$ rpki-client -vvvf rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft File: 15253A2B5044241610CA488254A5FBDEFCA83946.mft (raw, json) Hash identifier: 58why+1sZYDdHKsQeDLi/vuTMJw2LrMBf4houPHE2es= Subject key identifier: 51:E1:4A:DC:FF:00:B3:E2:85:A0:FD:B5:78:F0:ED:99:A8:93:0C:C3 Authority key identifier: 15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 Certificate issuer: /CN=15253A2B5044241610CA488254A5FBDEFCA83946 Certificate serial: 0C2FFF3F0EC2C3D807AABF8F9550C850B89E6105 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft Manifest number: BE Signing time: Mon 21 Sep 2026 02:55:09 +0000 Manifest this update: Mon 21 Sep 2026 02:50:09 +0000 Manifest next update: Tue 22 Sep 2026 02:55:09 +0000 Files and hashes: 1: 3130332e39342e3133332e302f32342d3234203d3e20313336313238.roa (hash: DsGlxrIFXIfC4wlTwbks5STw6xrwCN1b5SZ94KRIDxg=) 2: 15253A2B5044241610CA488254A5FBDEFCA83946.crl (hash: L6bmj3vE9O0Iru9aZ44YTJ4XjtBySeGWFLxa9eJKNW0=) 3: 3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (hash: SnVOuYeK/dyKwN1E/1MKTRAqaoKx5Hf44hqaGuxO+48=) 4: 3130332e39342e3133322e302f32332d3233203d3e20313336313238.roa (hash: MIDcVmBGH/hqqNu3jf3HAG0eJ6hq9A6F1DDrnx/T2Oc=) 5: 323030313a6466313a363930303a3a2f34382d3438203d3e20313336313238.roa (hash: GPQzQ2Y9IpoZxGxlL+qxlZ5PT+jJ6xJj6pibO+05n+M=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:55:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2f:ff:3f:0e:c2:c3:d8:07:aa:bf:8f:95:50:c8:50:b8:9e:61:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15253A2B5044241610CA488254A5FBDEFCA83946 Validity Not Before: Sep 21 02:50:09 2026 GMT Not After : Sep 22 02:55:09 2026 GMT Subject: CN=51E14ADCFF00B3E285A0FDB578F0ED99A8930CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:64:c6:2d:c6:82:54:f8:01:ad:60:7d:dd:b9: 23:e8:06:d8:47:1f:f5:37:76:e2:05:29:79:49:2d: ba:fa:b7:c4:cc:91:e9:20:7d:5a:05:33:52:4a:f9: 6b:58:5e:ae:d5:98:f6:c9:9e:fe:b1:e1:67:2e:17: 86:3d:ba:45:ed:05:04:19:e1:1a:77:6f:28:4f:53: e9:25:c3:bf:1f:97:41:a5:e0:1b:af:81:99:aa:a6: c3:d1:b1:64:a4:d7:6c:da:4c:b9:ea:49:f9:0c:89: fc:a5:e4:94:fb:71:9d:c4:d0:6c:5c:54:21:3a:90: 3b:88:bd:8b:40:97:f6:2c:9a:3d:df:32:87:c9:73: fd:03:23:9b:d5:50:ec:10:93:c4:70:c5:57:7f:53: db:5b:69:89:eb:00:fa:c1:08:a5:26:61:34:e1:43: f4:0d:02:39:02:a1:11:fd:29:ef:c2:cc:cb:2b:32: b5:77:cc:e9:8e:21:fb:93:15:23:2d:24:54:18:c9: bb:70:f5:b4:36:6c:75:0e:e5:95:70:2a:ae:90:b2: 36:99:59:41:f2:e2:da:d1:43:76:81:1c:1e:b0:b5: 1c:3d:87:20:8c:c5:97:c3:3f:9d:34:bb:f6:8f:7a: d8:26:3e:58:70:3d:15:31:1e:44:18:e0:ad:41:31: a0:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:E1:4A:DC:FF:00:B3:E2:85:A0:FD:B5:78:F0:ED:99:A8:93:0C:C3 X509v3 Authority Key Identifier: keyid:15:25:3A:2B:50:44:24:16:10:CA:48:82:54:A5:FB:DE:FC:A8:39:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15253A2B5044241610CA488254A5FBDEFCA83946.