$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: 8eCxzvEvLW+bW52WdHpTspJwJNSQ9BcC3596bm2FFyI= Subject key identifier: 42:F7:C5:3E:D5:B6:B4:42:D0:48:6C:FE:C1:80:76:8B:83:59:C1:59 Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 2C8B3C265CCEF9747B4763A7CABE79B0ADD4DF50 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 17:10:23 +0000 Manifest this update: Wed 16 Sep 2026 17:05:23 +0000 Manifest next update: Thu 17 Sep 2026 17:56:23 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: adp4ZzSPT8MUN9A+JTq/WOgY7N6YIKUP92rEZlm5s3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 17:56:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8b:3c:26:5c:ce:f9:74:7b:47:63:a7:ca:be:79:b0:ad:d4:df:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Sep 16 17:05:23 2026 GMT Not After : Sep 17 17:56:23 2026 GMT Subject: CN=42F7C53ED5B6B442D0486CFEC180768B8359C159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:94:e9:ca:cc:43:8b:db:25:38:b7:24:ca:bc: 51:8c:1e:b7:2b:12:73:21:09:8a:09:59:55:ee:04: 3b:a5:a6:34:12:93:c6:63:77:01:71:3d:41:24:51: 3a:22:c9:8e:35:fa:16:39:4c:44:17:97:14:8b:79: 8c:69:4e:46:f9:3d:1c:0a:8c:7c:25:fb:78:b3:1a: 23:e5:aa:6f:59:9b:a6:b9:d3:5a:d1:7d:b6:b0:46: 81:23:4d:d3:9e:b5:7b:76:ac:20:a5:5a:33:b2:27: 8f:67:00:f6:b8:9a:3c:4d:a0:e2:a9:e8:73:84:2e: 2d:07:e5:03:6a:88:08:f2:84:ed:9e:26:1b:7a:37: a1:35:53:9a:86:fc:a9:7a:7e:05:f0:41:48:3f:9e: d3:51:92:3c:8a:7f:dc:65:6f:92:8b:bf:8c:51:d0: 65:65:35:cc:3c:d4:b7:25:4a:b8:9c:4d:8d:af:bd: a5:14:30:07:ed:09:12:e8:aa:ea:a4:ff:5d:5f:9d: 8f:5d:17:5b:3e:cd:ca:fa:7e:55:92:4b:d6:2e:91: 7b:9c:d5:8c:f5:9b:a9:d7:4b:b8:6e:67:bf:9a:d4: 14:03:16:37:ef:5c:ac:46:2f:dd:65:23:2e:ba:d1: e8:ff:17:d9:3f:c4:0e:21:1d:c1:56:96:11:1e:24: 18:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:F7:C5:3E:D5:B6:B4:42:D0:48:6C:FE:C1:80:76:8B:83:59:C1:59 X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:94:0b:5c:d8:5f:8e:5a:54:44:0f:7c:d7:7c:5e:64:7a:de: d5:2d:93:43:7d:e6:09:ef:26:1c:f7:82:f2:3a:92:06:cf:b1: 2b:99:39:e0:cf:79:54:e2:ba:5d:9c:ac:3c:db:90:85:08:ee: ab:9e:a3:1c:6a:20:57:a3:4a:88:3b:8f:3d:ba:16:e8:8d:e3: 63:c8:13:b1:d5:45:c8:0b:5f:03:09:00:50:38:8b:41:ba:8b: 81:41:0c:99:b9:c1:ca:4c:87:b0:a0:8e:84:e2:ad:5b:8d:51: f5:67:cf:e1:5b:ed:81:f6:60:e4:4f:60:ad:02:94:3b:22:cf: 06:d6:9f:af:d9:9e:1e:9d:f5:e9:f0:de:af:6a:bb:24:45:c7: 92:e1:cf:f6:36:6a:65:d5:77:e3:28:f6:ca:43:6d:ea:2e:1e: 1e:1e:e2:18:52:1b:d0:8d:0c:15:ab:2f:12:59:34:e8:8c:c6: d1:53:c3:f7:6b:b7:30:1b:ca:f5:a5:ed:cd:ef:bd:53:8d:4e: 16:e1:a8:24:4e:4b:a0:ce:0e:45:1e:e3:71:ba:ee:c2:03:ca: ef:d5:0a:36:23:e6:47:66:2e:87:96:4e:c3:e8:79:5c:5d:26: 39:10:4b:7a:a0:72:a8:f0:c6:18:ad:e8:8d:e4:23:32:61:98: ae:d6:4b:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIs8JlzO+XR7R2Onyr55sK3U31AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA5MTYxNzA1MjNaFw0yNjA5MTcxNzU2MjNaMDMxMTAvBgNV BAMTKDQyRjdDNTNFRDVCNkI0NDJEMDQ4NkNGRUMxODA3NjhCODM1OUMxNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXlOnKzEOL2yU4tyTKvFGMHrcr EnMhCYoJWVXuBDulpjQSk8ZjdwFxPUEkUToiyY41+hY5TEQXlxSLeYxpTkb5PRwK jHwl+3izGiPlqm9Zm6a501rRfbawRoEjTdOetXt2rCClWjOyJ49nAPa4mjxNoOKp 6HOELi0H5QNqiAjyhO2eJht6N6E1U5qG/Kl6fgXwQUg/ntNRkjyKf9xlb5KLv4xR 0GVlNcw81LclSricTY2vvaUUMAftCRLoquqk/11fnY9dF1s+zcr6flWSS9YukXuc 1Yz1m6nXS7huZ7+a1BQDFjfvXKxGL91lIy660ej/F9k/xA4hHcFWlhEeJBgDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQvfFPtW2tELQSGz+wYB2i4NZwVkwHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHqUC1zYX45aVEQPfNd8XmR63tUtk0N95gnv Jhz3gvI6kgbPsSuZOeDPeVTiul2crDzbkIUI7queoxxqIFejSog7jz26FuiN42PI E7HVRcgLXwMJAFA4i0G6i4FBDJm5wcpMh7CgjoTirVuNUfVnz+Fb7YH2YORPYK0C lDsizwbWn6/Znh6d9enw3q9quyRFx5Lhz/Y2amXVd+Mo9spDbeouHh4e4hhSG9CN DBWrLxJZNOiMxtFTw/drtzAbyvWl7c3vvVONThbhqCROS6DODkUe43G67sIDyu/V CjYj5kdmLoeWTsPoeVxdJjkQS3qgcqjwxhit6I3kIzJhmK7WS4o= -----END CERTIFICATE-----Generated at Thu Sep 17 10:19:29 2026 by rpki-client