$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: sftFfWYt8wkfBMQ8oIWad2HVCnItagJUK+acRXKUhGk= Subject key identifier: 3D:56:A3:74:5B:2A:5D:95:A9:8C:55:9B:BD:32:E5:A2:07:02:35:20 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 222D695E82340FFDD76EA03281A679451E845DD9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: BD Signing time: Sun 20 Sep 2026 21:28:34 +0000 Manifest this update: Sun 20 Sep 2026 21:23:34 +0000 Manifest next update: Tue 22 Sep 2026 00:47:34 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 2: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: fNrHs1Xyi53NTc9a2f404wRsphEdXqH9TnQ1oXYDMaM=) 3: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 4: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 6: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 7: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 8: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2d:69:5e:82:34:0f:fd:d7:6e:a0:32:81:a6:79:45:1e:84:5d:d9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Sep 20 21:23:34 2026 GMT Not After : Sep 22 00:47:34 2026 GMT Subject: CN=3D56A3745B2A5D95A98C559BBD32E5A207023520 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:c2:99:3f:12:c1:7e:e9:50:c3:9e:ab:06:fa: 85:ba:00:a7:f1:47:c8:8d:7c:92:19:8b:15:70:23: f2:0e:fb:ad:7a:5b:59:b4:ff:6d:2f:28:65:13:59: a2:54:74:90:6b:ca:a3:de:f1:5a:9a:e0:4d:06:f4: ab:5f:a5:e9:44:cf:54:c5:28:9b:17:a1:ac:33:c2: cc:4e:d5:f3:1e:b7:7e:ea:5c:14:46:1a:94:2f:7c: cc:e8:13:e9:e8:cc:55:42:b3:43:7a:6d:1e:5b:85: 64:0a:61:57:1d:5f:18:51:f4:99:41:c1:da:73:03: da:e6:5e:8c:91:16:f8:8e:26:4f:a2:74:9f:2a:b7: 91:bf:92:a1:a3:77:22:0a:f6:54:28:a0:95:f9:d9: cd:96:1d:17:4a:8c:16:95:54:69:cb:19:fe:ac:8a: fa:a8:81:4b:a1:aa:64:64:7b:c1:5e:b2:98:fa:27: a4:ee:0d:65:9d:7b:a2:5a:3d:f9:53:f2:86:ca:1e: b9:a9:b7:2d:80:03:90:6f:15:63:41:b6:27:3c:fc: cb:5f:f3:e8:cd:fb:16:7a:a6:a9:ef:1a:85:ab:4c: 76:b5:05:99:86:11:27:24:c0:84:19:93:99:35:72: f1:10:6d:e2:32:83:55:0f:64:4b:dd:29:2b:cb:4b: 23:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:56:A3:74:5B:2A:5D:95:A9:8C:55:9B:BD:32:E5:A2:07:02:35:20 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:58:96:98:1c:ac:b2:83:9c:2d:91:c6:b1:03:40:fe:7a:ee: 29:85:c4:3a:26:a8:ec:b6:87:b2:f1:be:01:24:ae:c2:20:71: bc:b6:cb:f3:9f:44:4d:ef:92:0a:3f:c8:2f:3a:f2:d9:8c:e2: ae:70:f8:a5:06:79:dd:21:09:27:e8:f6:6e:b0:82:82:61:99: 0e:7a:56:ae:cc:0d:83:7c:50:74:41:0b:5f:78:a4:8f:44:47: 10:18:4f:37:44:93:bc:99:0a:14:22:ab:99:f6:19:c3:42:3a: 00:b3:c5:47:30:5f:33:7d:b2:d8:ae:7a:fa:e0:14:94:1b:a5: 51:14:58:d1:3e:2e:5e:8c:73:73:30:1b:7f:05:8d:5f:cc:d0: df:31:b0:d8:6a:d1:10:c1:c7:91:26:28:54:0b:6d:04:ca:af: d5:57:c0:81:2f:8e:7b:39:cb:34:5d:50:8f:64:19:93:2b:7c: 63:af:79:9e:c9:0f:78:e2:9c:13:85:6a:08:4a:70:61:f8:6d: 74:7b:a2:da:06:80:cc:ee:a0:f3:7d:41:74:23:46:70:78:a9: a9:a3:20:70:8b:97:e9:56:d4:1f:68:53:0b:bd:be:74:ff:5f: 9b:20:35:3f:83:06:75:3f:53:75:18:f9:e5:9f:01:8a:20:d2: 68:99:75:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIi1pXoI0D/3XbqAygaZ5RR6EXdkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA5MjAyMTIzMzRaFw0yNjA5MjIwMDQ3MzRaMDMxMTAvBgNV BAMTKDNENTZBMzc0NUIyQTVEOTVBOThDNTU5QkJEMzJFNUEyMDcwMjM1MjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgwpk/EsF+6VDDnqsG+oW6AKfx R8iNfJIZixVwI/IO+616W1m0/20vKGUTWaJUdJBryqPe8Vqa4E0G9KtfpelEz1TF KJsXoawzwsxO1fMet37qXBRGGpQvfMzoE+nozFVCs0N6bR5bhWQKYVcdXxhR9JlB wdpzA9rmXoyRFviOJk+idJ8qt5G/kqGjdyIK9lQooJX52c2WHRdKjBaVVGnLGf6s ivqogUuhqmRke8Fespj6J6TuDWWde6JaPflT8obKHrmpty2AA5BvFWNBtic8/Mtf 8+jN+xZ6pqnvGoWrTHa1BZmGESckwIQZk5k1cvEQbeIyg1UPZEvdKSvLSyOfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPVajdFsqXZWpjFWbvTLlogcCNSAwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRYlpgcrLKDnC2RxrEDQP567imFxDomqOy2 h7LxvgEkrsIgcby2y/OfRE3vkgo/yC868tmM4q5w+KUGed0hCSfo9m6wgoJhmQ56 Vq7MDYN8UHRBC194pI9ERxAYTzdEk7yZChQiq5n2GcNCOgCzxUcwXzN9stiuevrg FJQbpVEUWNE+Ll6Mc3MwG38FjV/M0N8xsNhq0RDBx5EmKFQLbQTKr9VXwIEvjns5 yzRdUI9kGZMrfGOveZ7JD3jinBOFaghKcGH4bXR7otoGgMzuoPN9QXQjRnB4qamj IHCLl+lW1B9oUwu9vnT/X5sgNT+DBnU/U3UY+eWfAYog0miZdaY= -----END CERTIFICATE-----Generated at Mon Sep 21 00:03:56 2026 by rpki-client