$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft File: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft (raw, json) Hash identifier: TtFHSjO3SciEMHe4vPCburTAwgvKz4wgfuAztDOzC84= Subject key identifier: 0C:C3:3E:35:33:1A:92:23:DC:0A:BF:2B:8D:50:FB:8E:55:EA:4F:CA Authority key identifier: 15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 Certificate issuer: /CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Certificate serial: 14DF7F7488BDDA1413B64D2E494D2C9F0DFAE4A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft Manifest number: B0 Signing time: Wed 09 Sep 2026 21:29:13 +0000 Manifest this update: Wed 09 Sep 2026 21:24:13 +0000 Manifest next update: Thu 10 Sep 2026 21:45:13 +0000 Files and hashes: 1: 15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl (hash: 6yHphDUTUed6Iwe/HkvF3yqVpHTaNFJbJIlkyMg+02k=) 2: 3130332e3136372e37312e302f32342d3234203d3e20313439313735.roa (hash: mceGSTa1KkilNVeVE/R8JALesPG1r2/fVL6j+DUnje0=) 3: 3130332e3136372e37302e302f32342d3234203d3e20313431393735.roa (hash: meK6TlvZu6bzMUFEpp7QJ/gB0z11zPwPaWYU3HpMyxc=) 4: 3130332e3136372e37302e302f32332d3234203d3e20313431393735.roa (hash: 0xvMDktAur4W5Rzlh9Gpre8Ge/68PJc4pAZtKvhthZo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Sep 2026 21:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:df:7f:74:88:bd:da:14:13:b6:4d:2e:49:4d:2c:9f:0d:fa:e4:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376 Validity Not Before: Sep 9 21:24:13 2026 GMT Not After : Sep 10 21:45:13 2026 GMT Subject: CN=0CC33E35331A9223DC0ABF2B8D50FB8E55EA4FCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ef:23:aa:5b:0d:8d:31:94:0e:4e:38:63:ff: 70:c9:64:0c:5d:c4:8e:f2:79:df:ba:1b:e0:12:1d: 1e:e4:ee:3e:e2:3e:f9:8f:52:a4:a1:43:80:c9:79: 8b:18:3c:45:06:b9:98:78:8d:9c:01:83:9b:7f:8a: f8:4b:91:75:c0:97:2a:b1:6a:48:98:6a:d2:80:a7: d7:90:05:01:18:75:1b:30:29:3e:6c:e2:cd:64:15: dd:04:b0:1e:30:40:65:bc:eb:02:54:87:e3:ac:3d: 43:4d:1a:a5:ba:ac:4a:ac:61:d8:f0:34:52:b2:b6: 08:f0:20:0b:41:ff:ff:11:08:b5:fc:5e:38:0e:1f: 19:b0:d4:83:b8:a3:f2:09:3e:42:b6:1e:4f:9c:5a: ea:41:95:27:98:08:c2:56:0a:2f:6e:a1:52:ca:f2: 7a:7e:e4:bf:b0:47:af:db:f7:c2:8c:79:50:fb:46: 59:44:0c:85:b2:f4:2d:0d:76:7e:e3:29:de:b5:c4: 45:3f:f4:17:1d:b9:75:56:35:21:5b:39:76:c5:3d: d6:1f:36:cf:b7:6c:89:b6:b6:32:bc:e8:2a:5e:37: ba:77:29:92:b3:b6:ca:1f:af:b9:16:18:9a:09:54: 21:08:14:a9:0e:fa:af:5a:55:f1:87:8f:09:1f:56: f2:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:C3:3E:35:33:1A:92:23:DC:0A:BF:2B:8D:50:FB:8E:55:EA:4F:CA X509v3 Authority Key Identifier: keyid:15:D6:E2:D2:52:7E:E6:DC:F6:81:FE:F0:63:F6:1B:1F:C1:B3:C3:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b8f9e87d-e509-47ba-be9d-89556f530ea8/0/15D6E2D2527EE6DCF681FEF063F61B1FC1B3C376.