$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: RG763/yWObB+xFKwaa1nIw+XWnB/4lwHJCIVD2W0kQ0= Subject key identifier: 66:CC:21:7E:01:44:F4:83:41:EE:6E:62:A2:F5:5F:F9:08:4E:5A:99 Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 3DB11B735176CC3AAF6BF01F032FB3531DFAC940 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: B7 Signing time: Thu 17 Sep 2026 06:57:06 +0000 Manifest this update: Thu 17 Sep 2026 06:52:06 +0000 Manifest next update: Fri 18 Sep 2026 08:40:06 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: ZSJyrBjsxsS6kNdWAuuqVRtH+Q3qVvu/WcyVhea0xso=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:40:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:b1:1b:73:51:76:cc:3a:af:6b:f0:1f:03:2f:b3:53:1d:fa:c9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Sep 17 06:52:06 2026 GMT Not After : Sep 18 08:40:06 2026 GMT Subject: CN=66CC217E0144F48341EE6E62A2F55FF9084E5A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:4b:b7:49:72:17:be:20:59:f5:46:bd:e7:6c: 54:51:7c:4d:b0:da:a6:16:a1:87:7f:d6:bb:eb:a1: d3:78:46:b6:03:dd:9a:36:9b:c7:e1:70:e7:1d:2d: 39:d2:27:8f:9c:1c:30:c9:8f:ed:96:32:27:8a:3c: 0d:f9:87:04:85:8a:d3:5a:1a:d4:9d:ab:5a:7d:17: 1e:9f:4d:10:ac:7f:11:e3:3f:2f:aa:75:64:ef:43: c4:22:57:72:38:4e:1f:07:4b:fb:c7:df:bd:8f:f8: 25:33:ed:54:c4:b1:3d:e6:69:7e:4a:21:6f:08:88: 5b:cb:62:91:ee:74:0a:1e:8a:ae:4d:74:d2:b8:31: 73:0a:21:2c:75:7f:e8:03:35:10:5c:09:b7:f9:22: 79:71:7e:d5:5a:34:d1:5b:71:be:7a:d0:6e:3e:70: 33:7b:04:5f:7e:3c:5e:13:e3:ea:49:19:7b:1a:8e: e8:64:be:01:ce:a1:03:38:c5:b3:d8:32:5c:27:d9: 9f:52:ac:86:b5:00:e4:d0:5f:04:fd:f4:30:97:10: d4:93:6f:02:08:83:65:5c:bb:c5:1a:68:ac:21:44: 3a:21:41:9f:94:94:05:da:af:f3:05:4f:a9:47:e3: b6:31:34:fc:bf:87:37:4a:81:97:76:e4:b3:4c:f5: 1a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:CC:21:7E:01:44:F4:83:41:EE:6E:62:A2:F5:5F:F9:08:4E:5A:99 X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:0e:fa:43:a3:f0:c7:e8:11:43:fd:24:66:ea:ee:33:a5:9f: 44:3e:55:f5:9a:e2:b7:1c:b8:c4:d9:37:e6:2b:30:c8:88:13: dc:03:3f:ec:ef:6d:50:ff:bb:53:cd:cb:72:69:14:82:11:dd: d0:ca:74:65:8b:fa:42:65:b5:01:d3:9b:ab:1f:5f:fa:7b:2c: a1:f8:df:39:d8:0c:a2:3c:c9:ee:da:3c:79:d6:8b:8e:02:25: cc:5f:08:75:86:57:b6:5e:bb:d4:e7:ad:5c:6b:9e:b3:b8:0e: c2:27:4f:37:c5:94:f4:8b:9d:46:bc:39:4f:e4:75:e6:e0:03: 2a:12:64:3d:04:a2:b8:1e:f3:db:c7:16:a5:e9:7d:94:27:b8: 1f:49:9f:d9:66:a0:63:8d:14:3f:1e:d0:78:34:e2:01:d4:42: d7:de:0a:2f:ad:76:d9:8d:0a:14:00:69:b3:21:2f:64:cb:bd: 95:2b:5c:ff:b4:9d:21:28:46:cc:8c:c4:9c:ec:99:21:c1:27: 3a:df:f6:d0:40:c9:96:01:4e:10:42:e6:6b:f0:86:99:ea:41: 05:9e:eb:a0:1e:df:cd:ee:21:ae:d4:0f:28:0f:41:2b:89:da: 11:a2:de:a6:83:c7:52:5b:33:ae:49:c6:28:74:79:93:6b:b2: c1:ba:c0:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPbEbc1F2zDqva/AfAy+zUx36yUAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA5MTcwNjUyMDZaFw0yNjA5MTgwODQwMDZaMDMxMTAvBgNV BAMTKDY2Q0MyMTdFMDE0NEY0ODM0MUVFNkU2MkEyRjU1RkY5MDg0RTVBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9S7dJche+IFn1Rr3nbFRRfE2w 2qYWoYd/1rvrodN4RrYD3Zo2m8fhcOcdLTnSJ4+cHDDJj+2WMieKPA35hwSFitNa GtSdq1p9Fx6fTRCsfxHjPy+qdWTvQ8QiV3I4Th8HS/vH372P+CUz7VTEsT3maX5K IW8IiFvLYpHudAoeiq5NdNK4MXMKISx1f+gDNRBcCbf5InlxftVaNNFbcb560G4+ cDN7BF9+PF4T4+pJGXsajuhkvgHOoQM4xbPYMlwn2Z9SrIa1AOTQXwT99DCXENST bwIIg2Vcu8UaaKwhRDohQZ+UlAXar/MFT6lH47YxNPy/hzdKgZd25LNM9RqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZswhfgFE9INB7m5iovVf+QhOWpkwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB0O+kOj8MfoEUP9JGbq7jOln0Q+VfWa4rcc uMTZN+YrMMiIE9wDP+zvbVD/u1PNy3JpFIIR3dDKdGWL+kJltQHTm6sfX/p7LKH4 3znYDKI8ye7aPHnWi44CJcxfCHWGV7Zeu9TnrVxrnrO4DsInTzfFlPSLnUa8OU/k debgAyoSZD0Eorge89vHFqXpfZQnuB9Jn9lmoGONFD8e0Hg04gHUQtfeCi+tdtmN ChQAabMhL2TLvZUrXP+0nSEoRsyMxJzsmSHBJzrf9tBAyZYBThBC5mvwhpnqQQWe 66Ae383uIa7UDygPQSuJ2hGi3qaDx1JbM65Jxih0eZNrssG6wBM= -----END CERTIFICATE-----Generated at Thu Sep 17 13:59:09 2026 by rpki-client