$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json) Hash identifier: zAMvMqrQmYiUORsR7SHKfCV1TnCLl82Iytn33OcAPAY= Subject key identifier: 78:BE:C5:E4:C7:ED:79:66:15:B0:28:CF:5F:B6:6D:E2:C7:6D:A4:C7 Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Certificate serial: 5A9255BE2A14B1A310C1730A596CF6AA6784ED30 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft Manifest number: 0100 Signing time: Tue 10 Nov 2026 00:31:19 +0000 Manifest this update: Tue 10 Nov 2026 00:26:19 +0000 Manifest next update: Wed 11 Nov 2026 01:03:19 +0000 Files and hashes: 1: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=) 2: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=) 3: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: SZUnpIT0Mvp/C/mG4BcKtngyFOv1JHB2gdEZksOO/Wg=) 4: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 01:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:92:55:be:2a:14:b1:a3:10:c1:73:0a:59:6c:f6:aa:67:84:ed:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Validity Not Before: Nov 10 00:26:19 2026 GMT Not After : Nov 11 01:03:19 2026 GMT Subject: CN=78BEC5E4C7ED796615B028CF5FB66DE2C76DA4C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:3d:ce:dd:01:f6:4e:29:92:c9:7e:f2:f5:fa: b4:5f:1d:a5:89:94:fd:9d:01:77:b6:68:d3:4d:63: fc:2f:1c:79:30:47:60:94:81:83:cc:f7:05:6b:e1: 82:83:c8:24:b2:4e:20:21:2f:72:b0:f5:65:a3:b0: 86:24:91:e0:ba:39:63:a8:52:f8:14:64:9d:27:68: 9c:f1:a4:7b:21:9d:74:21:9f:d5:31:f0:c8:50:65: ce:68:a5:ed:97:d1:ab:ba:94:d7:5d:61:91:2b:78: ec:e2:85:5d:75:62:9c:e1:02:b1:22:c7:68:ee:8f: 6e:2d:72:52:a6:0e:20:62:8d:36:a2:a9:8a:e6:2b: 7a:56:20:4e:f3:d0:9f:68:ee:68:a1:8a:a6:08:87: f3:15:f2:1b:e2:b9:9b:fb:d3:19:7e:3d:2b:b9:51: 69:cf:95:e8:01:78:c0:33:ea:a8:21:bb:2e:7c:7f: 34:92:c2:ed:fe:f6:69:e4:3c:a2:bc:0c:58:6c:49: db:6d:6d:e0:ea:9a:26:53:23:5a:7e:70:4f:d8:72: cf:63:f5:34:db:9c:70:06:a9:a0:b8:08:19:b9:c9: 10:bb:66:18:22:a4:3c:ca:e0:07:a4:43:9f:a9:de: 20:ed:74:f3:2d:2e:02:cd:7c:87:e8:24:ce:28:f3: 7e:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BE:C5:E4:C7:ED:79:66:15:B0:28:CF:5F:B6:6D:E2:C7:6D:A4:C7 X509v3 Authority Key Identifier: keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:e2:aa:70:51:27:5a:8d:cb:58:c9:8e:1c:6a:23:0a:1f:e7: 55:a8:cd:f3:b1:71:52:2b:2e:bc:71:44:db:87:7a:0e:80:70: bd:59:9a:7a:78:80:dc:a1:05:84:f3:c5:0d:7b:4f:aa:36:69: f1:f8:b4:27:dd:d3:c0:48:3d:ec:14:98:34:dd:e5:b5:aa:a1: 9c:63:60:41:51:79:16:43:13:ea:fc:ac:1d:31:15:25:ec:c1: 01:2d:4c:0d:79:27:19:b1:56:18:12:bd:1f:ed:35:0b:32:2c: f4:8d:7a:d9:27:a7:f9:f0:b0:24:10:fb:a1:5a:a5:30:b9:c0: c1:ce:3f:c2:92:0f:b7:39:87:e9:a7:91:cc:6d:b9:19:06:2d: 66:ce:fe:ab:05:6b:3b:ad:85:bb:36:c9:0e:76:6a:46:ac:1a: f7:ed:19:be:92:59:26:79:a4:07:b2:3a:38:a6:e9:7c:67:b4: 72:65:96:d7:8c:f2:83:c7:46:24:a5:6b:b4:b4:f4:f3:5c:1a: d0:4d:1f:1b:78:24:a2:a6:bb:ac:3a:1c:c4:bc:f4:fd:40:c1: 15:6f:7e:77:8a:13:93:d4:d9:6b:a7:f1:2d:f1:7a:98:e4:5b: 51:d9:54:1b:bd:ce:58:2f:35:6b:3a:0a:7b:a8:9b:7e:f8:e4: fb:5a:df:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpJVvioUsaMQwXMKWWz2qmeE7TAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZD MUIzQzM3NjAeFw0yNjExMTAwMDI2MTlaFw0yNjExMTEwMTAzMTlaMDMxMTAvBgNV BAMTKDc4QkVDNUU0QzdFRDc5NjYxNUIwMjhDRjVGQjY2REUyQzc2REE0QzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfPc7dAfZOKZLJfvL1+rRfHaWJ lP2dAXe2aNNNY/wvHHkwR2CUgYPM9wVr4YKDyCSyTiAhL3Kw9WWjsIYkkeC6OWOo UvgUZJ0naJzxpHshnXQhn9Ux8MhQZc5ope2X0au6lNddYZEreOzihV11YpzhArEi x2juj24tclKmDiBijTaiqYrmK3pWIE7z0J9o7mihiqYIh/MV8hviuZv70xl+PSu5 UWnPlegBeMAz6qghuy58fzSSwu3+9mnkPKK8DFhsSdttbeDqmiZTI1p+cE/Ycs9j 9TTbnHAGqaC4CBm5yRC7ZhgipDzK4AekQ5+p3iDtdPMtLgLNfIfoJM4o8353AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeL7F5MfteWYVsCjPX7Zt4sdtpMcwHwYDVR0j BBgwFoAUFdbi0lJ+5tz2gf7wY/YbH8Gzw3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhmOWU4N2QtZTUwOS00N2JhLWJlOWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1 MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZDMUIzQzM3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUQ2RTJEMjUyN0VFNkRDRjY4MUZFRjA2M0Y2MUIxRkMxQjND Mzc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl OWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFC MUZDMUIzQzM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJriqnBRJ1qNy1jJjhxqIwof51WozfOxcVIr LrxxRNuHeg6AcL1Zmnp4gNyhBYTzxQ17T6o2afH4tCfd08BIPewUmDTd5bWqoZxj YEFReRZDE+r8rB0xFSXswQEtTA15JxmxVhgSvR/tNQsyLPSNetknp/nwsCQQ+6Fa pTC5wMHOP8KSD7c5h+mnkcxtuRkGLWbO/qsFazuthbs2yQ52akasGvftGb6SWSZ5 pAeyOjim6XxntHJllteM8oPHRiSla7S09PNcGtBNHxt4JKKmu6w6HMS89P1AwRVv fneKE5PU2Wun8S3xepjkW1HZVBu9zlgvNWs6Cnuom3745Pta3zc= -----END CERTIFICATE-----Generated at Tue Nov 10 15:19:45 2026 by rpki-client