$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: NBlA9VVP22mQrApmlkFHlg0H/sNXEU7F0ldFeuTLH4o= Subject key identifier: 05:6A:AE:71:52:65:52:05:FE:06:48:FF:53:D6:74:E0:8E:F5:5B:38 Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 3A88E384A4CD4FECB2E8CE1B7DF06B9A87D60061 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 22:57:51 +0000 Manifest this update: Thu 23 Jul 2026 22:52:51 +0000 Manifest next update: Sat 25 Jul 2026 00:29:51 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) 2: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: MBPqoadq0UapJCenLlJiNVibHa1Oc9Q1szFDP/tFS4E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:29:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:88:e3:84:a4:cd:4f:ec:b2:e8:ce:1b:7d:f0:6b:9a:87:d6:00:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Jul 23 22:52:51 2026 GMT Not After : Jul 25 00:29:51 2026 GMT Subject: CN=056AAE7152655205FE0648FF53D674E08EF55B38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ea:cc:be:c0:eb:57:5a:81:50:b9:1d:48:b1: c9:9c:85:47:bd:9e:4d:62:c2:34:70:61:2c:58:e7: 85:f4:52:f0:14:e1:c9:e8:d2:cb:fa:05:90:8c:84: 69:66:91:78:78:4d:ec:17:6c:5f:09:e9:59:fa:42: aa:27:53:a0:c4:ce:2e:a0:a0:b2:d1:b5:af:ec:ba: 96:bf:4d:b7:11:2a:84:a5:6c:e3:b2:a5:bb:0e:2a: f3:97:da:ca:ff:e1:bb:a6:2c:0f:1d:cf:2c:47:3c: c7:75:0e:0c:db:b1:5a:2c:6c:2f:43:f4:57:8c:c7: 29:37:66:fc:c6:ad:f9:f5:fe:a4:08:03:1a:76:b1: c4:2b:60:e2:47:f1:6b:4a:61:d1:1b:cf:7a:3d:f8: 4f:20:c6:1f:ff:5b:f3:e4:e6:62:56:cb:c1:6c:e3: 75:70:da:4e:ee:82:40:ef:23:53:16:54:4c:ac:78: 32:da:11:91:0b:b3:8a:d2:5e:67:a7:1e:83:56:0c: 81:ac:88:a2:83:6c:c2:f0:fe:cb:ef:82:f0:84:e0: 20:6b:0f:2c:73:5b:54:7f:24:08:8b:7e:8a:bb:bb: 6c:ac:e3:88:d7:c5:8f:00:d3:d4:c1:54:7b:70:d2: 69:fb:30:41:79:32:1c:4d:d7:55:1c:98:9e:c2:4f: f7:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:6A:AE:71:52:65:52:05:FE:06:48:FF:53:D6:74:E0:8E:F5:5B:38 X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c3:37:e0:7c:26:f6:6b:86:e4:f1:23:0f:35:82:00:21:36: cb:f2:4b:b5:91:b6:b7:44:ba:cf:80:db:6c:71:55:6e:86:42: 4c:b7:9b:48:21:72:ef:81:21:c6:e8:3d:c9:e4:38:e0:3e:5b: 5a:1d:4c:83:a9:17:a7:ec:f1:5e:a0:05:0a:4b:30:70:a5:c4: 9e:a3:e3:9d:fd:a2:16:d9:cb:0a:20:9f:b7:5b:a7:a3:5f:6a: 97:9b:17:ed:ab:b4:6c:8a:31:1a:f9:82:7e:19:a9:31:46:bd: 2b:35:d6:0d:a3:9a:c8:4b:cf:fa:a5:1d:aa:2c:73:f0:d7:79: 55:61:ae:67:97:2e:28:22:5c:0e:3a:87:99:8c:ea:f7:97:df: dd:12:7c:2d:15:25:c7:9e:76:87:95:3f:20:bc:08:67:42:80: 05:49:fd:6e:cb:25:b5:d3:5e:7a:f8:5f:8e:7e:82:b9:d4:76: 72:c5:25:17:d1:85:78:99:c1:72:90:5e:3b:ae:bc:21:d7:95: c3:83:6d:82:24:27:05:fe:32:01:d5:ff:84:db:19:f1:e7:9c: 36:9e:08:14:9b:3b:29:f3:6b:23:0a:1b:08:b1:16:57:b9:d8: 4f:c1:c0:6d:20:3a:cf:74:79:41:64:ef:78:c2:16:98:2f:c9: aa:a1:4d:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOojjhKTNT+yy6M4bffBrmofWAGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA3MjMyMjUyNTFaFw0yNjA3MjUwMDI5NTFaMDMxMTAvBgNV BAMTKDA1NkFBRTcxNTI2NTUyMDVGRTA2NDhGRjUzRDY3NEUwOEVGNTVCMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg6sy+wOtXWoFQuR1IscmchUe9 nk1iwjRwYSxY54X0UvAU4cno0sv6BZCMhGlmkXh4TewXbF8J6Vn6QqonU6DEzi6g oLLRta/supa/TbcRKoSlbOOypbsOKvOX2sr/4bumLA8dzyxHPMd1DgzbsVosbC9D 9FeMxyk3ZvzGrfn1/qQIAxp2scQrYOJH8WtKYdEbz3o9+E8gxh//W/Pk5mJWy8Fs 43Vw2k7ugkDvI1MWVEyseDLaEZELs4rSXmenHoNWDIGsiKKDbMLw/svvgvCE4CBr DyxzW1R/JAiLfoq7u2ys44jXxY8A09TBVHtw0mn7MEF5MhxN11UcmJ7CT/cJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBWqucVJlUgX+Bkj/U9Z04I71WzgwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjDN+B8JvZrhuTxIw81ggAhNsvyS7WRtrdE us+A22xxVW6GQky3m0ghcu+BIcboPcnkOOA+W1odTIOpF6fs8V6gBQpLMHClxJ6j 4539ohbZywogn7dbp6NfapebF+2rtGyKMRr5gn4ZqTFGvSs11g2jmshLz/qlHaos c/DXeVVhrmeXLigiXA46h5mM6veX390SfC0VJceedoeVPyC8CGdCgAVJ/W7LJbXT Xnr4X45+grnUdnLFJRfRhXiZwXKQXjuuvCHXlcODbYIkJwX+MgHV/4TbGfHnnDae CBSbOynzayMKGwixFle52E/BwG0gOs90eUFk73jCFpgvyaqhTdw= -----END CERTIFICATE-----Generated at Fri Jul 24 11:23:00 2026 by rpki-client