$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: dO2jUAvkJGyc8tSSx0LE1DGVsgdvLWJnyxTNPy7bZCo= Subject key identifier: 6B:44:38:22:71:27:EB:76:52:76:52:F7:14:F7:1C:0C:66:5C:75:28 Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 265E02D3B07132808F9C58BB9C7FEF685A931063 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: F6 Signing time: Mon 02 Nov 2026 07:36:54 +0000 Manifest this update: Mon 02 Nov 2026 07:31:54 +0000 Manifest next update: Tue 03 Nov 2026 11:20:54 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) 2: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: 2uNzWEbiq0aPO1dYqlXBxpvga8ypjm6zW43v9xw+SME=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 11:20:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5e:02:d3:b0:71:32:80:8f:9c:58:bb:9c:7f:ef:68:5a:93:10:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Nov 2 07:31:54 2026 GMT Not After : Nov 3 11:20:54 2026 GMT Subject: CN=6B4438227127EB76527652F714F71C0C665C7528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:c2:0b:06:08:8c:1b:69:45:6b:b5:62:6b: 62:16:bb:c9:7b:fa:b1:9e:37:b5:45:57:22:d9:3d: a2:b0:70:10:4b:ef:22:05:4f:d8:c3:6a:c4:9b:84: 53:ea:21:1a:91:da:c3:8d:b2:81:80:45:0b:e6:d9: 95:ed:ef:18:19:6d:67:cf:0b:1d:f7:09:5a:82:3a: d3:3b:ac:ce:e2:77:a2:c7:c5:60:6b:b0:ca:14:8c: b8:2d:cc:6d:ba:11:69:41:44:9a:e4:cb:3f:43:cb: 53:05:d2:f4:80:6f:22:d8:b6:fe:3e:75:de:d4:50: 16:1d:d2:1d:5e:94:fe:29:dc:59:ee:08:8d:45:74: 02:e6:77:d8:f4:a5:f8:71:b7:f3:b4:57:4d:56:87: c3:0e:76:2d:1e:4d:08:63:05:33:0d:17:be:77:ba: 8a:2d:2e:f4:2d:6e:7d:6f:a6:fb:11:fe:02:6a:f6: ad:e0:ea:d9:93:2b:b8:9f:9d:4b:66:b4:98:00:e8: 65:0e:e4:99:9d:d7:67:e8:aa:0e:4a:bd:98:f0:f4: 34:45:a5:e0:0d:a2:d0:58:00:09:46:57:ba:04:7f: 1b:bf:1e:92:92:69:16:72:26:ff:08:1f:d9:5d:8a: d7:bd:e9:37:cc:9f:5d:c5:e2:10:38:cd:a3:cf:61: f6:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:44:38:22:71:27:EB:76:52:76:52:F7:14:F7:1C:0C:66:5C:75:28 X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:2c:80:2b:1a:71:7e:6c:b0:33:3f:65:bc:6c:7f:bd:5c:4d: 32:82:79:f5:4f:ce:3c:4b:f9:ff:f3:30:74:55:29:1b:5e:7f: da:49:b2:82:dc:0d:46:3d:ba:23:6a:9b:9e:3a:b9:ac:ca:34: e1:2d:18:b6:77:df:57:0a:86:51:cb:6b:89:48:9b:33:83:06: b4:f8:61:02:43:24:89:67:da:1d:83:26:00:6f:77:0a:f2:fe: 30:d3:af:24:67:6c:fd:04:24:7f:74:3f:3b:00:3c:bd:4b:6c: c3:43:4b:51:85:40:b0:98:f8:4e:29:ea:63:05:58:2d:47:55: a2:d0:bc:12:49:18:06:43:b3:2d:39:8b:91:7d:e8:9a:62:0e: 34:bd:48:72:13:f5:c0:3b:b1:42:18:81:77:88:17:0d:ae:28: 17:79:69:92:75:0a:4b:81:54:15:40:67:d6:0c:27:c7:57:24: be:d4:30:ea:01:ab:c7:bc:33:b4:33:3c:df:35:6c:71:3f:11: db:84:32:5f:0a:bd:7e:9e:0d:7a:dd:d1:10:76:7d:9e:72:9a: 66:28:4c:ed:e6:3c:27:88:e9:43:f6:25:da:1b:48:84:f9:94: a0:94:75:fc:32:16:5a:3f:3b:cf:ba:05:22:8b:7c:a5:4b:e8: 0f:3e:57:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl4C07BxMoCPnFi7nH/vaFqTEGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjExMDIwNzMxNTRaFw0yNjExMDMxMTIwNTRaMDMxMTAvBgNV BAMTKDZCNDQzODIyNzEyN0VCNzY1Mjc2NTJGNzE0RjcxQzBDNjY1Qzc1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtcILBgiMG2lFa7Via2IWu8l7 +rGeN7VFVyLZPaKwcBBL7yIFT9jDasSbhFPqIRqR2sONsoGARQvm2ZXt7xgZbWfP Cx33CVqCOtM7rM7id6LHxWBrsMoUjLgtzG26EWlBRJrkyz9Dy1MF0vSAbyLYtv4+ dd7UUBYd0h1elP4p3FnuCI1FdALmd9j0pfhxt/O0V01Wh8MOdi0eTQhjBTMNF753 uootLvQtbn1vpvsR/gJq9q3g6tmTK7ifnUtmtJgA6GUO5Jmd12foqg5KvZjw9DRF peANotBYAAlGV7oEfxu/HpKSaRZyJv8IH9ldite96TfMn13F4hA4zaPPYfZBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa0Q4InEn63ZSdlL3FPccDGZcdSgwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD8sgCsacX5ssDM/Zbxsf71cTTKCefVPzjxL +f/zMHRVKRtef9pJsoLcDUY9uiNqm546uazKNOEtGLZ331cKhlHLa4lImzODBrT4 YQJDJIln2h2DJgBvdwry/jDTryRnbP0EJH90PzsAPL1LbMNDS1GFQLCY+E4p6mMF WC1HVaLQvBJJGAZDsy05i5F96JpiDjS9SHIT9cA7sUIYgXeIFw2uKBd5aZJ1CkuB VBVAZ9YMJ8dXJL7UMOoBq8e8M7QzPN81bHE/EduEMl8KvX6eDXrd0RB2fZ5ymmYo TO3mPCeI6UP2JdobSIT5lKCUdfwyFlo/O8+6BSKLfKVL6A8+V+E= -----END CERTIFICATE-----Generated at Mon Nov 2 15:31:58 2026 by rpki-client