$ rpki-client -vvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: Rd+jmVNyDJa/TaKGDqUJJAASSLMMcTjuwW+f2Gf6b20= Subject key identifier: 66:16:96:B2:F7:3F:18:D4:B3:0D:68:1F:A8:25:23:E0:52:21:BD:C6 Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 62F7593A605469F41171E2EDB8CD2CAEED18E0A7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 05:51:52 +0000 Manifest this update: Sat 20 Jun 2026 05:46:52 +0000 Manifest next update: Sun 21 Jun 2026 09:37:52 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: izmZCbGnG5cTysGA5WX8gHF5L0IReKvix27Kq0VYVX8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f7:59:3a:60:54:69:f4:11:71:e2:ed:b8:cd:2c:ae:ed:18:e0:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Jun 20 05:46:52 2026 GMT Not After : Jun 21 09:37:52 2026 GMT Subject: CN=661696B2F73F18D4B30D681FA82523E05221BDC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2d:4e:f3:e7:29:08:bf:d0:5f:9b:00:a7:92: 1f:ee:2c:a2:3e:90:e2:91:50:ff:6c:70:91:4f:35: 97:65:34:cb:c3:db:4a:91:c0:82:ec:36:a2:4e:be: 59:3f:cf:bb:2a:10:3f:94:03:4e:d1:6f:78:ba:c3: 49:4c:28:51:c7:25:81:b8:48:7d:d4:28:2e:d6:59: 59:ad:67:cd:76:2e:f7:5b:25:51:a5:3b:d1:b3:67: 3b:3d:d2:6c:9a:16:93:f5:8d:be:81:7d:31:c0:0a: 80:b4:7d:f0:d7:03:2b:13:15:56:ff:c7:19:72:2e: 37:c1:50:9d:b7:92:8c:d5:78:64:1a:85:85:4e:cf: 9d:e3:db:b6:79:2e:f1:84:4a:a1:28:39:e9:e9:c8: 6e:93:94:15:07:aa:24:7f:93:30:c5:bd:6b:76:85: 27:12:8f:38:80:f7:83:a1:2a:cf:d2:bc:ff:04:33: a2:f9:6a:db:b9:43:fb:05:c9:ae:d0:dd:15:f8:ee: 95:3f:e2:94:5e:36:a0:cd:36:ee:ce:0a:ab:c7:9f: 3b:d3:4f:2a:35:f0:7d:b2:18:d7:5b:91:67:28:e7: 72:f6:99:30:a8:d4:68:cd:da:b8:4e:73:f2:cc:ff: b7:fc:96:dc:fb:9c:3e:26:71:3e:1b:af:cc:7d:06: ad:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:16:96:B2:F7:3F:18:D4:B3:0D:68:1F:A8:25:23:E0:52:21:BD:C6 X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:20:68:89:8a:f5:9a:8f:11:7f:4d:ac:08:4a:d6:3b:fb:91: 6b:6a:3d:5b:4e:49:ca:e8:79:71:e2:c6:56:12:10:63:39:94: 03:df:8c:44:2f:18:11:eb:ac:ce:4c:9a:ff:a9:3a:38:27:9e: d4:18:a9:72:b6:46:95:7c:02:47:1c:17:00:93:bb:c9:88:8b: af:06:b9:58:e8:df:48:66:57:26:66:b9:16:56:75:0e:32:8d: ad:28:b9:e9:dd:df:04:a6:21:ce:00:d6:f6:39:d2:a2:5b:a8: 99:7a:11:4f:21:46:3c:54:10:42:6c:96:02:a7:66:73:ee:dd: 39:2d:ed:3b:9c:2e:36:fc:76:55:06:77:ce:06:7e:45:43:a8: 14:04:28:8f:ef:23:57:33:c5:04:9d:9b:88:10:d0:76:58:3a: 37:a8:c0:8b:6c:f4:20:1f:c1:b3:9e:e8:40:ab:7d:cd:8d:c3: d7:95:e3:58:31:4c:f9:7e:76:d3:1d:15:dc:f4:67:76:5e:27: f5:aa:0f:04:60:5a:1a:36:39:c2:11:55:93:f2:e6:56:5b:71: 25:f9:9e:18:0c:54:f6:39:f5:3d:6b:75:dc:94:a0:19:90:c5: 9a:42:7a:8d:43:61:15:2a:ca:e2:f1:00:7f:28:ad:fa:d6:52: e1:f6:36:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvdZOmBUafQRceLtuM0sru0Y4KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA2MjAwNTQ2NTJaFw0yNjA2MjEwOTM3NTJaMDMxMTAvBgNV BAMTKDY2MTY5NkIyRjczRjE4RDRCMzBENjgxRkE4MjUyM0UwNTIyMUJEQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGLU7z5ykIv9BfmwCnkh/uLKI+ kOKRUP9scJFPNZdlNMvD20qRwILsNqJOvlk/z7sqED+UA07Rb3i6w0lMKFHHJYG4 SH3UKC7WWVmtZ812LvdbJVGlO9GzZzs90myaFpP1jb6BfTHACoC0ffDXAysTFVb/ xxlyLjfBUJ23kozVeGQahYVOz53j27Z5LvGESqEoOenpyG6TlBUHqiR/kzDFvWt2 hScSjziA94OhKs/SvP8EM6L5atu5Q/sFya7Q3RX47pU/4pReNqDNNu7OCqvHnzvT Tyo18H2yGNdbkWco53L2mTCo1GjN2rhOc/LM/7f8ltz7nD4mcT4br8x9Bq1dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZhaWsvc/GNSzDWgfqCUj4FIhvcYwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGMgaImK9ZqPEX9NrAhK1jv7kWtqPVtOScro eXHixlYSEGM5lAPfjEQvGBHrrM5Mmv+pOjgnntQYqXK2RpV8AkccFwCTu8mIi68G uVjo30hmVyZmuRZWdQ4yja0ouend3wSmIc4A1vY50qJbqJl6EU8hRjxUEEJslgKn ZnPu3Tkt7TucLjb8dlUGd84GfkVDqBQEKI/vI1czxQSdm4gQ0HZYOjeowIts9CAf wbOe6ECrfc2Nw9eV41gxTPl+dtMdFdz0Z3ZeJ/WqDwRgWho2OcIRVZPy5lZbcSX5 nhgMVPY59T1rddyUoBmQxZpCeo1DYRUqyuLxAH8orfrWUuH2Nms= -----END CERTIFICATE-----Generated at Sat Jun 20 09:35:01 2026 by rpki-client