$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: 5dgOHp3VfunXnE19kzPc4Ng2VcbVicAE7OSVumseFlE= Subject key identifier: 0E:6F:94:C4:3A:F5:D3:B8:2F:27:59:48:45:4C:6B:AA:48:9E:99:F0 Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 28BFE032642CA636A84690D5C7EF3600CF02DF68 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: C3 Signing time: Fri 25 Sep 2026 14:02:39 +0000 Manifest this update: Fri 25 Sep 2026 13:57:39 +0000 Manifest next update: Sat 26 Sep 2026 16:03:39 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: egJqlW3MoFc8URK+pgAyDgKi1drmJLRSuLa9Lbcs9cU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:03:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:bf:e0:32:64:2c:a6:36:a8:46:90:d5:c7:ef:36:00:cf:02:df:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Sep 25 13:57:39 2026 GMT Not After : Sep 26 16:03:39 2026 GMT Subject: CN=0E6F94C43AF5D3B82F275948454C6BAA489E99F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d0:fd:71:2b:6a:30:39:6c:66:13:62:b8:16: 5d:5c:db:32:1f:44:cf:3b:57:c4:76:1f:2e:15:82: e2:ef:0f:95:ce:c8:00:06:37:39:12:6b:39:09:6e: 87:dd:14:53:43:f4:19:8a:9e:e7:d1:41:9c:b0:44: 7e:01:29:59:d0:20:cc:23:bd:f6:5b:6a:02:98:fb: ce:60:37:94:0f:be:a0:f7:57:b2:98:72:5b:3d:d6: ee:0d:e9:5f:ae:1c:89:35:90:93:1b:6d:0a:d8:50: fb:98:72:1a:d4:2e:9b:d7:f8:10:c6:ae:e2:db:ed: 6d:01:c7:11:ca:2d:05:d2:57:6f:99:34:86:73:d3: 63:b0:5c:72:38:d8:75:fd:0e:c9:50:d4:2f:78:ae: d3:e0:fa:fd:4b:75:a9:98:05:ad:7f:26:36:33:93: e9:44:af:30:97:8f:72:aa:aa:cf:1e:f0:08:b5:98: 5d:6d:23:5e:56:b2:52:3f:0a:f3:9c:f5:c4:ae:0f: e3:22:d4:a6:7f:d6:c2:9e:9d:40:47:10:2f:a0:ab: 18:c9:97:dd:ae:d5:a1:a6:a4:b2:a1:4f:19:23:c0: ae:9a:8a:4b:4c:f5:26:84:d1:23:70:69:5b:01:bd: 0a:e0:b2:7e:a6:3a:85:39:18:6b:7b:ad:40:d9:2e: ae:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:6F:94:C4:3A:F5:D3:B8:2F:27:59:48:45:4C:6B:AA:48:9E:99:F0 X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:c2:71:db:ce:94:54:f3:b0:7a:6e:81:f8:e6:1e:bb:21:bb: b8:02:25:0a:44:17:14:a9:fc:c5:33:bf:97:50:fa:e2:e6:04: da:94:22:9e:85:35:b9:11:ba:7f:c6:7e:6f:7e:2d:ab:8d:ed: d9:72:1c:bd:78:fa:e7:6a:eb:09:09:43:9a:8e:35:2c:18:9c: a2:84:af:01:0d:9e:d3:aa:6b:50:4d:f2:6e:9c:2f:f7:d5:7f: 04:de:7e:5d:b2:df:55:b4:71:ec:2d:7b:96:3d:30:c5:12:78: e7:7e:e2:90:3f:f8:b0:16:a9:4c:d5:b0:7f:0a:d0:61:7b:81: b9:55:b5:7e:76:c8:39:d0:1a:01:76:5d:3d:f2:db:fa:f2:dd: 94:6b:86:12:97:97:2b:d5:ab:29:87:0d:01:ac:2b:9e:21:e8: 3e:d2:14:32:64:42:9c:b0:50:c1:be:ee:48:f5:7c:30:ae:5b: dd:08:3c:6d:84:e8:78:eb:60:80:a3:ad:0d:f4:aa:d3:e6:ef: 38:b9:64:7f:a8:03:33:c7:79:e0:1e:b5:59:ac:a9:b3:91:83: c7:d1:c4:0c:7f:54:b2:72:bd:80:4e:80:c7:4c:6e:45:df:ed: 9a:d1:be:17:9a:31:0f:d9:c6:36:90:94:29:ad:41:df:81:4a: 06:51:83:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKL/gMmQspjaoRpDVx+82AM8C32gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA5MjUxMzU3MzlaFw0yNjA5MjYxNjAzMzlaMDMxMTAvBgNV BAMTKDBFNkY5NEM0M0FGNUQzQjgyRjI3NTk0ODQ1NEM2QkFBNDg5RTk5RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN0P1xK2owOWxmE2K4Fl1c2zIf RM87V8R2Hy4VguLvD5XOyAAGNzkSazkJbofdFFND9BmKnufRQZywRH4BKVnQIMwj vfZbagKY+85gN5QPvqD3V7KYcls91u4N6V+uHIk1kJMbbQrYUPuYchrULpvX+BDG ruLb7W0BxxHKLQXSV2+ZNIZz02OwXHI42HX9DslQ1C94rtPg+v1LdamYBa1/JjYz k+lErzCXj3Kqqs8e8Ai1mF1tI15WslI/CvOc9cSuD+Mi1KZ/1sKenUBHEC+gqxjJ l92u1aGmpLKhTxkjwK6aiktM9SaE0SNwaVsBvQrgsn6mOoU5GGt7rUDZLq4tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDm+UxDr107gvJ1lIRUxrqkiemfAwHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvCcdvOlFTzsHpugfjmHrshu7gCJQpEFxSp /MUzv5dQ+uLmBNqUIp6FNbkRun/Gfm9+LauN7dlyHL14+udq6wkJQ5qONSwYnKKE rwENntOqa1BN8m6cL/fVfwTefl2y31W0cewte5Y9MMUSeOd+4pA/+LAWqUzVsH8K 0GF7gblVtX52yDnQGgF2XT3y2/ry3ZRrhhKXlyvVqymHDQGsK54h6D7SFDJkQpyw UMG+7kj1fDCuW90IPG2E6HjrYICjrQ30qtPm7zi5ZH+oAzPHeeAetVmsqbORg8fR xAx/VLJyvYBOgMdMbkXf7ZrRvheaMQ/ZxjaQlCmtQd+BSgZRgxk= -----END CERTIFICATE-----Generated at Fri Sep 25 19:14:01 2026 by rpki-client