$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: XMmK5oHQoHmR4HARg7vDn3uCAmYcxXhuHOey7tc2sgw= Subject key identifier: 25:CE:01:DB:E5:29:64:32:B2:5B:4C:5D:78:98:83:3D:8D:BC:1F:D3 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 71A70D944A3F99270C9CBB9F2ED7279E58BA13DE Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: 74 Signing time: Tue 28 Jul 2026 00:58:25 +0000 Manifest this update: Tue 28 Jul 2026 00:53:25 +0000 Manifest next update: Wed 29 Jul 2026 04:47:25 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 2: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: P4OyaZro+d7TlOzgMNFSCYP3cYLp1GxhXlD0OCGuQIw=) 3: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 4: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 5: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 6: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 7: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 8: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 04:47:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:a7:0d:94:4a:3f:99:27:0c:9c:bb:9f:2e:d7:27:9e:58:ba:13:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Jul 28 00:53:25 2026 GMT Not After : Jul 29 04:47:25 2026 GMT Subject: CN=25CE01DBE5296432B25B4C5D7898833D8DBC1FD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:bf:f4:5f:8d:37:3a:5e:5f:f1:9f:c5:02:41: 83:9d:7c:c6:9b:a5:2c:1c:72:15:bc:1e:25:13:f5: 8b:af:bc:6c:d4:92:db:11:64:6e:c5:43:d9:4b:dc: d6:30:58:0f:ae:ea:14:95:30:cd:0a:ef:35:79:91: 6b:d8:76:d8:3a:c2:88:93:43:ee:fb:b4:42:8f:2c: fe:00:64:99:3a:8c:1f:bb:aa:28:b8:70:91:7c:0d: d5:4d:ca:ac:8b:04:c3:0b:d2:ba:66:4a:f4:73:c6: 57:68:97:b5:54:fc:1c:4a:13:aa:11:66:ba:67:95: 21:3c:7a:52:fa:e0:45:36:b6:49:c7:93:ea:b1:af: 77:4a:d8:16:f6:8c:43:e1:18:4f:db:f1:a4:f6:b1: 07:52:0d:a5:5d:1b:1b:9b:84:1f:cf:50:44:e8:53: 4b:88:88:1e:df:f0:7c:c5:00:f2:bd:cf:25:92:e4: 01:8d:8c:19:31:7a:a5:81:fd:9c:a6:93:e9:8f:6f: b7:bf:78:55:48:af:61:70:0d:6c:ab:35:51:5c:91: 23:8f:f6:3e:bd:d2:42:0f:f0:4d:0d:47:55:d4:ed: 8a:8c:44:fa:9b:a9:92:dc:4a:77:59:75:a6:95:28: 71:97:6a:99:60:47:74:a5:a9:03:0c:c7:7e:a3:49: 7a:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CE:01:DB:E5:29:64:32:B2:5B:4C:5D:78:98:83:3D:8D:BC:1F:D3 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:5a:9f:28:24:c6:d4:c9:38:8b:00:c5:15:c0:6d:9e:30:8a: c7:20:30:03:2a:cb:47:ac:a3:41:5d:7a:50:47:8c:30:8f:e0: 0a:f0:9e:dd:3f:a6:3b:cb:64:1d:5f:92:01:b9:5e:55:42:77: 6d:e9:94:36:b8:1a:f0:ae:9b:a3:45:a0:95:38:64:36:b3:88: 1a:de:65:de:f3:06:3f:7e:50:9f:ad:0f:46:52:18:b8:86:fb: 52:e9:f7:55:f7:a4:06:13:fd:90:7d:f8:ed:82:4b:4f:52:75: de:c6:bb:b7:00:5d:27:25:c4:01:1f:85:28:3a:4a:9e:9b:50: 4d:b8:0f:03:79:af:b8:75:b0:5b:d3:56:df:cc:b8:65:a1:dc: 4f:2d:e9:78:dc:2d:22:57:da:7e:72:fc:08:76:da:87:53:51: 3c:66:96:fc:93:17:d7:d8:a8:27:d6:33:52:e7:41:a9:ce:42: f8:a6:14:ec:8e:83:5a:0b:2c:fd:16:4d:a3:17:37:d7:e4:4d: a7:cc:fb:07:0c:bf:0e:f4:f2:1c:14:fb:3f:28:6d:eb:d6:83: 56:36:08:ec:ac:3d:bb:6a:02:78:49:80:2f:07:99:9a:d6:23: 52:fe:83:c7:bc:7c:f9:51:ef:b6:c6:b1:a2:79:d1:e8:aa:9f: 59:78:a2:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcacNlEo/mScMnLufLtcnnli6E94wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA3MjgwMDUzMjVaFw0yNjA3MjkwNDQ3MjVaMDMxMTAvBgNV BAMTKDI1Q0UwMURCRTUyOTY0MzJCMjVCNEM1RDc4OTg4MzNEOERCQzFGRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzv/RfjTc6Xl/xn8UCQYOdfMab pSwcchW8HiUT9YuvvGzUktsRZG7FQ9lL3NYwWA+u6hSVMM0K7zV5kWvYdtg6woiT Q+77tEKPLP4AZJk6jB+7qii4cJF8DdVNyqyLBMML0rpmSvRzxldol7VU/BxKE6oR ZrpnlSE8elL64EU2tknHk+qxr3dK2Bb2jEPhGE/b8aT2sQdSDaVdGxubhB/PUETo U0uIiB7f8HzFAPK9zyWS5AGNjBkxeqWB/Zymk+mPb7e/eFVIr2FwDWyrNVFckSOP 9j690kIP8E0NR1XU7YqMRPqbqZLcSndZdaaVKHGXaplgR3SlqQMMx36jSXoRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJc4B2+UpZDKyW0xdeJiDPY28H9MwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZanygkxtTJOIsAxRXAbZ4wiscgMAMqy0es o0FdelBHjDCP4Arwnt0/pjvLZB1fkgG5XlVCd23plDa4GvCum6NFoJU4ZDaziBre Zd7zBj9+UJ+tD0ZSGLiG+1Lp91X3pAYT/ZB9+O2CS09Sdd7Gu7cAXSclxAEfhSg6 Sp6bUE24DwN5r7h1sFvTVt/MuGWh3E8t6XjcLSJX2n5y/Ah22odTUTxmlvyTF9fY qCfWM1LnQanOQvimFOyOg1oLLP0WTaMXN9fkTafM+wcMvw708hwU+z8obevWg1Y2 COysPbtqAnhJgC8HmZrWI1L+g8e8fPlR77bGsaJ50eiqn1l4olc= -----END CERTIFICATE-----Generated at Tue Jul 28 21:47:40 2026 by rpki-client