$ rpki-client -vvvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft (raw, json) Hash identifier: ehefwDH/vx6k7Ib4U909IlcvI5bYzTMdQMNjm224a44= Subject key identifier: 39:7F:9B:10:FB:D0:84:67:FD:BC:2D:A7:0A:A1:DF:EA:0E:E6:EB:B5 Authority key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Certificate issuer: /CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Certificate serial: 3B934A61092C52C2EF2176348C3D4E83B929F827 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 00:21:07 +0000 Manifest this update: Thu 24 Sep 2026 00:16:07 +0000 Manifest next update: Fri 25 Sep 2026 01:06:07 +0000 Files and hashes: 1: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl (hash: Tb6rKPR4hwRmAJNR0Lxp9NbkJnqsl0jkr82yCbh88YU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:93:4a:61:09:2c:52:c2:ef:21:76:34:8c:3d:4e:83:b9:29:f8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Validity Not Before: Sep 24 00:16:07 2026 GMT Not After : Sep 25 01:06:07 2026 GMT Subject: CN=397F9B10FBD08467FDBC2DA70AA1DFEA0EE6EBB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:12:c6:55:5a:91:01:c5:b5:de:12:f4:c6:66: fb:a9:4b:ca:7d:60:df:d9:7b:a9:40:38:09:9d:bb: e1:41:b6:47:72:26:2b:b2:14:51:8a:a0:e5:df:37: 2b:74:20:ab:e7:d3:6c:81:01:ae:9e:15:3d:63:c0: b1:f9:f4:d6:2f:f9:b2:29:5c:d2:d5:8d:85:44:9a: 3e:1e:e8:c7:f3:12:cd:6c:d8:6f:18:57:e4:5f:b0: 9b:72:be:46:1f:1f:92:06:22:52:99:84:29:43:77: fd:e3:ef:4a:0f:39:c0:65:24:a0:d5:bc:b0:af:73: 68:78:15:e6:45:9e:12:3b:a3:07:f7:d0:79:1d:c8: 3a:50:00:76:b8:50:5b:87:a3:1f:77:c3:54:f1:8c: 0f:be:7b:bc:b0:b8:a8:de:73:74:db:4d:68:8a:23: 86:87:d4:02:0a:8b:9a:8d:98:bf:eb:bf:31:5e:f2: e2:21:b1:c8:61:3c:11:5a:1e:99:89:cf:75:72:83: e2:f2:07:2b:5d:bc:3b:cd:db:a0:29:8e:db:4d:0c: 06:b9:7c:1e:64:e2:36:c5:05:d0:57:a7:9d:26:33: af:d4:7a:22:57:e5:7e:6a:3b:88:53:28:cd:34:c1: ea:d1:c3:31:46:6a:25:fe:32:75:f1:d6:d0:8b:ef: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:7F:9B:10:FB:D0:84:67:FD:BC:2D:A7:0A:A1:DF:EA:0E:E6:EB:B5 X509v3 Authority Key Identifier: keyid:1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:d4:75:ee:3b:cb:1d:7a:0f:f6:d6:6e:b9:ed:62:7f:7d:0f: 60:ee:e0:8b:c5:4c:57:15:dc:36:57:24:b2:10:44:e9:88:6a: 63:2b:27:25:85:a0:79:10:c3:8d:69:ce:07:57:64:fd:ce:98: 72:99:e9:84:dd:1b:a5:7d:2f:51:61:b2:ac:bf:34:33:fe:47: 97:4e:35:d9:44:eb:f1:f6:b2:fa:a5:8d:7b:a5:37:c5:e3:2e: 47:0e:33:a7:aa:f8:64:de:a1:53:09:8c:5c:cc:09:90:85:2a: 6c:a7:e8:bf:d5:03:3c:f0:c2:6d:3a:cd:c5:37:e7:8d:61:bf: 9a:14:75:b4:33:41:fb:f4:13:50:bf:24:8e:74:e3:ad:85:38: 5f:2b:29:28:b9:fd:8d:fc:98:3a:a8:df:84:ce:9f:25:3e:03: 54:81:ca:43:a0:3e:f2:f7:4a:27:90:5f:37:e5:41:29:96:43: ac:79:26:02:ac:f7:15:50:f8:17:d2:89:21:74:1d:0a:af:04: c0:ca:ad:a8:be:6d:8e:b7:9a:aa:0c:fd:fa:8d:30:c4:84:50: 13:a2:86:9c:9a:0b:bf:b7:b4:e0:af:04:59:2b:ae:4b:bd:40: 4f:c7:f2:94:1d:df:d7:6f:07:2f:03:49:60:82:a7:fe:17:b6: 3f:55:a9:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO5NKYQksUsLvIXY0jD1Og7kp+CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFD MkE4QjZEMDAeFw0yNjA5MjQwMDE2MDdaFw0yNjA5MjUwMTA2MDdaMDMxMTAvBgNV BAMTKDM5N0Y5QjEwRkJEMDg0NjdGREJDMkRBNzBBQTFERkVBMEVFNkVCQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSEsZVWpEBxbXeEvTGZvupS8p9 YN/Ze6lAOAmdu+FBtkdyJiuyFFGKoOXfNyt0IKvn02yBAa6eFT1jwLH59NYv+bIp XNLVjYVEmj4e6MfzEs1s2G8YV+RfsJtyvkYfH5IGIlKZhClDd/3j70oPOcBlJKDV vLCvc2h4FeZFnhI7owf30HkdyDpQAHa4UFuHox93w1TxjA++e7ywuKjec3TbTWiK I4aH1AIKi5qNmL/rvzFe8uIhschhPBFaHpmJz3Vyg+LyBytdvDvN26ApjttNDAa5 fB5k4jbFBdBXp50mM6/UeiJX5X5qO4hTKM00werRwzFGaiX+MnXx1tCL76VnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOX+bEPvQhGf9vC2nCqHf6g7m67UwHwYDVR0j BBgwFoAUG1RggH/K6TJLH55u4zvB4cKottAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3 RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFDMkE4QjZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjU0NjA4MDdGQ0FFOTMyNEIxRjlFNkVFMzNCQzFFMUMyQThC NkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMx RTFDMkE4QjZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7Ude47yx16D/bWbrntYn99D2Du4IvFTFcV 3DZXJLIQROmIamMrJyWFoHkQw41pzgdXZP3OmHKZ6YTdG6V9L1Fhsqy/NDP+R5dO NdlE6/H2svqljXulN8XjLkcOM6eq+GTeoVMJjFzMCZCFKmyn6L/VAzzwwm06zcU3 541hv5oUdbQzQfv0E1C/JI50462FOF8rKSi5/Y38mDqo34TOnyU+A1SBykOgPvL3 SieQXzflQSmWQ6x5JgKs9xVQ+BfSiSF0HQqvBMDKrai+bY63mqoM/fqNMMSEUBOi hpyaC7+3tOCvBFkrrku9QE/H8pQd39dvBy8DSWCCp/4Xtj9VqTE= -----END CERTIFICATE-----Generated at Thu Sep 24 02:37:32 2026 by rpki-client