$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: ORujC+ChVkRMiTNYjXt+QIHQinW6lXel/+z11eu1XUQ= Subject key identifier: 8C:3A:56:81:57:23:8C:20:3A:09:04:BB:B2:E1:89:8F:B7:AF:FA:1B Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 2EB3A597E880FAAA539F1C80367F027FC14A77C7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 0F Signing time: Tue 12 May 2026 20:32:32 +0000 Manifest this update: Tue 12 May 2026 20:27:32 +0000 Manifest next update: Wed 13 May 2026 21:19:32 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) 2: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: SIQQNeQqD1F+5kC2a+i639JytR7KIOrfkTaYuk7pXXc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 21:19:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:b3:a5:97:e8:80:fa:aa:53:9f:1c:80:36:7f:02:7f:c1:4a:77:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: May 12 20:27:32 2026 GMT Not After : May 13 21:19:32 2026 GMT Subject: CN=8C3A568157238C203A0904BBB2E1898FB7AFFA1B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9e:32:27:ea:00:b3:64:92:b4:ea:8e:c3:a7: c7:21:91:1e:6e:7a:78:05:7a:c4:51:94:44:de:8c: 97:3c:72:fd:30:8c:54:86:ce:f2:f1:e4:ea:14:20: b0:d4:86:6e:9c:88:0c:90:d6:e7:68:1f:8c:9a:56: d5:b3:52:42:13:7b:07:fb:d9:2c:4d:b9:d8:27:70: 5d:86:13:ef:fd:c6:76:a3:28:4b:35:c0:db:ab:9c: e3:f5:e1:c2:47:6d:1d:01:db:c9:bd:f8:24:bc:2c: 1f:36:fa:dc:84:eb:cc:62:71:93:9a:77:c2:e6:bc: aa:ab:49:5e:d1:c2:f1:dd:d5:67:60:0f:bb:61:39: 3e:30:bf:cb:5c:b6:1f:fc:da:0b:03:d8:c2:22:8a: 82:c2:cf:f5:71:a1:0d:84:8c:37:eb:1d:6f:d0:b3: dc:d7:ed:03:65:44:28:10:94:01:e9:11:82:66:a0: 8e:b7:9d:b6:86:77:8c:95:d6:d1:62:3b:af:b1:f6: 36:ea:89:62:3e:26:32:8c:27:bb:6b:da:17:68:f1: b7:ce:94:6e:86:88:18:f3:83:fd:c4:57:6a:61:54: 26:65:45:cf:db:22:7d:6f:3d:94:93:9a:9b:ba:2c: 24:56:44:e1:f1:dc:b3:4f:3c:fa:4f:c6:e3:56:79: 7c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:3A:56:81:57:23:8C:20:3A:09:04:BB:B2:E1:89:8F:B7:AF:FA:1B X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:52:a3:35:94:24:50:c6:ec:2f:1d:14:b1:8a:21:52:c7:fb: 54:35:f7:ad:07:c4:92:90:cf:4b:c4:f6:33:60:9e:57:f4:98: 85:95:c4:6b:fc:c0:2f:bf:33:f3:30:57:3a:89:96:fc:86:62: 09:fd:fa:11:99:1e:f0:bc:9f:16:0e:bb:f7:01:39:b0:2d:a7: 91:7a:6d:2b:7e:26:00:11:b5:bd:d1:70:cc:24:6e:18:14:0a: 46:48:bc:ee:86:cc:b2:06:b8:e8:e9:26:a8:d6:1f:66:78:48: d7:38:04:ba:ba:3f:c5:e3:c5:89:84:74:44:43:80:36:91:44: 34:bf:9e:f8:7f:dd:77:88:dc:62:62:f4:b3:f3:cc:a3:04:4f: 9d:87:5e:c4:d2:6a:e1:c7:ba:d7:e2:83:e7:4f:ad:7f:d2:5c: 0b:65:b5:54:09:ef:8f:60:59:d4:ff:01:70:62:77:d1:f3:ea: 6b:bf:4a:de:6b:be:bf:f5:c2:c1:e0:23:69:9b:39:7e:7b:2b: 67:78:5e:18:ec:ac:6d:7d:5a:bc:b3:ad:5c:4b:50:d3:ac:c1: 51:f0:81:4c:92:9c:8e:59:7c:ee:96:33:dc:f7:de:a9:d3:14: 98:21:f3:ad:29:cb:59:d6:a6:e6:67:30:18:6b:77:48:75:2a: 2d:c1:c0:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULrOll+iA+qpTnxyANn8Cf8FKd8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA1MTIyMDI3MzJaFw0yNjA1MTMyMTE5MzJaMDMxMTAvBgNV BAMTKDhDM0E1NjgxNTcyMzhDMjAzQTA5MDRCQkIyRTE4OThGQjdBRkZBMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnjIn6gCzZJK06o7Dp8chkR5u engFesRRlETejJc8cv0wjFSGzvLx5OoUILDUhm6ciAyQ1udoH4yaVtWzUkITewf7 2SxNudgncF2GE+/9xnajKEs1wNurnOP14cJHbR0B28m9+CS8LB82+tyE68xicZOa d8LmvKqrSV7RwvHd1WdgD7thOT4wv8tcth/82gsD2MIiioLCz/VxoQ2EjDfrHW/Q s9zX7QNlRCgQlAHpEYJmoI63nbaGd4yV1tFiO6+x9jbqiWI+JjKMJ7tr2hdo8bfO lG6GiBjzg/3EV2phVCZlRc/bIn1vPZSTmpu6LCRWROHx3LNPPPpPxuNWeXzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjDpWgVcjjCA6CQS7suGJj7ev+hswHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxSozWUJFDG7C8dFLGKIVLH+1Q1960HxJKQ z0vE9jNgnlf0mIWVxGv8wC+/M/MwVzqJlvyGYgn9+hGZHvC8nxYOu/cBObAtp5F6 bSt+JgARtb3RcMwkbhgUCkZIvO6GzLIGuOjpJqjWH2Z4SNc4BLq6P8XjxYmEdERD gDaRRDS/nvh/3XeI3GJi9LPzzKMET52HXsTSauHHutfig+dPrX/SXAtltVQJ749g WdT/AXBid9Hz6mu/St5rvr/1wsHgI2mbOX57K2d4XhjsrG19WryzrVxLUNOswVHw gUySnI5ZfO6WM9z33qnTFJgh860py1nWpuZnMBhrd0h1Ki3BwFs= -----END CERTIFICATE-----Generated at Wed May 13 02:51:02 2026 by rpki-client