$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: 4o8hsl53bw7GVduB8Xw9QUJlIo4oAOg6iukbclZsUXs= Subject key identifier: C3:36:1F:E1:93:8E:83:1A:B6:F7:BC:75:4A:C2:11:A0:40:AD:E3:BD Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 3DC7C681A6CF31DD53FAD234E396FF3BECBD05C5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: 2A Signing time: Tue 02 Jun 2026 10:48:27 +0000 Manifest this update: Tue 02 Jun 2026 10:43:27 +0000 Manifest next update: Wed 03 Jun 2026 13:35:27 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 2: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 3: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 4: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 5: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 6: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 7: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: dZei/M/KWGULmu9WdBMUw+ftzz19IIklv5cDqQ9Wvr0=) 8: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:c7:c6:81:a6:cf:31:dd:53:fa:d2:34:e3:96:ff:3b:ec:bd:05:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Jun 2 10:43:27 2026 GMT Not After : Jun 3 13:35:27 2026 GMT Subject: CN=C3361FE1938E831AB6F7BC754AC211A040ADE3BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ec:c1:ef:65:45:5c:b6:68:fa:6f:d8:c8:47: c1:f6:39:60:a9:40:a4:bd:9a:c8:69:6a:d7:f5:65: 98:6a:16:2e:69:11:70:f7:63:bc:aa:a8:6c:32:74: 11:67:c7:11:d4:41:6a:7f:07:0b:47:91:81:66:47: 27:04:2f:4f:ed:f4:4c:15:dd:23:ef:73:1c:86:06: 42:a5:00:85:a4:fd:89:fe:d5:44:ad:8b:9d:57:45: 85:dc:a1:ee:94:c1:e3:04:b8:ef:cd:a7:df:03:ab: 57:0e:ea:1b:1f:4a:3d:57:bb:e4:65:0e:28:8a:4a: 25:1e:fb:e1:38:a0:5b:a2:d6:4f:0d:a8:20:ae:c8: 07:a6:f6:cd:79:ea:03:ef:3b:8b:88:de:85:88:31: 33:3e:01:a9:10:b2:37:8f:2e:99:1e:3c:58:d9:2c: dc:db:79:f6:b8:5f:cd:fc:3a:98:06:fa:d7:0b:2f: 7e:cf:ac:85:2d:9e:d8:43:db:8f:79:f5:5e:a1:65: 49:ae:c8:d2:d1:5c:f5:72:a2:02:43:1d:84:9a:d5: cb:90:cf:d5:75:91:69:a1:84:81:e2:47:cc:91:86: 7d:d2:45:f4:1b:4f:5b:82:3a:2a:1a:6b:7d:8b:c6: cb:78:1d:2b:8c:e3:a3:f4:ad:27:70:6f:79:05:b6: 5d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:36:1F:E1:93:8E:83:1A:B6:F7:BC:75:4A:C2:11:A0:40:AD:E3:BD X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:27:37:d0:7c:4c:27:d0:62:be:84:dd:a9:71:64:aa:e7:aa: d8:c5:45:18:c2:5d:ab:f4:88:e7:d5:23:62:0f:5f:15:9b:d2: 94:50:ad:a0:ae:59:68:07:e0:8f:be:79:72:4f:cb:5d:6c:55: 39:d0:1e:0a:72:0b:75:67:57:d6:9f:92:66:37:a8:c4:f3:ad: 78:84:83:8e:e0:cb:80:0f:f8:c6:99:1d:c7:cc:a0:5e:30:4a: 45:73:9d:00:b9:69:ff:56:96:4b:2a:33:5e:66:37:c4:c0:07: 8e:a0:b7:ce:0e:65:cd:be:03:e7:9c:fc:a0:cd:47:81:27:76: b4:5c:c3:9e:76:8a:cd:a3:2c:ab:32:aa:50:16:94:23:98:21: d6:a5:52:91:45:33:31:88:46:5d:b5:fd:d0:54:88:c9:c4:94: 63:77:45:ad:03:14:2d:1d:a2:b4:a4:de:ef:0e:1c:8f:3e:8f: 20:e3:c9:80:72:3c:a5:d4:f5:eb:7c:75:bc:61:d5:22:c6:17: ee:2e:3c:98:0c:22:dd:94:eb:91:46:bb:db:51:b5:d0:ae:45: fa:5c:b6:ba:1e:c8:36:c4:e9:dd:d7:b6:1d:57:06:cc:19:4c: 41:d6:2b:69:49:08:8f:c2:44:83:c9:62:d6:2f:36:f1:48:c8: 03:d9:8f:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPcfGgabPMd1T+tI045b/O+y9BcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA2MDIxMDQzMjdaFw0yNjA2MDMxMzM1MjdaMDMxMTAvBgNV BAMTKEMzMzYxRkUxOTM4RTgzMUFCNkY3QkM3NTRBQzIxMUEwNDBBREUzQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/7MHvZUVctmj6b9jIR8H2OWCp QKS9mshpatf1ZZhqFi5pEXD3Y7yqqGwydBFnxxHUQWp/BwtHkYFmRycEL0/t9EwV 3SPvcxyGBkKlAIWk/Yn+1USti51XRYXcoe6UweMEuO/Np98Dq1cO6hsfSj1Xu+Rl DiiKSiUe++E4oFui1k8NqCCuyAem9s156gPvO4uI3oWIMTM+AakQsjePLpkePFjZ LNzbefa4X838OpgG+tcLL37PrIUtnthD24959V6hZUmuyNLRXPVyogJDHYSa1cuQ z9V1kWmhhIHiR8yRhn3SRfQbT1uCOioaa32Lxst4HSuM46P0rSdwb3kFtl2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwzYf4ZOOgxq297x1SsIRoECt470wHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwnN9B8TCfQYr6E3alxZKrnqtjFRRjCXav0 iOfVI2IPXxWb0pRQraCuWWgH4I++eXJPy11sVTnQHgpyC3VnV9afkmY3qMTzrXiE g47gy4AP+MaZHcfMoF4wSkVznQC5af9WlksqM15mN8TAB46gt84OZc2+A+ec/KDN R4EndrRcw552is2jLKsyqlAWlCOYIdalUpFFMzGIRl21/dBUiMnElGN3Ra0DFC0d orSk3u8OHI8+jyDjyYByPKXU9et8dbxh1SLGF+4uPJgMIt2U65FGu9tRtdCuRfpc troeyDbE6d3Xth1XBswZTEHWK2lJCI/CRIPJYtYvNvFIyAPZj1Y= -----END CERTIFICATE-----Generated at Tue Jun 2 21:32:02 2026 by rpki-client