$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json) Hash identifier: 74vIYvtehNL8Xmw+c0QGhUrN3nRvL5Ol1P/rhDvYibg= Subject key identifier: 29:0F:D8:E6:F6:BA:1D:62:E4:9F:C0:59:69:6E:00:A1:A4:5F:7A:E8 Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Certificate serial: 44856374B3EF8A500EF4C275533FA09DFB2C1699 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 05:37:59 +0000 Manifest this update: Wed 23 Sep 2026 05:32:59 +0000 Manifest next update: Thu 24 Sep 2026 05:57:59 +0000 Files and hashes: 1: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=) 2: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=) 3: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: DEhrx5K0fBbQAawirFuD/HqNQFUqjKD0wPpHrideghA=) 4: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 05:57:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:85:63:74:b3:ef:8a:50:0e:f4:c2:75:53:3f:a0:9d:fb:2c:16:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Validity Not Before: Sep 23 05:32:59 2026 GMT Not After : Sep 24 05:57:59 2026 GMT Subject: CN=290FD8E6F6BA1D62E49FC059696E00A1A45F7AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:3f:e0:ef:71:30:da:e3:cb:7a:34:04:75:2c: 38:74:00:f7:e6:4e:22:22:a1:14:94:51:c7:40:c1: 63:81:e6:60:2d:81:71:12:74:40:76:c8:76:1e:52: f9:0c:86:e5:c6:b7:2a:7b:51:3a:8b:e9:75:d3:29: 35:b4:64:93:e1:a3:ff:a5:6f:65:fd:57:fc:f3:f6: 81:97:53:11:e5:f3:31:09:6c:e6:02:cc:a3:2c:e4: 44:2a:e9:b7:d9:5a:20:8f:02:d5:6b:70:57:3d:51: 63:5e:db:15:d5:f8:a7:dc:6a:1f:35:c4:3e:62:ae: ef:36:ae:35:05:82:8b:3c:a2:20:be:cf:5e:ae:d8: b6:d1:30:c3:92:d1:6e:59:9b:8b:7f:70:96:61:fd: 5d:ba:a8:05:13:30:7b:2c:81:c0:51:cc:58:56:f2: 6b:a2:b7:be:94:6b:4a:2e:6b:a3:02:cf:c9:35:a8: 50:b2:42:e7:8e:20:1b:3e:85:c5:f7:ad:c9:1f:6a: 75:57:a8:45:ce:65:58:2e:f1:88:5c:73:b2:9b:e4: ef:7d:97:61:a0:bb:4e:88:e8:1e:40:e6:78:f7:7c: 4e:ca:42:dc:32:65:46:2a:c4:85:05:85:8f:c1:bc: cf:0b:7b:6f:2f:c7:c8:98:fe:41:79:fc:21:79:71: b5:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:0F:D8:E6:F6:BA:1D:62:E4:9F:C0:59:69:6E:00:A1:A4:5F:7A:E8 X509v3 Authority Key Identifier: keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:27:0d:d3:91:82:68:90:e3:6f:ad:a6:57:c4:32:61:23:4c: db:8c:8e:3d:7d:9a:e9:88:22:41:cc:63:b7:7f:23:eb:b5:37: c0:da:56:85:05:4d:7e:a8:c4:77:91:74:c8:43:f3:1c:c6:af: f3:10:da:43:ff:fb:fb:85:61:99:d2:51:55:67:23:40:29:bc: c2:9d:60:5d:9b:df:bc:0d:ab:07:32:ab:76:00:63:96:f3:04: 42:8b:48:76:3f:aa:f2:f9:8c:8a:b1:cd:7c:74:92:16:17:1e: 68:d4:ab:69:38:79:92:93:bc:c6:ba:b2:3a:2e:21:91:96:d0: 64:cc:94:e0:10:cc:0d:f8:f4:ff:7c:42:4b:d8:b5:fe:65:54: b9:1a:50:c3:30:00:cc:7a:e3:38:fe:ab:d9:8c:ff:b9:e6:16: 6f:48:ed:d0:67:58:fb:d2:8d:97:d9:e1:d6:96:c9:55:38:a1: 50:a5:c1:f7:f5:58:10:72:d0:26:d3:c7:5c:ca:f3:8a:77:3b: d4:1f:6f:fc:68:e4:b6:e5:47:61:b1:d7:83:70:23:9e:5a:e8: d7:6f:b6:ec:ab:ea:59:f1:ee:38:7d:f0:fc:d0:1f:cf:78:c9: f4:74:28:43:b3:4f:01:68:40:ed:e5:f7:51:41:79:05:1e:01: 3d:fc:ce:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURIVjdLPvilAO9MJ1Uz+gnfssFpkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZD MUIzQzM3NjAeFw0yNjA5MjMwNTMyNTlaFw0yNjA5MjQwNTU3NTlaMDMxMTAvBgNV BAMTKDI5MEZEOEU2RjZCQTFENjJFNDlGQzA1OTY5NkUwMEExQTQ1RjdBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJP+DvcTDa48t6NAR1LDh0APfm TiIioRSUUcdAwWOB5mAtgXESdEB2yHYeUvkMhuXGtyp7UTqL6XXTKTW0ZJPho/+l b2X9V/zz9oGXUxHl8zEJbOYCzKMs5EQq6bfZWiCPAtVrcFc9UWNe2xXV+Kfcah81 xD5iru82rjUFgos8oiC+z16u2LbRMMOS0W5Zm4t/cJZh/V26qAUTMHssgcBRzFhW 8muit76Ua0oua6MCz8k1qFCyQueOIBs+hcX3rckfanVXqEXOZVgu8Yhcc7Kb5O99 l2Ggu06I6B5A5nj3fE7KQtwyZUYqxIUFhY/BvM8Le28vx8iY/kF5/CF5cbX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKQ/Y5va6HWLkn8BZaW4AoaRfeugwHwYDVR0j BBgwFoAUFdbi0lJ+5tz2gf7wY/YbH8Gzw3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhmOWU4N2QtZTUwOS00N2JhLWJlOWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1 MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZDMUIzQzM3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUQ2RTJEMjUyN0VFNkRDRjY4MUZFRjA2M0Y2MUIxRkMxQjND Mzc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl OWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFC MUZDMUIzQzM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADMnDdORgmiQ42+tplfEMmEjTNuMjj19mumI IkHMY7d/I+u1N8DaVoUFTX6oxHeRdMhD8xzGr/MQ2kP/+/uFYZnSUVVnI0ApvMKd YF2b37wNqwcyq3YAY5bzBEKLSHY/qvL5jIqxzXx0khYXHmjUq2k4eZKTvMa6sjou IZGW0GTMlOAQzA349P98QkvYtf5lVLkaUMMwAMx64zj+q9mM/7nmFm9I7dBnWPvS jZfZ4daWyVU4oVClwff1WBBy0CbTx1zK84p3O9Qfb/xo5LblR2Gx14NwI55a6Ndv tuyr6lnx7jh98PzQH894yfR0KEOzTwFoQO3l91FBeQUeAT38ziM= -----END CERTIFICATE-----Generated at Wed Sep 23 23:09:54 2026 by rpki-client