$ rpki-client -vvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: IsfihOnltb8VYANjEmoU30Yx2dF6VSv+Ff618eurjjs= Subject key identifier: 1C:23:9C:B2:67:C1:11:07:8D:BA:6C:8D:73:F3:A3:DE:32:90:15:2C Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 684A2A060FA77F7D778CA2C3DD1F288172F5AE2F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: 0E Signing time: Tue 12 May 2026 15:30:06 +0000 Manifest this update: Tue 12 May 2026 15:25:06 +0000 Manifest next update: Wed 13 May 2026 18:09:06 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: SyZSiOgvLOEuzKyWyHFImzxdHxP++2z/9zFbv+pcwJs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4a:2a:06:0f:a7:7f:7d:77:8c:a2:c3:dd:1f:28:81:72:f5:ae:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: May 12 15:25:06 2026 GMT Not After : May 13 18:09:06 2026 GMT Subject: CN=1C239CB267C111078DBA6C8D73F3A3DE3290152C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a6:5b:d6:6b:92:49:ee:25:f3:4e:80:d4:67: 47:4f:cd:bc:c7:51:aa:99:9e:d0:b6:d8:66:fa:4d: c7:17:02:84:c0:33:54:9a:ad:84:20:84:4f:0b:d4: 6d:3c:9c:e9:3e:80:71:a8:ca:95:40:a5:7d:f3:3e: a3:a0:ad:e3:43:96:3e:3c:8d:53:3a:45:10:10:ff: 9e:ee:cc:04:cb:ad:f0:2c:05:35:6d:32:ff:b6:df: 1c:6f:c0:2c:49:50:9e:71:33:e2:c0:3a:63:a3:b9: 12:52:72:bf:be:a2:9d:0c:ed:eb:22:69:7b:a9:62: 1b:e4:4b:b7:90:e9:97:40:27:57:56:ee:da:d8:21: c3:21:b9:bc:21:94:33:69:95:a6:69:a2:e0:81:11: 14:7f:24:f0:02:9e:f9:99:ed:4b:d7:3b:b3:04:5d: 92:2a:f5:f4:7e:68:18:b7:24:ce:52:b4:c7:5f:47: b5:4f:0d:9b:11:3c:33:71:46:d9:22:e9:f4:ba:11: 60:b7:47:91:ea:27:65:61:80:02:2e:75:aa:01:00: 18:94:0d:5f:69:86:83:b7:1f:f9:d3:6d:86:31:e5: a8:a5:1c:75:6e:6e:4b:ec:c2:5c:2b:f7:7d:d6:59: 49:22:59:6f:0a:da:41:3b:57:92:1e:d6:d1:3b:5a: f1:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:23:9C:B2:67:C1:11:07:8D:BA:6C:8D:73:F3:A3:DE:32:90:15:2C X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:a3:6e:af:d7:1f:e3:56:ba:94:75:d3:a9:28:33:75:39:b3: ff:18:99:f7:a4:69:09:3f:c2:1b:e0:ed:5b:c3:80:c7:2a:93: 21:b3:3b:23:38:c7:66:28:65:fa:f5:cf:51:64:1b:73:a7:73: 0a:88:18:76:54:cb:91:bb:ab:ae:85:51:90:eb:09:53:cc:02: 08:d1:7f:4f:ad:6d:75:3b:70:af:aa:26:6a:f4:37:60:52:ad: cf:e0:e8:70:b2:19:bf:88:d0:12:e6:d6:1c:c2:b1:83:07:d0: 47:7e:e0:a9:d0:e8:9a:58:31:4c:6e:de:27:64:f3:31:89:6e: c0:d8:da:6d:85:06:28:22:1f:92:16:19:97:e7:13:77:9e:27: 08:8f:a1:e9:30:60:79:32:28:a2:80:66:b2:3d:b7:97:3b:2d: 3f:36:62:94:4d:70:86:a5:c9:27:14:79:7c:f1:76:5f:62:26: e7:7b:d3:68:58:b3:2b:8e:f4:a6:29:4e:61:e0:fd:b6:02:1b: 63:4b:57:9e:38:e8:53:a0:7c:79:a1:69:d1:38:0a:0e:b5:97: da:66:86:dc:44:13:a4:72:b1:46:63:27:5c:75:33:1d:ce:7f: b3:ff:c9:64:76:fe:ca:89:ca:63:8c:12:68:81:ee:bb:a8:1c: f2:26:3a:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEoqBg+nf313jKLD3R8ogXL1ri8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA1MTIxNTI1MDZaFw0yNjA1MTMxODA5MDZaMDMxMTAvBgNV BAMTKDFDMjM5Q0IyNjdDMTExMDc4REJBNkM4RDczRjNBM0RFMzI5MDE1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTplvWa5JJ7iXzToDUZ0dPzbzH UaqZntC22Gb6TccXAoTAM1SarYQghE8L1G08nOk+gHGoypVApX3zPqOgreNDlj48 jVM6RRAQ/57uzATLrfAsBTVtMv+23xxvwCxJUJ5xM+LAOmOjuRJScr++op0M7esi aXupYhvkS7eQ6ZdAJ1dW7trYIcMhubwhlDNplaZpouCBERR/JPACnvmZ7UvXO7ME XZIq9fR+aBi3JM5StMdfR7VPDZsRPDNxRtki6fS6EWC3R5HqJ2VhgAIudaoBABiU DV9phoO3H/nTbYYx5ailHHVubkvswlwr933WWUkiWW8K2kE7V5Ie1tE7WvErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHCOcsmfBEQeNumyNc/Oj3jKQFSwwHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACSjbq/XH+NWupR106koM3U5s/8YmfekaQk/ whvg7VvDgMcqkyGzOyM4x2YoZfr1z1FkG3OncwqIGHZUy5G7q66FUZDrCVPMAgjR f0+tbXU7cK+qJmr0N2BSrc/g6HCyGb+I0BLm1hzCsYMH0Ed+4KnQ6JpYMUxu3idk 8zGJbsDY2m2FBigiH5IWGZfnE3eeJwiPoekwYHkyKKKAZrI9t5c7LT82YpRNcIal yScUeXzxdl9iJud702hYsyuO9KYpTmHg/bYCG2NLV5446FOgfHmhadE4Cg61l9pm htxEE6RysUZjJ1x1Mx3Of7P/yWR2/sqJymOMEmiB7ruoHPImOtY= -----END CERTIFICATE-----Generated at Wed May 13 03:23:28 2026 by rpki-client