$ rpki-client -vvf rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft File: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft (raw, json) Hash identifier: Ol5hCGR/jiLlkp0udaz+XPsk6AnKomUhv5+Jfng8kew= Subject key identifier: 89:CA:20:FB:00:7E:02:43:6B:98:48:A0:A5:D3:24:7B:9C:22:5D:5D Authority key identifier: 1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 Certificate issuer: /CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Certificate serial: 6CD6B39550D9E0CFE92365D91D43F45AD44A7F32 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 15:49:50 +0000 Manifest this update: Fri 19 Jun 2026 15:44:50 +0000 Manifest next update: Sat 20 Jun 2026 19:43:50 +0000 Files and hashes: 1: 1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl (hash: IzqftZm/QpOny9LlMnhERtlZ6zC9X9LBjV4OhPNnmII=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:43:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:d6:b3:95:50:d9:e0:cf:e9:23:65:d9:1d:43:f4:5a:d4:4a:7f:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BC98AF3C1EF6C07DFFD097E41E4116920987307 Validity Not Before: Jun 19 15:44:50 2026 GMT Not After : Jun 20 19:43:50 2026 GMT Subject: CN=89CA20FB007E02436B9848A0A5D3247B9C225D5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:11:ed:f9:94:9f:9b:82:19:fa:1b:11:d2:67: 9c:cc:89:4c:f5:ff:30:de:a0:04:5d:9f:cd:36:40: 77:bb:1c:b5:df:2a:18:6f:09:0e:e5:ee:2e:a3:f9: 20:74:2c:29:c4:dc:ed:bc:b6:e4:f3:a7:19:08:f8: 86:c6:cb:b1:5e:19:4f:d2:0e:77:11:46:00:4e:e1: cb:89:5c:b5:32:2e:ac:65:d8:e1:74:25:aa:09:38: cf:1f:dd:06:49:b9:c5:d2:4d:5a:fa:8a:6b:03:3b: 1c:55:db:85:8b:16:e1:41:f0:1b:7f:8a:16:8e:50: 7a:c4:6e:e3:d8:27:c9:b2:58:6a:5e:82:53:66:15: 51:5d:84:48:5d:89:20:61:f8:8d:40:ab:60:8d:50: 8b:e2:f4:27:6d:6c:31:d5:5d:9f:5b:c7:6c:eb:3d: c8:a5:79:4f:25:c0:ca:b7:6c:7f:ec:e4:d9:6e:18: a6:66:bd:84:fb:cc:b5:54:98:90:b3:89:78:3c:11: ba:41:4f:68:4a:c0:a0:a9:e3:e7:d8:d5:6f:af:b9: ac:a3:c0:60:7b:14:a8:d3:26:05:2c:11:59:41:fa: e8:f0:da:a7:c4:9b:d5:94:17:ca:90:58:0e:82:0a: da:88:96:45:d7:e3:57:8b:e1:f3:64:f7:2a:67:a9: e4:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:CA:20:FB:00:7E:02:43:6B:98:48:A0:A5:D3:24:7B:9C:22:5D:5D X509v3 Authority Key Identifier: keyid:1B:C9:8A:F3:C1:EF:6C:07:DF:FD:09:7E:41:E4:11:69:20:98:73:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/1BC98AF3C1EF6C07DFFD097E41E4116920987307.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e09b51a2-63d5-44b2-82b2-d94c516dd5f8/0/1BC98AF3C1EF6C07DFFD097E41E4116920987307.