$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: zra7UBnYqXx8v1wjtFufsW5PZKasOj1KAPRr5xdtjxk= Subject key identifier: 28:55:2D:8B:AA:6D:54:58:D6:F9:11:EB:62:C1:50:76:9C:29:B1:0D Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 7FCBA13B3D80441686E9EFA25096799B18B83425 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: 0E Signing time: Tue 12 May 2026 05:15:35 +0000 Manifest this update: Tue 12 May 2026 05:10:35 +0000 Manifest next update: Wed 13 May 2026 07:04:35 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 2: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 3: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: kj9/In5EuPhZ6y51qlvLJu/5m674bOqR74/V3xGo7Gk=) 4: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 5: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 6: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 7: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 8: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:cb:a1:3b:3d:80:44:16:86:e9:ef:a2:50:96:79:9b:18:b8:34:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: May 12 05:10:35 2026 GMT Not After : May 13 07:04:35 2026 GMT Subject: CN=28552D8BAA6D5458D6F911EB62C150769C29B10D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ac:40:a6:05:30:62:29:50:ac:8d:76:ad:ff: 06:b9:fa:e7:2c:d7:11:b1:2b:27:63:9d:56:d8:ee: b0:39:7a:a7:67:06:88:bf:8b:e4:36:6e:8d:89:9c: 2b:51:75:71:50:e6:41:f5:90:79:a6:af:3b:bc:b9: ae:97:84:ad:72:50:66:f3:15:6d:8f:ef:a9:a9:5c: 0a:62:49:f9:31:58:d2:e3:52:ac:8a:8a:38:3c:1c: 46:10:4b:c0:4c:7d:6d:06:73:61:3d:cc:fe:ba:4f: 4c:4f:ba:71:92:d4:f8:92:af:f2:87:11:04:a2:03: 56:48:e8:25:2d:9e:79:b1:36:96:05:3c:f2:b8:5d: 30:b3:67:4b:52:4a:1f:a4:c2:3b:e9:04:81:ee:81: 26:4a:e2:15:f7:48:bd:c9:4a:93:a8:2d:97:62:1c: 2d:e0:d2:f6:4b:97:30:90:ad:5e:2a:89:fe:36:24: e5:a7:42:68:16:92:23:c1:03:d8:4e:a7:83:a9:f6: cc:86:9f:80:ab:35:19:4e:0d:89:ae:be:8a:1c:51: bf:1f:23:5b:4c:a7:1a:df:c8:98:d7:da:94:d0:87: ae:a4:f8:59:81:02:f2:91:79:b4:53:e7:38:02:31: 8d:c0:6e:35:b4:63:06:93:72:fa:41:c7:6a:76:b7: 73:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:55:2D:8B:AA:6D:54:58:D6:F9:11:EB:62:C1:50:76:9C:29:B1:0D X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:f8:24:16:5d:39:25:ec:a5:da:a2:bb:e3:16:11:f7:ba:24: 5d:21:4f:0f:e6:cd:e2:03:f9:9f:2b:fc:a2:88:7c:a9:2a:04: dc:e5:c7:38:1c:1c:07:24:f9:89:3f:1c:8b:96:93:3b:f6:21: 58:d2:5e:35:32:dc:d2:df:0d:a3:5a:68:66:d1:83:df:1e:9c: 70:ff:36:97:df:e0:c0:cd:53:f0:4b:32:ea:85:92:93:fc:fc: ad:8b:e7:29:c7:8e:7a:64:e6:56:2b:5c:94:2c:1d:87:6d:45: 47:96:6d:58:4a:a3:58:0e:f7:04:bd:fb:62:19:5f:78:0a:b7: 8c:44:74:df:d7:07:0b:54:af:80:44:88:75:9b:63:7d:18:fd: 26:2a:8b:e4:32:6b:04:ef:09:66:b0:41:85:b5:d8:70:ee:b0: e5:45:78:ae:f0:22:04:51:23:ef:08:0b:c4:55:fe:52:5c:06: cf:6f:09:a8:0c:9f:bc:81:ef:dd:58:3d:55:ca:5e:b2:dc:29: f9:81:ac:99:e3:d1:ea:5c:69:14:95:bc:66:7e:fc:a6:b2:58: dc:90:a5:b1:79:e6:49:b8:43:63:f0:b6:32:67:a4:f1:48:64: d9:64:19:4c:6a:c8:ed:78:b1:3d:78:0e:d6:59:51:a8:c0:01: 16:c3:40:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf8uhOz2ARBaG6e+iUJZ5mxi4NCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA1MTIwNTEwMzVaFw0yNjA1MTMwNzA0MzVaMDMxMTAvBgNV BAMTKDI4NTUyRDhCQUE2RDU0NThENkY5MTFFQjYyQzE1MDc2OUMyOUIxMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkrECmBTBiKVCsjXat/wa5+ucs 1xGxKydjnVbY7rA5eqdnBoi/i+Q2bo2JnCtRdXFQ5kH1kHmmrzu8ua6XhK1yUGbz FW2P76mpXApiSfkxWNLjUqyKijg8HEYQS8BMfW0Gc2E9zP66T0xPunGS1PiSr/KH EQSiA1ZI6CUtnnmxNpYFPPK4XTCzZ0tSSh+kwjvpBIHugSZK4hX3SL3JSpOoLZdi HC3g0vZLlzCQrV4qif42JOWnQmgWkiPBA9hOp4Op9syGn4CrNRlODYmuvoocUb8f I1tMpxrfyJjX2pTQh66k+FmBAvKRebRT5zgCMY3AbjW0YwaTcvpBx2p2t3ODAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKFUti6ptVFjW+RHrYsFQdpwpsQ0wHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJz4JBZdOSXspdqiu+MWEfe6JF0hTw/mzeID +Z8r/KKIfKkqBNzlxzgcHAck+Yk/HIuWkzv2IVjSXjUy3NLfDaNaaGbRg98enHD/ Npff4MDNU/BLMuqFkpP8/K2L5ynHjnpk5lYrXJQsHYdtRUeWbVhKo1gO9wS9+2IZ X3gKt4xEdN/XBwtUr4BEiHWbY30Y/SYqi+QyawTvCWawQYW12HDusOVFeK7wIgRR I+8IC8RV/lJcBs9vCagMn7yB791YPVXKXrLcKfmBrJnj0epcaRSVvGZ+/KayWNyQ pbF55km4Q2PwtjJnpPFIZNlkGUxqyO14sT14DtZZUajAARbDQME= -----END CERTIFICATE-----Generated at Wed May 13 00:34:49 2026 by rpki-client