$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft (raw, json) Hash identifier: FNgi6ehvhhDJnbXUy5cKVkPeVkwBms3klxO1le/M0pk= Subject key identifier: CB:01:CE:8D:B9:B7:2E:6A:77:46:73:00:57:02:F3:5B:E1:8B:9A:4B Authority key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Certificate issuer: /CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Certificate serial: 0F7399C75BCC7A709E7BEDA1B9A1E9C4FA2E8EEA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 20:19:52 +0000 Manifest this update: Thu 23 Jul 2026 20:14:52 +0000 Manifest next update: Fri 24 Jul 2026 23:23:52 +0000 Files and hashes: 1: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl (hash: pFtghuha0zaDkgWENKVK6CMFxGArSgSe8HnbWKykXGE=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 23:23:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:73:99:c7:5b:cc:7a:70:9e:7b:ed:a1:b9:a1:e9:c4:fa:2e:8e:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Validity Not Before: Jul 23 20:14:52 2026 GMT Not After : Jul 24 23:23:52 2026 GMT Subject: CN=CB01CE8DB9B72E6A774673005702F35BE18B9A4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:06:07:76:3c:23:2b:2c:71:a7:5b:6f:d9:a5: 93:85:91:17:10:3b:31:ee:93:78:40:c5:19:f6:93: 3b:8e:96:c5:16:b5:82:43:c1:a8:a9:1d:d0:df:a8: 62:26:47:65:15:16:8b:07:41:50:45:05:e7:24:57: fb:be:2a:e8:aa:23:9b:5b:82:a0:c8:34:18:1e:68: 2c:13:29:73:65:16:50:17:11:5d:ce:e3:d0:cb:f1: cf:b2:f1:51:ba:22:0a:2f:1d:0b:97:20:87:65:50: 93:20:3d:6c:24:f2:f2:b2:c9:d4:48:a1:4e:f2:2a: 71:3e:43:03:67:70:0d:b7:90:db:fe:b1:93:4b:6b: 33:d2:28:80:7d:fe:87:7f:23:6e:ba:32:be:c2:30: 48:ef:44:c7:ee:51:87:e0:51:b5:89:72:71:23:1e: 6c:92:15:2d:d8:21:57:ca:8b:17:e0:ff:d3:92:b0: bf:f1:82:31:05:93:48:48:5d:cc:ee:e3:9e:d7:0c: 2f:69:41:07:2d:dd:ac:c7:7f:2f:02:c2:2e:06:fd: 2f:91:89:a6:11:4f:09:fd:94:56:d9:93:19:5c:35: f1:a6:01:c6:f1:98:a5:6d:35:1d:11:42:65:b6:88: 1b:e9:6e:d1:1e:06:8b:77:f2:e0:1a:f1:b8:15:0c: 84:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:01:CE:8D:B9:B7:2E:6A:77:46:73:00:57:02:F3:5B:E1:8B:9A:4B X509v3 Authority Key Identifier: keyid:1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:38:ab:eb:19:bd:b6:fa:d5:54:68:c7:99:f1:e6:1f:36:15: e0:85:b6:e7:07:c8:95:88:9a:90:73:6d:b6:98:45:db:97:d2: 36:a8:02:6d:fd:94:00:d6:7e:08:2b:8e:24:38:07:35:50:b4: 3a:a0:ce:0c:c5:7e:29:74:77:9c:40:1f:5b:60:ea:61:ce:7f: f0:f6:fd:c1:04:5f:89:db:35:18:fe:ab:6c:c4:d0:8e:e5:65: 3b:22:f3:50:b3:3f:a6:08:07:14:da:6c:6e:6a:2f:cb:f6:ba: 7e:b1:4d:91:84:a0:e3:58:e5:b6:40:f2:e1:c9:3b:74:13:58: 4c:21:8f:a8:b4:28:34:84:2f:a0:e3:ef:c7:48:c1:09:50:e5: ae:0c:c5:75:6a:4a:45:cc:1d:8d:2c:25:a2:9c:f8:8e:48:75: 16:f6:8f:ac:8c:ca:71:33:a5:31:a1:d8:b5:71:ae:1f:c9:ee: 86:db:89:dd:e3:96:0d:ec:db:1e:7b:46:c3:eb:99:90:2c:49: 3c:50:73:4d:63:3a:ff:04:9e:5f:e7:76:96:2b:2c:fc:cb:1d: 31:71:30:65:17:37:d1:42:88:b4:3f:c3:f6:84:79:11:5d:81: 47:69:a8:a5:fb:c1:a1:dd:09:a0:9b:ae:04:32:36:5d:4a:5b: 9a:ce:f4:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD3OZx1vMenCee+2huaHpxPoujuowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFD MkE4QjZEMDAeFw0yNjA3MjMyMDE0NTJaFw0yNjA3MjQyMzIzNTJaMDMxMTAvBgNV BAMTKENCMDFDRThEQjlCNzJFNkE3NzQ2NzMwMDU3MDJGMzVCRTE4QjlBNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBgd2PCMrLHGnW2/ZpZOFkRcQ OzHuk3hAxRn2kzuOlsUWtYJDwaipHdDfqGImR2UVFosHQVBFBeckV/u+KuiqI5tb gqDINBgeaCwTKXNlFlAXEV3O49DL8c+y8VG6IgovHQuXIIdlUJMgPWwk8vKyydRI oU7yKnE+QwNncA23kNv+sZNLazPSKIB9/od/I266Mr7CMEjvRMfuUYfgUbWJcnEj HmySFS3YIVfKixfg/9OSsL/xgjEFk0hIXczu457XDC9pQQct3azHfy8Cwi4G/S+R iaYRTwn9lFbZkxlcNfGmAcbxmKVtNR0RQmW2iBvpbtEeBot38uAa8bgVDITZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUywHOjbm3Lmp3RnMAVwLzW+GLmkswHwYDVR0j BBgwFoAUG1RggH/K6TJLH55u4zvB4cKottAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3 RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFDMkE4QjZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjU0NjA4MDdGQ0FFOTMyNEIxRjlFNkVFMzNCQzFFMUMyQThC NkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMx RTFDMkE4QjZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABU4q+sZvbb61VRox5nx5h82FeCFtucHyJWI mpBzbbaYRduX0jaoAm39lADWfggrjiQ4BzVQtDqgzgzFfil0d5xAH1tg6mHOf/D2 /cEEX4nbNRj+q2zE0I7lZTsi81CzP6YIBxTabG5qL8v2un6xTZGEoONY5bZA8uHJ O3QTWEwhj6i0KDSEL6Dj78dIwQlQ5a4MxXVqSkXMHY0sJaKc+I5IdRb2j6yMynEz pTGh2LVxrh/J7obbid3jlg3s2x57RsPrmZAsSTxQc01jOv8Enl/ndpYrLPzLHTFx MGUXN9FCiLQ/w/aEeRFdgUdpqKX7waHdCaCbrgQyNl1KW5rO9KM= -----END CERTIFICATE-----Generated at Fri Jul 24 07:45:21 2026 by rpki-client