$ rpki-client -vvf repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft File: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft (raw, json) Hash identifier: aNALO6liRjvjE3PHhEl9LIIl21w6Ukh6rPOB3sSriYc= Subject key identifier: 14:15:1B:0E:E9:C2:67:AC:A0:A5:CE:5A:6A:6B:0B:04:F6:F6:4D:BE Authority key identifier: 95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB Certificate issuer: /CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Certificate serial: 1B8E343099C01721E123D65F3F10F760738467CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft Manifest number: 0150 Signing time: Sun 19 Apr 2026 20:52:40 +0000 Manifest this update: Sun 19 Apr 2026 20:47:40 +0000 Manifest next update: Thu 23 Apr 2026 07:02:40 +0000 Files and hashes: 1: 9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl (hash: IF0Hi2cG+0gjSBCDAsnQ0lqToF75Jxo+ClKkc7H/EeI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 07:02:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:8e:34:30:99:c0:17:21:e1:23:d6:5f:3f:10:f7:60:73:84:67:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9564134EE3E4CE65FB9D077E90B1BEB525D699EB Validity Not Before: Apr 19 20:47:40 2026 GMT Not After : Apr 23 07:02:40 2026 GMT Subject: CN=14151B0EE9C267ACA0A5CE5A6A6B0B04F6F64DBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:2a:61:5c:84:c1:6c:fd:c8:a3:c0:af:0f:f7: e6:1a:58:b8:bb:14:b4:86:22:ee:50:76:27:b8:8f: a2:25:c6:7f:a1:99:33:e1:5c:6c:a7:03:10:26:5e: 59:e7:3e:92:7e:68:8f:93:50:9a:14:7c:6c:e6:36: 62:ec:f1:5e:a6:c2:91:ed:41:59:d4:61:79:80:6a: 7d:a5:f2:52:5a:47:7f:65:92:c5:1b:83:06:76:b7: 1d:9b:a1:46:ec:e0:9b:d8:e6:af:24:04:c5:a8:0d: 94:03:06:e5:2b:5c:d7:69:c0:de:b2:c4:9c:f0:91: e6:a4:a1:59:31:a2:cd:1d:f2:e5:79:b9:7c:3d:49: 91:db:25:2e:99:f2:a5:98:d4:af:51:f2:b5:51:82: 15:7a:d9:41:7a:d7:6e:68:13:39:4c:4d:e1:82:8a: 1d:42:4e:b8:e1:e9:f4:30:33:0a:0d:50:90:b8:ca: 2d:4a:97:32:3c:d8:57:83:90:3d:3c:a9:ca:83:c6: 5a:c0:53:24:cb:03:1d:c5:18:99:79:78:35:5b:bf: b8:2d:ed:79:ce:36:a5:15:35:ba:3d:f7:92:e4:4a: 64:79:32:1e:f5:de:38:09:b4:4d:93:a9:38:60:1a: 2e:18:93:e5:a3:ae:e1:f0:bb:b3:1c:4d:b6:7b:59: 06:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:15:1B:0E:E9:C2:67:AC:A0:A5:CE:5A:6A:6B:0B:04:F6:F6:4D:BE X509v3 Authority Key Identifier: keyid:95:64:13:4E:E3:E4:CE:65:FB:9D:07:7E:90:B1:BE:B5:25:D6:99:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8088648f-5e0b-4338-911c-9d6467b00a3e/0/9564134EE3E4CE65FB9D077E90B1BEB525D699EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:b0:fc:9e:9f:78:90:7e:cd:fb:09:a0:e3:e0:80:17:ff:e6: