$ rpki-client -vvvf rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft File: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft (raw, json) Hash identifier: EWFKd819YrmIdPEcDf+5jd5HLEeMeR0sZPJ+crxj8ic= Subject key identifier: 12:E6:7E:26:9C:7F:95:25:BB:20:67:80:36:5D:31:FC:6E:97:E4:EC Authority key identifier: 9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 Certificate issuer: /CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Certificate serial: 4BA062615E0D2BC25170E97A9B61E15491229864 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft Manifest number: BE Signing time: Tue 22 Sep 2026 11:35:55 +0000 Manifest this update: Tue 22 Sep 2026 11:30:55 +0000 Manifest next update: Wed 23 Sep 2026 11:40:55 +0000 Files and hashes: 1: 9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl (hash: o48yVQqr7x/psD+W4hr6aoMTROkk44YAzN89Y4Vu2Wk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 11:40:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a0:62:61:5e:0d:2b:c2:51:70:e9:7a:9b:61:e1:54:91:22:98:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995 Validity Not Before: Sep 22 11:30:55 2026 GMT Not After : Sep 23 11:40:55 2026 GMT Subject: CN=12E67E269C7F9525BB206780365D31FC6E97E4EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:11:f0:f3:af:a4:ed:ed:4b:e7:b4:b5:9f:79: c6:94:51:ee:85:a9:c5:3a:16:64:2c:63:b0:d6:bf: 8b:6c:d6:4c:c5:dc:35:75:5d:55:35:b5:73:1b:39: 72:52:98:5e:2b:cb:8c:b5:23:7a:a0:ab:2b:60:43: 94:de:05:3e:4f:ac:b5:ab:60:2b:ba:dc:70:f8:15: 0a:c5:fc:60:e0:17:fb:12:e8:df:be:a9:67:20:e9: 41:94:5b:df:b3:e0:94:7c:26:0b:89:a8:88:f9:db: 66:6a:e8:c8:fd:0d:d1:b5:8e:d1:95:81:25:34:10: e2:20:20:05:07:16:33:3c:95:44:fc:62:5e:ca:c1: 9d:82:91:f5:ca:c8:fa:f6:d1:c3:4c:90:92:2a:15: 13:69:ee:20:33:69:23:ba:4c:8a:3c:ba:31:7b:2d: 58:94:f2:af:4a:13:cb:64:ad:57:4e:2d:12:9a:bd: 00:db:89:8c:29:df:2b:c0:06:56:01:ee:f4:6b:e8: 91:5d:23:0a:25:1e:41:c0:25:9d:cc:ae:ba:e9:74: 4d:c5:da:10:ab:37:5b:5d:29:7d:8a:8a:68:57:a1: 59:5a:85:fc:31:aa:63:b0:41:8b:cc:64:67:33:34: fa:4d:5f:c0:b0:ac:c3:7c:97:f4:9e:50:5a:0a:90: dd:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:E6:7E:26:9C:7F:95:25:BB:20:67:80:36:5D:31:FC:6E:97:E4:EC X509v3 Authority Key Identifier: keyid:9A:C3:14:7F:82:C1:56:EC:3E:32:C3:3B:60:F6:E6:A1:BD:D9:F9:95 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/0082020c-3c46-4bfb-94c2-3292f56a652a/0/9AC3147F82C156EC3E32C33B60F6E6A1BDD9F995.