$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft (raw, json) Hash identifier: 00Tn5C7e+tGZBe/bRQOOM3UlN6R7IjSwZkB5Cif87hE= Subject key identifier: BC:11:1C:6E:3B:32:4D:A7:F5:A6:D0:A0:53:38:24:35:3F:9D:E3:82 Authority key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Certificate issuer: /CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Certificate serial: 341D0F415E81B5898ED96AD68822F39E73A104C0 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 03:11:41 +0000 Manifest this update: Wed 17 Jun 2026 03:06:41 +0000 Manifest next update: Thu 18 Jun 2026 05:43:41 +0000 Files and hashes: 1: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl (hash: 5sUAZXTx+Nda9yBM94L4x3/OQsu7PukVcRxSH+usf7Y=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1d:0f:41:5e:81:b5:89:8e:d9:6a:d6:88:22:f3:9e:73:a1:04:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Validity Not Before: Jun 17 03:06:41 2026 GMT Not After : Jun 18 05:43:41 2026 GMT Subject: CN=BC111C6E3B324DA7F5A6D0A0533824353F9DE382 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e4:c1:30:91:8f:bb:a9:92:80:2d:a7:8f:14: 5b:d8:02:ff:0c:b8:e1:5b:d1:15:ab:60:5b:50:80: 64:c5:be:0e:b3:90:74:21:ec:53:09:f1:72:0c:8b: fc:ea:2b:6e:53:73:77:6f:de:67:d3:56:c9:39:fb: 87:a6:41:ec:12:cb:87:30:83:0f:26:9c:0c:ac:cc: 42:6d:dc:51:ba:c8:0c:5c:85:97:8b:ed:8f:13:18: 1a:f9:2e:10:2a:11:01:25:98:f5:a1:1b:bc:e1:a8: 3e:bb:36:6d:8b:17:23:48:2b:d9:6b:25:1f:3f:b4: a8:f0:58:97:30:38:05:f7:ce:bb:f2:4e:40:34:2e: ae:d4:fb:36:d0:0f:ca:a8:be:f3:91:e8:e4:4d:3c: e5:49:b9:19:95:e0:66:7b:9e:54:d1:ed:7d:d1:b1: 0b:02:1f:44:d5:08:4f:d4:89:de:da:2e:a3:83:07: 3b:8c:4a:c5:13:6e:c5:61:c5:a3:3f:09:7e:f9:6f: ba:87:69:ae:8e:7b:62:bc:aa:61:c4:9f:21:60:fb: 95:42:85:a1:b2:a7:01:16:cc:28:f4:95:ad:a3:ab: 14:f6:43:23:0e:1a:52:9e:d6:d8:d4:d4:f1:c0:a0: 7f:fe:d7:fe:bc:da:fc:d9:e5:c5:51:21:5a:c0:54: b3:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:11:1C:6E:3B:32:4D:A7:F5:A6:D0:A0:53:38:24:35:3F:9D:E3:82 X509v3 Authority Key Identifier: keyid:1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5a:9a:8b:69:50:4f:49:79:d1:7f:82:cf:ed:90:b3:96:2f: 19:50:b0:22:2f:85:1b:ef:e9:62:8f:df:d7:34:d7:bf:50:01: 88:f9:65:7f:4b:1c:0f:4a:40:f8:55:86:93:f8:57:94:c5:fb: b0:e6:42:1b:9a:59:46:87:36:be:51:a7:0a:98:84:46:15:30: 3d:06:7b:90:5a:dc:88:6e:c1:ba:40:74:96:91:8e:5c:7a:8c: c1:ff:ed:2d:c1:8b:09:f3:c3:62:af:a3:b9:92:01:73:a9:54: a6:e7:87:92:a4:4d:50:87:2a:4d:72:59:0c:a8:67:8b:47:ef: 77:cb:aa:d8:0f:0d:99:56:51:57:8f:12:91:e4:2d:66:90:d8: de:b4:f0:86:3a:0f:d8:50:12:41:c9:86:1c:1a:87:84:20:e2: 98:c9:38:06:31:b5:a9:c0:6e:ed:c9:0b:89:45:26:4b:a6:a9: 46:c5:2a:03:a3:f2:2f:73:05:d7:ba:06:22:ce:d0:c4:b4:bd: 20:2e:b2:84:6b:14:00:8d:d2:2c:aa:5c:86:9f:32:5a:b9:74: e9:94:3d:a8:34:4e:98:a4:1e:bb:d7:89:9d:49:bf:f2:b3:8d: 0e:fb:51:c1:40:64:b3:72:c5:a5:8d:90:bb:5f:02:54:82:89: 36:3b:9e:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNB0PQV6BtYmO2WrWiCLznnOhBMAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFD MkE4QjZEMDAeFw0yNjA2MTcwMzA2NDFaFw0yNjA2MTgwNTQzNDFaMDMxMTAvBgNV BAMTKEJDMTExQzZFM0IzMjREQTdGNUE2RDBBMDUzMzgyNDM1M0Y5REUzODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg5MEwkY+7qZKALaePFFvYAv8M uOFb0RWrYFtQgGTFvg6zkHQh7FMJ8XIMi/zqK25Tc3dv3mfTVsk5+4emQewSy4cw gw8mnAyszEJt3FG6yAxchZeL7Y8TGBr5LhAqEQElmPWhG7zhqD67Nm2LFyNIK9lr JR8/tKjwWJcwOAX3zrvyTkA0Lq7U+zbQD8qovvOR6ORNPOVJuRmV4GZ7nlTR7X3R sQsCH0TVCE/Uid7aLqODBzuMSsUTbsVhxaM/CX75b7qHaa6Oe2K8qmHEnyFg+5VC haGypwEWzCj0la2jqxT2QyMOGlKe1tjU1PHAoH/+1/682vzZ5cVRIVrAVLNRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvBEcbjsyTaf1ptCgUzgkNT+d44IwHwYDVR0j BBgwFoAUG1RggH/K6TJLH55u4zvB4cKottAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3 RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFDMkE4QjZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjU0NjA4MDdGQ0FFOTMyNEIxRjlFNkVFMzNCQzFFMUMyQThC NkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMx RTFDMkE4QjZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5amotpUE9JedF/gs/tkLOWLxlQsCIvhRvv 6WKP39c0179QAYj5ZX9LHA9KQPhVhpP4V5TF+7DmQhuaWUaHNr5RpwqYhEYVMD0G e5Ba3IhuwbpAdJaRjlx6jMH/7S3Biwnzw2Kvo7mSAXOpVKbnh5KkTVCHKk1yWQyo Z4tH73fLqtgPDZlWUVePEpHkLWaQ2N608IY6D9hQEkHJhhwah4Qg4pjJOAYxtanA bu3JC4lFJkumqUbFKgOj8i9zBde6BiLO0MS0vSAusoRrFACN0iyqXIafMlq5dOmU Pag0TpikHrvXiZ1Jv/KzjQ77UcFAZLNyxaWNkLtfAlSCiTY7ngg= -----END CERTIFICATE-----Generated at Wed Jun 17 11:30:37 2026 by rpki-client