$ rpki-client -vvf rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft File: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft (raw, json) Hash identifier: +INVTq6IP8ByDgKh+4uQqJg+CMcqbVob/Dc7QcKb2r4= Subject key identifier: 9A:80:77:98:28:27:24:27:8F:30:4E:22:78:3C:35:42:B8:B7:73:2E Authority key identifier: 9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 Certificate issuer: /CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Certificate serial: 139377090DC5F0E35F9A38BFEBEB65ABFE08382A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 17:25:12 +0000 Manifest this update: Tue 16 Jun 2026 17:20:12 +0000 Manifest next update: Wed 17 Jun 2026 17:34:12 +0000 Files and hashes: 1: 9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl (hash: ECM8SWRcuGNYO1CCxqH4eOW92IjDpUD3xs6qg8yau28=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 17:34:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:93:77:09:0d:c5:f0:e3:5f:9a:38:bf:eb:eb:65:ab:fe:08:38:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9EFF7DBBCC3280078586E671605F4BD3C6AF62A0 Validity Not Before: Jun 16 17:20:12 2026 GMT Not After : Jun 17 17:34:12 2026 GMT Subject: CN=9A807798282724278F304E22783C3542B8B7732E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f2:dc:7b:3e:26:0c:36:ad:62:ab:71:db:af: 4e:e4:41:2c:8e:46:81:ba:fd:93:62:bd:1a:6a:d5: 3d:c4:14:e1:01:42:36:9d:fa:f4:dd:9e:9c:73:8c: 50:ca:7e:ee:19:16:22:1e:b5:67:f8:f9:40:41:9a: 72:02:7a:ac:80:4b:a7:94:32:ac:6f:20:1c:31:6b: 1c:f1:91:73:f0:0d:d1:22:d1:60:04:62:e7:0b:4d: 07:57:7a:18:93:66:2a:be:6e:ae:5c:38:8a:7f:1c: 41:f4:6c:16:c5:2b:65:12:f6:b7:e8:61:43:f6:6e: d9:0b:23:cb:97:a3:6e:51:5f:c8:f5:f3:61:e3:9d: 6f:2e:b9:ec:2e:e0:d9:18:9f:13:2f:69:94:1b:7e: 64:05:1c:5d:8d:e4:c4:50:29:21:9a:d8:6f:6e:1f: ba:a3:14:39:a3:13:15:4c:c8:f2:92:a9:66:b7:91: 4f:36:99:b0:15:3f:0c:56:b1:5a:6f:af:93:f1:b3: a3:2d:33:5a:4c:a6:7a:f9:21:c1:99:6f:cb:b7:96: 2f:0f:bf:d4:64:6d:30:57:f9:a2:ea:c4:19:e7:1e: d5:11:03:76:be:d1:bd:05:83:3a:c8:ca:21:dd:bc: c9:33:b3:9c:ee:8c:8e:bb:9a:0d:48:25:38:6c:46: d1:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:80:77:98:28:27:24:27:8F:30:4E:22:78:3C:35:42:B8:B7:73:2E X509v3 Authority Key Identifier: keyid:9E:FF:7D:BB:CC:32:80:07:85:86:E6:71:60:5F:4B:D3:C6:AF:62:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/144f2460-fe50-4800-ae02-57cb3e815d5e/0/9EFF7DBBCC3280078586E671605F4BD3C6AF62A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:98:e9:13:fa:a9:59:01:ed:d5:09:6a:81:8d:83:6b:c2:b4: 