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:e6:ba:4a:11:e4:be:d8:04:45:96:98:19:36:c7:a0:ce:98: f4:ee:69:4b:85:95:05:62:cc:90:13:20:ab:b2:27:11:73:13: c6:4d:0c:c4:2f:55:fd:5b:8d:23:56:cd:13:e5:38:2c:89:b8: b5:56:b2:17:00:e8:61:18:71:15:c5:fe:c0:0a:d8:f9:55:b6: 12:4e:8a:7c:55:5b:0c:9f:c7:21:3e:d5:64:3b:85:eb:8d:07: 1d:5a:d9:14:29:f2:c4:e3:4c:fe:fb:36:c4:37:73:9a:6c:94: 1d:ed:31:8a:c3:80:f7:27:34:f8:bd:de:7d:3f:04:d2:c7:41: 25:31:29:6f:33:75:19:cb:1a:93:a7:91:5f:18:46:62:97:0e: d9:75:a2:2a:c8:cb:5a:ee:2b:e7:df:37:bf:b8:09:39:06:df: 1e:3d:f9:3e:c9:01:b1:6f:bd:0f:3a:41:ed:25:66:74:c5:c8: 97:aa:c4:e0:bc:51:f0:49:ca:94:d8:76:e0:4e:c4:04:5b:1b: 38:c5:07:fc:bb:ff:9a:72:a3:b0:9c:76:b2:be:e2:b4:9b:31: ff:76:32:01:4b:71:98:07:84:a2:97:8d:18:9d:e0:c0:f8:bc: 72:9c:6f:7c:6b:be:c2:9f:b5:99:1d:52:7b:15:29:65:b9:c1: a4:c6:67:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFN9/dIi92hQTtk0uSU0snw365KkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZD MUIzQzM3NjAeFw0yNjA5MDkyMTI0MTNaFw0yNjA5MTAyMTQ1MTNaMDMxMTAvBgNV BAMTKDBDQzMzRTM1MzMxQTkyMjNEQzBBQkYyQjhENTBGQjhFNTVFQTRGQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC47yOqWw2NMZQOTjhj/3DJZAxd xI7yed+6G+ASHR7k7j7iPvmPUqShQ4DJeYsYPEUGuZh4jZwBg5t/ivhLkXXAlyqx akiYatKAp9eQBQEYdRswKT5s4s1kFd0EsB4wQGW86wJUh+OsPUNNGqW6rEqsYdjw NFKytgjwIAtB//8RCLX8XjgOHxmw1IO4o/IJPkK2Hk+cWupBlSeYCMJWCi9uoVLK 8np+5L+wR6/b98KMeVD7RllEDIWy9C0Ndn7jKd61xEU/9BcduXVWNSFbOXbFPdYf Ns+3bIm2tjK86CpeN7p3KZKztsofr7kWGJoJVCEIFKkO+q9aVfGHjwkfVvKFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDMM+NTMakiPcCr8rjVD7jlXqT8owHwYDVR0j BBgwFoAUFdbi0lJ+5tz2gf7wY/YbH8Gzw3YwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjhmOWU4N2QtZTUwOS00N2JhLWJlOWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1 MjdFRTZEQ0Y2ODFGRUYwNjNGNjFCMUZDMUIzQzM3Ni5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8xNUQ2RTJEMjUyN0VFNkRDRjY4MUZFRjA2M0Y2MUIxRkMxQjND Mzc2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjhmOWU4N2QtZTUwOS00N2JhLWJl OWQtODk1NTZmNTMwZWE4LzAvMTVENkUyRDI1MjdFRTZEQ0Y2ODFGRUYwNjNGNjFC MUZDMUIzQzM3Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD3mukoR5L7YBEWWmBk2x6DOmPTuaUuFlQVi zJATIKuyJxFzE8ZNDMQvVf1bjSNWzRPlOCyJuLVWshcA6GEYcRXF/sAK2PlVthJO inxVWwyfxyE+1WQ7heuNBx1a2RQp8sTjTP77NsQ3c5pslB3tMYrDgPcnNPi93n0/ BNLHQSUxKW8zdRnLGpOnkV8YRmKXDtl1oirIy1ruK+ffN7+4CTkG3x49+T7JAbFv vQ86Qe0lZnTFyJeqxOC8UfBJypTYduBOxARbGzjFB/y7/5pyo7CcdrK+4rSbMf92 MgFLcZgHhKKXjRid4MD4vHKcb3xrvsKftZkdUnsVKWW5waTGZ+Y= -----END CERTIFICATE-----Generated at Thu Sep 10 02:48:43 2026 by rpki-client