$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json) Hash identifier: rztD1sFRMpCqlyHrbdoibhcFJR7CQ0fQYMPlvXLcF1o= Subject key identifier: BF:59:22:07:0A:6E:DD:FC:12:E2:96:2B:A5:8D:88:8C:4F:0F:02:0A Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Certificate serial: 7480866E74E1B6D1EACF0F0DB30977AD09981203 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 19:39:11 +0000 Manifest this update: Thu 23 Jul 2026 19:34:11 +0000 Manifest next update: Fri 24 Jul 2026 21:42:11 +0000 Files and hashes: 1: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=) 2: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=) 3: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: Z+jKMXondvfUiQF7xLacV/gfseDpc2MImTaZVZBnWEA=) 4: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 21:42:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:80:86:6e:74:e1:b6:d1:ea:cf:0f:0d:b3:09:77:ad:09:98:12:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Validity Not Before: Jul 23 19:34:11 2026 GMT Not After : Jul 24 21:42:11 2026 GMT Subject: CN=BF5922070A6EDDFC12E2962BA58D888C4F0F020A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:64:f2:ce:8e:14:64:8e:c2:05:bc:62:5d:2b: e3:93:12:89:e8:29:c6:0c:ad:c6:00:a6:a0:eb:27: 13:32:ad:76:fc:d7:63:d9:8f:bd:88:db:67:b1:57: 19:e4:79:e6:3b:5f:47:46:4e:74:b4:72:d8:64:96: 19:07:8d:f2:87:0d:ee:18:6e:27:80:97:11:e1:87: 81:ce:41:ff:1b:4c:9e:25:d3:54:62:c7:65:8d:ba: 84:1d:85:2f:9e:10:ea:4c:2a:6c:65:e9:c6:dc:c7: 38:a3:70:92:5f:ad:c1:73:c9:76:ae:de:18:e1:64: df:af:ae:03:5d:d2:4a:63:d5:75:fa:70:0a:e7:3d: 92:cc:1c:b8:8e:1f:0c:85:1b:d2:a3:ec:17:f5:9a: da:d1:e4:61:a6:89:cb:f9:22:54:3d:90:45:40:92: 7c:c9:7a:be:13:43:3e:f0:8e:f2:39:45:ce:03:81: 82:32:c7:ed:41:e5:0e:aa:11:cb:bc:8f:f1:aa:e1: 14:21:e7:e0:ab:2f:67:f7:9f:1f:33:f1:9b:b2:01: d0:55:17:bc:af:29:95:77:c5:4a:bf:b5:5d:35:c0: 10:30:bf:a3:de:9f:de:82:e3:7c:04:93:44:40:a4: 63:6a:be:a7:d0:a6:66:df:f2:c9:ea:9c:43:24:a2: 9d:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:59:22:07:0A:6E:DD:FC:12:E2:96:2B:A5:8D:88:8C:4F:0F:02:0A X509v3 Authority Key Identifier: keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:d8:25:12:25:e5:90:56:cc:92:7e:5c:83:30:0f:42:2d:b7: 13:1d:df:80:ce:f1:83:45:2e:c7:79:fb:97:83:79:d5:ab:fa: d2:a2:59:25:77:7f:20:c6:7f:fb:2b:b1:9d:a2:be:48:fa:75: 2e:52:32:37:18:9f:82:b7:5c:7c:39:2f:43:e6:7e:a7:cf:8a: 68:3f:60:14:e0:6c:c1:04:7b:39:1c:9b:2e:f9:ad:dc:63:63: 2a:de:79:e1:da:ab:31:d8:90:ad:bb:60:ff:c7:1e:ae:cf:31: 94:83:fa:d9:c0:0d:6f:61:5c:3b:26:a3:38:78:62:10:b8:4a: 29:92:f1:65:17:d7:85:42:8e:52:b5:40:8b:2d:b0:bf:f6:38: d7:dd:9f:a2:e7:ed:68:0f:65:8f:f0:1c:71:b0:52:dd:76:fa: b7:43:7b:b1:b6:b0:67:70:65:dc:92:a8:78:9e:6d:5d:af:1e: f4:f8:2f:49:e0:d8:d0:cf:b0:9f:b9:76:77:5c:a3:71:10:06: dd:18:7f:68:90:33:0f:3c:3d:04:2a:ec:11:bd:ab:82:41:8b: 6d:1b:be:b7:f8:ec:c2:d3:14:53:d7:96:55:63:a8:e8:52:ac: a1:ac:f2:31:f6:38:79:9d:c3:10:83:1e:b9:67:a3:0a:ef:ea: 54:cb:24:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdICGbnThttHqzw8Nswl3rQmYEgMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZD MUIzQzM3NjAeFw0yNjA3MjMxOTM0MTFaFw0yNjA3MjQyMTQyMTFaMDMxMTAvBgNV BAMTKEJGNTkyMjA3MEE2RURERkMxMkUyOTYyQkE1OEQ4ODhDNEYwRjAyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZPLOjhRkjsIFvGJdK+OTEono KcYMrcYApqDrJxMyrXb812PZj72I22exVxnkeeY7X0dGTnS0cthklhkHjfKHDe4Y bieAlxHhh4HOQf8bTJ4l01Rix2WNuoQdhS+eEOpMKmxl6cbcxzijcJJfrcFzyXau 3hjhZN+vrgNd0kpj1XX6cArnPZLMHLiOHwyFG9Kj7Bf1mtrR5GGmicv5IlQ9kEVA knzJer4TQz7wjvI5Rc4DgYIyx+1B5Q6qEcu8j/Gq4RQh5+CrL2f3nx8z8ZuyAdBV F7yvKZV3xUq/tV01wBAwv6Pen96C43wEk0RApGNqvqfQpmbf8snqnEMkop27AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv1kiBwpu3fwS4pYrpY2IjE8PAgowHwYDVR0j BBgwFoAUFdbi0lJ+5tz2gf7wY/YbH8Gzw3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhmOWU4N2QtZTUwOS00N2JhLWJlOWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1 MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZDMUIzQzM3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUQ2RTJEMjUyN0VFNkRDRjY4MUZFRjA2M0Y2MUIxRkMxQjND Mzc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl OWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFC MUZDMUIzQzM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzYJRIl5ZBWzJJ+XIMwD0IttxMd34DO8YNF Lsd5+5eDedWr+tKiWSV3fyDGf/srsZ2ivkj6dS5SMjcYn4K3XHw5L0PmfqfPimg/ YBTgbMEEezkcmy75rdxjYyreeeHaqzHYkK27YP/HHq7PMZSD+tnADW9hXDsmozh4 YhC4SimS8WUX14VCjlK1QIstsL/2ONfdn6Ln7WgPZY/wHHGwUt12+rdDe7G2sGdw ZdySqHiebV2vHvT4L0ng2NDPsJ+5dndco3EQBt0Yf2iQMw88PQQq7BG9q4JBi20b vrf47MLTFFPXllVjqOhSrKGs8jH2OHmdwxCDHrlnowrv6lTLJPY= -----END CERTIFICATE-----Generated at Fri Jul 24 01:18:36 2026 by rpki-client