$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: vO9Vu1DTroz/ARnVnrCnf7UN4WoX2lx+7YoZT8yMFPU= Subject key identifier: D7:26:19:60:9B:B3:BC:4B:DF:CF:94:37:5B:13:DD:14:DC:65:C0:A5 Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 441F708532839731927E7023632CE2505705FF64 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 22:03:22 +0000 Manifest this update: Wed 23 Sep 2026 21:58:22 +0000 Manifest next update: Fri 25 Sep 2026 02:01:22 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: iksZ2dAuTevZ5sY3Z7gXqI3xzy98ywWyXoLRQwGWmUU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:1f:70:85:32:83:97:31:92:7e:70:23:63:2c:e2:50:57:05:ff:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Sep 23 21:58:22 2026 GMT Not After : Sep 25 02:01:22 2026 GMT Subject: CN=D72619609BB3BC4BDFCF94375B13DD14DC65C0A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:c3:45:df:82:ab:ba:e4:26:fc:81:b1:89:e7: 9f:b2:b1:98:8d:40:c6:a7:09:4a:9e:bc:82:2d:72: 22:03:cd:14:e4:35:ce:5f:27:8d:56:5c:5c:38:62: fd:59:17:fb:b0:43:e5:b3:6c:18:61:02:ed:2d:f3: de:96:0f:7b:74:39:74:2c:60:53:75:ae:68:1b:b9: b1:c2:3b:af:03:f1:5b:83:f3:db:93:58:37:9b:c9: e4:09:46:99:38:68:b5:b7:57:d2:ba:5a:9d:fb:63: 12:49:77:eb:56:9f:70:23:a8:7a:98:01:fc:03:82: 6c:39:7e:1b:84:77:c1:fa:53:e9:12:e7:fb:e6:8b: 3b:c9:c0:2e:04:98:6f:9c:45:9d:4f:e8:2b:39:74: 29:23:f9:00:3a:3c:e1:0e:15:4d:04:b1:8b:7b:c5: 88:b8:9d:ac:df:0f:db:0c:1b:8e:e5:45:40:4b:0d: 06:04:25:7a:f8:95:67:b6:59:5b:dc:9e:d1:01:48: 2c:1f:b9:52:e7:18:43:15:19:ea:2f:6e:8a:fc:90: 50:cc:31:02:72:da:38:ca:ba:86:61:1b:58:2e:21: 75:4e:a1:2d:ff:80:96:7b:4c:53:24:d8:db:82:14: 1d:d6:5b:2b:97:93:ec:ca:56:3b:b9:36:c2:b9:ac: 2f:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:26:19:60:9B:B3:BC:4B:DF:CF:94:37:5B:13:DD:14:DC:65:C0:A5 X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:b8:d2:a9:23:a2:be:b7:b8:89:65:78:fd:b2:f9:71:80:de: c4:0f:bd:5e:30:10:71:a3:0f:68:3c:29:50:45:c8:ac:97:22: ff:9d:41:01:6e:45:71:11:bf:21:60:04:21:ae:26:4f:fa:a1: 5d:cf:b6:9f:1c:00:60:a7:a1:85:db:4a:01:dd:57:0b:f6:69: 83:be:90:05:8b:51:17:55:6e:05:fd:6f:97:0f:00:2d:f2:c4: c5:a8:57:70:c3:2e:0c:cb:57:50:dc:9a:ef:6d:d2:af:1f:fa: b7:7e:aa:c3:10:9f:ee:36:65:99:a0:f6:54:22:ac:73:d5:3c: b8:de:61:69:03:48:5b:ec:2d:f4:a8:40:ec:b1:1f:74:8c:98: 57:a4:f1:0b:04:03:f8:83:9a:cc:11:4f:fd:39:7e:f0:be:5a: 37:de:07:5a:99:8f:0d:94:fa:ff:2a:bd:16:df:70:80:2b:89: 19:b4:66:5d:26:e3:f0:b7:6d:b4:c8:17:46:12:6d:5d:86:f1: 4a:be:3d:07:bb:e0:d7:ec:68:92:9c:0c:88:d2:87:fa:06:75: 4f:e1:01:44:47:9a:8b:bd:e8:5b:0d:9e:ed:67:50:b4:00:e1: d5:5a:a1:75:f7:e2:ef:39:18:17:6f:c0:14:09:ee:5a:b3:e4: 96:72:28:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURB9whTKDlzGSfnAjYyziUFcF/2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA5MjMyMTU4MjJaFw0yNjA5MjUwMjAxMjJaMDMxMTAvBgNV BAMTKEQ3MjYxOTYwOUJCM0JDNEJERkNGOTQzNzVCMTNERDE0REM2NUMwQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQw0Xfgqu65Cb8gbGJ55+ysZiN QManCUqevIItciIDzRTkNc5fJ41WXFw4Yv1ZF/uwQ+WzbBhhAu0t896WD3t0OXQs YFN1rmgbubHCO68D8VuD89uTWDebyeQJRpk4aLW3V9K6Wp37YxJJd+tWn3AjqHqY AfwDgmw5fhuEd8H6U+kS5/vmizvJwC4EmG+cRZ1P6Cs5dCkj+QA6POEOFU0EsYt7 xYi4nazfD9sMG47lRUBLDQYEJXr4lWe2WVvcntEBSCwfuVLnGEMVGeovbor8kFDM MQJy2jjKuoZhG1guIXVOoS3/gJZ7TFMk2NuCFB3WWyuXk+zKVju5NsK5rC+fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1yYZYJuzvEvfz5Q3WxPdFNxlwKUwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFW40qkjor63uIlleP2y+XGA3sQPvV4wEHGj D2g8KVBFyKyXIv+dQQFuRXERvyFgBCGuJk/6oV3Ptp8cAGCnoYXbSgHdVwv2aYO+ kAWLURdVbgX9b5cPAC3yxMWoV3DDLgzLV1Dcmu9t0q8f+rd+qsMQn+42ZZmg9lQi rHPVPLjeYWkDSFvsLfSoQOyxH3SMmFek8QsEA/iDmswRT/05fvC+WjfeB1qZjw2U +v8qvRbfcIAriRm0Zl0m4/C3bbTIF0YSbV2G8Uq+PQe74NfsaJKcDIjSh/oGdU/h AURHmou96FsNnu1nULQA4dVaoXX34u85GBdvwBQJ7lqz5JZyKOs= -----END CERTIFICATE-----Generated at Thu Sep 24 01:48:33 2026 by rpki-client