$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: 4BhjCaooMwa7Yq7JvjyIZ7y6DITHtWIDHlThWd2y1v8= Subject key identifier: 66:DF:3E:4C:9D:7E:A3:DC:B9:E0:87:B0:9E:67:49:DA:BE:12:4F:9C Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 2D367AF0C1E1BDBE49CFF77ADD89CD61F6A4CD92 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: BE Signing time: Mon 21 Sep 2026 03:35:58 +0000 Manifest this update: Mon 21 Sep 2026 03:30:58 +0000 Manifest next update: Tue 22 Sep 2026 05:26:58 +0000 Files and hashes: 1: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: iONpMiVFfQ3DXj+YwJDQpHY/7Rzn/+Se09PJP4J4wYQ=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:26:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:36:7a:f0:c1:e1:bd:be:49:cf:f7:7a:dd:89:cd:61:f6:a4:cd:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Sep 21 03:30:58 2026 GMT Not After : Sep 22 05:26:58 2026 GMT Subject: CN=66DF3E4C9D7EA3DCB9E087B09E6749DABE124F9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ed:a7:fa:35:42:29:65:2f:3a:61:1a:f4:bc: dd:3d:52:86:49:64:ae:f4:fd:8e:53:b6:1b:ec:d4: d1:f9:98:7d:14:3f:47:29:04:e4:d2:b5:a7:2b:31: 06:35:a5:45:93:32:9b:3f:46:67:77:01:ab:c3:99: bb:11:f5:ab:12:ce:01:69:91:fd:f4:21:21:57:82: e0:f4:90:f0:c6:d2:ef:cf:45:7b:7f:1c:d7:44:5a: 02:03:2d:9f:a7:dd:07:47:c5:cb:46:01:74:20:a5: d5:b0:53:f3:b3:b5:94:a7:fe:3b:f8:63:f3:a5:69: 98:a4:18:14:0c:5e:52:33:5a:3b:8e:c5:dd:99:d4: 33:1a:0c:91:c8:07:d0:24:38:2e:c2:68:c9:24:d7: 41:9a:33:38:76:ef:95:ac:81:d3:d6:98:57:ef:b9: 4e:b4:fa:a6:94:ff:a7:75:97:6c:ad:b7:44:ec:29: 76:33:a7:44:f6:02:b2:7b:b6:51:9f:77:b7:9d:8e: 51:06:0c:36:50:26:64:01:1f:cc:fe:8f:cd:b8:53: 81:54:ae:7d:af:99:47:70:98:e4:63:d5:90:07:4c: 12:cf:4d:1b:40:44:58:6d:c3:7c:db:ea:6d:fe:4d: 56:f2:21:c1:c4:63:ec:48:ae:d7:72:08:02:3d:ef: 28:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:DF:3E:4C:9D:7E:A3:DC:B9:E0:87:B0:9E:67:49:DA:BE:12:4F:9C X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:bb:89:be:e7:7f:36:11:03:3b:b6:60:22:9e:b4:49:da:3e: 61:9e:4c:5a:76:00:3b:2e:53:49:77:09:21:e8:58:d9:f1:09: 6f:01:0d:a6:68:59:d6:54:1e:c3:c8:f2:18:60:f3:87:dd:ff: 7d:53:2f:60:96:06:6a:87:28:ce:0c:f8:a1:27:24:ac:69:0d: 8e:64:b8:58:3e:1b:a0:16:ca:35:e3:fd:1c:3c:30:93:37:8f: 8a:44:80:06:92:29:5e:e6:73:b4:7a:e9:f2:f2:04:80:d7:57: a5:38:fe:97:f3:a4:4e:b2:fa:3a:0e:26:f2:8a:0b:ad:b6:4b: b6:94:5b:ac:f1:09:0d:71:74:eb:17:ce:64:38:4e:2e:60:5f: 81:ff:b1:f4:f0:89:d7:27:c1:cf:28:f6:5b:99:d4:57:9a:8f: 03:32:2d:61:43:98:20:2d:62:1e:68:6b:3a:97:6b:b8:15:6d: 55:ab:07:de:51:7e:58:a7:37:5b:05:40:93:d2:91:b3:8f:6a: d5:f6:9f:a0:fe:7b:8e:5a:57:13:69:e8:b1:8a:f1:f6:1e:8d: b2:89:d7:57:53:67:28:40:fb:e4:e6:e1:0b:2f:fd:d5:c6:ff: f3:dd:55:35:9e:e3:66:4d:90:4c:e6:06:66:0b:31:24:5b:f8: 0e:43:ad:8f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULTZ68MHhvb5Jz/d63YnNYfakzZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA5MjEwMzMwNThaFw0yNjA5MjIwNTI2NThaMDMxMTAvBgNV BAMTKDY2REYzRTRDOUQ3RUEzRENCOUUwODdCMDlFNjc0OURBQkUxMjRGOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC7af6NUIpZS86YRr0vN09UoZJ ZK70/Y5Tthvs1NH5mH0UP0cpBOTStacrMQY1pUWTMps/Rmd3AavDmbsR9asSzgFp kf30ISFXguD0kPDG0u/PRXt/HNdEWgIDLZ+n3QdHxctGAXQgpdWwU/OztZSn/jv4 Y/OlaZikGBQMXlIzWjuOxd2Z1DMaDJHIB9AkOC7CaMkk10GaMzh275WsgdPWmFfv uU60+qaU/6d1l2ytt0TsKXYzp0T2ArJ7tlGfd7edjlEGDDZQJmQBH8z+j824U4FU rn2vmUdwmORj1ZAHTBLPTRtARFhtw3zb6m3+TVbyIcHEY+xIrtdyCAI97yjbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZt8+TJ1+o9y54IewnmdJ2r4ST5wwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADi7ib7nfzYRAzu2YCKetEnaPmGeTFp2ADsu U0l3CSHoWNnxCW8BDaZoWdZUHsPI8hhg84fd/31TL2CWBmqHKM4M+KEnJKxpDY5k uFg+G6AWyjXj/Rw8MJM3j4pEgAaSKV7mc7R66fLyBIDXV6U4/pfzpE6y+joOJvKK C622S7aUW6zxCQ1xdOsXzmQ4Ti5gX4H/sfTwidcnwc8o9luZ1FeajwMyLWFDmCAt Yh5oazqXa7gVbVWrB95RflinN1sFQJPSkbOPatX2n6D+e45aVxNp6LGK8fYejbKJ 11dTZyhA++Tm4Qsv/dXG//PdVTWe42ZNkEzmBmYLMSRb+A5DrY8= -----END CERTIFICATE-----Generated at Mon Sep 21 17:58:40 2026 by rpki-client