$ rpki-client -vvf rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft File: 15F7970FD3BE97C0407268501363F126D6A3A445.mft (raw, json) Hash identifier: NH21zgZ9X+9mxfH9CCUlYWLLUEcnfDY4RhFJlc+OGfw= Subject key identifier: 38:45:3D:5B:9E:A6:87:89:05:FF:64:C7:F7:33:ED:E1:BE:E4:84:FC Authority key identifier: 15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 Certificate issuer: /CN=15F7970FD3BE97C0407268501363F126D6A3A445 Certificate serial: 01FEAAF3BE42FE6046528CF598FD6BC4B7E21C63 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 17:38:40 +0000 Manifest this update: Sun 02 Aug 2026 17:33:40 +0000 Manifest next update: Mon 03 Aug 2026 20:44:40 +0000 Files and hashes: 1: 15F7970FD3BE97C0407268501363F126D6A3A445.crl (hash: yIIjsISdmeFxS+eAzJYM30Jmzp0iTUQzZ8gXZXI51ic=) 2: 3136302e32352e3234382e302f32342d3234203d3e20313533303931.roa (hash: X/vcd9GE6eNmkLgF7mHSJNZiaXcQAJA0Ms37/3SjQTU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:fe:aa:f3:be:42:fe:60:46:52:8c:f5:98:fd:6b:c4:b7:e2:1c:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15F7970FD3BE97C0407268501363F126D6A3A445 Validity Not Before: Aug 2 17:33:40 2026 GMT Not After : Aug 3 20:44:40 2026 GMT Subject: CN=38453D5B9EA6878905FF64C7F733EDE1BEE484FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:1a:79:96:0f:fa:c3:58:36:44:2e:2b:7e:15: 2d:e6:28:65:0e:e0:57:86:61:51:60:45:15:79:23: d1:b4:47:69:e4:68:7d:fb:bb:54:2c:3a:ca:2b:14: fb:b1:21:bc:c5:ba:de:33:6f:40:41:2f:bf:8e:fa: bc:bd:35:39:77:f6:01:94:57:b0:44:94:ef:cc:ca: ca:28:5c:9f:46:c6:14:c6:7f:f9:12:62:e0:ad:7e: 28:dd:8d:36:48:3e:8a:4f:eb:2f:62:04:09:3d:37: 3a:eb:55:fc:a3:72:a8:22:2c:8b:c5:c8:f2:8d:61: f4:c3:33:bc:ef:f9:08:f6:ed:52:bc:ad:b8:18:44: 3e:8e:1e:eb:27:b3:dc:2d:43:ca:68:51:17:bf:f4: 9d:58:2f:f3:de:8a:87:16:ae:0a:45:33:51:ab:6a: 98:58:96:5c:16:f3:be:c3:97:8b:af:17:b5:9e:54: 09:da:2e:72:3e:4b:eb:24:c1:06:31:22:15:7a:67: f8:f4:07:28:74:66:41:39:53:33:3e:96:a9:68:ee: a9:97:2c:4f:fc:60:d9:ca:54:6c:8b:28:ae:02:dd: 9d:3d:6d:38:1f:a9:11:28:dc:a7:cb:50:1f:79:88: 2a:a2:21:ac:f8:25:3c:48:65:5b:f4:28:ec:1f:47: 79:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:45:3D:5B:9E:A6:87:89:05:FF:64:C7:F7:33:ED:E1:BE:E4:84:FC X509v3 Authority Key Identifier: keyid:15:F7:97:0F:D3:BE:97:C0:40:72:68:50:13:63:F1:26:D6:A3:A4:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/15F7970FD3BE97C0407268501363F126D6A3A445.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3e4c570a-4474-4cbf-b8f9-ff9791781549/0/15F7970FD3BE97C0407268501363F126D6A3A445.