$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: 7sIB59kYL2x4EYO5NkUnz6I/jGIwn4Wrw2nkBJoMrOg= Subject key identifier: 88:ED:C2:CD:C8:07:44:04:5C:C3:82:2B:7B:AA:79:FB:0D:C4:89:14 Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 14858A36BE3DD653E161AD09A645FA5659FDE0F5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 40 Signing time: Thu 18 Jun 2026 11:05:36 +0000 Manifest this update: Thu 18 Jun 2026 11:00:36 +0000 Manifest next update: Fri 19 Jun 2026 14:29:36 +0000 Files and hashes: 1: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) 2: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: IPl+FB6je20wQNYMoJ4ASPbOWGJVsTVmGBGnthNDkwA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 08:44:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:85:8a:36:be:3d:d6:53:e1:61:ad:09:a6:45:fa:56:59:fd:e0:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Jun 18 11:00:36 2026 GMT Not After : Jun 19 14:29:36 2026 GMT Subject: CN=88EDC2CDC80744045CC3822B7BAA79FB0DC48914 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:18:b5:f3:6f:3e:d2:ed:c7:25:b3:98:09:ee: d1:fe:16:c4:74:b3:a0:4a:9d:5d:fc:3e:68:c0:ba: f3:6e:bc:7b:4e:c0:ee:5c:98:7b:d2:2f:65:7e:fc: e1:98:57:38:cb:0e:c8:0a:2b:10:de:c8:ed:58:cd: 3f:e2:2c:bc:58:1c:fd:53:1d:97:26:8a:ba:4c:18: b8:86:62:5c:6e:fb:0b:a9:a8:95:95:20:7d:9e:f2: d4:59:04:f1:74:0b:3c:85:b4:06:41:0a:0a:b0:b2: d2:2c:6e:03:94:33:46:8e:ac:1b:f2:23:6b:6a:05: 2f:ed:80:94:66:4e:a4:d0:cd:63:f0:e4:bd:45:00: c7:cd:8b:51:81:da:16:60:6f:20:8e:d8:6e:f8:c4: f3:1d:e4:42:f1:3d:d3:e6:7d:19:d9:d2:dd:05:20: 7d:a3:b6:85:06:d5:46:7d:8a:b9:84:f0:a8:0a:40: 9c:64:f3:bc:d2:5c:34:da:67:fe:cf:68:6a:fa:81: 1b:6a:d3:05:2e:27:af:e3:1b:07:51:61:95:b5:ad: 74:72:64:e9:14:97:73:cf:8b:eb:f2:ec:97:f5:0f: df:07:3a:cf:10:9c:c6:3e:37:c7:80:11:22:12:1f: 36:e3:0f:c2:64:d8:4c:3e:d5:73:61:30:ea:e2:5d: 29:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:ED:C2:CD:C8:07:44:04:5C:C3:82:2B:7B:AA:79:FB:0D:C4:89:14 X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:6d:b0:95:ea:77:dd:6a:dd:7d:49:31:4d:3b:c4:a8:e8:0c: 4f:b7:c3:88:8c:59:80:23:ce:25:82:fe:58:55:0e:4e:7c:62: 19:e3:b3:be:4f:4b:c1:52:f9:c3:1c:ec:89:2d:a9:b9:59:c5: af:74:67:1a:6a:57:c3:1d:d0:c7:60:af:1a:9d:1a:22:d6:30: 67:24:e9:4b:54:a0:dc:24:5f:71:77:1e:26:17:2e:ae:f9:61: 55:02:9a:68:d5:e0:7a:dd:e1:12:4e:b4:fc:4b:70:55:0a:a2: 89:a5:fb:bd:f6:ec:6a:ac:a4:ef:ca:64:39:46:22:8a:ff:e2: bb:2f:66:d8:62:e7:33:05:5e:aa:b3:b0:7b:74:85:ab:df:f6: 53:ad:d8:42:0a:55:9d:01:e5:0e:95:74:f0:3e:57:a0:81:37: 59:a4:b0:9d:2d:71:83:21:b9:95:42:0e:13:97:df:5d:8b:e2: 1a:88:35:b1:e6:43:21:8e:e5:c0:ac:b9:a8:33:0e:3c:24:4f: 06:79:f9:c0:b3:5a:22:30:7f:11:ac:ec:c7:fc:95:45:63:bf: b8:68:6b:ff:7a:a9:06:61:1a:16:e8:1b:ba:d5:56:84:a1:84: 05:06:34:8d:a9:ea:2d:48:1d:a9:96:3c:66:e7:e5:82:75:68: 71:fa:86:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFIWKNr491lPhYa0JpkX6Vln94PUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA2MTgxMTAwMzZaFw0yNjA2MTkxNDI5MzZaMDMxMTAvBgNV BAMTKDg4RURDMkNEQzgwNzQ0MDQ1Q0MzODIyQjdCQUE3OUZCMERDNDg5MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxGLXzbz7S7ccls5gJ7tH+FsR0 s6BKnV38PmjAuvNuvHtOwO5cmHvSL2V+/OGYVzjLDsgKKxDeyO1YzT/iLLxYHP1T HZcmirpMGLiGYlxu+wupqJWVIH2e8tRZBPF0CzyFtAZBCgqwstIsbgOUM0aOrBvy I2tqBS/tgJRmTqTQzWPw5L1FAMfNi1GB2hZgbyCO2G74xPMd5ELxPdPmfRnZ0t0F IH2jtoUG1UZ9irmE8KgKQJxk87zSXDTaZ/7PaGr6gRtq0wUuJ6/jGwdRYZW1rXRy ZOkUl3PPi+vy7Jf1D98HOs8QnMY+N8eAESISHzbjD8Jk2Ew+1XNhMOriXSn/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiO3CzcgHRARcw4Ire6p5+w3EiRQwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9tsJXqd91q3X1JMU07xKjoDE+3w4iMWYAj ziWC/lhVDk58Yhnjs75PS8FS+cMc7IktqblZxa90ZxpqV8Md0MdgrxqdGiLWMGck 6UtUoNwkX3F3HiYXLq75YVUCmmjV4Hrd4RJOtPxLcFUKooml+7327GqspO/KZDlG Ior/4rsvZthi5zMFXqqzsHt0havf9lOt2EIKVZ0B5Q6VdPA+V6CBN1mksJ0tcYMh uZVCDhOX312L4hqINbHmQyGO5cCsuagzDjwkTwZ5+cCzWiIwfxGs7Mf8lUVjv7ho a/96qQZhGhboG7rVVoShhAUGNI2p6i1IHamWPGbn5YJ1aHH6hos= -----END CERTIFICATE-----Generated at Thu Jun 18 17:14:06 2026 by rpki-client