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:7f:a8:47:db:8b:d0:88:4b:b6:f2:be:fb:93:48:6a:b5:a7: dc:11:09:d1:fd:db:6f:ab:c0:01:e9:4e:f4:3e:3a:ee:11:77: 56:47:94:05:ed:62:1a:1d:6c:c0:af:32:9e:f1:7c:29:2a:a6: f9:94:46:28:24:53:83:f2:7c:33:44:45:cc:28:90:fc:c4:0c: 86:06:80:ff:51:df:25:46:4e:2f:71:56:da:25:9f:18:85:3b: 5f:46:f0:e3:18:f5:41:95:54:b3:bb:5d:d3:7d:81:21:9e:8e: e4:95:39:19:6a:71:00:2d:33:f5:58:06:e9:b8:dc:a1:ef:75: bb:d0:27:3f:87:43:17:f1:c6:ea:b4:cb:db:0d:48:da:bf:ef: a7:01:42:da:eb:fd:ff:86:88:77:91:9f:db:4a:fc:c2:f6:5b: ef:93:7e:20:b5:26:61:38:29:c5:45:d8:af:66:c8:59:bf:5d: a2:9e:a7:aa:6a:90:0a:78:7e:d2:d0:f0:98:2c:af:9f:4f:24: c8:b7:85:d0:8d:75:cf:b5:e9:d4:3c:1f:de:dc:9b:07:d7:fb: 89:67:6b:c6:76:50:5c:8d:a8:42:04:a1:b6:bb:9a:ec:2e:47: c9:cc:41:06:b2:84:f7:27:29:9b:52:0d:90:7b:89:44:3f:dc: f8:45:f9:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbNazlVDZ4M/pI2XZHUP0WtRKfzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDExNjky MDk4NzMwNzAeFw0yNjA2MTkxNTQ0NTBaFw0yNjA2MjAxOTQzNTBaMDMxMTAvBgNV BAMTKDg5Q0EyMEZCMDA3RTAyNDM2Qjk4NDhBMEE1RDMyNDdCOUMyMjVENUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiEe35lJ+bghn6GxHSZ5zMiUz1 /zDeoARdn802QHe7HLXfKhhvCQ7l7i6j+SB0LCnE3O28tuTzpxkI+IbGy7FeGU/S DncRRgBO4cuJXLUyLqxl2OF0JaoJOM8f3QZJucXSTVr6imsDOxxV24WLFuFB8Bt/ ihaOUHrEbuPYJ8myWGpeglNmFVFdhEhdiSBh+I1Aq2CNUIvi9CdtbDHVXZ9bx2zr PcileU8lwMq3bH/s5NluGKZmvYT7zLVUmJCziXg8EbpBT2hKwKCp4+fY1W+vuayj wGB7FKjTJgUsEVlB+ujw2qfEm9WUF8qQWA6CCtqIlkXX41eL4fNk9ypnqeTJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUicog+wB+AkNrmEigpdMke5wiXV0wHwYDVR0j BBgwFoAUG8mK88HvbAff/Ql+QeQRaSCYcwcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTA5YjUxYTItNjNkNS00NGIyLTgyYjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjND MUVGNkMwN0RGRkQwOTdFNDFFNDExNjkyMDk4NzMwNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xQkM5OEFGM0MxRUY2QzA3REZGRDA5N0U0MUU0MTE2OTIwOTg3 MzA3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTA5YjUxYTItNjNkNS00NGIyLTgy YjItZDk0YzUxNmRkNWY4LzAvMUJDOThBRjNDMUVGNkMwN0RGRkQwOTdFNDFFNDEx NjkyMDk4NzMwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF1/qEfbi9CIS7byvvuTSGq1p9wRCdH922+r wAHpTvQ+Ou4Rd1ZHlAXtYhodbMCvMp7xfCkqpvmURigkU4PyfDNERcwokPzEDIYG gP9R3yVGTi9xVtolnxiFO19G8OMY9UGVVLO7XdN9gSGejuSVORlqcQAtM/VYBum4 3KHvdbvQJz+HQxfxxuq0y9sNSNq/76cBQtrr/f+GiHeRn9tK/ML2W++TfiC1JmE4 KcVF2K9myFm/XaKep6pqkAp4ftLQ8Jgsr59PJMi3hdCNdc+16dQ8H97cmwfX+4ln a8Z2UFyNqEIEoba7muwuR8nMQQayhPcnKZtSDZB7iUQ/3PhF+dc= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:42 2026 by rpki-client