$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: YYxpTJcopAow59U07zVjVqVoNuHuiUKcQN3BQ8PIvIk= Subject key identifier: 91:FA:BF:DE:D1:22:9E:3A:22:36:CC:09:01:4B:4F:BC:CB:C1:00:C9 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 4C5F39EED29674BD83B14902821C4858D0AE5941 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: A3 Signing time: Mon 31 Aug 2026 22:12:27 +0000 Manifest this update: Mon 31 Aug 2026 22:07:27 +0000 Manifest next update: Tue 01 Sep 2026 23:28:27 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 2: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 3: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) 4: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 5: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 6: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 7: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: vZb29gVpVv4Yr97tyOc+6JcQOcgQI/ogLuIGi9GfOCA=) 8: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Sep 2026 23:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5f:39:ee:d2:96:74:bd:83:b1:49:02:82:1c:48:58:d0:ae:59:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Aug 31 22:07:27 2026 GMT Not After : Sep 1 23:28:27 2026 GMT Subject: CN=91FABFDED1229E3A2236CC09014B4FBCCBC100C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a0:87:4e:e9:9f:39:bc:19:4f:0c:06:29:1c: 4e:7f:f5:e4:18:78:c4:23:e2:f0:5c:64:61:bd:ef: 4a:23:ec:89:2b:a1:25:7a:2c:7e:73:bd:78:b9:9b: e4:8d:4c:a7:80:b6:54:8a:28:5e:67:e6:ce:34:cc: ee:e1:5b:c3:b9:fd:53:24:b0:e3:0f:5c:7a:c9:13: b9:8a:c9:ee:3e:91:94:17:b5:d1:a5:b1:a8:8a:91: 47:51:42:bd:5d:0a:e5:bf:de:e1:a9:e5:05:e3:70: 1d:67:9c:94:0c:d3:24:d4:08:f4:98:f8:35:28:1d: 8f:03:26:49:94:3b:29:94:37:8c:c3:70:6f:6d:c1: 0b:39:b5:b1:1e:76:02:8f:a3:78:63:a4:79:17:9a: 22:46:dd:6f:47:4f:67:c1:b4:1a:fe:93:4a:db:47: 07:1b:2e:9c:73:42:63:0e:bf:e7:81:49:ac:75:ec: 21:ee:c4:6f:bf:4b:1b:c9:e3:61:70:f8:6e:52:17: fd:b2:ef:92:75:5c:05:de:f8:22:eb:bb:31:86:d9: 48:ff:ad:21:45:29:3a:37:75:af:cc:db:56:b9:18: d3:df:7a:90:44:cc:15:50:76:e7:55:f3:66:ab:0a: 09:65:4e:d5:52:5e:a8:1f:9b:21:a4:52:e9:be:20: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:FA:BF:DE:D1:22:9E:3A:22:36:CC:09:01:4B:4F:BC:CB:C1:00:C9 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:da:61:8c:95:f2:03:e1:51:97:13:dd:e6:b1:6e:dc:b0:77: 75:02:01:dc:40:2c:1e:4e:67:71:b0:e8:4b:16:9c:f3:86:28: 48:34:3e:74:0d:fd:e5:11:fc:fa:c6:2b:8c:b1:11:13:f6:6c: a9:e1:93:35:cb:da:cd:a8:7b:70:96:18:45:c1:b6:09:4c:a1: 7a:60:b4:73:51:d3:e9:62:e7:64:d8:7d:dd:ce:18:27:12:48: fb:f8:0a:b9:12:ee:d0:02:f9:06:92:2b:14:ed:91:89:a1:dd: 2e:61:f1:db:ee:ca:63:e0:e1:b0:b4:cb:30:17:ff:f9:9f:cb: be:fa:83:1a:0c:57:85:e6:c2:f0:c6:11:3a:2f:a8:4b:6f:fd: ea:3b:6b:67:03:94:a9:96:8a:28:5b:8a:45:bb:6b:b4:4e:fb: e3:ca:c3:53:69:80:47:ad:d8:a3:77:e4:eb:13:33:9b:30:49: fe:e0:4c:92:f4:92:0d:8d:97:f0:03:59:e5:3b:cb:e3:ea:ca: 7e:b0:a0:5d:1c:0f:06:aa:35:99:c4:2d:9d:17:32:01:9e:24: af:fe:e9:f4:53:50:23:d6:0b:8d:2f:59:e1:5e:93:a8:63:3a: ab:2a:36:76:e9:05:13:2d:e1:69:c9:ba:31:e2:da:2f:ae:af: 74:44:f2:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTF857tKWdL2DsUkCghxIWNCuWUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA4MzEyMjA3MjdaFw0yNjA5MDEyMzI4MjdaMDMxMTAvBgNV BAMTKDkxRkFCRkRFRDEyMjlFM0EyMjM2Q0MwOTAxNEI0RkJDQ0JDMTAwQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFoIdO6Z85vBlPDAYpHE5/9eQY eMQj4vBcZGG970oj7IkroSV6LH5zvXi5m+SNTKeAtlSKKF5n5s40zO7hW8O5/VMk sOMPXHrJE7mKye4+kZQXtdGlsaiKkUdRQr1dCuW/3uGp5QXjcB1nnJQM0yTUCPSY +DUoHY8DJkmUOymUN4zDcG9twQs5tbEedgKPo3hjpHkXmiJG3W9HT2fBtBr+k0rb RwcbLpxzQmMOv+eBSax17CHuxG+/SxvJ42Fw+G5SF/2y75J1XAXe+CLruzGG2Uj/ rSFFKTo3da/M21a5GNPfepBEzBVQdudV82arCgllTtVSXqgfmyGkUum+IK3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkfq/3tEinjoiNswJAUtPvMvBAMkwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7aYYyV8gPhUZcT3eaxbtywd3UCAdxALB5O Z3Gw6EsWnPOGKEg0PnQN/eUR/PrGK4yxERP2bKnhkzXL2s2oe3CWGEXBtglMoXpg tHNR0+li52TYfd3OGCcSSPv4CrkS7tAC+QaSKxTtkYmh3S5h8dvuymPg4bC0yzAX //mfy776gxoMV4XmwvDGETovqEtv/eo7a2cDlKmWiihbikW7a7RO++PKw1NpgEet 2KN35OsTM5swSf7gTJL0kg2Nl/ADWeU7y+Pqyn6woF0cDwaqNZnELZ0XMgGeJK/+ 6fRTUCPWC40vWeFek6hjOqsqNnbpBRMt4WnJujHi2i+ur3RE8i0= -----END CERTIFICATE-----Generated at Tue Sep 1 04:53:18 2026 by rpki-client