$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: l5Br/YbvUNFS52XnK5zf761jJ27KjQBqeVm6M3J4HeI= Subject key identifier: D7:70:D8:FB:F3:E6:BC:96:BA:1A:15:2D:E5:59:DA:DE:B7:5E:E0:6C Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 580F68D80331C2886C31DDD74575574AE33D71BB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 15:19:45 +0000 Manifest this update: Thu 24 Sep 2026 15:14:45 +0000 Manifest next update: Fri 25 Sep 2026 16:41:45 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 2: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 3: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 4: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: DQ1m1iGL4puCHDsZA1wbiXPz6rHU/K5/CiS4VRuoa1A=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 6: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 7: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 8: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:0f:68:d8:03:31:c2:88:6c:31:dd:d7:45:75:57:4a:e3:3d:71:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Sep 24 15:14:45 2026 GMT Not After : Sep 25 16:41:45 2026 GMT Subject: CN=D770D8FBF3E6BC96BA1A152DE559DADEB75EE06C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5f:40:fe:15:09:35:c8:74:dc:1e:cd:bb:52: cc:d2:da:00:12:82:6a:ef:02:55:8f:1c:18:e2:11: 74:8a:9f:47:80:ad:75:4b:22:c7:1f:53:88:de:fe: 73:b5:9b:1e:84:d3:14:4f:0c:08:db:b1:d8:6e:69: 8a:88:cf:ad:70:c2:cc:8e:8e:dd:12:83:5f:5f:ff: 0a:78:9c:5e:63:f8:43:66:40:3e:01:38:3c:19:58: 03:a5:19:45:2f:4c:50:22:2e:5f:7d:d4:71:c8:25: e5:70:82:8d:0d:2b:91:1e:f7:bc:1c:92:30:e3:4a: af:ba:79:9d:0b:64:4e:16:c5:92:65:bd:e2:40:ab: 5b:c3:4f:5a:ba:a6:d9:2a:04:62:a9:4a:5c:c1:e5: 4d:c4:34:85:ad:51:32:15:dd:4d:d3:b4:dc:06:a6: 46:37:ec:84:3d:97:72:8f:71:5d:71:fb:9b:d3:14: 21:f7:cd:6a:e0:a9:01:ef:a2:ac:ee:2a:9a:62:1b: a6:46:4d:f8:0c:79:62:f9:14:2a:81:ea:0f:ae:40: 73:e4:5e:88:6f:45:95:4d:fa:2f:0f:0a:f4:22:e3: ba:ed:79:3b:39:bc:1f:f5:8b:2c:e4:47:87:f1:f4: c9:23:24:0e:06:29:52:04:5c:a2:a1:da:9c:63:90: 4a:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:70:D8:FB:F3:E6:BC:96:BA:1A:15:2D:E5:59:DA:DE:B7:5E:E0:6C X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:9e:2c:b3:45:e0:d9:3b:d3:9a:29:97:ff:3d:d5:e5:c4:c6: fa:f8:09:f5:2d:f2:74:23:41:c5:e3:23:92:59:e1:f8:62:77: a2:e9:7d:df:0e:1f:7e:87:12:da:3e:1a:49:46:f9:d4:44:f2: 8e:ea:8b:b5:6a:d3:77:1d:35:f9:2d:f6:26:21:45:e6:92:c3: a8:88:c9:ae:a3:38:b9:5d:a7:b0:75:02:a1:4d:09:b7:26:78: 82:46:b9:16:00:65:cf:c9:e9:f3:78:f1:9c:4b:e8:61:6e:36: 22:94:6e:01:f5:da:a7:bc:27:f7:4d:0b:92:81:de:2c:df:5f: 97:83:cf:2f:4b:d6:02:b8:d0:9e:19:e4:d5:04:fd:c0:b7:ae: 12:b3:a0:6e:7d:98:d7:07:34:ca:c1:92:ec:08:f4:70:66:0b: 89:9a:9b:8c:80:13:06:e3:cb:c3:52:91:45:85:a5:d5:ba:44: a9:ac:9b:06:01:57:f4:3b:19:db:a2:2d:6d:e8:38:0c:de:73: 07:8f:a9:6b:98:e1:5e:61:c9:db:1f:bc:89:27:11:d6:d0:3f: 45:92:2f:fd:4c:6d:5c:bf:de:52:d1:c9:76:7e:d8:13:20:89: 50:1d:1f:10:f4:05:b4:21:6e:ac:ed:4c:5e:b9:ad:a7:14:9d: 4b:1f:e5:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWA9o2AMxwohsMd3XRXVXSuM9cbswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA5MjQxNTE0NDVaFw0yNjA5MjUxNjQxNDVaMDMxMTAvBgNV BAMTKEQ3NzBEOEZCRjNFNkJDOTZCQTFBMTUyREU1NTlEQURFQjc1RUUwNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVX0D+FQk1yHTcHs27UszS2gAS gmrvAlWPHBjiEXSKn0eArXVLIscfU4je/nO1mx6E0xRPDAjbsdhuaYqIz61wwsyO jt0Sg19f/wp4nF5j+ENmQD4BODwZWAOlGUUvTFAiLl991HHIJeVwgo0NK5Ee97wc kjDjSq+6eZ0LZE4WxZJlveJAq1vDT1q6ptkqBGKpSlzB5U3ENIWtUTIV3U3TtNwG pkY37IQ9l3KPcV1x+5vTFCH3zWrgqQHvoqzuKppiG6ZGTfgMeWL5FCqB6g+uQHPk XohvRZVN+i8PCvQi47rteTs5vB/1iyzkR4fx9MkjJA4GKVIEXKKh2pxjkEr7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13DY+/PmvJa6GhUt5Vna3rde4GwwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKKeLLNF4Nk705opl/891eXExvr4CfUt8nQj QcXjI5JZ4fhid6Lpfd8OH36HEto+GklG+dRE8o7qi7Vq03cdNfkt9iYhReaSw6iI ya6jOLldp7B1AqFNCbcmeIJGuRYAZc/J6fN48ZxL6GFuNiKUbgH12qe8J/dNC5KB 3izfX5eDzy9L1gK40J4Z5NUE/cC3rhKzoG59mNcHNMrBkuwI9HBmC4mam4yAEwbj y8NSkUWFpdW6RKmsmwYBV/Q7GduiLW3oOAzecwePqWuY4V5hydsfvIknEdbQP0WS L/1MbVy/3lLRyXZ+2BMgiVAdHxD0BbQhbqztTF65racUnUsf5YY= -----END CERTIFICATE-----Generated at Thu Sep 24 22:00:43 2026 by rpki-client