$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft File: 815468AF79588A14560E794FB64918D01C6C1FDC.mft (raw, json) Hash identifier: 2wLuk1Ai57bXpEAxJQhXx1mNd4NBjyyi/WKsQVgXAoI= Subject key identifier: 68:D1:B7:5C:0D:FC:0E:AE:A4:68:3C:9E:0B:BB:E5:D8:AD:B6:FC:17 Authority key identifier: 81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC Certificate issuer: /CN=815468AF79588A14560E794FB64918D01C6C1FDC Certificate serial: 288758620E74472937CAD5444A074031700106AF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft Manifest number: BC Signing time: Sun 20 Sep 2026 17:48:54 +0000 Manifest this update: Sun 20 Sep 2026 17:43:54 +0000 Manifest next update: Mon 21 Sep 2026 18:56:54 +0000 Files and hashes: 1: 3130332e3137372e3139392e302f32342d3234203d3e20313437313133.roa (hash: j6ecS+LU2IE57nqnTMCP3ISPfe6p/tZiprWjSdtyRJI=) 2: 815468AF79588A14560E794FB64918D01C6C1FDC.crl (hash: LpF/r7H7kLxBEdpf5424kQuPohjJIPNmqFTtuPR6SDI=) 3: 3130332e3137332e37322e302f32342d3234203d3e20313437313133.roa (hash: 4TyXOZJITcEyepgGV7UqSgIx7GZrhhX2jvzd83SSTg8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 18:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:87:58:62:0e:74:47:29:37:ca:d5:44:4a:07:40:31:70:01:06:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=815468AF79588A14560E794FB64918D01C6C1FDC Validity Not Before: Sep 20 17:43:54 2026 GMT Not After : Sep 21 18:56:54 2026 GMT Subject: CN=68D1B75C0DFC0EAEA4683C9E0BBBE5D8ADB6FC17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:42:be:a9:c2:e3:3c:4e:00:43:8b:0c:4e:b8: 13:b0:86:62:42:8a:81:82:8b:bf:fe:18:16:63:92: c2:9b:7b:cb:4f:06:9c:13:56:f8:cb:78:27:86:33: b0:22:e0:24:3d:ac:b4:9e:c8:96:d2:c0:d7:aa:27: 75:8e:e5:e1:f3:7b:f9:48:fc:66:e1:0f:97:05:4e: 95:da:c6:ff:35:cf:a4:e1:89:a4:9a:8a:88:0d:2c: 72:87:81:c1:d9:7f:3b:92:fa:1d:89:7f:58:1d:8d: aa:37:a9:9a:60:52:a5:5b:93:5b:5a:14:9e:55:98: 30:f2:11:43:e3:49:cc:6c:21:9b:9d:14:0b:67:eb: 09:94:3a:3e:3c:0e:ab:5e:0d:14:9a:68:83:6f:8c: dc:61:39:98:0a:21:19:52:f1:64:b7:27:15:d5:d0: ff:96:dd:30:94:5c:27:03:5a:84:41:14:ca:94:02: f8:f6:fc:97:2c:8a:9c:22:0d:5a:4f:45:1e:e9:14: 2e:6c:71:ca:81:50:05:c4:f1:18:7b:2b:c1:3e:0f: 90:ec:b4:7f:98:bf:4c:0e:eb:f2:63:c0:1b:c8:d9: af:86:2f:2f:e4:43:2b:df:91:d6:1a:4a:53:d8:1d: 57:49:5b:03:3c:a9:8f:ab:fe:7f:d4:9b:4e:fb:f5: b7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:D1:B7:5C:0D:FC:0E:AE:A4:68:3C:9E:0B:BB:E5:D8:AD:B6:FC:17 X509v3 Authority Key Identifier: keyid:81:54:68:AF:79:58:8A:14:56:0E:79:4F:B6:49:18:D0:1C:6C:1F:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/815468AF79588A14560E794FB64918D01C6C1FDC.