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/15253A2B5044241610CA488254A5FBDEFCA83946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:60:73:4f:83:89:f6:59:a4:a5:1e:2f:2c:f6:11:04:1e:43: 0b:50:da:d8:cc:5e:10:9c:d6:31:41:4d:61:8c:51:15:5a:00: 11:2c:1e:1f:89:55:0f:5a:79:a8:5d:82:95:32:15:0b:55:fc: b9:db:38:af:c4:fc:b6:d7:63:3b:1a:84:0d:b8:6b:c4:6b:ef: 1e:4e:fe:5b:54:6f:b4:93:72:91:7e:bd:22:e3:c2:16:56:dd: aa:56:64:72:c2:e5:a3:2f:85:9c:95:6c:67:75:0c:13:6d:01: 52:c7:97:e4:91:f4:d1:0c:79:ba:85:c3:4c:3b:8d:1b:af:4f: f3:70:3d:34:dc:eb:97:2c:34:7c:2d:0a:bc:47:a9:bb:a3:39: 04:bf:ad:8a:2d:83:ef:5b:5d:4f:7e:48:fb:f2:ac:44:50:2b: ba:e9:af:97:f7:5b:15:06:94:53:28:38:bc:75:38:95:09:3c: c1:e5:16:c8:e8:dd:8c:4f:52:67:bf:f4:95:b8:54:f3:bc:a3: e9:82:4f:fa:dc:51:8e:2e:70:82:7c:d0:97:7b:49:03:82:02: d7:54:83:b4:44:b6:37:83:a5:29:30:bd:3a:24:08:80:a9:14: 9f:93:fb:88:4b:59:a7:ca:c0:f7:c5:ef:a4:ce:5b:2b:17:a3: 02:3c:8f:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDC//Pw7Cw9gHqr+PlVDIULieYQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVG Q0E4Mzk0NjAeFw0yNjA5MjEwMjUwMDlaFw0yNjA5MjIwMjU1MDlaMDMxMTAvBgNV BAMTKDUxRTE0QURDRkYwMEIzRTI4NUEwRkRCNTc4RjBFRDk5QTg5MzBDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgZMYtxoJU+AGtYH3duSPoBthH H/U3duIFKXlJLbr6t8TMkekgfVoFM1JK+WtYXq7VmPbJnv6x4WcuF4Y9ukXtBQQZ 4Rp3byhPU+klw78fl0Gl4BuvgZmqpsPRsWSk12zaTLnqSfkMifyl5JT7cZ3E0Gxc VCE6kDuIvYtAl/Ysmj3fMofJc/0DI5vVUOwQk8RwxVd/U9tbaYnrAPrBCKUmYTTh Q/QNAjkCoRH9Ke/CzMsrMrV3zOmOIfuTFSMtJFQYybtw9bQ2bHUO5ZVwKq6QsjaZ WUHy4trRQ3aBHB6wtRw9hyCMxZfDP500u/aPetgmPlhwPRUxHkQY4K1BMaBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUeFK3P8As+KFoP21ePDtmaiTDMMwHwYDVR0j BBgwFoAUFSU6K1BEJBYQykiCVKX73vyoOUYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTdlZGNiN2UtYzM4ZC00ZTY3LTgyYmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1 MDQ0MjQxNjEwQ0E0ODgyNTRBNUZCREVGQ0E4Mzk0Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNTI1M0EyQjUwNDQyNDE2MTBDQTQ4ODI1NEE1RkJERUZDQTgz OTQ2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTdlZGNiN2UtYzM4ZC00ZTY3LTgy YmQtNGU4MTUwYjg4NTYxLzAvMTUyNTNBMkI1MDQ0MjQxNjEwQ0E0ODgyNTRBNUZC REVGQ0E4Mzk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJgc0+DifZZpKUeLyz2EQQeQwtQ2tjMXhCc 1jFBTWGMURVaABEsHh+JVQ9aeahdgpUyFQtV/LnbOK/E/LbXYzsahA24a8Rr7x5O /ltUb7STcpF+vSLjwhZW3apWZHLC5aMvhZyVbGd1DBNtAVLHl+SR9NEMebqFw0w7 jRuvT/NwPTTc65csNHwtCrxHqbujOQS/rYotg+9bXU9+SPvyrERQK7rpr5f3WxUG lFMoOLx1OJUJPMHlFsjo3YxPUme/9JW4VPO8o+mCT/rcUY4ucIJ80Jd7SQOCAtdU g7REtjeDpSkwvTokCICpFJ+T+4hLWafKwPfF76TOWysXowI8jyk= -----END CERTIFICATE-----Generated at Mon Sep 21 19:49:22 2026 by rpki-client