$ rpki-client -vvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: Td8fmM8zTlEC8oLc0ATyHDbjDF5V5x3Hqfp9WCpRffA= Subject key identifier: 23:DB:01:C9:94:17:88:6B:DC:67:8A:E2:6A:6A:05:C6:D0:F4:7F:F1 Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 67CC47C00D86D071687E750CC0D83BC8991D3BB7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:21:53 +0000 Manifest this update: Fri 19 Jun 2026 17:16:53 +0000 Manifest next update: Sat 20 Jun 2026 18:38:53 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: 69kqDVhNiWZXpMGkDt69KlpjaDqD6xkY4mjQmOJT8eo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 18:38:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:cc:47:c0:0d:86:d0:71:68:7e:75:0c:c0:d8:3b:c8:99:1d:3b:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: Jun 19 17:16:53 2026 GMT Not After : Jun 20 18:38:53 2026 GMT Subject: CN=23DB01C99417886BDC678AE26A6A05C6D0F47FF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:cd:a1:7f:69:07:77:81:a7:c4:0e:a5:60:bc: 9a:f1:ae:a5:76:56:ea:49:e1:f2:14:1e:e0:ab:63: 15:6a:81:36:dd:d9:99:fb:58:93:bd:f1:a6:23:c9: 63:a8:3d:86:8d:95:13:3c:69:8f:4e:4a:7f:3d:2c: 94:2d:cc:15:92:c0:e5:71:5f:6a:56:f9:99:8d:be: 4c:13:fe:99:1c:e1:75:a6:1c:63:cc:43:a1:9c:dd: e9:a4:7e:26:7f:5f:e3:7f:58:9d:b6:8c:7e:c7:52: c9:76:33:68:e8:00:ff:6a:5f:4b:d5:08:96:2d:f5: 5d:03:c0:cc:c5:90:bb:35:b4:c4:ab:e1:18:b5:0c: 2b:a6:4a:0f:96:62:77:70:1b:11:2f:36:37:b7:22: 87:2a:db:4c:9b:6f:64:97:9f:e9:8a:bc:2c:23:87: fc:3e:b0:a7:6e:1c:89:ef:66:01:84:b5:11:7d:2f: 11:e5:e1:79:4f:49:75:c4:13:a7:be:d8:be:0c:2b: 94:da:49:87:d9:2a:70:6c:53:8a:13:32:ae:99:46: f3:f5:16:8e:7b:13:7d:9c:64:40:d1:3d:5b:8a:28: c1:e6:83:f1:78:cf:d0:ca:58:9a:59:5a:27:28:b4: a1:b6:8a:ba:c4:48:2e:e3:de:37:53:ae:a7:b9:6e: eb:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:DB:01:C9:94:17:88:6B:DC:67:8A:E2:6A:6A:05:C6:D0:F4:7F:F1 X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:25:24:8c:04:87:9f:4e:4f:c4:b3:00:46:63:11:be:1a:1c: de:ac:45:3f:9d:79:da:93:aa:be:55:15:f7:6e:59:d3:79:dd: 5e:16:43:0c:d0:8d:5b:05:ef:1a:3b:2e:8f:95:8f:64:3b:04: 18:95:ab:82:67:07:10:66:e9:b6:67:69:f7:4e:00:1e:b1:a2: c5:46:94:00:9a:6d:64:72:41:f5:ef:60:29:bb:30:7c:86:a4: bc:ff:2b:76:5b:dd:56:64:84:7c:1b:71:7b:c4:5b:80:9a:75: 26:cf:ae:9b:55:bc:66:fc:c6:8e:7e:7a:be:00:1c:7a:9a:3c: 15:f7:b9:a3:20:17:84:56:31:a5:75:36:b1:d9:68:00:84:41: 6e:60:67:4f:74:01:7f:a9:4a:5a:d6:b0:48:c8:a2:f3:37:e4: bd:8d:6e:7a:2e:3c:ab:d5:d9:f7:a7:ec:c8:2c:dd:39:ba:97: 92:0e:05:fd:d0:02:91:28:28:06:35:c7:37:10:69:5b:79:fb: 56:60:d3:72:14:9a:31:c0:f9:f9:01:7b:42:d2:e4:0d:c2:05: 9a:a0:20:69:2a:54:44:ff:2f:32:37:c4:f9:70:7d:a6:b6:b7: bd:4a:e8:47:13:4d:e7:bc:76:4d:75:e8:ea:a9:75:3d:26:c3: d8:f5:10:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ8xHwA2G0HFofnUMwNg7yJkdO7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA2MTkxNzE2NTNaFw0yNjA2MjAxODM4NTNaMDMxMTAvBgNV BAMTKDIzREIwMUM5OTQxNzg4NkJEQzY3OEFFMjZBNkEwNUM2RDBGNDdGRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCezaF/aQd3gafEDqVgvJrxrqV2 VupJ4fIUHuCrYxVqgTbd2Zn7WJO98aYjyWOoPYaNlRM8aY9OSn89LJQtzBWSwOVx X2pW+ZmNvkwT/pkc4XWmHGPMQ6Gc3emkfiZ/X+N/WJ22jH7HUsl2M2joAP9qX0vV CJYt9V0DwMzFkLs1tMSr4Ri1DCumSg+WYndwGxEvNje3Iocq20ybb2SXn+mKvCwj h/w+sKduHInvZgGEtRF9LxHl4XlPSXXEE6e+2L4MK5TaSYfZKnBsU4oTMq6ZRvP1 Fo57E32cZEDRPVuKKMHmg/F4z9DKWJpZWicotKG2irrESC7j3jdTrqe5buvjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9sByZQXiGvcZ4riamoFxtD0f/EwHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALMlJIwEh59OT8SzAEZjEb4aHN6sRT+dedqT qr5VFfduWdN53V4WQwzQjVsF7xo7Lo+Vj2Q7BBiVq4JnBxBm6bZnafdOAB6xosVG lACabWRyQfXvYCm7MHyGpLz/K3Zb3VZkhHwbcXvEW4CadSbPrptVvGb8xo5+er4A HHqaPBX3uaMgF4RWMaV1NrHZaACEQW5gZ090AX+pSlrWsEjIovM35L2NbnouPKvV 2fen7Mgs3Tm6l5IOBf3QApEoKAY1xzcQaVt5+1Zg03IUmjHA+fkBe0LS5A3CBZqg IGkqVET/LzI3xPlwfaa2t71K6EcTTee8dk116OqpdT0mw9j1EPI= -----END CERTIFICATE-----Generated at Sat Jun 20 09:00:48 2026 by rpki-client