f2:c4:d6:26:a6:1a:3e:de:5c:4f:49:07:bb:1e:65:13:64:98: 25:ca:02:c3:c9:86:49:55:63:f0:47:34:4b:33:0c:dd:2f:90: 5c:fc:b2:0a:14:0d:6e:5c:90:36:14:16:2a:4d:1b:fa:a3:31: 16:fc:ee:a4:a1:99:01:a5:90:6f:d1:92:5c:0b:3b:de:a8:2b: df:f6:5e:91:d8:30:72:20:41:2d:4a:84:87:a5:a4:4d:66:82: 24:73:e8:16:26:fc:ee:c8:82:57:3a:6e:a3:c5:a3:7b:24:92: 6c:7a:6b:47:ed:76:04:34:b9:b7:3b:70:eb:c1:6a:fb:4c:ad: 74:59:09:a1:29:e3:56:3a:ae:d2:bc:ce:09:78:ae:b5:82:de: ef:96:e5:f0:58:9d:9b:f1:5f:ab:fc:31:49:df:3c:66:9c:40: e7:db:b9:e0:1e:29:a8:93:18:6f:e3:cc:d0:5e:c9:5d:81:85: 1e:20:de:53:9d:58:9d:59:09:63:1f:01:c9:22:67:31:fe:a3: b1:b3:d6:39:0c:1d:2a:57:4f:8a:69:49:47:d5:ae:45:b7:66: e0:d1:ce:5a:f1:38:9d:f8:e2:85:0c:33:10:9f:8a:4d:32:6e: a2:db:22:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG440MJnAFyHhI9ZfPxD3YHOEZ84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUy NUQ2OTlFQjAeFw0yNjA0MTkyMDQ3NDBaFw0yNjA0MjMwNzAyNDBaMDMxMTAvBgNV BAMTKDE0MTUxQjBFRTlDMjY3QUNBMEE1Q0U1QTZBNkIwQjA0RjZGNjREQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzKmFchMFs/cijwK8P9+YaWLi7 FLSGIu5Qdie4j6Ilxn+hmTPhXGynAxAmXlnnPpJ+aI+TUJoUfGzmNmLs8V6mwpHt QVnUYXmAan2l8lJaR39lksUbgwZ2tx2boUbs4JvY5q8kBMWoDZQDBuUrXNdpwN6y xJzwkeakoVkxos0d8uV5uXw9SZHbJS6Z8qWY1K9R8rVRghV62UF6125oEzlMTeGC ih1CTrjh6fQwMwoNUJC4yi1KlzI82FeDkD08qcqDxlrAUyTLAx3FGJl5eDVbv7gt 7XnONqUVNbo995LkSmR5Mh713jgJtE2TqThgGi4Yk+WjruHwu7McTbZ7WQbfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFBUbDunCZ6ygpc5aamsLBPb2Tb4wHwYDVR0j BBgwFoAUlWQTTuPkzmX7nQd+kLG+tSXWmeswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDg4NjQ4Zi01ZTBiLTQzMzgtOTExYy05ZDY0NjdiMDBhM2UvMC85NTY0MTM0RUUz RTRDRTY1RkI5RDA3N0U5MEIxQkVCNTI1RDY5OUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJFQjUyNUQ2 OTlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4ODY0OGYtNWUwYi00MzM4LTkx MWMtOWQ2NDY3YjAwYTNlLzAvOTU2NDEzNEVFM0U0Q0U2NUZCOUQwNzdFOTBCMUJF QjUyNUQ2OTlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAaw/J6feJB+zfsJoOPggBf/5vLE1iamGj7e XE9JB7seZRNkmCXKAsPJhklVY/BHNEszDN0vkFz8sgoUDW5ckDYUFipNG/qjMRb8 7qShmQGlkG/RklwLO96oK9/2XpHYMHIgQS1KhIelpE1mgiRz6BYm/O7Iglc6bqPF o3skkmx6a0ftdgQ0ubc7cOvBavtMrXRZCaEp41Y6rtK8zgl4rrWC3u+W5fBYnZvx X6v8MUnfPGacQOfbueAeKaiTGG/jzNBeyV2BhR4g3lOdWJ1ZCWMfAckiZzH+o7Gz 1jkMHSpXT4ppSUfVrkW3ZuDRzlrxOJ344oUMMxCfik0ybqLbIkE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:36 2026 by rpki-client