$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: Ae6hN/4OgB8OhBrPUBiTj93SmbpZmGJLG6FKPE8CtIM= Subject key identifier: 5C:2B:FA:E5:C9:AB:8D:93:15:84:F7:08:49:81:AB:A5:CE:32:75:EB Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 648A9BE5DA303127DA2704895A5F5503DE54E1CD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 0107 Signing time: Sun 15 Nov 2026 07:48:58 +0000 Manifest this update: Sun 15 Nov 2026 07:43:58 +0000 Manifest next update: Mon 16 Nov 2026 08:28:58 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) 2: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: /7aBXjh1bLqm9CduTT/WDLURBDKVsNPM5RvpdcG6nR0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 08:28:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:9b:e5:da:30:31:27:da:27:04:89:5a:5f:55:03:de:54:e1:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Nov 15 07:43:58 2026 GMT Not After : Nov 16 08:28:58 2026 GMT Subject: CN=5C2BFAE5C9AB8D931584F7084981ABA5CE3275EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f0:d0:e5:c6:7f:d3:23:af:d0:f7:c6:2b:2f: fc:39:e2:3a:9d:48:64:d0:12:e3:a5:bb:e9:9e:c6: f5:be:f2:26:c2:b2:ce:e2:68:27:2d:54:2a:1b:1d: 53:d9:94:32:d6:99:0c:14:ce:0b:56:63:11:e0:ca: 94:c4:e0:10:46:d8:f7:66:21:67:82:32:35:53:62: e8:ed:50:3e:16:45:fb:3f:2d:3d:f7:b5:bc:a0:68: 1a:f5:12:aa:f9:85:ce:c5:30:6a:4a:2b:f3:0d:27: 1c:00:73:52:ff:81:27:71:6f:ba:01:be:07:46:5c: 84:6d:c8:c0:a5:3d:c7:ff:56:82:ea:50:ba:8e:de: 79:51:3e:cd:97:ff:a0:54:ab:fa:e5:50:82:68:4b: 8f:7a:6b:cf:8a:20:39:5d:7f:7c:c3:15:18:4c:a3: c3:45:35:da:cd:08:7e:d5:d5:eb:40:dc:f8:f2:c1: e2:bf:20:c1:df:a1:8f:a0:67:cc:e1:35:b5:ac:94: 35:bb:d7:b2:ef:3b:3e:4f:63:ff:99:b3:7f:93:b7: dd:b2:08:ad:1f:47:e3:d5:6a:86:64:7c:d4:08:34: 52:26:12:b9:ee:f7:84:71:22:74:75:0f:0a:7b:d4: 4b:d2:76:cf:88:08:28:73:f3:b9:8e:b5:b0:1e:38: 4f:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:2B:FA:E5:C9:AB:8D:93:15:84:F7:08:49:81:AB:A5:CE:32:75:EB X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:90:f5:87:60:05:28:86:9a:3a:74:af:75:a2:de:27:e6:52: 4c:53:56:dc:b5:aa:90:8e:e6:ae:25:9c:f3:2b:b4:10:09:cf: c8:e1:34:dd:81:ee:e6:15:0b:1c:58:f7:44:ee:88:a5:39:6c: 90:4a:33:83:1d:1c:02:33:dd:08:fc:bf:4a:09:4d:25:e2:8f: da:56:f0:22:e4:62:75:c0:73:a8:79:50:d9:7d:93:2d:84:f3: db:0f:59:90:77:25:39:d0:ca:5b:0a:e0:13:5f:f6:bd:08:99: f3:f0:86:7a:2a:88:fd:81:15:43:7d:d6:80:54:cc:6b:50:f2: 2d:40:2e:09:42:8e:14:55:00:c4:30:08:eb:ca:b4:c8:86:d3: c3:79:bf:33:d0:ad:d2:f0:cf:05:3e:3f:24:54:72:34:34:80: 26:bf:12:2b:08:32:9d:5f:97:df:14:ea:3b:b0:7b:9e:df:96: 12:3a:f4:37:d5:a2:bd:ea:76:3c:1d:6e:75:6c:a7:e0:1d:1c: ed:1a:39:9a:af:14:54:88:15:20:ba:40:40:51:72:ec:8b:88: 97:df:cf:a7:c0:8b:9e:c8:0d:3b:02:72:b3:29:21:ba:a6:b6: a7:1f:a1:ce:80:94:61:53:3b:bc:70:42:1f:5b:bf:3e:60:67: 37:04:c9:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIqb5dowMSfaJwSJWl9VA95U4c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjExMTUwNzQzNThaFw0yNjExMTYwODI4NThaMDMxMTAvBgNV BAMTKDVDMkJGQUU1QzlBQjhEOTMxNTg0RjcwODQ5ODFBQkE1Q0UzMjc1RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc8NDlxn/TI6/Q98YrL/w54jqd SGTQEuOlu+mexvW+8ibCss7iaCctVCobHVPZlDLWmQwUzgtWYxHgypTE4BBG2Pdm IWeCMjVTYujtUD4WRfs/LT33tbygaBr1Eqr5hc7FMGpKK/MNJxwAc1L/gSdxb7oB vgdGXIRtyMClPcf/VoLqULqO3nlRPs2X/6BUq/rlUIJoS496a8+KIDldf3zDFRhM o8NFNdrNCH7V1etA3PjyweK/IMHfoY+gZ8zhNbWslDW717LvOz5PY/+Zs3+Tt92y CK0fR+PVaoZkfNQINFImErnu94RxInR1Dwp71EvSds+ICChz87mOtbAeOE+5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXCv65cmrjZMVhPcISYGrpc4ydeswHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+Q9YdgBSiGmjp0r3Wi3ifmUkxTVty1qpCO 5q4lnPMrtBAJz8jhNN2B7uYVCxxY90TuiKU5bJBKM4MdHAIz3Qj8v0oJTSXij9pW 8CLkYnXAc6h5UNl9ky2E89sPWZB3JTnQylsK4BNf9r0ImfPwhnoqiP2BFUN91oBU zGtQ8i1ALglCjhRVAMQwCOvKtMiG08N5vzPQrdLwzwU+PyRUcjQ0gCa/EisIMp1f l98U6juwe57flhI69DfVor3qdjwdbnVsp+AdHO0aOZqvFFSIFSC6QEBRcuyLiJff z6fAi57IDTsCcrMpIbqmtqcfoc6AlGFTO7xwQh9bvz5gZzcEyQM= -----END CERTIFICATE-----Generated at Sun Nov 15 12:23:23 2026 by rpki-client