
$ rpki-client -vvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json)
Hash identifier: jh/JkqWF7sLanaYYxYGPkQd+S8Bp+8S1JCnUxvS18Cc=
Subject key identifier: 54:E3:CB:8C:CA:20:D0:1F:6A:59:B4:64:62:C5:C7:A2:1C:08:42:5B
Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Certificate serial: FD829B7E2DE31E8E422E096E00D08D07E93344
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
Manifest number: 3A
Signing time: Sat 13 Jun 2026 22:21:19 +0000
Manifest this update: Sat 13 Jun 2026 22:16:19 +0000
Manifest next update: Mon 15 Jun 2026 01:52:19 +0000
Files and hashes: 1: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: oRBOqpVGJTEm366H4k6Spke9bf7FXEdrzGLEhjbUo7s=)
2: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=)
3: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=)
4: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 14 Jun 2026 12:50:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
fd:82:9b:7e:2d:e3:1e:8e:42:2e:09:6e:00:d0:8d:07:e9:33:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376
Validity
Not Before: Jun 13 22:16:19 2026 GMT
Not After : Jun 15 01:52:19 2026 GMT
Subject: CN=54E3CB8CCA20D01F6A59B46462C5C7A21C08425B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:8d:0b:ec:1a:7f:f8:2b:56:ea:73:a5:3e:72:
63:e4:b5:f0:d0:4d:4d:fc:0b:87:f5:5c:a6:7e:e9:
7e:06:99:7a:1a:d5:70:19:df:00:a2:2b:a5:ce:00:
8b:02:34:82:47:7b:04:f8:5f:71:5a:62:d4:45:91:
6a:d1:0a:80:74:31:d3:35:d2:68:d1:fa:10:1b:a3:
91:93:77:24:e9:0a:4e:4c:01:20:d9:2c:4d:71:d5:
d9:e7:0a:ac:c8:bd:e6:59:b8:67:39:cb:df:1e:15:
93:c0:03:9a:09:4d:a3:e9:30:c4:01:82:77:21:3c:
c6:01:83:d6:25:1f:68:f6:1e:9e:f4:a1:7e:98:85:
ef:19:3d:16:22:f6:fd:00:1b:33:9c:3e:c6:b1:16:
08:9b:0f:7e:16:ad:b1:d5:8b:de:0c:9c:23:5e:82:
84:a9:60:59:0d:97:32:cc:0d:31:98:87:b5:cb:5e:
0b:2b:51:84:2a:96:15:f1:81:6b:5f:67:f3:6a:cf:
6d:f7:57:0f:4d:d9:aa:9b:93:d9:8d:05:7d:3b:10:
65:64:38:c5:f4:c2:49:f3:5f:71:bb:d9:5d:33:5f:
5d:75:83:1a:33:b1:60:19:a2:6c:ea:f7:26:27:7d:
b2:43:d8:fe:35:39:5b:61:7a:5c:92:6d:8c:cf:ae:
e6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E3:CB:8C:CA:20:D0:1F:6A:59:B4:64:62:C5:C7:A2:1C:08:42:5B
X509v3 Authority Key Identifier:
keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:e0:6d:05:76:2b:cb:a7:a1:d3:02:e1:be:62:e3:f1:b8:dd:
85:c8:79:66:2f:c4:4a:4c:81:8c:ef:ed:c9:e8:29:cf:f6:97:
e2:3c:6a:72:e3:0d:09:9d:9c:24:87:0a:c5:7a:e5:ca:0b:49:
35:e4:de:c6:6d:b4:cb:d6:01:b3:ad:ac:4b:84:25:63:79:91:
83:ac:d0:05:05:fe:ab:3d:f4:5e:de:c5:16:c6:12:ac:b6:b7:
93:64:b1:bd:c9:e2:6e:db:da:d5:ca:40:20:ea:1e:4a:4a:8e:
df:2d:9f:35:63:ba:92:a5:43:c1:40:ab:d1:c7:a1:0d:e7:88:
35:89:64:72:09:26:85:60:5a:09:ee:2e:34:9b:8c:4f:08:44:
c1:96:6e:cd:a5:26:8d:78:37:51:1a:cd:31:de:4d:2a:31:12:
6c:4e:03:14:4b:7d:89:a3:09:d3:51:95:3b:5c:d3:3e:5a:cc:
1c:ad:18:fb:8c:82:7e:87:9b:37:59:05:c2:02:a3:d8:31:d7:
8f:9b:8a:3f:d6:4f:5c:d0:7e:1f:b0:ec:c9:42:d5:04:b8:f7:
ee:e9:99:fc:a0:33:aa:a8:52:65:a9:ba:8f:66:2c:d8:52:a0:
3c:e0:43:26:e9:3b:5d:2e:1e:8d:ac:12:c3:06:fe:d7:3c:fd:
29:f7:5c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:22:32 2026 by rpki-client