$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft File: 815468AF79588A14560E794FB64918D01C6C1FDC.mft (raw, json) Hash identifier: wNgn3Cgeor8HIG7QbgSp6MGe+/E1FvBVRTBdkN/ytm4= Subject key identifier: 85:9C:0D:92:20:44:6E:96:13:9D:C2:A6:BF:DC:AE:E8:F9:89:2F:AC Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC Certificate issuer: /CN=815468AF79588A14560E794FB64918D01C6C1FDC Certificate serial: 3C6458743C48C13F0D70E14C744FCDDF58F324B7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 19:19:49 +0000 Manifest this update: Wed 23 Sep 2026 19:14:49 +0000 Manifest next update: Thu 24 Sep 2026 22:58:49 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: j6ecS+LU2IE57nqnTMCP3ISPfe6p/tZiprWjSdtyRJI=) 2: 815468AF79588A14560E794FB64918D01C6C1FDC.crl (hash: 7j3flWR1BwRHlYI/zLJHvTxL7Ds9WXIGdFnMC8PwwYc=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: 4TyXOZJITcEyepgGV7UqSgIx7GZrhhX2jvzd83SSTg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 22:58:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:64:58:74:3c:48:c1:3f:0d:70:e1:4c:74:4f:cd:df:58:f3:24:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC Validity Not Before: Sep 23 19:14:49 2026 GMT Not After : Sep 24 22:58:49 2026 GMT Subject: CN=859C0D9220446E96139DC2A6BFDCAEE8F9892FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:2f:d5:26:03:de:18:55:e9:1d:6a:b8:62:87: e6:d0:bc:97:8e:7a:fa:98:1f:7f:31:dd:13:f8:8e: e2:92:73:a6:06:04:b9:84:ed:53:10:c8:60:9d:48: 6b:5a:37:29:3a:56:a6:7c:f8:f8:dc:57:9b:89:81: c0:0b:66:0f:2c:6d:eb:6b:44:9c:a4:19:d6:bd:8b: d1:0d:9c:3d:3f:e4:96:98:b9:2c:fa:46:73:fd:b3: 7f:14:4f:21:d1:66:48:8b:fd:cb:03:7f:76:07:78: 01:ee:5f:75:ba:38:8b:80:97:1b:ae:55:3c:53:01: 4d:26:70:0b:83:e7:15:3e:62:22:3f:06:5d:cf:0b: 15:77:9e:dc:97:c7:d2:fa:ff:44:8f:6b:0e:0b:d8: 68:10:eb:f3:6c:ed:a8:a3:81:6f:59:fb:ae:c8:34: 15:94:f7:4e:4b:a5:30:c8:fd:69:67:cf:e7:43:ad: 3e:e0:1e:c5:e3:8d:db:94:92:5d:c8:0e:a5:1f:19: b2:6c:e7:74:19:3c:68:be:c6:f3:95:92:19:34:6b: 25:da:6c:24:6f:3a:b4:25:68:e7:0a:df:7c:3a:fd: 00:44:64:f8:c0:d0:50:9c:c2:3b:36:70:1c:be:16: 6a:da:34:1a:6e:e0:e4:12:4b:37:c1:d3:3f:50:3e: 2e:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9C:0D:92:20:44:6E:96:13:9D:C2:A6:BF:DC:AE:E8:F9:89:2F:AC X509v3 Authority Key Identifier: keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:5a:e1:2c:ab:7b:5a:e0:07:5b:bf:8a:4b:9f:6e:4f:1e:50: d5:cb:9d:34:2a:27:88:a5:4f:10:22:aa:02:e4:8d:72:45:dd: d1:31:c5:10:de:fb:3d:d8:4a:3e:df:d9:1a:aa:ff:ce:94:27: 9b:b8:2e:67:6e:e3:fd:43:03:99:8d:48:d7:96:9e:43:6a:e8: 2f:83:54:1a:0f:87:e9:3f:90:49:67:57:21:2a:f7:3e:0d:18: a1:f1:db:62:5a:fa:9b:36:dc:b0:57:46:bb:1d:06:cd:0f:73: 9a:8a:89:05:f6:c2:a9:bc:b6:9a:db:f6:10:93:fa:5e:e6:f5: 73:c0:f4:00:f1:51:5f:e2:09:89:dd:0a:2e:90:74:4a:52:cf: 88:2b:c1:12:b3:f2:4b:77:b3:ac:a2:48:12:57:41:e0:a0:c6: 55:06:d6:80:8e:0a:1d:b8:43:57:0f:24:28:68:d2:08:c2:93: ae:33:82:6f:47:eb:0c:79:66:17:00:56:e8:50:29:73:cc:58: e2:bf:e3:8a:61:29:32:aa:e5:14:01:cd:ef:d0:0f:50:a0:c1: a2:d0:6d:5b:46:ce:c9:f5:5d:b5:26:01:b0:bf:91:d9:7d:84: 41:fc:6e:80:ef:28:6c:6d:5f:b3:82:d4:c7:24:18:15:f7:55: d4:44:ae:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGRYdDxIwT8NcOFMdE/N31jzJLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAx QzZDMUZEQzAeFw0yNjA5MjMxOTE0NDlaFw0yNjA5MjQyMjU4NDlaMDMxMTAvBgNV BAMTKDg1OUMwRDkyMjA0NDZFOTYxMzlEQzJBNkJGRENBRUU4Rjk4OTJGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChL9UmA94YVekdarhih+bQvJeO evqYH38x3RP4juKSc6YGBLmE7VMQyGCdSGtaNyk6VqZ8+PjcV5uJgcALZg8sbetr RJykGda9i9ENnD0/5JaYuSz6RnP9s38UTyHRZkiL/csDf3YHeAHuX3W6OIuAlxuu VTxTAU0mcAuD5xU+YiI/Bl3PCxV3ntyXx9L6/0SPaw4L2GgQ6/Ns7aijgW9Z+67I NBWU905LpTDI/Wlnz+dDrT7gHsXjjduUkl3IDqUfGbJs53QZPGi+xvOVkhk0ayXa bCRvOrQlaOcK33w6/QBEZPjA0FCcwjs2cBy+FmraNBpu4OQSSzfB0z9QPi6xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZwNkiBEbpYTncKmv9yu6PmJL6wwHwYDVR0j BBgwFoAUgVRor3lYihRWDnlPtkkY0BxsH9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTAwNGU1MzAtMmZjZi00Y2Q2LWIwNWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3 OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAxQzZDMUZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTU0NjhBRjc5NTg4QTE0NTYwRTc5NEZCNjQ5MThEMDFDNkMx RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4 RDAxQzZDMUZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKpa4Syre1rgB1u/ikufbk8eUNXLnTQqJ4il TxAiqgLkjXJF3dExxRDe+z3YSj7f2Rqq/86UJ5u4Lmdu4/1DA5mNSNeWnkNq6C+D VBoPh+k/kElnVyEq9z4NGKHx22Ja+ps23LBXRrsdBs0Pc5qKiQX2wqm8tprb9hCT +l7m9XPA9ADxUV/iCYndCi6QdEpSz4grwRKz8kt3s6yiSBJXQeCgxlUG1oCOCh24 Q1cPJCho0gjCk64zgm9H6wx5ZhcAVuhQKXPMWOK/44phKTKq5RQBze/QD1CgwaLQ bVtGzsn1XbUmAbC/kdl9hEH8boDvKGxtX7OC1MckGBX3VdRErhk= -----END CERTIFICATE-----Generated at Thu Sep 24 06:04:23 2026 by rpki-client