$ rpki-client -vvf rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft File: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft (raw, json) Hash identifier: yuSydsz1nmKjYBdruT07ne6WA7PSnE6Fl8nwEY34S4I= Subject key identifier: 2A:B4:0F:80:E3:F1:A5:B0:EB:FB:02:83:E7:DA:5F:8D:1D:2A:BA:84 Authority key identifier: 15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 Certificate issuer: /CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Certificate serial: 6802B308AAADB804F877A1F05F942C32283452C3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 18:00:57 +0000 Manifest this update: Tue 16 Jun 2026 17:55:57 +0000 Manifest next update: Wed 17 Jun 2026 19:08:57 +0000 Files and hashes: 1: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl (hash: qy48sMpd7c2rW79r7Um0TLuBqTj+3K3nV0nP8H4t3gg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 19:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:02:b3:08:aa:ad:b8:04:f8:77:a1:f0:5f:94:2c:32:28:34:52:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Validity Not Before: Jun 16 17:55:57 2026 GMT Not After : Jun 17 19:08:57 2026 GMT Subject: CN=2AB40F80E3F1A5B0EBFB0283E7DA5F8D1D2ABA84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:c2:e9:3d:0a:c4:e1:eb:f8:20:a3:d3:50:0b: 8e:02:e1:48:5a:95:d9:4a:92:db:13:74:f9:54:7f: 1f:dd:a3:98:41:17:a5:2f:ec:dd:41:98:34:fd:56: 6c:e1:98:21:1f:6e:86:38:6c:2f:a0:8c:a9:82:0a: 99:ed:79:71:c1:67:84:fd:33:5f:e1:2a:cc:e9:b2: 26:bb:90:b9:ae:03:3c:15:a3:63:93:70:5a:fd:99: 96:bc:24:44:e4:b4:4c:06:c6:b0:55:4d:92:ba:81: a4:26:ea:84:da:2f:8d:fc:c8:21:1f:d4:0c:7b:b9: bc:5d:d1:51:a2:f6:ae:a2:26:40:f4:c8:3a:9f:3e: a9:da:8d:2c:f2:cc:7d:14:75:7a:e4:1f:07:d9:0c: 4f:d3:1d:29:f3:01:c3:74:c0:0f:96:b4:c6:f5:e6: 04:bf:7a:cb:ac:3d:3d:9f:02:2d:6a:9b:fc:fe:75: 67:25:b8:36:6b:be:2d:87:7e:5f:ff:42:d4:74:c7: 65:6b:ca:c7:a2:a9:6e:4c:1c:7a:9d:d1:5b:96:48: e7:d9:a4:95:8d:e5:4d:0b:02:7b:a4:c3:0c:92:16: fe:98:67:54:0c:5a:90:eb:03:40:ef:0f:a3:dc:49: a8:02:bc:03:ea:f9:2e:d0:04:4e:25:d3:a4:a2:bf: 86:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:B4:0F:80:E3:F1:A5:B0:EB:FB:02:83:E7:DA:5F:8D:1D:2A:BA:84 X509v3 Authority Key Identifier: keyid:15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:32:9b:6f:15:32:73:d0:d1:68:29:14:99:51:53:ad:f3:97: 5d:9f:67:24:59:d9:dd:ea:4d:56:20:86:ca:8f:22:24:95:30: e9:10:f2:e8:50:16:77:e5:9d:97:23:f3:24:5f:a6:08:55:19: 73:f6:6d:cd:51:d6:5b:c5:4c:fb:7b:b2:a6:96:3b:bb:7d:fe: 41:cd:c1:9b:62:4a:f1:23:bf:e3:08:25:1d:0e:c5:38:5b:df: 71:76:32:04:1b:80:ad:60:72:a8:36:26:38:7a:3b:c2:14:87: 67:8c:8a:cd:17:b9:ce:54:74:37:6c:9f:51:58:51:0d:be:bf: c5:50:89:88:d6:3c:21:e4:7e:78:d5:a9:d5:3d:68:58:ac:85: 2a:6a:ac:63:f8:f1:11:64:5e:ec:0f:91:a6:82:29:14:f1:ce: f2:ff:e5:14:98:58:c1:5d:2d:4d:21:6a:34:ff:e3:33:30:b1: 46:99:9e:23:5d:27:d6:7b:f2:8c:d9:af:77:07:1d:16:71:8f: c5:f2:3d:89:df:ff:25:6a:b7:f0:45:c4:16:ff:ba:31:fc:49: 77:14:8c:a2:f0:69:9c:d6:cf:0f:63:ac:43:ef:64:ea:9e:41: 6d:49:12:31:d1:d5:e1:d4:9e:49:39:03:2c:fa:2e:01:ef:58: 66:30:81:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaAKzCKqtuAT4d6HwX5QsMig0UsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJD OTkwMkY2ODAeFw0yNjA2MTYxNzU1NTdaFw0yNjA2MTcxOTA4NTdaMDMxMTAvBgNV BAMTKDJBQjQwRjgwRTNGMUE1QjBFQkZCMDI4M0U3REE1RjhEMUQyQUJBODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUwuk9CsTh6/ggo9NQC44C4Uha ldlKktsTdPlUfx/do5hBF6Uv7N1BmDT9VmzhmCEfboY4bC+gjKmCCpnteXHBZ4T9 M1/hKszpsia7kLmuAzwVo2OTcFr9mZa8JETktEwGxrBVTZK6gaQm6oTaL438yCEf 1Ax7ubxd0VGi9q6iJkD0yDqfPqnajSzyzH0UdXrkHwfZDE/THSnzAcN0wA+WtMb1 5gS/esusPT2fAi1qm/z+dWcluDZrvi2Hfl//QtR0x2VryseiqW5MHHqd0VuWSOfZ pJWN5U0LAnukwwySFv6YZ1QMWpDrA0DvD6PcSagCvAPq+S7QBE4l06Siv4Y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKrQPgOPxpbDr+wKD59pfjR0quoQwHwYDVR0j BBgwFoAUFcZj3SHAS2yyCEp0XzW2ssmQL2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTY4NzgtNmNiMi00YTVmLWI1NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQy MUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJDOTkwMkY2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUM2NjNERDIxQzA0QjZDQjIwODRBNzQ1RjM1QjZCMkM5OTAy RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2 QjJDOTkwMkY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgym28VMnPQ0WgpFJlRU63zl12fZyRZ2d3q TVYghsqPIiSVMOkQ8uhQFnflnZcj8yRfpghVGXP2bc1R1lvFTPt7sqaWO7t9/kHN wZtiSvEjv+MIJR0OxThb33F2MgQbgK1gcqg2Jjh6O8IUh2eMis0Xuc5UdDdsn1FY UQ2+v8VQiYjWPCHkfnjVqdU9aFishSpqrGP48RFkXuwPkaaCKRTxzvL/5RSYWMFd LU0hajT/4zMwsUaZniNdJ9Z78ozZr3cHHRZxj8XyPYnf/yVqt/BFxBb/ujH8SXcU jKLwaZzWzw9jrEPvZOqeQW1JEjHR1eHUnkk5Ayz6LgHvWGYwgTc= -----END CERTIFICATE-----Generated at Wed Jun 17 12:39:09 2026 by rpki-client