$ rpki-client -vvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: oGfaLcvw+cfr2bJ4hCJ2Bs8EH+gh6dp/fgDkbXOLhDY= Subject key identifier: E4:96:86:73:E3:75:25:C4:80:82:40:12:76:A9:09:5E:95:2C:F5:E2 Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 3C96445239BDE51D555FF9AD396287359F207CAE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: 0E Signing time: Tue 12 May 2026 16:10:44 +0000 Manifest this update: Tue 12 May 2026 16:05:44 +0000 Manifest next update: Wed 13 May 2026 19:01:44 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: KGfYpZo0EihxE9An1DKcsoWt6kookvQ1RgDGy7oqA4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:96:44:52:39:bd:e5:1d:55:5f:f9:ad:39:62:87:35:9f:20:7c:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: May 12 16:05:44 2026 GMT Not After : May 13 19:01:44 2026 GMT Subject: CN=E4968673E37525C48082401276A9095E952CF5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c9:84:0f:23:ea:5a:75:9d:66:b3:a1:ca:9f: b8:82:da:af:af:93:ed:66:75:de:9a:c4:46:48:0f: b1:6d:51:00:fe:f2:a1:38:d9:df:bc:29:97:58:b7: 87:3d:41:77:57:f0:e1:81:27:06:99:7c:33:1b:14: 8d:95:31:83:73:6d:3d:33:c9:f8:77:fb:59:d7:75: ff:47:4e:69:47:41:c6:41:c8:4b:9b:e9:9a:45:69: e0:95:3c:fb:47:8a:ca:24:57:f0:37:de:70:4f:fc: f7:b8:b6:4d:8b:a1:32:10:79:66:9e:8d:f6:78:01: c9:24:78:ac:e9:ef:43:e9:76:f3:f4:83:55:d3:3f: 3d:c6:ac:1f:13:3d:33:2a:4d:04:07:24:d5:16:1e: c1:20:84:9e:8e:cc:65:2c:fb:2d:93:94:5b:a9:b5: eb:4d:5e:79:25:d2:be:7d:8b:6b:9f:2f:ea:50:2d: 69:f5:55:e4:ad:55:6f:98:08:5f:86:04:29:0f:51: a9:4c:e8:61:06:46:70:ee:51:47:c7:68:97:1a:a5: e2:98:ec:c7:97:96:b1:f2:b4:cf:4a:eb:6d:dc:43: a7:fa:30:2f:2b:fb:88:c9:c3:21:bd:51:e7:50:b8: d0:c0:f4:02:cd:e0:a3:82:5f:12:e3:c9:49:eb:5e: a3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:96:86:73:E3:75:25:C4:80:82:40:12:76:A9:09:5E:95:2C:F5:E2 X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c5:04:8a:78:af:2f:c7:c5:b4:76:05:8f:09:c0:60:c2:19: e1:57:5a:94:c1:57:9f:73:4f:cc:0a:11:92:c7:62:c4:f3:c5: 4e:ca:ae:f0:65:50:85:e9:1f:2d:3f:21:bd:75:6d:70:2c:ff: 9d:7d:9b:04:e7:0b:fe:f2:eb:b3:f3:1a:79:a9:57:07:fd:5d: 56:f4:0a:c1:f1:55:22:19:72:9d:d9:dc:f1:8e:8e:8b:56:49: b2:1b:e2:40:7d:ad:d5:df:0e:59:91:8b:30:ed:37:d4:11:13: 05:0f:77:77:37:0d:d8:41:ea:b0:19:a7:f8:da:97:dd:39:d9: 40:77:1c:ba:f6:42:41:0f:d0:c5:9f:06:c8:80:b5:a4:01:4f: 2d:ea:0b:4b:49:47:a3:34:fd:79:7b:73:f8:03:70:5a:ea:49: c2:6c:ee:07:3c:3a:9a:58:13:1d:85:e6:86:0e:69:28:74:18: d1:dc:99:45:3e:ac:d5:b9:39:5e:ab:0e:f6:43:73:32:16:34: b7:43:87:82:43:da:65:0e:cb:a2:de:7c:7b:0e:b1:ca:f6:30: cc:d4:bf:d5:52:56:9f:a3:30:69:58:38:85:14:be:69:1a:4b: 2a:42:3a:3d:24:82:2f:df:11:9e:05:fc:34:2a:29:d5:f1:ef: 54:6c:97:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPJZEUjm95R1VX/mtOWKHNZ8gfK4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA1MTIxNjA1NDRaFw0yNjA1MTMxOTAxNDRaMDMxMTAvBgNV BAMTKEU0OTY4NjczRTM3NTI1QzQ4MDgyNDAxMjc2QTkwOTVFOTUyQ0Y1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCyYQPI+padZ1ms6HKn7iC2q+v k+1mdd6axEZID7FtUQD+8qE42d+8KZdYt4c9QXdX8OGBJwaZfDMbFI2VMYNzbT0z yfh3+1nXdf9HTmlHQcZByEub6ZpFaeCVPPtHisokV/A33nBP/Pe4tk2LoTIQeWae jfZ4AckkeKzp70PpdvP0g1XTPz3GrB8TPTMqTQQHJNUWHsEghJ6OzGUs+y2TlFup tetNXnkl0r59i2ufL+pQLWn1VeStVW+YCF+GBCkPUalM6GEGRnDuUUfHaJcapeKY 7MeXlrHytM9K623cQ6f6MC8r+4jJwyG9UedQuNDA9ALN4KOCXxLjyUnrXqORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5JaGc+N1JcSAgkASdqkJXpUs9eIwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfFBIp4ry/HxbR2BY8JwGDCGeFXWpTBV59z T8wKEZLHYsTzxU7KrvBlUIXpHy0/Ib11bXAs/519mwTnC/7y67PzGnmpVwf9XVb0 CsHxVSIZcp3Z3PGOjotWSbIb4kB9rdXfDlmRizDtN9QREwUPd3c3DdhB6rAZp/ja l9052UB3HLr2QkEP0MWfBsiAtaQBTy3qC0tJR6M0/Xl7c/gDcFrqScJs7gc8OppY Ex2F5oYOaSh0GNHcmUU+rNW5OV6rDvZDczIWNLdDh4JD2mUOy6LefHsOscr2MMzU v9VSVp+jMGlYOIUUvmkaSypCOj0kgi/fEZ4F/DQqKdXx71Rsl5s= -----END CERTIFICATE-----Generated at Wed May 13 03:26:38 2026 by rpki-client