$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: KkqQT6IcwotrI0kf/xF0vd29Yrg/EMe0eb0Jm4d1u8Y= Subject key identifier: A3:F7:B0:15:81:16:0D:13:D2:29:03:44:6D:43:6C:CD:C8:A0:01:B6 Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 293E89FBD225ACF54B688A018CB4AD4227694ADB Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 11:51:25 +0000 Manifest this update: Tue 28 Jul 2026 11:46:25 +0000 Manifest next update: Wed 29 Jul 2026 13:07:25 +0000 Files and hashes: 1: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: t3WIgQp9T6m7VD7xZnXVgV2wEKWc3milb2DsBCt3W6A=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:3e:89:fb:d2:25:ac:f5:4b:68:8a:01:8c:b4:ad:42:27:69:4a:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Jul 28 11:46:25 2026 GMT Not After : Jul 29 13:07:25 2026 GMT Subject: CN=A3F7B01581160D13D22903446D436CCDC8A001B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5a:4d:f9:87:25:f9:7b:52:0f:79:bb:51:77: b0:c6:9e:6e:55:e2:f8:35:e7:10:40:f3:80:83:04: c7:62:6e:e8:62:05:09:f9:1a:dd:67:b0:a9:d3:f5: b6:a4:fe:8d:ea:27:21:9e:94:bb:8f:1f:5a:c8:60: f8:48:8c:b0:10:7d:a5:17:ca:38:de:04:b4:1d:2b: f2:a3:1f:7c:ff:51:bf:db:56:7f:fd:88:13:57:05: 6c:ce:44:af:24:a6:c1:3c:59:16:68:68:55:61:bb: 1d:0f:49:d8:98:f3:6e:22:da:61:24:60:b2:02:96: e9:cf:e4:9c:dd:20:67:3b:fe:b5:8a:69:e1:a1:fb: d3:d5:8a:75:3a:4d:47:e1:00:8c:e7:c4:ea:aa:ca: 88:41:fd:90:b7:c9:b9:57:c1:fc:31:2a:42:0e:8d: 17:e3:01:0d:a2:f6:1c:61:22:7f:93:ba:8e:5c:46: 11:54:f3:02:90:59:ff:fa:0c:f5:4e:8b:72:dc:4a: b9:e2:39:63:24:bd:c3:90:03:6b:96:53:b9:71:7f: b8:16:73:1e:51:54:60:41:43:88:c1:ec:73:90:fe: c7:ed:50:e0:b6:50:c3:d1:4a:9c:2f:d3:b7:a3:48: f9:3e:03:ba:d6:2a:08:79:04:60:e0:6f:36:91:3a: 65:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:F7:B0:15:81:16:0D:13:D2:29:03:44:6D:43:6C:CD:C8:A0:01:B6 X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:5d:d2:1f:7b:b2:1d:e0:0e:af:4c:cd:ee:cb:cb:5c:2c:6a: 46:64:d7:b8:cf:92:86:ed:77:2a:7a:11:f3:86:c6:a5:ae:6c: fa:71:9e:98:7f:07:08:bd:df:61:23:a4:cd:94:03:c0:5e:66: b6:53:04:4d:70:6c:a2:22:da:26:d6:81:6d:f8:4e:28:50:c9: dd:03:4e:60:2a:b4:eb:8f:a0:fc:5d:07:3e:c3:a0:45:38:3f: 34:b6:97:04:bc:e6:3a:d2:70:7b:42:11:09:3d:7e:80:e1:1f: aa:1d:f2:69:6a:4c:5e:d8:f8:f1:79:12:09:1f:ad:cc:1b:c7: 41:2b:78:a2:83:1e:32:b1:ee:9e:2c:fd:0a:31:f8:21:18:56: 2d:93:81:11:7b:4d:ff:f2:9f:1e:3a:1f:57:7e:0c:d4:6c:4a: 1e:ce:16:2d:c4:79:69:21:dc:8c:28:a0:28:6e:19:f3:66:f4: 69:07:80:3e:ea:6d:ad:33:64:30:cd:99:da:e9:f2:b5:0d:99: f8:4a:5a:7b:ba:93:64:d8:e5:63:a8:ea:13:09:72:01:d2:95: 5a:cb:ec:e4:75:20:17:25:28:62:7a:9f:81:63:6b:55:a9:d4: e6:7a:90:67:e0:0c:93:43:41:ed:12:2c:9c:cd:e0:3a:47:b2: 94:d2:c1:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKT6J+9IlrPVLaIoBjLStQidpStswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA3MjgxMTQ2MjVaFw0yNjA3MjkxMzA3MjVaMDMxMTAvBgNV BAMTKEEzRjdCMDE1ODExNjBEMTNEMjI5MDM0NDZENDM2Q0NEQzhBMDAxQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIWk35hyX5e1IPebtRd7DGnm5V 4vg15xBA84CDBMdibuhiBQn5Gt1nsKnT9bak/o3qJyGelLuPH1rIYPhIjLAQfaUX yjjeBLQdK/KjH3z/Ub/bVn/9iBNXBWzORK8kpsE8WRZoaFVhux0PSdiY824i2mEk YLIClunP5JzdIGc7/rWKaeGh+9PVinU6TUfhAIznxOqqyohB/ZC3yblXwfwxKkIO jRfjAQ2i9hxhIn+Tuo5cRhFU8wKQWf/6DPVOi3LcSrniOWMkvcOQA2uWU7lxf7gW cx5RVGBBQ4jB7HOQ/sftUOC2UMPRSpwv07ejSPk+A7rWKgh5BGDgbzaROmVNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo/ewFYEWDRPSKQNEbUNszcigAbYwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5d0h97sh3gDq9Mze7Ly1wsakZk17jPkobt dyp6EfOGxqWubPpxnph/Bwi932EjpM2UA8BeZrZTBE1wbKIi2ibWgW34TihQyd0D TmAqtOuPoPxdBz7DoEU4PzS2lwS85jrScHtCEQk9foDhH6od8mlqTF7Y+PF5Egkf rcwbx0EreKKDHjKx7p4s/Qox+CEYVi2TgRF7Tf/ynx46H1d+DNRsSh7OFi3EeWkh 3IwooChuGfNm9GkHgD7qba0zZDDNmdrp8rUNmfhKWnu6k2TY5WOo6hMJcgHSlVrL 7OR1IBclKGJ6n4Fja1Wp1OZ6kGfgDJNDQe0SLJzN4DpHspTSwW8= -----END CERTIFICATE-----Generated at Wed Jul 29 00:26:49 2026 by rpki-client