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5004e530-2fcf-4cd6-b05c-eb3c0c135608/0/815468AF79588A14560E794FB64918D01C6C1FDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:c6:7e:7f:4d:e2:fa:c9:48:d6:a0:f5:75:b5:87:bc:b6:86: b1:57:45:78:9d:8f:27:26:d5:36:f2:71:e6:24:f7:1b:a2:4a: 71:be:95:30:d4:fb:e9:ba:73:67:1b:4a:da:47:0f:37:d0:6c: a5:ee:f7:57:56:01:01:3c:b8:0d:bd:a6:23:2f:8b:5f:f4:6f: b4:68:2c:74:c9:11:ba:1d:72:42:3f:f9:4a:78:3b:94:5c:4a: f6:79:61:aa:69:2b:7e:f7:96:bb:ba:79:5b:c0:5e:fc:3c:71: 8e:05:15:fa:fb:a0:51:65:59:4d:3c:0c:6c:d4:cd:a6:d9:61: 34:3d:57:72:21:04:fa:41:c3:da:bf:65:b3:d0:86:92:bd:d2: 64:94:a6:09:c0:45:11:8a:d7:cb:cc:18:5a:bf:f9:54:8d:b3: 3f:16:a3:4f:3e:88:5d:ae:20:e0:df:d8:82:85:9d:88:bc:1e: cc:4e:e3:d7:28:b6:81:1e:df:d9:8e:69:75:b4:45:11:fc:ec: 6b:7b:40:eb:b6:5b:01:70:a4:b3:ed:6f:9b:46:d2:4f:5c:d0: 07:6e:e1:d9:7a:4f:7d:e0:42:9c:45:f8:d9:13:cf:65:f5:76: 9d:11:ba:8d:06:68:21:07:86:1f:08:e3:9d:22:8c:2e:90:b5: f4:9e:dc:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKIdYYg50Ryk3ytVESgdAMXABBq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAx QzZDMUZEQzAeFw0yNjA5MjAxNzQzNTRaFw0yNjA5MjExODU2NTRaMDMxMTAvBgNV BAMTKDY4RDFCNzVDMERGQzBFQUVBNDY4M0M5RTBCQkJFNUQ4QURCNkZDMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Qr6pwuM8TgBDiwxOuBOwhmJC ioGCi7/+GBZjksKbe8tPBpwTVvjLeCeGM7Ai4CQ9rLSeyJbSwNeqJ3WO5eHze/lI /GbhD5cFTpXaxv81z6ThiaSaiogNLHKHgcHZfzuS+h2Jf1gdjao3qZpgUqVbk1ta FJ5VmDDyEUPjScxsIZudFAtn6wmUOj48DqteDRSaaINvjNxhOZgKIRlS8WS3JxXV 0P+W3TCUXCcDWoRBFMqUAvj2/JcsipwiDVpPRR7pFC5sccqBUAXE8Rh7K8E+D5Ds tH+Yv0wO6/JjwBvI2a+GLy/kQyvfkdYaSlPYHVdJWwM8qY+r/n/Um0779bf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNG3XA38Dq6kaDyeC7vl2K22/BcwHwYDVR0j BBgwFoAUgVRor3lYihRWDnlPtkkY0BxsH9wwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTAwNGU1MzAtMmZjZi00Y2Q2LWIwNWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3 OTU4OEExNDU2MEU3OTRGQjY0OTE4RDAxQzZDMUZEQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84MTU0NjhBRjc5NTg4QTE0NTYwRTc5NEZCNjQ5MThEMDFDNkMx RkRDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTAwNGU1MzAtMmZjZi00Y2Q2LWIw NWMtZWIzYzBjMTM1NjA4LzAvODE1NDY4QUY3OTU4OEExNDU2MEU3OTRGQjY0OTE4 RDAxQzZDMUZEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3Gfn9N4vrJSNag9XW1h7y2hrFXRXidjycm 1TbyceYk9xuiSnG+lTDU++m6c2cbStpHDzfQbKXu91dWAQE8uA29piMvi1/0b7Ro LHTJEbodckI/+Up4O5RcSvZ5YappK373lru6eVvAXvw8cY4FFfr7oFFlWU08DGzU zabZYTQ9V3IhBPpBw9q/ZbPQhpK90mSUpgnARRGK18vMGFq/+VSNsz8Wo08+iF2u IODf2IKFnYi8HsxO49cotoEe39mOaXW0RRH87Gt7QOu2WwFwpLPtb5tG0k9c0Adu 4dl6T33gQpxF+NkTz2X1dp0Ruo0GaCEHhh8I450ijC6QtfSe3JA= -----END CERTIFICATE-----Generated at Mon Sep 21 10:04:29 2026 by rpki-client