$ rpki-client -vvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: FeQWb2pkZ6DN+0rRnJPyJVY86qhzOJXTTNxDfKLNMF0= Subject key identifier: BA:44:29:FB:EB:A3:01:5F:3F:AE:9F:E6:A7:D1:3B:5D:45:B4:78:A3 Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 2934B066BADC85044E181ADDBFFB42D4D4A2DE31 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: 6D Signing time: Thu 23 Jul 2026 18:32:41 +0000 Manifest this update: Thu 23 Jul 2026 18:27:41 +0000 Manifest next update: Fri 24 Jul 2026 19:05:41 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: dSXnWHDNncSyg3tsH7s0UVhW3KSEJZ/wlSifVmAnbrU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:05:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:34:b0:66:ba:dc:85:04:4e:18:1a:dd:bf:fb:42:d4:d4:a2:de:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Jul 23 18:27:41 2026 GMT Not After : Jul 24 19:05:41 2026 GMT Subject: CN=BA4429FBEBA3015F3FAE9FE6A7D13B5D45B478A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:4a:b2:6a:40:0b:d4:4f:3f:fc:5b:e2:4a: cd:ec:61:fb:12:74:78:df:d5:ab:ae:e7:42:2c:1f: 8a:b9:f1:ba:80:69:2e:c0:2d:ea:e2:3b:a2:0e:93: fb:25:b9:a5:c9:7a:c0:0b:1f:77:35:7a:cb:9f:45: d2:05:88:3c:ed:33:9b:97:45:e5:bc:57:6f:79:21: c3:b0:ab:04:ce:93:4c:de:4a:1e:b9:43:5c:e2:5f: fb:b5:66:81:31:29:7a:e2:b8:12:b7:4f:76:66:fa: 91:9f:56:d4:73:d8:d3:0f:68:0a:7b:b9:88:06:89: 53:b4:33:1e:a0:20:c6:f8:54:3d:c9:38:85:1c:f2: 0b:8f:e9:2b:5a:f7:be:39:1f:22:61:5c:a9:b5:ce: a4:7e:bb:fd:3b:27:7c:dc:f4:50:dd:a9:3d:4c:3e: fa:dd:fa:4d:c3:63:04:a6:17:ad:8c:f8:dd:77:21: 8e:71:be:80:02:c7:46:a1:3d:ef:23:6d:4a:4b:31: dd:ac:6e:64:8a:e7:01:30:c3:0f:95:2e:b9:1d:d9: 19:db:9a:d7:1b:52:98:59:30:c7:6d:3c:a5:e9:e7: 27:eb:b6:2f:8d:66:2c:1c:b0:1b:b2:0b:88:2e:18: 48:96:2b:f3:ff:68:8f:00:77:ac:1d:a8:28:0f:f4: 38:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:44:29:FB:EB:A3:01:5F:3F:AE:9F:E6:A7:D1:3B:5D:45:B4:78:A3 X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:68:3c:9f:3c:31:48:ed:d3:54:b0:9e:1e:35:82:9a:33: 81:90:64:be:84:51:b5:65:24:69:a0:57:87:d9:3b:c5:93:c5: 37:cf:a4:ad:9b:b1:5d:f2:78:40:59:6f:68:a7:76:c1:11:08: 1b:6b:7e:d4:1c:6d:ec:e8:16:b0:98:7d:0f:9f:17:ff:03:a9: 50:d5:e3:f1:5a:65:a0:37:e0:61:1d:15:56:29:ce:ec:0f:4a: a5:85:2d:52:22:57:4a:37:1c:59:a0:58:e7:67:0d:3d:18:dc: 70:d7:f8:54:75:4b:5b:57:28:83:d7:83:b9:a7:d2:a1:d8:3a: cd:e0:e7:0c:02:84:3a:1d:ec:a5:78:e0:ca:f2:b4:20:20:bd: 19:cd:2d:95:4f:9c:9f:21:4b:2b:03:2e:68:51:1f:ce:b0:1e: 88:98:8f:34:d8:50:a4:22:3c:8d:12:73:70:d5:1b:d6:2c:75: 2e:17:9b:14:76:be:e8:60:00:05:55:9a:14:08:59:77:bf:81: bb:0b:cb:65:13:9b:87:de:a2:81:1b:33:a8:82:2f:a9:13:ae: 78:3b:7b:3f:da:48:a6:f6:78:dc:d7:d3:6f:ad:04:18:e0:5f: 46:84:5e:b7:a7:b2:52:a0:d6:df:38:ed:c9:d6:63:ab:76:a6: 2f:39:40:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKTSwZrrchQROGBrdv/tC1NSi3jEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA3MjMxODI3NDFaFw0yNjA3MjQxOTA1NDFaMDMxMTAvBgNV BAMTKEJBNDQyOUZCRUJBMzAxNUYzRkFFOUZFNkE3RDEzQjVENDVCNDc4QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEEqyakAL1E8//FviSs3sYfsS dHjf1auu50IsH4q58bqAaS7ALeriO6IOk/sluaXJesALH3c1esufRdIFiDztM5uX ReW8V295IcOwqwTOk0zeSh65Q1ziX/u1ZoExKXriuBK3T3Zm+pGfVtRz2NMPaAp7 uYgGiVO0Mx6gIMb4VD3JOIUc8guP6Sta9745HyJhXKm1zqR+u/07J3zc9FDdqT1M Pvrd+k3DYwSmF62M+N13IY5xvoACx0ahPe8jbUpLMd2sbmSK5wEwww+VLrkd2Rnb mtcbUphZMMdtPKXp5yfrti+NZiwcsBuyC4guGEiWK/P/aI8Ad6wdqCgP9DjfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUukQp++ujAV8/rp/mp9E7XUW0eKMwHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjEaDyfPDFI7dNUsJ4eNYKaM4GQZL6EUbVl JGmgV4fZO8WTxTfPpK2bsV3yeEBZb2indsERCBtrftQcbezoFrCYfQ+fF/8DqVDV 4/FaZaA34GEdFVYpzuwPSqWFLVIiV0o3HFmgWOdnDT0Y3HDX+FR1S1tXKIPXg7mn 0qHYOs3g5wwChDod7KV44MrytCAgvRnNLZVPnJ8hSysDLmhRH86wHoiYjzTYUKQi PI0Sc3DVG9YsdS4XmxR2vuhgAAVVmhQIWXe/gbsLy2UTm4feooEbM6iCL6kTrng7 ez/aSKb2eNzX02+tBBjgX0aEXrenslKg1t847cnWY6t2pi85QLY= -----END CERTIFICATE-----Generated at Fri Jul 24 11:20:12 2026 by rpki-client