdh+g7rEwOUBzwT3+uzAE7ImVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2 M0I2Qjg5RTAeFw0yNjAzMTgxNDU2NTBaFw0yNjAzMjEyMzU2NTBaMDMxMTAvBgNV BAMTKDZGNjY0NkNCMzNDRjk4MDg5MTYyNjZENUZBNzBCOTNGNTRGQ0M1N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC436x6IALMHLAV57SPcJkeuYdi icQaZax+Yh9tSEjvsM0SyGO20nXReusK/uqHiJ3W3tBtAOri0s/+Al0q10pjjxrD EpYLkd4hUerTqAzyU+kpl30K+J4yzz6v2EzBbV5wILNtWKiyHLPJyvRU9mlss8vy PkSLqoa7U812S33rxgL6b0zEEL+mEx7Ntn6Xl3VXS9H89IwKeSP89Pw0kG/I9TRd 1FrNAWX+Qn8YWMSollz7t1kF4byJ3GiWDkpQnlJ/kRHmzwnyhk8rEdej9Wb0bEMF kG7rs/WjuXnHHPx2ewETTqXcgRyNJrFLawkyKvLAe5j9A3FaxFl43ip2jQ9tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb2ZGyzPPmAiRYmbV+nC5P1T8xX0wHwYDVR0j BBgwFoAUCYhOKj2sqCKFqjMQX/oTbWO2uJ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjZhZDJiNC1lYmU1LTRjYzItOWQwNS1lZmRkMTFkNjBlMmEvMC8wOTg4NEUyQTNE QUNBODIyODVBQTMzMTA1RkZBMTM2RDYzQjZCODlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEzNkQ2M0I2 Qjg5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGI2YWQyYjQtZWJlNS00Y2MyLTlk MDUtZWZkZDExZDYwZTJhLzAvMDk4ODRFMkEzREFDQTgyMjg1QUEzMzEwNUZGQTEz NkQ2M0I2Qjg5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKuSy9tYls27zaehRS6LJJVOPvui54ee4e7d VNeDqNU7kP0+50jSajoSo4hk8x3JhQUk27UHP6vQJ2+Z+zii2zK01lEoWRIYWt28 axyjw/rXOcsYUpMmTe1K/4gvwqI1raTquI8jOAuFbx8cAL+aiW9zH5EFONfaLpl5 iehQa1m6NjEqbAywiPVhOyDSAouA3afq3jGLEw1LwGIkOKDAWaX0shx61S0hIZ5I Y90y9AglBuKtQjVN+iewEoTZ+UVFnVSd4cPPa/ez/S8HLP6JlsUqwvJWZXx4ORt0 1y0ZkC1F3dvj2wKyWjAPRz95EYoDKJRvSANLaabtto7pHKvnvGI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:15 2026 by rpki-client