$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: uo8o8ouuxdCFjN5/P1IVeSBr9LXRSDwLlSeNX2y3sQs= Subject key identifier: BB:E0:36:0F:A6:33:94:76:EC:F1:DF:E4:AA:84:26:B3:B0:43:51:09 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 159C7F0BF4F4F9E9F5105BE65147B53A5A978EC3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: 38 Signing time: Fri 12 Jun 2026 22:37:41 +0000 Manifest this update: Fri 12 Jun 2026 22:32:41 +0000 Manifest next update: Sat 13 Jun 2026 23:50:41 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 2: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: 6FyTfptRMItHxVlW4dkPYAgGAncCK88IuyN7e2CU9SU=) 3: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 4: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 5: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 6: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 7: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 8: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 13 Jun 2026 23:50:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:9c:7f:0b:f4:f4:f9:e9:f5:10:5b:e6:51:47:b5:3a:5a:97:8e:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Jun 12 22:32:41 2026 GMT Not After : Jun 13 23:50:41 2026 GMT Subject: CN=BBE0360FA6339476ECF1DFE4AA8426B3B0435109 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:78:cf:1b:bb:82:b7:44:a3:7f:8c:5e:8d:cc: 39:01:48:03:65:0d:c2:62:0a:91:c1:61:9d:e6:e0: ac:f6:42:8d:a6:d2:a3:0f:ab:fd:bf:8a:d3:ef:d5: 9b:b0:2e:85:60:b9:3e:0b:b2:2e:e0:a6:4f:3c:62: 0b:f7:ff:b4:22:e6:4a:6a:f7:71:88:86:ae:2c:a6: 60:4e:f2:d5:f0:67:21:7a:1e:bf:4a:e1:e2:d1:3a: 93:a1:39:19:f8:20:84:f0:5b:09:61:bc:9b:a2:59: 96:fb:72:b1:53:c6:b5:7b:91:3a:62:fc:29:45:8b: 4b:85:2b:7c:cb:a2:fd:82:f1:a2:7c:9f:5f:3a:f1: 61:a5:d2:9a:fa:3b:1e:0e:90:4b:f6:81:82:ad:17: a1:8a:7e:f3:d7:74:c3:52:f6:6f:64:86:1f:22:e7: bd:cd:ab:c0:1a:05:21:5e:0b:d3:69:8d:5d:64:4d: 00:6a:ba:47:57:04:93:df:93:2e:da:bc:ca:42:42: e5:21:db:8f:27:56:75:56:ab:fd:e0:67:5e:b1:6f: c6:df:99:6e:50:5f:24:f8:2b:31:df:71:b9:20:d4: 33:cb:f4:22:89:7a:ef:c1:d1:16:46:1d:d0:4c:4e: 53:4f:d0:a0:81:c3:07:fa:10:b7:17:f6:99:4f:50: 4e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:E0:36:0F:A6:33:94:76:EC:F1:DF:E4:AA:84:26:B3:B0:43:51:09 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:24:61:b2:9c:de:5b:8c:82:f3:5c:05:08:f5:3d:0d:14:c7: d9:a9:8f:b0:c7:4b:4d:19:65:07:e0:f1:22:76:cd:76:2f:6d: 13:d3:82:75:8e:0c:74:c7:99:ba:f0:fd:d7:4e:82:80:cc:dd: 6b:cb:a0:4b:5d:d3:3b:92:1e:9e:66:fa:8f:db:af:40:57:1d: 9c:5e:d7:6b:ff:be:b5:d8:5e:7f:e6:57:e0:74:7e:14:69:cc: ba:3e:4c:a2:7d:ba:0a:bd:03:a1:10:ea:4c:df:19:f8:cb:1a: 5d:37:32:cb:07:48:98:e0:6b:3a:45:d9:f4:11:8e:e6:da:36: 52:5c:cb:1e:27:be:0e:8f:6a:ee:f7:06:da:a3:2a:56:0e:21: 3f:ba:ec:43:c5:59:1c:68:44:75:69:0f:83:fd:f5:79:81:48: b0:19:74:be:6c:a9:20:cf:ea:14:70:61:94:cd:bb:e3:e7:ca: 0d:a8:13:2b:06:ef:cc:3b:8d:77:e8:ab:a1:03:a7:90:2b:45: 92:5e:8c:38:9a:89:fb:39:cf:99:9a:95:cd:be:96:7e:4a:47: 83:86:15:48:74:e4:95:16:ad:84:b3:4f:d4:9d:84:ec:be:90: 2f:2c:77:e8:31:7c:5d:07:ae:3f:89:31:ab:43:f5:03:49:d5: 53:51:47:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFZx/C/T0+en1EFvmUUe1OlqXjsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA2MTIyMjMyNDFaFw0yNjA2MTMyMzUwNDFaMDMxMTAvBgNV BAMTKEJCRTAzNjBGQTYzMzk0NzZFQ0YxREZFNEFBODQyNkIzQjA0MzUxMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzeM8bu4K3RKN/jF6NzDkBSANl DcJiCpHBYZ3m4Kz2Qo2m0qMPq/2/itPv1ZuwLoVguT4Lsi7gpk88Ygv3/7Qi5kpq 93GIhq4spmBO8tXwZyF6Hr9K4eLROpOhORn4IITwWwlhvJuiWZb7crFTxrV7kTpi /ClFi0uFK3zLov2C8aJ8n1868WGl0pr6Ox4OkEv2gYKtF6GKfvPXdMNS9m9khh8i 573Nq8AaBSFeC9NpjV1kTQBqukdXBJPfky7avMpCQuUh248nVnVWq/3gZ16xb8bf mW5QXyT4KzHfcbkg1DPL9CKJeu/B0RZGHdBMTlNP0KCBwwf6ELcX9plPUE5lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu+A2D6YzlHbs8d/kqoQms7BDUQkwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgkYbKc3luMgvNcBQj1PQ0Ux9mpj7DHS00Z ZQfg8SJ2zXYvbRPTgnWODHTHmbrw/ddOgoDM3WvLoEtd0zuSHp5m+o/br0BXHZxe 12v/vrXYXn/mV+B0fhRpzLo+TKJ9ugq9A6EQ6kzfGfjLGl03MssHSJjgazpF2fQR jubaNlJcyx4nvg6Pau73BtqjKlYOIT+67EPFWRxoRHVpD4P99XmBSLAZdL5sqSDP 6hRwYZTNu+Pnyg2oEysG78w7jXfoq6EDp5ArRZJejDiaifs5z5malc2+ln5KR4OG FUh05JUWrYSzT9SdhOy+kC8sd+gxfF0Hrj+JMatD9QNJ1VNRR74= -----END CERTIFICATE-----Generated at Sat Jun 13 15:54:50 2026 by rpki-client