$ rpki-client -vvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: dfDLCIqcNrNaayHWoTottEMRHwn7zjvYZRRgz7JTwuE= Subject key identifier: 95:AC:8F:78:B3:08:2D:62:82:B2:00:70:DF:43:CD:65:44:07:E3:9C Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 50E34AEA6749FA7451E2F80F16885A9726EF454F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 16:34:16 +0000 Manifest this update: Tue 16 Jun 2026 16:29:16 +0000 Manifest next update: Wed 17 Jun 2026 17:39:16 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: aQz+fthlibr8AaZfEkAVkGOBsDSjW25nLGspQUeDdWo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:39:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:e3:4a:ea:67:49:fa:74:51:e2:f8:0f:16:88:5a:97:26:ef:45:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Jun 16 16:29:16 2026 GMT Not After : Jun 17 17:39:16 2026 GMT Subject: CN=95AC8F78B3082D6282B20070DF43CD654407E39C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:6b:d9:34:d4:43:ee:6e:b5:93:24:52:c2:7e: 71:a0:18:61:33:af:7f:73:1e:85:5b:c2:1b:f9:0b: a6:ed:67:36:64:2a:a1:dc:f9:9c:08:e8:b2:60:01: 5a:7f:5b:b1:c5:28:fc:f9:88:e5:53:a2:5f:25:9f: 89:f2:e8:24:1f:a3:e9:d0:1a:dd:89:b9:eb:76:9e: c4:5b:18:78:ef:be:42:e7:ea:96:18:d4:45:8d:1a: fe:cd:74:4a:81:e8:c6:9f:71:ca:dd:cd:65:d9:4c: 47:bd:34:04:70:fc:3f:1a:70:39:8b:de:b1:64:6d: f3:b8:9c:48:1f:c4:c6:3c:ae:34:29:06:85:01:e2: 7a:16:88:76:92:4f:7c:49:ba:42:86:ee:de:ca:4f: 3a:5b:0b:aa:05:e5:22:6f:dc:8a:f8:77:81:e0:d8: 3b:13:5d:ed:d8:a4:e0:36:89:e1:b7:6a:6a:ed:0c: cf:c6:d2:5f:e9:30:d0:4c:cc:3c:ea:9e:e9:09:2d: 0d:0a:68:1b:33:8d:5d:88:f3:7b:15:20:42:ca:6d: 3e:3e:ba:45:c2:85:02:06:24:e3:2b:e7:04:f5:25: 34:61:b6:b9:74:a9:35:25:64:91:66:ca:e5:68:66: b7:fb:bf:04:75:b4:d6:0b:97:c1:80:b3:97:f0:d5: 51:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:AC:8F:78:B3:08:2D:62:82:B2:00:70:DF:43:CD:65:44:07:E3:9C X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:b0:7a:51:49:0e:19:82:3d:a0:89:d9:44:eb:1f:97:e9:7f: a5:aa:85:52:80:ec:37:c7:47:3e:fd:28:54:28:57:96:9b:c7: 8b:49:08:ac:84:e8:86:37:22:ca:8c:7e:13:20:1e:97:e3:5c: 7e:f4:7b:ed:ff:d8:ff:5c:51:2b:00:6f:82:c1:27:b1:43:f5: aa:6e:ba:fb:ba:b7:1b:f3:eb:7e:c4:57:1a:41:60:62:39:e3: 48:94:e0:05:3e:21:7e:f2:d7:c2:e5:d9:62:21:a1:9f:32:84: 33:5d:d3:8b:bb:0c:62:87:da:af:59:1f:d3:d8:6a:51:be:fe: 6e:56:7d:eb:ac:ea:25:dd:05:54:79:74:7a:04:41:8e:cd:64: 35:26:77:2d:ef:14:17:bb:d5:93:95:a7:8d:6c:bb:57:d2:1a: 01:ad:9e:6c:ed:9c:18:3e:fd:e8:5f:95:d6:64:87:bd:48:ba: 7f:96:e6:dc:c3:4b:54:b6:3e:89:c5:35:66:fb:d6:43:71:f2: 5e:37:75:e3:c0:ba:4c:22:cc:ad:2c:ff:d0:22:24:fa:91:aa: 20:ba:ce:27:21:3d:40:0c:a4:46:8e:ff:04:b0:09:17:f8:e6: fe:a7:5f:51:ff:9a:e6:a2:51:a3:ee:ab:51:92:b9:a1:4b:c6: 0a:49:2f:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUONK6mdJ+nRR4vgPFohalybvRU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA2MTYxNjI5MTZaFw0yNjA2MTcxNzM5MTZaMDMxMTAvBgNV BAMTKDk1QUM4Rjc4QjMwODJENjI4MkIyMDA3MERGNDNDRDY1NDQwN0UzOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVa9k01EPubrWTJFLCfnGgGGEz r39zHoVbwhv5C6btZzZkKqHc+ZwI6LJgAVp/W7HFKPz5iOVTol8ln4ny6CQfo+nQ Gt2Juet2nsRbGHjvvkLn6pYY1EWNGv7NdEqB6MafccrdzWXZTEe9NARw/D8acDmL 3rFkbfO4nEgfxMY8rjQpBoUB4noWiHaST3xJukKG7t7KTzpbC6oF5SJv3Ir4d4Hg 2DsTXe3YpOA2ieG3amrtDM/G0l/pMNBMzDzqnukJLQ0KaBszjV2I83sVIELKbT4+ ukXChQIGJOMr5wT1JTRhtrl0qTUlZJFmyuVoZrf7vwR1tNYLl8GAs5fw1VFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlayPeLMILWKCsgBw30PNZUQH45wwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKewelFJDhmCPaCJ2UTrH5fpf6WqhVKA7DfH Rz79KFQoV5abx4tJCKyE6IY3IsqMfhMgHpfjXH70e+3/2P9cUSsAb4LBJ7FD9apu uvu6txvz637EVxpBYGI540iU4AU+IX7y18Ll2WIhoZ8yhDNd04u7DGKH2q9ZH9PY alG+/m5Wfeus6iXdBVR5dHoEQY7NZDUmdy3vFBe71ZOVp41su1fSGgGtnmztnBg+ /ehfldZkh71Iun+W5tzDS1S2PonFNWb71kNx8l43dePAukwizK0s/9AiJPqRqiC6 zichPUAMpEaO/wSwCRf45v6nX1H/muaiUaPuq1GSuaFLxgpJL5o= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:40 2026 by rpki-client