$ rpki-client -vvf rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft File: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft (raw, json) Hash identifier: D+vFghZ0kzL/4CmLTni1KeA9d0fVBwNZRJ9IRcmZpv4= Subject key identifier: 24:36:E6:AD:16:77:53:3D:99:3E:85:5D:72:32:EE:E9:6B:5B:59:B4 Authority key identifier: 15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 Certificate issuer: /CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Certificate serial: 04DC12AE6D79851DB0EEAB05DAD6E47033E65730 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft Manifest number: 40 Signing time: Fri 19 Jun 2026 21:16:36 +0000 Manifest this update: Fri 19 Jun 2026 21:11:36 +0000 Manifest next update: Sat 20 Jun 2026 22:18:36 +0000 Files and hashes: 1: 15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl (hash: yqr3yBDm1j68MW+8ojDzizYfdl7dz1vDEZi8C5J11AM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 22:18:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:dc:12:ae:6d:79:85:1d:b0:ee:ab:05:da:d6:e4:70:33:e6:57:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15C663DD21C04B6CB2084A745F35B6B2C9902F68 Validity Not Before: Jun 19 21:11:36 2026 GMT Not After : Jun 20 22:18:36 2026 GMT Subject: CN=2436E6AD1677533D993E855D7232EEE96B5B59B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f4:52:48:6f:68:37:f6:10:76:c0:40:a5:83: 57:b1:cb:c4:5c:31:ef:5d:e6:64:ad:13:0e:67:4c: b3:d4:97:3a:e1:4c:68:db:fc:57:f0:21:69:e1:06: 57:c5:09:5a:a2:2f:73:e6:ac:69:eb:7c:d6:a1:94: 82:67:b8:2c:90:c1:39:01:50:73:26:46:7b:e9:b7: ce:57:f6:d7:f5:8c:93:65:23:ec:b0:59:44:21:24: fb:e4:6b:01:f5:c1:b3:26:f9:2a:4e:90:cf:16:47: 59:41:5e:85:e5:42:bd:c9:9e:ff:6d:00:13:04:01: 56:3f:09:0e:93:cf:12:bd:df:f0:09:97:d0:aa:0f: 7d:28:d1:e9:64:65:c5:ef:4a:11:7b:81:af:95:a1: de:7d:27:32:ba:ac:ce:4b:5a:17:d2:2e:59:85:c4: 04:b4:0b:77:45:09:28:63:61:32:d9:82:49:92:8a: 26:a8:ce:6b:13:5b:9b:27:30:36:5d:34:e1:d2:5c: 7b:4d:e2:04:7d:f9:65:29:1b:1e:ce:50:e2:e9:c3: 69:da:19:40:16:29:bc:e5:3a:b1:06:d1:60:e0:e8: e5:a7:25:2c:51:9e:5d:30:b3:de:2a:d6:6c:c9:3e: 71:ca:6d:cd:1a:40:4a:96:94:65:38:3b:18:95:7c: fb:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:36:E6:AD:16:77:53:3D:99:3E:85:5D:72:32:EE:E9:6B:5B:59:B4 X509v3 Authority Key Identifier: keyid:15:C6:63:DD:21:C0:4B:6C:B2:08:4A:74:5F:35:B6:B2:C9:90:2F:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15C663DD21C04B6CB2084A745F35B6B2C9902F68.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/757e6878-6cb2-4a5f-b553-bceb2c95c76c/0/15C663DD21C04B6CB2084A745F35B6B2C9902F68.