3f:4d:46:bb:59:75:c7:22:7a:86:2e:2b:49:3e:bb:ab:52:ba: 6a:dc:cf:c9:d7:1c:f5:2a:c4:52:ea:83:5a:20:82:4e:75:22: 5e:a8:b3:f8:1d:4d:4e:6b:ad:a0:e7:f9:ea:b1:80:fc:14:5f: 8b:e8:3a:7d:42:38:ba:e5:94:7d:cf:13:b6:64:03:b4:5c:44: 2d:0e:f0:dd:c9:41:2e:00:7b:49:c4:b0:9d:5e:10:15:a4:19: 43:2a:02:f2:a2:dd:34:55:22:29:1c:25:31:ab:e3:4f:27:48: 4b:bd:41:ef:96:88:bb:73:9d:39:23:f2:3b:e4:32:b1:fe:e7: 23:e8:0c:85:6e:a8:00:ef:eb:bb:65:f1:83:2f:01:bb:89:aa: 6e:0d:28:1b:94:61:3e:64:70:2f:1c:de:35:0a:53:76:97:67: ca:a3:57:6c:f6:48:1a:cf:9b:54:1d:c7:d0:fb:91:89:b1:45: 39:34:6b:3c:e9:e8:2a:b4:40:64:07:5f:a5:77:1d:57:8f:d0: d4:44:09:cf:28:08:8c:67:87:73:64:84:0e:e6:f3:80:e7:b1: f7:23:f5:c7:7d:79:4d:a7:c6:0d:f5:b3:61:09:42:0e:bb:37: ca:5c:71:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5N3CQ3F8ONfmji/6+tlq/4IOCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRCRDND NkFGNjJBMDAeFw0yNjA2MTYxNzIwMTJaFw0yNjA2MTcxNzM0MTJaMDMxMTAvBgNV BAMTKDlBODA3Nzk4MjgyNzI0Mjc4RjMwNEUyMjc4M0MzNTQyQjhCNzczMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH8tx7PiYMNq1iq3Hbr07kQSyO RoG6/ZNivRpq1T3EFOEBQjad+vTdnpxzjFDKfu4ZFiIetWf4+UBBmnICeqyAS6eU MqxvIBwxaxzxkXPwDdEi0WAEYucLTQdXehiTZiq+bq5cOIp/HEH0bBbFK2US9rfo YUP2btkLI8uXo25RX8j182HjnW8uuewu4NkYnxMvaZQbfmQFHF2N5MRQKSGa2G9u H7qjFDmjExVMyPKSqWa3kU82mbAVPwxWsVpvr5Pxs6MtM1pMpnr5IcGZb8u3li8P v9RkbTBX+aLqxBnnHtURA3a+0b0FgzrIyiHdvMkzs5zujI67mg1IJThsRtHRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmoB3mCgnJCePME4ieDw1Qri3cy4wHwYDVR0j BBgwFoAUnv99u8wygAeFhuZxYF9L08avYqAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MTQ0ZjI0NjAtZmU1MC00ODAwLWFlMDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJD QzMyODAwNzg1ODZFNjcxNjA1RjRCRDNDNkFGNjJBMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS85RUZGN0RCQkNDMzI4MDA3ODU4NkU2NzE2MDVGNEJEM0M2QUY2 MkEwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMTQ0ZjI0NjAtZmU1MC00ODAwLWFl MDItNTdjYjNlODE1ZDVlLzAvOUVGRjdEQkJDQzMyODAwNzg1ODZFNjcxNjA1RjRC RDNDNkFGNjJBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWY6RP6qVkB7dUJaoGNg2vCtD9NRrtZdcci eoYuK0k+u6tSumrcz8nXHPUqxFLqg1oggk51Il6os/gdTU5rraDn+eqxgPwUX4vo On1COLrllH3PE7ZkA7RcRC0O8N3JQS4Ae0nEsJ1eEBWkGUMqAvKi3TRVIikcJTGr 408nSEu9Qe+WiLtznTkj8jvkMrH+5yPoDIVuqADv67tl8YMvAbuJqm4NKBuUYT5k cC8c3jUKU3aXZ8qjV2z2SBrPm1Qdx9D7kYmxRTk0azzp6Cq0QGQHX6V3HVeP0NRE Cc8oCIxnh3NkhA7m84Dnsfcj9cd9eU2nxg31s2EJQg67N8pccaY= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:41 2026 by rpki-client