$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: uuOKqdnbUWn6yqNlY30ANQ0Say6Zx+fYLiZWKf8L0d0= Subject key identifier: 7F:56:FA:C3:2F:2B:CE:5F:C0:BF:37:7E:2D:68:B5:7A:E4:93:0E:12 Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 1E726216CD6106BCADB34B0356DCDBEF9C6B8E40 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 02:28:42 +0000 Manifest this update: Thu 24 Sep 2026 02:23:42 +0000 Manifest next update: Fri 25 Sep 2026 04:04:42 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: 8xPMDDE08nBfXFdHTToXhOPwlCADd0TcJ813HPMOavo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 04:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:72:62:16:cd:61:06:bc:ad:b3:4b:03:56:dc:db:ef:9c:6b:8e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Sep 24 02:23:42 2026 GMT Not After : Sep 25 04:04:42 2026 GMT Subject: CN=7F56FAC32F2BCE5FC0BF377E2D68B57AE4930E12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:3e:95:97:78:da:e1:69:5e:71:4e:c7:ff:53: 06:f8:42:e4:a5:0c:d7:84:d6:56:a4:65:af:81:24: a6:26:d3:cc:b4:70:0a:fd:5b:78:32:5b:39:e1:cd: f0:b0:a5:7e:be:fd:d2:ed:57:90:a7:6d:e3:f7:70: 7d:d5:ed:69:59:41:c4:e7:a4:88:52:f2:2c:5b:09: 1c:f2:67:0a:bc:3a:8c:41:89:bc:11:b5:80:ba:e1: 43:5f:4b:b5:4d:84:a0:a2:c1:aa:f9:64:cc:e2:18: ee:89:2b:9e:ba:16:2f:8e:62:c8:b7:6d:6a:08:df: 9d:45:7a:2e:c1:60:34:69:c5:44:03:a0:85:49:d7: 35:21:fc:96:40:3c:fb:de:ed:b3:90:1f:e4:cd:7a: 6b:87:10:de:18:67:60:6e:25:8b:d4:63:4b:be:51: b8:7e:f2:10:26:39:bd:f9:1a:78:91:a1:8b:8e:55: 41:77:91:ac:8b:69:63:2e:5f:4e:6d:f3:98:3f:cc: 4c:d7:43:9c:ba:27:f3:62:d3:14:42:88:30:76:3f: d5:29:82:35:24:eb:0b:11:b0:c6:f4:56:6e:b3:c6: 1f:8a:04:35:ee:b7:32:3a:23:8a:ad:73:8c:a5:49: 29:9e:9f:52:0f:4a:b6:48:48:db:05:5e:85:47:a6: 27:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:56:FA:C3:2F:2B:CE:5F:C0:BF:37:7E:2D:68:B5:7A:E4:93:0E:12 X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:d1:15:ef:a7:17:0f:ea:6a:67:9b:6f:2c:05:59:7c:36:43: f5:80:26:7c:a2:1d:2c:53:d6:47:94:03:1b:62:91:e0:69:43: 28:d6:f9:5e:8a:87:09:d6:6e:30:3e:b9:92:3c:74:4d:33:2f: 2f:00:ed:13:2e:92:29:f2:c4:2d:06:55:14:3f:07:ae:5c:b2: 1d:17:19:00:d7:6e:ee:af:c5:fb:c7:ed:2b:af:d8:8a:21:51: 56:f6:ff:c0:c7:00:71:ca:aa:98:a4:b7:da:85:d8:11:cb:6a: 32:31:50:82:35:3d:f9:85:5e:72:27:59:bd:d2:0d:21:f0:54: a5:5f:22:64:0e:66:e1:d1:bb:7b:56:e6:66:21:d1:59:86:d2: 54:4e:d7:ca:a8:44:31:76:33:6f:71:19:4f:99:cb:57:28:9f: 85:43:fc:cb:55:b6:1b:8f:80:9f:5c:84:e3:b3:1b:ca:22:94: dc:00:91:f3:c2:62:97:25:8e:2a:1a:c6:ad:d3:27:e0:4b:e3: ee:95:5b:4b:fe:45:c6:ea:54:f7:30:ad:cf:8f:f9:c9:70:4e: 1b:7e:17:ff:e7:51:16:3c:ac:c4:0c:99:b7:a8:d0:68:38:c1: 3c:93:91:78:1e:0b:a6:c4:3f:ad:15:9e:72:7a:23:9c:0d:dd: 99:ad:40:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHnJiFs1hBryts0sDVtzb75xrjkAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA5MjQwMjIzNDJaFw0yNjA5MjUwNDA0NDJaMDMxMTAvBgNV BAMTKDdGNTZGQUMzMkYyQkNFNUZDMEJGMzc3RTJENjhCNTdBRTQ5MzBFMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXPpWXeNrhaV5xTsf/Uwb4QuSl DNeE1lakZa+BJKYm08y0cAr9W3gyWznhzfCwpX6+/dLtV5CnbeP3cH3V7WlZQcTn pIhS8ixbCRzyZwq8OoxBibwRtYC64UNfS7VNhKCiwar5ZMziGO6JK566Fi+OYsi3 bWoI351Fei7BYDRpxUQDoIVJ1zUh/JZAPPve7bOQH+TNemuHEN4YZ2BuJYvUY0u+ Ubh+8hAmOb35GniRoYuOVUF3kayLaWMuX05t85g/zEzXQ5y6J/Ni0xRCiDB2P9Up gjUk6wsRsMb0Vm6zxh+KBDXutzI6I4qtc4ylSSmen1IPSrZISNsFXoVHpidZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf1b6wy8rzl/Avzd+LWi1euSTDhIwHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvRFe+nFw/qamebbywFWXw2Q/WAJnyiHSxT 1keUAxtikeBpQyjW+V6KhwnWbjA+uZI8dE0zLy8A7RMukinyxC0GVRQ/B65csh0X GQDXbu6vxfvH7Suv2IohUVb2/8DHAHHKqpikt9qF2BHLajIxUII1PfmFXnInWb3S DSHwVKVfImQOZuHRu3tW5mYh0VmG0lRO18qoRDF2M29xGU+Zy1con4VD/MtVthuP gJ9chOOzG8oilNwAkfPCYpcljioaxq3TJ+BL4+6VW0v+RcbqVPcwrc+P+clwTht+ F//nURY8rMQMmbeo0Gg4wTyTkXgeC6bEP60VnnJ6I5wN3ZmtQBk= -----END CERTIFICATE-----Generated at Thu Sep 24 14:00:28 2026 by rpki-client