$ rpki-client -vvf rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft File: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft (raw, json) Hash identifier: EIsdMVJA5rXmUH9Y+TTFWXvaMe5E208WG4fCCOj+UB8= Subject key identifier: 10:09:7D:8E:E4:DB:56:1B:8F:4B:8B:49:D5:F0:49:FF:2E:95:FE:0C Authority key identifier: 1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 Certificate issuer: /CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Certificate serial: 6C6D01B0163147CDE35CF2802ED3D978F1F8ED49 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 05:36:33 +0000 Manifest this update: Sat 20 Jun 2026 05:31:33 +0000 Manifest next update: Sun 21 Jun 2026 09:06:33 +0000 Files and hashes: 1: 1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl (hash: 5a6y0v2mtDd0/O4AWmunh0YVrR9x3LYDv9eWyc7yVzI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 09:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:6d:01:b0:16:31:47:cd:e3:5c:f2:80:2e:d3:d9:78:f1:f8:ed:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0 Validity Not Before: Jun 20 05:31:33 2026 GMT Not After : Jun 21 09:06:33 2026 GMT Subject: CN=10097D8EE4DB561B8F4B8B49D5F049FF2E95FE0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:bd:21:46:83:35:93:4b:95:4e:b9:fa:eb: f3:27:9e:24:70:33:18:af:2f:78:bb:5a:eb:be:10: 4a:d5:07:5d:50:49:8d:17:f0:62:b7:d1:c6:e5:1c: 1f:23:7f:e1:ef:d1:77:ed:eb:8d:4c:d6:46:7d:7f: 3a:91:f9:1e:52:b2:c0:43:6c:ec:0d:07:c8:35:58: f4:80:5d:a1:19:43:3e:fc:46:11:63:ce:05:c3:13: b8:4f:9b:63:c6:29:b5:be:ba:67:4d:cf:75:22:d6: 30:07:bb:29:bc:cd:b1:4d:c3:9e:03:db:ca:0b:21: fa:16:2e:2d:39:ee:d3:19:cb:8c:ce:b0:55:17:a6: 19:6d:65:10:b7:20:9d:47:4a:5a:dd:08:c1:f0:fc: 23:5f:6c:2c:ab:7a:81:ad:93:3d:7a:e9:e8:55:c4: d3:fc:4d:45:1b:fe:e0:83:24:7e:40:f9:1a:3c:c0: a2:bd:af:39:18:53:29:45:68:6a:e5:9d:e5:75:28: e7:03:03:18:cf:f6:c3:49:5e:76:1e:b5:c0:03:1e: b3:88:b2:cf:02:83:6d:01:9e:35:57:e6:5c:6a:08: b3:52:e3:9d:96:a9:df:69:7a:39:8d:87:8c:d3:02: 99:eb:f5:7a:31:1b:ab:f0:ce:bf:6e:c1:79:fc:8d: 18:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:09:7D:8E:E4:DB:56:1B:8F:4B:8B:49:D5:F0:49:FF:2E:95:FE:0C X509v3 Authority Key Identifier: keyid:1B:54:60:80:7F:CA:E9:32:4B:1F:9E:6E:E3:3B:C1:E1:C2:A8:B6:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/1/1B5460807FCAE9324B1F9E6EE33BC1E1C2A8B6D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:fd:4c:c0:25:81:59:d1:80:a0:86:6d:6c:9e:23:6b:a7:34: 05:8b:24:1d:1d:03:9e:cf:14:da:81:30:19:f3:1d:c5:d5:e7: a3:6e:5c:92:ea:5a:b7:d4:19:ac:f9:a7:4a:8f:a0:7d:93:53: 83:57:ed:84:6e:f4:86:da:0d:73:50:e1:4a:e9:70:32:37:6f: 15:29:0c:5c:fc:49:19:43:f6:b3:2e:48:e4:18:23:43:1b:fb: 6d:62:2d:e4:23:19:2a:75:cd:b9:de:4b:0b:ef:d8:36:8a:f9: fa:40:ea:b8:e3:7a:79:b6:f1:a0:18:3b:cc:e9:6e:25:ab:7d: 4d:0c:09:96:b0:ab:af:22:64:97:1f:f1:ba:81:cf:60:10:63: e6:17:6d:02:7c:ff:ab:de:a6:c9:59:8d:bd:ae:91:56:71:42: 51:e1:11:2c:24:24:4e:44:3c:75:d3:07:6b:30:6b:06:b2:6f: 5a:53:db:7e:a2:67:41:b0:07:61:4a:89:86:1f:a8:68:bf:02: f1:ed:10:70:bc:bd:ac:8a:54:8d:8b:bd:8f:5f:db:2a:33:9b: 2d:e2:4e:50:3c:65:06:8a:da:30:1b:96:8e:9c:5c:ec:31:0b: 88:a5:20:e0:39:a8:7b:35:08:e2:5d:23:e8:09:7c:bc:e7:bc: b3:d7:fb:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbG0BsBYxR83jXPKALtPZePH47UkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFD MkE4QjZEMDAeFw0yNjA2MjAwNTMxMzNaFw0yNjA2MjEwOTA2MzNaMDMxMTAvBgNV BAMTKDEwMDk3RDhFRTREQjU2MUI4RjRCOEI0OUQ1RjA0OUZGMkU5NUZFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDar0hRoM1k0uVTrn66/MnniRw MxivL3i7Wuu+EErVB11QSY0X8GK30cblHB8jf+Hv0Xft641M1kZ9fzqR+R5SssBD bOwNB8g1WPSAXaEZQz78RhFjzgXDE7hPm2PGKbW+umdNz3Ui1jAHuym8zbFNw54D 28oLIfoWLi057tMZy4zOsFUXphltZRC3IJ1HSlrdCMHw/CNfbCyreoGtkz166ehV xNP8TUUb/uCDJH5A+Ro8wKK9rzkYUylFaGrlneV1KOcDAxjP9sNJXnYetcADHrOI ss8Cg20BnjVX5lxqCLNS452Wqd9pejmNh4zTApnr9XoxG6vwzr9uwXn8jRgJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEAl9juTbVhuPS4tJ1fBJ/y6V/gwwHwYDVR0j BBgwFoAUG1RggH/K6TJLH55u4zvB4cKottAwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTg4NTNhYWItOGQ2Yy00NTdmLTlkNTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3 RkNBRTkzMjRCMUY5RTZFRTMzQkMxRTFDMkE4QjZEMC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQjU0NjA4MDdGQ0FFOTMyNEIxRjlFNkVFMzNCQzFFMUMyQThC NkQwLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzEvMUI1NDYwODA3RkNBRTkzMjRCMUY5RTZFRTMzQkMx RTFDMkE4QjZEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALr9TMAlgVnRgKCGbWyeI2unNAWLJB0dA57P FNqBMBnzHcXV56NuXJLqWrfUGaz5p0qPoH2TU4NX7YRu9IbaDXNQ4UrpcDI3bxUp DFz8SRlD9rMuSOQYI0Mb+21iLeQjGSp1zbneSwvv2DaK+fpA6rjjenm28aAYO8zp biWrfU0MCZawq68iZJcf8bqBz2AQY+YXbQJ8/6vepslZjb2ukVZxQlHhESwkJE5E PHXTB2swawayb1pT236iZ0GwB2FKiYYfqGi/AvHtEHC8vayKVI2LvY9f2yozmy3i TlA8ZQaK2jAblo6cXOwxC4ilIOA5qHs1COJdI+gJfLznvLPX+/8= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:23 2026 by rpki-client