$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: AdIZIxmTVAif40EJtV0gTtMpx1y8qNXMeOdcowISj4g= Subject key identifier: 37:F2:F9:45:84:B4:70:0D:87:F3:07:1C:D9:41:C0:22:14:BD:46:D3 Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 19D9D2E87A768E8EE7A300C919804AD22C60F5DB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: C6 Signing time: Sun 27 Sep 2026 05:10:39 +0000 Manifest this update: Sun 27 Sep 2026 05:05:39 +0000 Manifest next update: Mon 28 Sep 2026 07:39:39 +0000 Files and hashes: 1: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: NmE3Np8G7gQZq2B1oHeCbyxsnFDFmcyK9wWVFqlAbp8=) 2: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 3: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 4: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) 5: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Sep 2026 07:39:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:d9:d2:e8:7a:76:8e:8e:e7:a3:00:c9:19:80:4a:d2:2c:60:f5:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Sep 27 05:05:39 2026 GMT Not After : Sep 28 07:39:39 2026 GMT Subject: CN=37F2F94584B4700D87F3071CD941C02214BD46D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:04:28:8d:ec:e5:98:82:57:c9:df:11:4c:e1: 46:52:9b:d1:dd:6a:f6:89:a9:8f:7f:81:73:81:43: 9e:36:29:11:ca:7d:2f:53:0b:97:90:98:5d:80:c3: 0d:51:05:00:6c:40:40:cf:4d:a1:3a:7b:36:26:91: 81:7e:bb:ab:b7:62:e0:b5:37:b5:f3:20:cf:cc:3f: 6f:e7:9c:f8:2b:4f:56:eb:5d:dd:42:82:39:10:e4: 0b:33:6b:3d:36:89:04:7d:ce:7c:86:d1:cf:05:4b: d1:6e:e5:1a:01:e0:f8:73:0f:bf:42:86:e5:73:b9: 47:42:cd:cc:66:05:1d:6e:59:5b:74:4d:47:8f:8f: a7:f5:71:69:1e:21:15:62:22:88:ae:32:ff:8f:94: 36:0a:c9:3a:5b:88:90:14:75:7b:c6:36:b9:44:b9: c6:fa:74:f7:91:e9:bf:27:86:f5:a5:08:75:8d:2c: e0:49:09:68:39:0a:15:83:b6:c2:67:33:45:d9:22: bb:85:69:bd:ed:42:13:eb:b2:80:f4:f6:27:07:4c: 65:76:d3:06:03:0d:9d:e9:f0:0b:d5:25:3e:3f:40: 1b:f9:d0:1d:2f:4c:14:e7:27:c4:39:8a:c5:36:5c: c6:2f:d9:b6:4c:7a:f6:d4:5c:d1:b9:fc:69:ae:9e: b8:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:F2:F9:45:84:B4:70:0D:87:F3:07:1C:D9:41:C0:22:14:BD:46:D3 X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:e0:5e:ce:ec:8c:7f:e0:25:2c:ec:85:f7:31:88:39:82:a2: e2:6f:4c:93:96:02:5f:97:82:44:79:72:31:06:8a:ab:33:62: ce:93:e5:7a:77:f8:54:29:62:e1:1d:44:86:6f:b9:50:b5:70: 29:cd:59:86:c8:f7:a3:33:fe:7d:a6:4a:c0:b5:24:a8:9f:01: ee:65:03:38:8b:55:69:cf:1c:72:c2:02:23:94:53:42:38:1e: 3e:13:09:89:f9:b3:8a:2d:9d:08:f1:2a:15:70:1a:4b:f4:70: 6f:20:8a:d9:03:d6:7e:c4:f0:07:bc:69:ce:f9:4c:1e:3c:3c: 92:a6:4b:20:e1:c9:e8:ab:58:87:41:2a:1c:b9:5c:78:3f:51: be:1d:6e:4b:cf:eb:18:80:f9:f4:7b:25:14:47:8f:44:71:fe: 49:6f:43:ae:09:4d:23:b1:49:8e:b7:27:4f:ec:33:01:34:86: 97:38:99:46:8b:1b:96:1c:6f:4b:2a:28:94:04:11:71:1f:82: 31:cd:c0:01:35:92:7e:fc:3a:66:39:29:77:44:e3:42:78:ca: 14:06:49:3a:0a:dd:e9:ad:82:33:68:5c:aa:3a:d6:c0:c3:1d: 80:03:03:e9:c3:a1:80:f5:f1:e9:cc:6e:2a:21:9e:ba:7a:29: 56:89:af:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGdnS6Hp2jo7nowDJGYBK0ixg9dswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA5MjcwNTA1MzlaFw0yNjA5MjgwNzM5MzlaMDMxMTAvBgNV BAMTKDM3RjJGOTQ1ODRCNDcwMEQ4N0YzMDcxQ0Q5NDFDMDIyMTRCRDQ2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BCiN7OWYglfJ3xFM4UZSm9Hd avaJqY9/gXOBQ542KRHKfS9TC5eQmF2Aww1RBQBsQEDPTaE6ezYmkYF+u6u3YuC1 N7XzIM/MP2/nnPgrT1brXd1CgjkQ5Aszaz02iQR9znyG0c8FS9Fu5RoB4PhzD79C huVzuUdCzcxmBR1uWVt0TUePj6f1cWkeIRViIoiuMv+PlDYKyTpbiJAUdXvGNrlE ucb6dPeR6b8nhvWlCHWNLOBJCWg5ChWDtsJnM0XZIruFab3tQhPrsoD09icHTGV2 0wYDDZ3p8AvVJT4/QBv50B0vTBTnJ8Q5isU2XMYv2bZMevbUXNG5/GmunriJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN/L5RYS0cA2H8wcc2UHAIhS9RtMwHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADfgXs7sjH/gJSzshfcxiDmCouJvTJOWAl+X gkR5cjEGiqszYs6T5Xp3+FQpYuEdRIZvuVC1cCnNWYbI96Mz/n2mSsC1JKifAe5l AziLVWnPHHLCAiOUU0I4Hj4TCYn5s4otnQjxKhVwGkv0cG8gitkD1n7E8Ae8ac75 TB48PJKmSyDhyeirWIdBKhy5XHg/Ub4dbkvP6xiA+fR7JRRHj0Rx/klvQ64JTSOx SY63J0/sMwE0hpc4mUaLG5Ycb0sqKJQEEXEfgjHNwAE1kn78OmY5KXdE40J4yhQG SToK3emtgjNoXKo61sDDHYADA+nDoYD18enMbiohnrp6KVaJr2Q= -----END CERTIFICATE-----Generated at Sun Sep 27 10:16:08 2026 by rpki-client