$ rpki-client -vvvf rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft File: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft (raw, json) Hash identifier: K/7UyNXSrayGbBOvc/ri+4CgEWJAflYqsFyXJqKVjd0= Subject key identifier: 31:7D:3B:2E:6F:30:07:44:33:87:DB:84:6D:CD:C0:22:0F:64:84:7A Authority key identifier: 15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 Certificate issuer: /CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Certificate serial: 119DC1949E06264FA5EC199FD2341182B343AC9B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft Manifest number: C0 Signing time: Thu 24 Sep 2026 00:21:04 +0000 Manifest this update: Thu 24 Sep 2026 00:16:04 +0000 Manifest next update: Fri 25 Sep 2026 01:33:04 +0000 Files and hashes: 1: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl (hash: XwWbR4EQrfNLdKVZvknyxrpDYyDKQdmx/n/5Gai6fWo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 23:26:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9d:c1:94:9e:06:26:4f:a5:ec:19:9f:d2:34:11:82:b3:43:ac:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Validity Not Before: Sep 24 00:16:04 2026 GMT Not After : Sep 25 01:33:04 2026 GMT Subject: CN=317D3B2E6F3007443387DB846DCDC0220F64847A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:97:6c:66:35:4b:0d:15:2b:ea:d5:ac:77:60: 75:64:80:7a:51:b6:a7:18:13:f4:cc:72:ef:eb:b8: 75:ef:df:48:be:b8:b2:7c:19:76:b8:00:2e:5c:28: e4:3e:1a:e9:47:23:c2:d4:5c:3e:55:62:ea:5c:71: f4:df:e1:3f:58:b1:44:21:ac:8b:87:86:15:f9:66: 5a:ac:da:8f:e8:71:72:ab:d4:68:7d:70:da:54:f7: 8c:06:3f:d3:35:a7:0a:39:20:43:64:8c:d9:96:b8: fe:24:00:68:d7:11:ec:60:b4:a8:0b:0b:89:c4:92: a5:a5:8f:ed:8c:3c:f6:2f:6c:20:7d:cc:f8:af:1d: 98:08:ab:7a:07:e2:e9:40:67:53:73:da:08:39:5c: 4b:de:7e:3c:92:60:8b:05:f4:83:34:ef:17:82:2f: 5b:80:6e:76:18:9b:ad:f9:0e:24:4b:2e:58:41:e7: f4:6e:d9:0a:53:6a:6c:ce:9d:4a:9e:89:e7:ef:8d: f3:d8:df:85:c8:e7:e8:08:fc:07:dd:d1:2e:f6:2e: ba:31:cd:ce:bb:01:0a:65:af:cf:c7:ff:95:64:2d: 19:c3:e1:ac:4c:9c:a4:8b:d4:c5:3b:2a:03:ca:74: 39:d0:48:2d:56:0a:99:1b:89:d3:bc:a2:e4:69:89: 32:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:7D:3B:2E:6F:30:07:44:33:87:DB:84:6D:CD:C0:22:0F:64:84:7A X509v3 Authority Key Identifier: keyid:15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:e4:37:18:ce:85:65:4c:88:a8:ac:ed:eb:31:69:75:86:ed: b6:08:d7:af:5a:b7:48:a3:7d:d8:6f:68:8e:03:b1:c7:b5:70: 74:98:68:34:5e:51:7b:09:df:4e:cd:32:d0:a0:21:5b:b8:bc: 1e:7b:05:c8:95:0a:af:78:1f:be:59:55:16:a4:f8:d9:1d:bd: 89:8a:a4:26:86:a4:38:18:fc:ea:99:55:0a:9c:ef:32:21:13: 5e:44:74:90:ac:76:92:de:10:f9:75:cc:5e:cc:5a:7d:45:ce: 3a:3b:74:75:78:02:cc:b3:f9:66:a7:18:66:5d:66:5d:b8:a2: 99:37:84:3e:29:0a:9a:d0:0a:89:f6:91:d4:a8:c5:bd:d9:1e: 67:8f:7b:d6:20:61:05:ec:08:55:29:b3:0e:53:53:5c:08:53: e4:34:6e:f4:6d:7b:24:9d:da:fe:d8:73:9a:10:4b:d7:ac:d6: 1f:dd:2f:9b:b3:69:fd:48:1b:d3:d5:2b:39:0b:f9:2d:93:32: ca:2c:30:8d:c6:90:bf:71:c8:25:1c:a0:dd:d8:3f:56:2f:01: 5e:ee:93:21:6a:df:21:e0:c6:7b:d7:75:df:8e:10:98:03:16: 13:93:e8:f6:7a:16:5a:39:22:0c:91:c3:ed:02:29:f8:21:cd: e9:cd:61:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZ3BlJ4GJk+l7Bmf0jQRgrNDrJswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJD OTkwMkY2ODAeFw0yNjA5MjQwMDE2MDRaFw0yNjA5MjUwMTMzMDRaMDMxMTAvBgNV BAMTKDMxN0QzQjJFNkYzMDA3NDQzMzg3REI4NDZEQ0RDMDIyMEY2NDg0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdl2xmNUsNFSvq1ax3YHVkgHpR tqcYE/TMcu/ruHXv30i+uLJ8GXa4AC5cKOQ+GulHI8LUXD5VYupccfTf4T9YsUQh rIuHhhX5Zlqs2o/ocXKr1Gh9cNpU94wGP9M1pwo5IENkjNmWuP4kAGjXEexgtKgL C4nEkqWlj+2MPPYvbCB9zPivHZgIq3oH4ulAZ1Nz2gg5XEvefjySYIsF9IM07xeC L1uAbnYYm635DiRLLlhB5/Ru2QpTamzOnUqeiefvjfPY34XI5+gI/Afd0S72Lrox zc67AQplr8/H/5VkLRnD4axMnKSL1MU7KgPKdDnQSC1WCpkbidO8ouRpiTKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMX07Lm8wB0Qzh9uEbc3AIg9khHowHwYDVR0j BBgwFoAUFcZj3SHAS2yyCEp0XzW2ssmQL2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTY4NzgtNmNiMi00YTVmLWI1NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQy MUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJDOTkwMkY2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUM2NjNERDIxQzA0QjZDQjIwODRBNzQ1RjM1QjZCMkM5OTAy RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2 QjJDOTkwMkY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAbkNxjOhWVMiKis7esxaXWG7bYI169at0ij fdhvaI4Dsce1cHSYaDReUXsJ307NMtCgIVu4vB57BciVCq94H75ZVRak+NkdvYmK pCaGpDgY/OqZVQqc7zIhE15EdJCsdpLeEPl1zF7MWn1Fzjo7dHV4Asyz+WanGGZd Zl24opk3hD4pCprQCon2kdSoxb3ZHmePe9YgYQXsCFUpsw5TU1wIU+Q0bvRteySd 2v7Yc5oQS9es1h/dL5uzaf1IG9PVKzkL+S2TMsosMI3GkL9xyCUcoN3YP1YvAV7u kyFq3yHgxnvXdd+OEJgDFhOT6PZ6Flo5IgyRw+0CKfghzenNYYM= -----END CERTIFICATE-----Generated at Thu Sep 24 02:42:14 2026 by rpki-client