$ rpki-client -vvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: LIIG3k/iXiBZ3wRLLDCxR3GupSEx8KM6t4jDb//Rgg4= Subject key identifier: 0A:BF:5D:B1:33:C4:09:20:BD:D9:9D:AF:4F:8E:B0:C0:EC:3F:C4:02 Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 21840D9DB897517FE27C5D73DEB28CD9AF4B1428 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 08:38:25 +0000 Manifest this update: Wed 17 Jun 2026 08:33:25 +0000 Manifest next update: Thu 18 Jun 2026 11:56:25 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: ZNeMIw2vBR0/VSd0+fdZs4xb0KHAH1EGZx8t1NXnz48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:84:0d:9d:b8:97:51:7f:e2:7c:5d:73:de:b2:8c:d9:af:4b:14:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Jun 17 08:33:25 2026 GMT Not After : Jun 18 11:56:25 2026 GMT Subject: CN=0ABF5DB133C40920BDD99DAF4F8EB0C0EC3FC402 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c2:1c:4b:b4:ba:30:a1:c8:e9:cc:2c:47:f7: fa:b3:1f:db:08:26:cd:65:6d:98:38:29:f9:6f:96: 33:d6:00:b9:d7:3c:e2:fb:2d:1c:f1:08:27:46:7d: 36:80:49:e6:c6:b8:0d:09:64:af:12:41:59:cb:aa: b1:4e:0f:25:ae:48:3a:f5:df:d4:6e:86:50:5b:59: f2:81:b9:7d:31:61:8c:eb:50:27:4e:c3:07:f7:0f: 43:de:fa:ce:b1:38:21:91:db:01:76:e8:cd:d9:1d: 9d:6d:0d:d3:6d:0c:2b:c1:bc:c1:eb:5f:37:02:fd: ee:b0:f6:c4:0c:73:9d:fb:f5:a9:56:85:b5:2c:ac: 0d:fd:75:48:69:96:b3:26:57:e5:9a:b4:5a:f4:bb: b0:60:4a:cd:68:fc:e1:f1:0f:71:0e:7f:82:56:ff: 65:4c:63:db:3a:07:62:c9:3c:ab:ee:93:5e:61:24: 1a:34:77:ff:95:20:70:83:d2:ae:b1:5f:58:ee:8b: 75:aa:cf:15:57:20:0a:37:b7:0b:09:a5:d0:da:9b: 04:d2:79:8b:d4:76:d8:34:2e:95:ab:fa:76:3c:ba: 9f:45:ea:38:e9:f2:d2:80:b2:2c:3e:f1:9b:40:1d: 8e:22:da:91:a7:7e:a8:cc:f3:83:42:5c:fc:83:86: 52:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BF:5D:B1:33:C4:09:20:BD:D9:9D:AF:4F:8E:B0:C0:EC:3F:C4:02 X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:a3:6a:19:74:e9:66:2d:a4:1d:ce:ab:ae:c6:4d:7c:44:20: 79:bf:4c:2b:9d:ae:4f:fd:ee:ce:48:29:d9:66:a5:b0:7c:8f: ed:b4:aa:10:49:07:cd:e5:c9:86:99:90:84:bd:79:76:82:e3: 31:0c:b9:25:a8:22:4a:12:99:e9:77:55:83:fa:9b:10:48:01: 36:88:2e:94:b2:fd:4a:de:0c:b3:d9:cd:85:d7:fd:78:cc:92: 4c:7e:59:e7:08:bf:7a:0f:b5:cb:7a:b6:22:a9:59:2b:ac:db: 80:00:d0:ac:bd:de:6d:bf:32:2a:f9:b0:ae:cc:b3:55:fb:a8: 95:39:1a:ca:57:a2:71:fb:c7:aa:86:89:38:d3:d0:24:ef:05: 82:7c:ed:ee:b0:24:8d:be:00:10:5f:4f:01:a5:e8:47:35:40: 1e:2c:1e:7f:21:59:d5:08:ec:e5:e1:d3:20:36:f1:47:4e:4e: 8d:a0:cb:13:c6:3c:14:62:d2:d6:01:b2:6b:9e:1f:91:ed:a3: c1:bc:e0:47:c4:be:1d:f4:f9:36:11:3b:52:2a:d4:4a:c3:eb: 27:bf:c9:d9:be:24:51:53:27:70:98:05:36:21:06:65:ba:34: 20:d4:0e:63:39:06:94:74:ae:93:82:b2:44:45:36:ed:ae:f5: ad:a1:7f:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIYQNnbiXUX/ifF1z3rKM2a9LFCgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA2MTcwODMzMjVaFw0yNjA2MTgxMTU2MjVaMDMxMTAvBgNV BAMTKDBBQkY1REIxMzNDNDA5MjBCREQ5OURBRjRGOEVCMEMwRUMzRkM0MDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+whxLtLowocjpzCxH9/qzH9sI Js1lbZg4KflvljPWALnXPOL7LRzxCCdGfTaASebGuA0JZK8SQVnLqrFODyWuSDr1 39RuhlBbWfKBuX0xYYzrUCdOwwf3D0Pe+s6xOCGR2wF26M3ZHZ1tDdNtDCvBvMHr XzcC/e6w9sQMc5379alWhbUsrA39dUhplrMmV+WatFr0u7BgSs1o/OHxD3EOf4JW /2VMY9s6B2LJPKvuk15hJBo0d/+VIHCD0q6xX1jui3WqzxVXIAo3twsJpdDamwTS eYvUdtg0LpWr+nY8up9F6jjp8tKAsiw+8ZtAHY4i2pGnfqjM84NCXPyDhlKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCr9dsTPECSC92Z2vT46wwOw/xAIwHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHijahl06WYtpB3Oq67GTXxEIHm/TCudrk/9 7s5IKdlmpbB8j+20qhBJB83lyYaZkIS9eXaC4zEMuSWoIkoSmel3VYP6mxBIATaI LpSy/UreDLPZzYXX/XjMkkx+WecIv3oPtct6tiKpWSus24AA0Ky93m2/Mir5sK7M s1X7qJU5GspXonH7x6qGiTjT0CTvBYJ87e6wJI2+ABBfTwGl6Ec1QB4sHn8hWdUI 7OXh0yA28UdOTo2gyxPGPBRi0tYBsmueH5Hto8G84EfEvh30+TYRO1Iq1ErD6ye/ ydm+JFFTJ3CYBTYhBmW6NCDUDmM5BpR0rpOCskRFNu2u9a2hfzM= -----END CERTIFICATE-----Generated at Wed Jun 17 11:50:15 2026 by rpki-client