$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: XlTY4JQ4vn3IMNSW8EdrqxEkqikKUAo2hyNjav1iXhU= Subject key identifier: 22:0A:F0:C0:4E:92:AA:11:32:8A:BF:B8:64:4C:0F:25:6A:A7:1E:E3 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 3BC2BD7409CB36352A51A1AC0C577098A0681985 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: FF Signing time: Mon 09 Nov 2026 14:34:10 +0000 Manifest this update: Mon 09 Nov 2026 14:29:10 +0000 Manifest next update: Tue 10 Nov 2026 18:24:10 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 2: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 3: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 4: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 6: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 7: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 8: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: JCoaQv0cmVEOAbKPd0EiGd3CDH4sN6DVuRYkIejMwkg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 08:27:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:c2:bd:74:09:cb:36:35:2a:51:a1:ac:0c:57:70:98:a0:68:19:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Nov 9 14:29:10 2026 GMT Not After : Nov 10 18:24:10 2026 GMT Subject: CN=220AF0C04E92AA11328ABFB8644C0F256AA71EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e5:46:f6:b1:5b:1c:80:d0:b9:90:d2:a3:48: f1:26:97:fa:4f:8b:3e:f0:42:6a:4e:9d:8e:d1:33: 2e:25:26:70:27:d8:20:b6:98:b9:4b:31:3d:ca:3a: 82:77:58:8c:0b:3b:b7:61:20:2e:2f:e4:1c:65:8d: e8:de:36:cf:28:06:ba:17:2d:f7:be:26:25:30:4c: 0c:01:b0:90:1b:4d:d0:ec:d6:ba:b6:7e:6d:37:76: 50:d0:1b:b1:25:a4:65:32:a5:92:8a:cd:a9:bf:9e: 9c:17:9b:75:4c:c0:73:fe:b6:ab:67:a7:91:21:15: 37:36:8b:df:74:df:8c:bd:94:4f:f5:76:e5:50:fa: 9c:0c:ef:e0:30:6d:a8:55:b9:a7:20:79:0a:40:f9: 28:83:f5:23:f8:42:c7:84:e3:f4:9e:b9:aa:12:0b: f7:9c:3c:64:ba:9e:53:40:29:ea:10:71:14:8c:f7: 88:a8:34:31:b7:ca:39:e0:8e:5b:33:40:05:52:8e: dc:f3:42:88:e4:ab:f1:e0:5a:6b:1e:99:0b:f8:43: a7:a4:74:cd:fa:74:3d:b6:4e:2d:21:27:94:7b:0b: 92:b6:14:eb:cb:51:de:ef:7c:b8:e6:04:03:97:77: 6e:0c:9e:fa:1b:19:94:be:c2:d7:99:da:1a:ec:2f: 29:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:0A:F0:C0:4E:92:AA:11:32:8A:BF:B8:64:4C:0F:25:6A:A7:1E:E3 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:de:56:36:e0:24:4e:e0:24:d9:ba:03:82:94:41:e8:c4:9e: a5:00:f6:1d:5e:ee:16:db:6d:3c:c4:35:73:c3:49:62:8d:b6: f1:b3:5b:c4:58:36:1d:1f:e1:b2:ff:29:90:b6:27:e9:fa:a3: d1:37:d2:e9:55:ae:c8:14:79:cc:b9:fa:16:b6:6d:c3:54:8d: 77:82:a5:ce:20:66:4b:c8:dc:b1:90:b8:c1:94:31:9c:4c:ec: 28:d2:5c:a5:7e:d8:59:b7:39:86:7c:23:0b:e5:9e:fc:7a:13: cf:be:cc:c3:0d:02:09:99:7b:3a:71:96:6e:2a:20:c8:41:ed: f5:cd:18:47:df:6b:36:9b:5d:15:6e:8e:63:89:39:e4:90:e8: bc:d4:ce:2e:0f:d0:ab:a4:b3:14:b3:2d:51:68:68:f2:13:aa: c5:99:84:a0:73:bf:77:41:06:55:45:56:36:f0:61:96:bf:a4: 95:0e:e6:a1:01:b9:a6:12:e7:35:52:a1:0f:cc:b6:5d:cd:7f: ee:fa:d1:50:a2:c6:bf:bf:4a:01:32:36:d4:97:67:c2:78:0e: 0f:b4:92:b8:92:b2:63:43:e3:18:d8:03:0e:d2:a6:cb:22:48: 7f:32:93:b9:79:94:5e:9f:f3:aa:c4:26:3c:9e:e7:c1:2c:3e: 6a:c6:ff:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8K9dAnLNjUqUaGsDFdwmKBoGYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjExMDkxNDI5MTBaFw0yNjExMTAxODI0MTBaMDMxMTAvBgNV BAMTKDIyMEFGMEMwNEU5MkFBMTEzMjhBQkZCODY0NEMwRjI1NkFBNzFFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5Ub2sVscgNC5kNKjSPEml/pP iz7wQmpOnY7RMy4lJnAn2CC2mLlLMT3KOoJ3WIwLO7dhIC4v5BxljejeNs8oBroX Lfe+JiUwTAwBsJAbTdDs1rq2fm03dlDQG7ElpGUypZKKzam/npwXm3VMwHP+tqtn p5EhFTc2i99034y9lE/1duVQ+pwM7+AwbahVuacgeQpA+SiD9SP4QseE4/SeuaoS C/ecPGS6nlNAKeoQcRSM94ioNDG3yjngjlszQAVSjtzzQojkq/HgWmsemQv4Q6ek dM36dD22Ti0hJ5R7C5K2FOvLUd7vfLjmBAOXd24MnvobGZS+wteZ2hrsLynzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIgrwwE6SqhEyir+4ZEwPJWqnHuMwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGXeVjbgJE7gJNm6A4KUQejEnqUA9h1e7hbb bTzENXPDSWKNtvGzW8RYNh0f4bL/KZC2J+n6o9E30ulVrsgUecy5+ha2bcNUjXeC pc4gZkvI3LGQuMGUMZxM7CjSXKV+2Fm3OYZ8Iwvlnvx6E8++zMMNAgmZezpxlm4q IMhB7fXNGEffazabXRVujmOJOeSQ6LzUzi4P0KuksxSzLVFoaPITqsWZhKBzv3dB BlVFVjbwYZa/pJUO5qEBuaYS5zVSoQ/Mtl3Nf+760VCixr+/SgEyNtSXZ8J4Dg+0 kriSsmND4xjYAw7SpssiSH8yk7l5lF6f86rEJjye58EsPmrG/8s= -----END CERTIFICATE-----Generated at Mon Nov 9 23:00:00 2026 by rpki-client