$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft (raw, json) Hash identifier: x9epg7L/G3zMVw27w26bp95kzAEVMty8btlvBO0secU= Subject key identifier: 8E:B9:62:DD:C6:59:2A:69:D2:6F:70:29:63:53:9A:6A:AF:E7:16:FC Authority key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Certificate issuer: /CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Certificate serial: 3CB8189EEA5CE384F7FF736CF236A32C34EE8258 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:37:40 +0000 Manifest this update: Tue 12 May 2026 20:32:40 +0000 Manifest next update: Wed 13 May 2026 22:10:40 +0000 Files and hashes: 1: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl (hash: HdfT847YamhOng3sbGaq6vWNJKzzxh+fJkYnJMkH3nY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 22:10:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:b8:18:9e:ea:5c:e3:84:f7:ff:73:6c:f2:36:a3:2c:34:ee:82:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Validity Not Before: May 12 20:32:40 2026 GMT Not After : May 13 22:10:40 2026 GMT Subject: CN=8EB962DDC6592A69D26F702963539A6AAFE716FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:6e:96:25:af:0a:e7:67:c7:15:29:f0:fd:5a: 86:6e:9f:6c:61:22:33:91:7a:7d:12:be:73:c8:7f: 16:72:74:64:6b:87:a0:36:e7:21:5f:2d:3a:37:29: df:fa:44:a9:12:26:29:ce:09:27:50:57:f0:4d:ee: 7d:26:d6:a2:5b:69:5e:f5:46:ec:38:0b:43:59:c2: 09:0b:04:6b:ad:ea:7a:0e:fb:40:68:6d:3c:b4:b2: 1b:8b:7e:70:b5:4a:9a:8b:40:71:29:34:49:e5:42: 05:26:f2:45:a3:bc:d0:44:90:79:19:81:5e:fa:08: 19:81:4c:dd:4d:4b:81:44:ba:2c:2e:0c:c9:62:05: 99:f5:d2:9b:a5:02:cd:6a:b8:0d:e4:41:68:78:21: fe:ad:08:79:ea:0d:54:6c:a0:3b:b0:d1:01:02:bc: f2:80:8b:1f:1d:b9:75:15:df:24:d8:27:11:e2:a0: 44:f1:96:aa:a9:2a:81:41:3f:12:1b:eb:41:ea:5a: 78:02:6b:34:b1:79:9b:2a:09:41:a1:0f:c5:b9:93: a9:ae:94:b5:7c:9d:51:d3:36:54:e8:19:8f:24:c3: 00:d3:1d:2b:14:c2:45:93:e3:ea:55:8b:d6:97:d4: c5:e4:20:64:1d:59:09:73:96:45:7b:58:a6:00:84: 49:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:B9:62:DD:C6:59:2A:69:D2:6F:70:29:63:53:9A:6A:AF:E7:16:FC X509v3 Authority Key Identifier: keyid:1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:46:60:95:87:c8:2d:b0:ff:f8:16:f5:98:8d:03:85:6e:e2: 36:fd:05:fb:71:dc:be:00:af:35:4f:cc:2d:ae:8d:c8:7b:c2: ab:c5:67:e8:9c:89:55:57:4b:c1:90:17:96:cc:e4:23:6d:9f: a9:7b:61:f8:e9:d3:ad:2c:f7:05:f1:88:8a:65:f6:fe:a0:d3: b5:d2:00:71:ee:f7:93:a4:3a:7b:91:d7:80:2c:32:d8:8a:2d: 2a:01:9f:23:4c:be:10:94:e1:e7:d0:87:d4:f7:b1:ed:66:4f: 9a:47:9b:ee:02:7b:3c:eb:1c:91:5f:f1:e1:85:fd:93:90:33: 8a:21:81:55:f4:f4:f0:83:64:8d:37:ea:86:ea:2d:6b:8c:a8: ed:b1:04:8b:91:25:dd:8e:d0:bf:03:9b:e2:68:1f:64:de:fb: 67:50:01:32:b6:a0:dc:d9:1b:69:cb:6c:79:1b:da:5d:bd:62: a7:f4:86:b1:36:97:91:e8:70:37:63:8a:52:2e:cc:86:bc:64: 89:3c:57:d9:03:ac:f9:1b:ff:a9:9e:ec:bd:0f:54:b0:e6:8e: 6a:8c:b9:67:27:48:3f:45:16:dd:d8:10:30:96:3b:22:a8:f9: 96:3c:1d:5f:ce:5e:ec:ec:dd:79:67:cc:0d:4a:65:50:e6:53: 11:42:f4:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPLgYnupc44T3/3Ns8jajLDTuglgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFD MkE4QjZEMDAeFw0yNjA1MTIyMDMyNDBaFw0yNjA1MTMyMjEwNDBaMDMxMTAvBgNV BAMTKDhFQjk2MkREQzY1OTJBNjlEMjZGNzAyOTYzNTM5QTZBQUZFNzE2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8bpYlrwrnZ8cVKfD9WoZun2xh IjORen0SvnPIfxZydGRrh6A25yFfLTo3Kd/6RKkSJinOCSdQV/BN7n0m1qJbaV71 Ruw4C0NZwgkLBGut6noO+0BobTy0shuLfnC1SpqLQHEpNEnlQgUm8kWjvNBEkHkZ gV76CBmBTN1NS4FEuiwuDMliBZn10pulAs1quA3kQWh4If6tCHnqDVRsoDuw0QEC vPKAix8duXUV3yTYJxHioETxlqqpKoFBPxIb60HqWngCazSxeZsqCUGhD8W5k6mu lLV8nVHTNlToGY8kwwDTHSsUwkWT4+pVi9aX1MXkIGQdWQlzlkV7WKYAhEmrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjrli3cZZKmnSb3ApY1Oaaq/nFvwwHwYDVR0j BBgwFoAUG1RggH/K6TJLH55u4zvB4cKottAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3 RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFDMkE4QjZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjU0NjA4MDdGQ0FFOTMyNEIxRjlFNkVFMzNCQzFFMUMyQThC NkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMx RTFDMkE4QjZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZGYJWHyC2w//gW9ZiNA4Vu4jb9Bftx3L4A rzVPzC2ujch7wqvFZ+iciVVXS8GQF5bM5CNtn6l7Yfjp060s9wXxiIpl9v6g07XS AHHu95OkOnuR14AsMtiKLSoBnyNMvhCU4efQh9T3se1mT5pHm+4CezzrHJFf8eGF /ZOQM4ohgVX09PCDZI036obqLWuMqO2xBIuRJd2O0L8Dm+JoH2Te+2dQATK2oNzZ G2nLbHkb2l29Yqf0hrE2l5HocDdjilIuzIa8ZIk8V9kDrPkb/6me7L0PVLDmjmqM uWcnSD9FFt3YEDCWOyKo+ZY8HV/OXuzs3XlnzA1KZVDmUxFC9EY= -----END CERTIFICATE-----Generated at Wed May 13 04:19:53 2026 by rpki-client