$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: Uf7/J9nVuS4UH+5vKY4cp2+ZA8mOjGtO4IZqo9Y+rBY= Subject key identifier: 76:DC:80:C8:D8:0F:B3:0B:50:CE:A8:70:93:4F:28:A9:4B:42:F7:FF Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 728FB39DA71396B3B42EF0334C01A704D29D9ED9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: C8 Signing time: Mon 28 Sep 2026 11:39:08 +0000 Manifest this update: Mon 28 Sep 2026 11:34:08 +0000 Manifest next update: Tue 29 Sep 2026 15:38:08 +0000 Files and hashes: 1: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: 9rT7uviEfmYRqjW17rk5P6jJ3kB2ZFCuqCJKj3uPyJg=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Sep 2026 15:38:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:8f:b3:9d:a7:13:96:b3:b4:2e:f0:33:4c:01:a7:04:d2:9d:9e:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Sep 28 11:34:08 2026 GMT Not After : Sep 29 15:38:08 2026 GMT Subject: CN=76DC80C8D80FB30B50CEA870934F28A94B42F7FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:a6:5c:72:39:44:9e:bf:c0:40:7f:53:a1:94: 26:75:d0:00:84:a7:86:2f:cd:24:18:12:74:16:2a: 60:74:a5:ef:cd:2e:51:6f:eb:45:93:46:d3:96:69: 39:35:e2:70:a1:01:d2:4a:5c:ae:3e:db:7b:68:87: 9c:ed:ed:9c:78:e1:63:cf:6b:91:11:83:d7:7e:8b: 59:25:74:b4:da:f4:61:eb:bb:1f:5c:d0:5d:a6:8f: a2:e8:a8:f3:46:cd:2e:03:13:39:ac:bc:63:ed:fa: 9b:b3:ad:d8:0b:2e:28:c3:78:9d:80:7a:de:25:bc: f9:01:6d:fd:05:5b:52:7f:ec:da:48:d2:58:55:a0: a5:db:91:97:08:68:e0:62:dc:d6:fa:1d:4b:46:af: 6f:90:40:2f:1f:4e:81:44:d1:3f:e6:1e:a3:b8:cf: 69:ac:e8:32:e0:a7:47:bb:b8:fd:71:b4:ef:70:01: 12:14:34:c0:01:6b:d3:b3:c4:c0:33:0d:20:50:db: 68:e2:e8:c1:89:5e:28:fb:24:14:0e:3c:44:51:07: 19:ee:18:cd:b3:13:94:ad:50:f5:54:3b:2a:6d:f3: 91:25:08:af:91:13:56:ba:44:6e:79:09:1d:30:c8: a3:48:00:09:60:d1:93:1c:94:bf:b3:f9:80:33:fe: 13:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:DC:80:C8:D8:0F:B3:0B:50:CE:A8:70:93:4F:28:A9:4B:42:F7:FF X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:f1:0c:f4:3c:c2:59:79:4a:b4:2c:bb:f5:f4:81:87:eb:6b: fc:1a:d4:3b:f7:cf:02:4f:d9:85:64:bf:2f:bf:69:ee:14:54: d4:b1:09:06:b7:82:af:4c:5c:d2:00:7f:46:39:38:6e:12:84: d9:6a:6a:b3:30:b5:e9:a5:50:3f:c7:da:36:f1:fb:22:31:6c: 09:8c:a1:2d:b8:73:81:c8:cb:12:f9:58:ad:5b:2d:29:b6:b7: 74:bf:cf:e8:2b:b9:b6:b7:44:7f:fa:64:43:f3:6d:34:c0:ed: 4e:a6:df:1d:e7:38:31:ed:1d:7b:3e:67:b3:79:d3:80:fb:79: 72:14:7f:b2:ae:5b:cb:85:33:6a:bd:9e:e1:d6:05:d7:34:e8: bd:b4:2d:3e:25:7a:e3:14:7e:78:a4:c0:7a:2b:cc:91:fb:4b: d0:f3:75:d9:ec:3a:92:65:c9:52:56:09:69:29:bf:c0:08:12: f6:f5:63:71:96:06:ea:6a:0e:d3:68:c8:35:57:a8:10:21:f0: 67:07:21:32:a4:73:dc:4e:70:31:d8:79:d8:c8:85:27:10:1f: e2:6a:e9:4c:2b:a4:f5:45:66:c8:1a:57:7d:85:54:df:a8:dc: 50:9a:0c:c2:5d:55:ec:c4:06:b5:2b:be:4c:24:ea:6c:af:28: e5:f5:52:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUco+znacTlrO0LvAzTAGnBNKdntkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA5MjgxMTM0MDhaFw0yNjA5MjkxNTM4MDhaMDMxMTAvBgNV BAMTKDc2REM4MEM4RDgwRkIzMEI1MENFQTg3MDkzNEYyOEE5NEI0MkY3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBplxyOUSev8BAf1OhlCZ10ACE p4YvzSQYEnQWKmB0pe/NLlFv60WTRtOWaTk14nChAdJKXK4+23toh5zt7Zx44WPP a5ERg9d+i1kldLTa9GHrux9c0F2mj6LoqPNGzS4DEzmsvGPt+puzrdgLLijDeJ2A et4lvPkBbf0FW1J/7NpI0lhVoKXbkZcIaOBi3Nb6HUtGr2+QQC8fToFE0T/mHqO4 z2ms6DLgp0e7uP1xtO9wARIUNMABa9OzxMAzDSBQ22ji6MGJXij7JBQOPERRBxnu GM2zE5StUPVUOypt85ElCK+RE1a6RG55CR0wyKNIAAlg0ZMclL+z+YAz/hNbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtyAyNgPswtQzqhwk08oqUtC9/8wHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKTxDPQ8wll5SrQsu/X0gYfra/wa1Dv3zwJP 2YVkvy+/ae4UVNSxCQa3gq9MXNIAf0Y5OG4ShNlqarMwtemlUD/H2jbx+yIxbAmM oS24c4HIyxL5WK1bLSm2t3S/z+gruba3RH/6ZEPzbTTA7U6m3x3nODHtHXs+Z7N5 04D7eXIUf7KuW8uFM2q9nuHWBdc06L20LT4leuMUfnikwHorzJH7S9DzddnsOpJl yVJWCWkpv8AIEvb1Y3GWBupqDtNoyDVXqBAh8GcHITKkc9xOcDHYedjIhScQH+Jq 6UwrpPVFZsgaV32FVN+o3FCaDMJdVezEBrUrvkwk6myvKOX1UvU= -----END CERTIFICATE-----Generated at Tue Sep 29 08:13:42 2026 by rpki-client