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:ef:84:7a:1a:bd:7a:ac:b1:6b:56:93:0d:49:ac:0c:a6:ec: f3:71:a1:bb:d8:c9:61:b9:5b:20:32:dd:92:42:bc:a5:a5:6d: 40:9b:c3:46:f7:03:51:e2:fc:14:80:d3:87:c0:3d:f0:fd:37: 26:52:6c:d8:9a:db:0d:2c:66:0d:4d:de:26:40:fb:2e:d7:32: e5:54:ca:36:cf:f2:fa:5a:a0:e5:39:10:62:ae:7c:a3:72:ba: 1b:43:b7:f5:bd:48:ab:f3:d5:18:fe:85:59:4b:c7:86:97:e6: 71:c1:e3:44:97:5d:79:02:79:d6:af:74:56:f6:02:07:4a:50: 11:a9:c2:f8:cf:2e:b8:fa:81:71:3b:04:b5:0b:7b:12:b9:9d: db:85:69:e4:18:1b:ab:6b:fa:87:16:40:51:7d:c7:c7:17:d4: dc:dd:b1:4d:20:7c:ba:fb:62:55:19:68:85:4f:90:cc:3c:49: 77:2e:fb:4a:e4:90:26:2d:b4:9e:d1:81:97:70:03:a5:bf:9c: c0:5e:a7:8e:54:64:aa:60:32:81:9d:ce:bb:07:19:ba:15:db: 83:ee:27:bd:5c:1d:5f:ce:89:f2:9c:83:5b:75:69:58:5c:f7: a4:63:f2:b7:bd:bb:52:50:65:98:53:2b:2d:ee:2d:c5:33:91: 34:af:4b:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6BiYV4NK8JRcOl6m2HhVJEimGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFC REQ5Rjk5NTAeFw0yNjA5MjIxMTMwNTVaFw0yNjA5MjMxMTQwNTVaMDMxMTAvBgNV BAMTKDEyRTY3RTI2OUM3Rjk1MjVCQjIwNjc4MDM2NUQzMUZDNkU5N0U0RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyEfDzr6Tt7UvntLWfecaUUe6F qcU6FmQsY7DWv4ts1kzF3DV1XVU1tXMbOXJSmF4ry4y1I3qgqytgQ5TeBT5PrLWr YCu63HD4FQrF/GDgF/sS6N++qWcg6UGUW9+z4JR8JguJqIj522Zq6Mj9DdG1jtGV gSU0EOIgIAUHFjM8lUT8Yl7KwZ2CkfXKyPr20cNMkJIqFRNp7iAzaSO6TIo8ujF7 LViU8q9KE8tkrVdOLRKavQDbiYwp3yvABlYB7vRr6JFdIwolHkHAJZ3MrrrpdE3F 2hCrN1tdKX2KimhXoVlahfwxqmOwQYvMZGczNPpNX8CwrMN8l/SeUFoKkN0VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEuZ+Jpx/lSW7IGeANl0x/G6X5OwwHwYDVR0j BBgwFoAUmsMUf4LBVuw+MsM7YPbmob3Z+ZUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDA4MjAyMGMtM2M0Ni00YmZiLTk0YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4 MkMxNTZFQzNFMzJDMzNCNjBGNkU2QTFCREQ5Rjk5NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85QUMzMTQ3RjgyQzE1NkVDM0UzMkMzM0I2MEY2RTZBMUJERDlG OTk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDA4MjAyMGMtM2M0Ni00YmZiLTk0 YzItMzI5MmY1NmE2NTJhLzAvOUFDMzE0N0Y4MkMxNTZFQzNFMzJDMzNCNjBGNkU2 QTFCREQ5Rjk5NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACvvhHoavXqssWtWkw1JrAym7PNxobvYyWG5 WyAy3ZJCvKWlbUCbw0b3A1Hi/BSA04fAPfD9NyZSbNia2w0sZg1N3iZA+y7XMuVU yjbP8vpaoOU5EGKufKNyuhtDt/W9SKvz1Rj+hVlLx4aX5nHB40SXXXkCedavdFb2 AgdKUBGpwvjPLrj6gXE7BLULexK5nduFaeQYG6tr+ocWQFF9x8cX1NzdsU0gfLr7 YlUZaIVPkMw8SXcu+0rkkCYttJ7RgZdwA6W/nMBep45UZKpgMoGdzrsHGboV24Pu J71cHV/OifKcg1t1aVhc96Rj8re9u1JQZZhTKy3uLcUzkTSvS6o= -----END CERTIFICATE-----Generated at Tue Sep 22 18:12:21 2026 by rpki-client