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:0e:52:e0:9c:7a:16:79:16:4f:a1:5c:12:cb:19:8f:bd:27: 6d:d4:dd:48:16:31:73:5e:d1:b0:37:63:ee:9c:56:ce:75:51: 6b:b4:e3:4d:0d:a1:6c:95:39:99:f1:1c:e3:77:23:b6:b6:e7: 0e:d2:0b:3b:1f:47:69:25:63:1c:af:e9:63:f9:15:04:2a:dd: 1f:71:48:6b:0f:94:0c:6d:ee:fa:e4:7d:3d:6b:e0:a8:7e:46: f6:30:87:e8:c2:8a:68:1e:5c:7a:52:d9:cd:c3:98:6c:26:54: 26:3f:78:ea:da:2e:26:8a:1c:fc:a4:29:4c:1c:bb:d6:e7:10: 56:e9:65:50:8b:5a:a7:05:df:94:e6:24:79:89:c3:62:ec:be: 76:fd:00:df:02:5e:8d:a4:ab:9a:93:48:f0:52:68:a4:ca:39: 96:11:ff:81:85:e0:f4:5e:d2:ca:0a:f5:97:0b:7d:61:d6:b0: 5f:a7:0c:ef:16:55:91:71:c4:e3:60:68:4b:28:7e:45:bb:55: 08:a2:ed:b3:a5:e9:2a:ef:47:41:9b:1d:69:8d:b9:ff:71:cc: cd:ac:08:ea:3c:91:d0:d9:cd:a4:40:52:5c:9c:05:5c:89:57: ff:77:46:81:30:8e:06:2d:fe:aa:71:54:3a:49:fd:06:5c:31: 7f:53:2e:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBNwSrm15hR2w7qsF2tbkcDPmVzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJD OTkwMkY2ODAeFw0yNjA2MTkyMTExMzZaFw0yNjA2MjAyMjE4MzZaMDMxMTAvBgNV BAMTKDI0MzZFNkFEMTY3NzUzM0Q5OTNFODU1RDcyMzJFRUU5NkI1QjU5QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ9FJIb2g39hB2wEClg1exy8Rc Me9d5mStEw5nTLPUlzrhTGjb/FfwIWnhBlfFCVqiL3PmrGnrfNahlIJnuCyQwTkB UHMmRnvpt85X9tf1jJNlI+ywWUQhJPvkawH1wbMm+SpOkM8WR1lBXoXlQr3Jnv9t ABMEAVY/CQ6TzxK93/AJl9CqD30o0elkZcXvShF7ga+Vod59JzK6rM5LWhfSLlmF xAS0C3dFCShjYTLZgkmSiiaozmsTW5snMDZdNOHSXHtN4gR9+WUpGx7OUOLpw2na GUAWKbzlOrEG0WDg6OWnJSxRnl0ws94q1mzJPnHKbc0aQEqWlGU4OxiVfPsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDbmrRZ3Uz2ZPoVdcjLu6WtbWbQwHwYDVR0j BBgwFoAUFcZj3SHAS2yyCEp0XzW2ssmQL2gwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzU3ZTY4NzgtNmNiMi00YTVmLWI1NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQy MUMwNEI2Q0IyMDg0QTc0NUYzNUI2QjJDOTkwMkY2OC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUM2NjNERDIxQzA0QjZDQjIwODRBNzQ1RjM1QjZCMkM5OTAy RjY4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzU3ZTY4NzgtNmNiMi00YTVmLWI1 NTMtYmNlYjJjOTVjNzZjLzAvMTVDNjYzREQyMUMwNEI2Q0IyMDg0QTc0NUYzNUI2 QjJDOTkwMkY2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE4OUuCcehZ5Fk+hXBLLGY+9J23U3UgWMXNe 0bA3Y+6cVs51UWu0400NoWyVOZnxHON3I7a25w7SCzsfR2klYxyv6WP5FQQq3R9x SGsPlAxt7vrkfT1r4Kh+RvYwh+jCimgeXHpS2c3DmGwmVCY/eOraLiaKHPykKUwc u9bnEFbpZVCLWqcF35TmJHmJw2Lsvnb9AN8CXo2kq5qTSPBSaKTKOZYR/4GF4PRe 0soK9ZcLfWHWsF+nDO8WVZFxxONgaEsofkW7VQii7bOl6SrvR0GbHWmNuf9xzM2s COo8kdDZzaRAUlycBVyJV/93RoEwjgYt/qpxVDpJ/QZcMX9TLug= -----END CERTIFICATE-----Generated at Sat Jun 20 09:18:31 2026 by rpki-client