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:b9:90:ad:48:b7:f4:ec:86:6a:c9:68:6d:23:15:3f:a8:3f: c6:27:56:e1:a6:87:8a:7f:69:e2:fb:8b:b9:d6:11:9e:b0:ee: 13:d3:b3:b2:f4:3c:1d:fe:52:29:5d:c0:6c:66:c0:16:e8:ce: e0:71:d3:29:d3:26:cb:0e:52:80:51:c9:d6:ff:83:44:ae:23: a6:41:15:d9:7e:05:f2:e6:77:9f:b5:b4:0b:3e:81:09:35:49: 40:1b:fb:8b:a5:af:70:c3:eb:3b:79:d1:c2:e1:d7:06:51:fd: 3f:93:92:45:b1:2f:00:93:fd:aa:de:72:62:8f:d0:b3:a9:46: 95:1d:7d:ea:50:20:cc:87:1f:18:30:e2:50:4d:26:0e:37:07: f8:8e:21:e8:9a:0b:65:4b:de:0f:ae:26:21:de:47:50:26:8f: 7a:0b:18:76:85:11:78:66:0b:fc:5c:71:e0:10:b8:73:70:7f: 6b:ba:02:79:3e:c9:c9:b1:a6:0b:5d:d3:32:17:a8:b4:66:82: f4:a4:fe:55:d3:77:1b:87:2d:2d:c2:1d:04:20:f5:be:58:bf: 8e:c5:59:f0:4c:77:19:8d:fa:1e:8a:56:9c:29:a2:82:9d:da: b1:3e:3d:31:85:27:7f:41:81:af:b4:17:f4:c2:1d:e5:40:03: a9:2a:29:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAf6q875C/mBGUoz1mP1rxLfiHGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZE NkEzQTQ0NTAeFw0yNjA4MDIxNzMzNDBaFw0yNjA4MDMyMDQ0NDBaMDMxMTAvBgNV BAMTKDM4NDUzRDVCOUVBNjg3ODkwNUZGNjRDN0Y3MzNFREUxQkVFNDg0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeGnmWD/rDWDZELit+FS3mKGUO 4FeGYVFgRRV5I9G0R2nkaH37u1QsOsorFPuxIbzFut4zb0BBL7+O+ry9NTl39gGU V7BElO/MysooXJ9GxhTGf/kSYuCtfijdjTZIPopP6y9iBAk9NzrrVfyjcqgiLIvF yPKNYfTDM7zv+Qj27VK8rbgYRD6OHusns9wtQ8poURe/9J1YL/PeiocWrgpFM1Gr aphYllwW877Dl4uvF7WeVAnaLnI+S+skwQYxIhV6Z/j0Byh0ZkE5UzM+lqlo7qmX LE/8YNnKVGyLKK4C3Z09bTgfqREo3KfLUB95iCqiIaz4JTxIZVv0KOwfR3lXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOEU9W56mh4kF/2TH9zPt4b7khPwwHwYDVR0j BBgwFoAUFfeXD9O+l8BAcmhQE2PxJtajpEUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v M2U0YzU3MGEtNDQ3NC00Y2JmLWI4ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZE M0JFOTdDMDQwNzI2ODUwMTM2M0YxMjZENkEzQTQ0NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC8xNUY3OTcwRkQzQkU5N0MwNDA3MjY4NTAxMzYzRjEyNkQ2QTNB NDQ1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vM2U0YzU3MGEtNDQ3NC00Y2JmLWI4 ZjktZmY5NzkxNzgxNTQ5LzAvMTVGNzk3MEZEM0JFOTdDMDQwNzI2ODUwMTM2M0Yx MjZENkEzQTQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIK5kK1It/TshmrJaG0jFT+oP8YnVuGmh4p/ aeL7i7nWEZ6w7hPTs7L0PB3+UildwGxmwBbozuBx0ynTJssOUoBRydb/g0SuI6ZB Fdl+BfLmd5+1tAs+gQk1SUAb+4ulr3DD6zt50cLh1wZR/T+TkkWxLwCT/arecmKP 0LOpRpUdfepQIMyHHxgw4lBNJg43B/iOIeiaC2VL3g+uJiHeR1Amj3oLGHaFEXhm C/xcceAQuHNwf2u6Ank+ycmxpgtd0zIXqLRmgvSk/lXTdxuHLS3CHQQg9b5Yv47F WfBMdxmN+h6KVpwpooKd2rE+PTGFJ39Bga+0F/TCHeVAA6kqKb0= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:36 2026 by rpki-client