$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: 0l4ABUrddyqlbe1FlXsrDM42gbalBViKden34SBQ8Ag= Subject key identifier: 24:40:4D:60:5B:38:50:1B:A4:67:A1:96:C3:E5:50:D1:EA:2A:4B:F3 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 602522D8745EA61633A699C7E0495B22FA971AE8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: DE Signing time: Thu 15 Oct 2026 16:09:40 +0000 Manifest this update: Thu 15 Oct 2026 16:04:40 +0000 Manifest next update: Fri 16 Oct 2026 17:55:40 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 2: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: 3n3we4eUtwAZlqWYJyVdvHGd0vipXOMk2k6Aho8DCD0=) 3: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 4: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 5: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 6: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 7: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 8: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 Oct 2026 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:25:22:d8:74:5e:a6:16:33:a6:99:c7:e0:49:5b:22:fa:97:1a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Oct 15 16:04:40 2026 GMT Not After : Oct 16 17:55:40 2026 GMT Subject: CN=24404D605B38501BA467A196C3E550D1EA2A4BF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f4:ed:f6:22:f6:d6:63:71:83:b8:89:8f:2e: 78:50:2e:db:52:ed:28:d9:a7:70:9c:13:10:d8:e2: a4:44:63:9f:7c:b3:24:a7:c6:4f:f0:6d:e0:81:31: 23:1f:10:c0:20:35:48:6b:f8:da:8f:d5:fd:92:a0: f9:fb:ab:3a:1f:a6:b8:b7:b2:d3:72:31:be:45:3d: f9:8a:0d:6d:1d:fa:e3:fe:9a:a2:dd:18:63:04:a0: 8e:35:bf:91:c2:c8:74:cb:5e:53:c1:43:64:89:47: 2c:6d:20:74:06:83:32:8d:81:6c:a8:65:b4:4c:88: e9:6a:ee:8e:dd:ec:a8:1c:e7:ea:d3:16:0f:81:d6: 7e:44:a9:04:e6:6e:be:3f:d6:3d:9c:83:a4:22:5a: f6:c1:65:11:c6:db:cc:a2:4f:9b:bb:65:6b:64:ed: a1:71:97:7a:f7:2d:16:e3:03:42:11:71:05:ce:55: c8:17:b1:f0:fb:1c:77:4a:13:ab:81:ba:65:c5:6c: c6:71:d7:bb:85:a1:38:c7:0e:1b:57:c3:da:1f:ff: 66:49:8c:d3:78:43:30:29:69:03:36:74:25:ba:d6: 24:0f:de:08:a1:bb:eb:ef:e4:21:70:9e:1c:8e:9a: 0b:a9:79:e7:2a:09:a5:91:b5:74:c9:7a:2b:f1:95: 99:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:40:4D:60:5B:38:50:1B:A4:67:A1:96:C3:E5:50:D1:EA:2A:4B:F3 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:80:b6:eb:75:0a:76:2f:a5:db:f4:e8:55:19:81:39:66:d5: fc:48:e2:9c:39:58:58:2c:fa:32:6f:ee:79:ee:39:b3:5c:14: 84:7d:57:31:97:f9:46:5f:8e:29:bb:59:d1:60:e9:13:ba:53: bc:53:ac:55:e1:9f:a7:96:f4:0a:9d:d6:62:d3:6e:f3:14:48: 54:69:18:a2:2a:52:c2:7d:19:eb:58:39:c7:cf:3b:85:93:57: 54:39:11:28:0a:41:47:b0:71:66:a2:c1:ba:3a:b3:7a:65:47: 35:7c:5b:5b:c8:c0:2e:f8:ea:40:be:90:20:01:62:2e:82:eb: 5f:f7:f4:a9:9a:80:c4:47:df:e2:62:72:e4:2e:b9:b2:1c:41: de:48:1a:a4:36:dc:53:e5:f0:22:c2:2c:8b:94:aa:2b:c6:26: 1f:66:a2:52:80:b2:ae:37:55:0a:11:36:f1:18:70:e0:fe:ec: cc:e0:72:f7:79:e3:1c:12:29:ca:95:23:36:f0:15:3d:ba:ec: 84:03:e5:5f:aa:84:fd:5e:7f:4e:f1:37:f7:80:7f:35:9b:c0: 5f:58:6f:7e:58:ca:63:43:1d:fe:ed:c4:50:d7:d1:5b:23:b7: a5:31:4d:b7:40:62:89:d8:19:6a:d4:87:41:4e:6b:b5:ad:ec: 2e:6a:f2:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYCUi2HRephYzppnH4ElbIvqXGugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjEwMTUxNjA0NDBaFw0yNjEwMTYxNzU1NDBaMDMxMTAvBgNV BAMTKDI0NDA0RDYwNUIzODUwMUJBNDY3QTE5NkMzRTU1MEQxRUEyQTRCRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9O32IvbWY3GDuImPLnhQLttS 7SjZp3CcExDY4qREY598sySnxk/wbeCBMSMfEMAgNUhr+NqP1f2SoPn7qzofpri3 stNyMb5FPfmKDW0d+uP+mqLdGGMEoI41v5HCyHTLXlPBQ2SJRyxtIHQGgzKNgWyo ZbRMiOlq7o7d7Kgc5+rTFg+B1n5EqQTmbr4/1j2cg6QiWvbBZRHG28yiT5u7ZWtk 7aFxl3r3LRbjA0IRcQXOVcgXsfD7HHdKE6uBumXFbMZx17uFoTjHDhtXw9of/2ZJ jNN4QzApaQM2dCW61iQP3gihu+vv5CFwnhyOmgupeecqCaWRtXTJeivxlZnNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJEBNYFs4UBukZ6GWw+VQ0eoqS/MwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE+Atut1CnYvpdv06FUZgTlm1fxI4pw5WFgs +jJv7nnuObNcFIR9VzGX+UZfjim7WdFg6RO6U7xTrFXhn6eW9Aqd1mLTbvMUSFRp GKIqUsJ9GetYOcfPO4WTV1Q5ESgKQUewcWaiwbo6s3plRzV8W1vIwC746kC+kCAB Yi6C61/39KmagMRH3+JicuQuubIcQd5IGqQ23FPl8CLCLIuUqivGJh9molKAsq43 VQoRNvEYcOD+7Mzgcvd54xwSKcqVIzbwFT267IQD5V+qhP1ef07xN/eAfzWbwF9Y b35YymNDHf7txFDX0Vsjt6UxTbdAYonYGWrUh0FOa7Wt7C5q8vQ= -----END CERTIFICATE-----Generated at Fri Oct 16 13:19:30 2026 by rpki-client