$ rpki-client -vvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: LSESjprgfOzEgEyDqq7rUy6UKl4TOvjccdI/BWLYv2k= Subject key identifier: BF:A0:63:6C:F6:54:EE:30:3D:90:C5:B3:9A:F6:93:9E:13:B0:15:AD Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 395558DBA2DCAE437D8E2775D19A96E22F152190 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: 6E Signing time: Fri 24 Jul 2026 04:40:11 +0000 Manifest this update: Fri 24 Jul 2026 04:35:11 +0000 Manifest next update: Sat 25 Jul 2026 08:10:11 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: SC/wa+vItWFqXrqcGwxBXSeGVdXP96Ekfokgo6ZNEVA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 07:07:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:55:58:db:a2:dc:ae:43:7d:8e:27:75:d1:9a:96:e2:2f:15:21:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Jul 24 04:35:11 2026 GMT Not After : Jul 25 08:10:11 2026 GMT Subject: CN=BFA0636CF654EE303D90C5B39AF6939E13B015AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ec:fe:86:1d:31:e5:53:21:cc:52:c1:64:cc: 57:40:ff:1c:1a:23:36:d4:04:87:0c:4e:94:db:16: 7f:72:37:44:2d:4b:3b:67:54:12:f8:e7:a1:b1:8d: f7:55:bc:90:30:00:f1:fc:52:b8:66:e7:4b:37:3b: 0e:0b:eb:0a:6e:cc:ba:0f:87:7f:c3:6c:09:e0:24: 4f:a4:f8:af:a8:15:c2:8c:25:39:a2:be:cc:0f:c5: 8b:55:52:78:bb:20:7a:82:71:20:16:8a:d8:c0:f0: c4:22:fb:54:f8:c5:8f:e6:ff:cc:c5:70:84:89:87: 5b:92:ce:28:cf:eb:ac:3d:2f:8a:90:65:58:59:ec: cc:22:2a:9e:ea:8d:da:05:e1:8c:89:44:cb:d9:08: 6c:0c:ef:1c:13:32:27:f4:77:37:57:ca:16:06:57: 30:3b:81:f1:e0:ff:f7:e9:c5:6d:1b:45:6c:a9:c1: c0:43:9a:3b:29:a0:82:53:28:d8:be:03:33:42:f0: cd:35:13:f6:97:58:d8:32:32:57:d5:61:0d:7e:78: 21:19:96:b6:09:05:8b:33:e1:f3:22:07:2b:54:78: 78:98:0b:5f:05:93:99:d1:66:66:14:00:36:4f:a7: b8:05:7e:a7:e4:e5:a6:ce:95:c8:7a:f6:c1:d8:dc: c2:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:A0:63:6C:F6:54:EE:30:3D:90:C5:B3:9A:F6:93:9E:13:B0:15:AD X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:15:02:44:50:8a:d0:3b:7b:35:ba:19:6e:3f:b0:20:6b:70: 07:9a:4b:60:9e:86:35:41:67:06:6f:b7:33:cc:ec:9c:1b:55: d5:2f:14:d2:bd:a9:04:b2:32:ac:30:11:fd:3c:87:8c:65:77: 75:f8:a1:6f:fa:be:c2:2d:07:bc:32:ed:18:9f:0f:fc:a6:f5: 16:84:44:fc:dd:7c:7b:88:29:6d:f4:6c:41:68:f3:44:ac:63: ba:55:cb:42:87:1e:16:aa:e7:2b:37:d3:4c:88:a6:02:95:13: 80:e5:c8:cd:08:8c:f6:0a:23:05:65:80:4f:59:56:35:f3:a8: e9:f6:b5:40:bc:79:f2:27:02:f0:00:87:a6:a5:c8:9c:51:42: 5c:95:0a:b3:26:5c:49:75:bb:b1:2c:15:7e:de:2e:c8:e1:2a: 2d:1a:7b:25:17:b8:7f:ea:57:36:f0:27:cf:0c:39:40:2e:c1: ad:97:2f:e6:cf:27:d0:61:5f:17:46:88:30:5a:23:40:d5:01: 65:32:0d:53:2d:cd:da:47:09:3f:5e:5b:16:6a:d8:56:58:67: f4:7e:ef:5f:64:6a:63:1b:30:67:9c:11:aa:7d:81:cf:d7:2a: 89:51:98:c0:17:e0:69:54:5e:37:ac:f7:93:37:e6:48:e8:1c: 7b:fb:6b:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOVVY26LcrkN9jid10ZqW4i8VIZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA3MjQwNDM1MTFaFw0yNjA3MjUwODEwMTFaMDMxMTAvBgNV BAMTKEJGQTA2MzZDRjY1NEVFMzAzRDkwQzVCMzlBRjY5MzlFMTNCMDE1QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy7P6GHTHlUyHMUsFkzFdA/xwa IzbUBIcMTpTbFn9yN0QtSztnVBL456GxjfdVvJAwAPH8Urhm50s3Ow4L6wpuzLoP h3/DbAngJE+k+K+oFcKMJTmivswPxYtVUni7IHqCcSAWitjA8MQi+1T4xY/m/8zF cISJh1uSzijP66w9L4qQZVhZ7MwiKp7qjdoF4YyJRMvZCGwM7xwTMif0dzdXyhYG VzA7gfHg//fpxW0bRWypwcBDmjspoIJTKNi+AzNC8M01E/aXWNgyMlfVYQ1+eCEZ lrYJBYsz4fMiBytUeHiYC18Fk5nRZmYUADZPp7gFfqfk5abOlch69sHY3MJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv6BjbPZU7jA9kMWzmvaTnhOwFa0wHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD0VAkRQitA7ezW6GW4/sCBrcAeaS2CehjVB ZwZvtzPM7JwbVdUvFNK9qQSyMqwwEf08h4xld3X4oW/6vsItB7wy7RifD/ym9RaE RPzdfHuIKW30bEFo80SsY7pVy0KHHhaq5ys300yIpgKVE4DlyM0IjPYKIwVlgE9Z VjXzqOn2tUC8efInAvAAh6alyJxRQlyVCrMmXEl1u7EsFX7eLsjhKi0aeyUXuH/q VzbwJ88MOUAuwa2XL+bPJ9BhXxdGiDBaI0DVAWUyDVMtzdpHCT9eWxZq2FZYZ/R+ 719kamMbMGecEap9gc/XKolRmMAX4GlUXjes95M35kjoHHv7a+M= -----END CERTIFICATE-----Generated at Fri Jul 24 08:54:58 2026 by rpki-client