$ rpki-client -vvf rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft File: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft (raw, json) Hash identifier: /UY77ruFWd7h1YGuFmgOq0XTj68csUIG/48ojJx4qQA= Subject key identifier: B8:83:FF:CE:60:3A:34:EC:2F:2E:50:C1:CC:40:AF:F5:3A:4D:53:B6 Authority key identifier: 51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 Certificate issuer: /CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Certificate serial: 561A39A520E64F6ABBC7373439C831A124E4D5C9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft Manifest number: 66 Signing time: Fri 17 Jul 2026 15:27:11 +0000 Manifest this update: Fri 17 Jul 2026 15:22:11 +0000 Manifest next update: Sat 18 Jul 2026 15:28:11 +0000 Files and hashes: 1: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: I6Dn4QcfSKZUnrTy+rIKJRgSOrLvSjlrQnZ8s/u1g8A=) 2: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: MCwkSGbM/iILTghrLXlUKJqJdfszH+9IqSQpiMJWdCc=) 3: 515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl (hash: 791T3m2+AUo4CSdKQitOn9ZwzCOYwepgaJksicGO6YA=) 4: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: ATf5EYQk5kjtKXzKoWX6/uYpZSsVOJHOSYhQQKVmFZk=) 5: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: m44DGxISOgZ4tSwRG6a+Bo9CoRBnH2WpKidBAEXdM/o=) 6: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: z7mBGttPaAwIBHP9fANU1XmeYtHU6K2DfS0IKi5vPVo=) 7: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: nF6MygylVziQKQtyvkru1jemZ4qSyP7g6riPcK6jO5w=) 8: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: 17qtvftImQF6hponbFL2BrGTkc9hNJOsO02vV85PBLQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Jul 2026 15:28:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:1a:39:a5:20:e6:4f:6a:bb:c7:37:34:39:c8:31:a1:24:e4:d5:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2 Validity Not Before: Jul 17 15:22:11 2026 GMT Not After : Jul 18 15:28:11 2026 GMT Subject: CN=B883FFCE603A34EC2F2E50C1CC40AFF53A4D53B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:8a:c3:73:a6:62:be:f6:b4:b7:7e:fc:5c:96: 67:6a:22:14:92:e7:c3:0c:47:4b:02:d3:03:75:5f: 98:c0:68:86:96:cb:f5:90:20:90:ea:9c:19:ba:b6: 36:dd:3d:8e:21:ab:bf:32:a8:f5:a9:30:45:ff:0e: f3:f6:1f:2f:32:69:b1:af:f0:b9:e2:df:70:36:5c: 34:de:4c:6f:9d:ae:f0:0a:15:2c:32:00:76:38:28: b8:f9:dd:76:ce:8e:25:19:07:58:88:f4:9f:c3:a5: 29:74:b7:ef:41:87:9c:b3:b7:db:86:08:f1:92:30: 4f:ae:4e:93:d3:67:f3:19:51:50:17:e5:4d:c6:e4: 44:4a:57:d5:6a:f9:81:8f:3c:1f:03:38:a2:10:08: d4:bc:16:9d:b1:9d:bd:5b:e8:44:39:5a:d1:8f:9b: 33:ab:3f:9c:e6:05:11:43:a9:2d:ba:6d:bf:45:14: 71:a8:34:b7:14:37:2b:91:2c:0e:a0:08:53:a8:ba: ca:d3:73:5f:e4:bf:7d:b4:cd:12:c3:79:2c:c2:b1: 9e:ca:78:94:8d:1f:aa:36:4b:8d:55:15:97:54:55: aa:c3:a4:87:c2:3d:08:5d:17:9c:75:d9:b1:a5:8b: 70:d2:79:fa:7f:9d:1b:c4:39:73:c8:7a:57:96:74: 6c:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:83:FF:CE:60:3A:34:EC:2F:2E:50:C1:CC:40:AF:F5:3A:4D:53:B6 X509v3 Authority Key Identifier: keyid:51:5D:FB:99:88:91:2A:6A:BC:4F:EE:2A:75:1A:C6:F6:EC:FD:FF:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/515DFB9988912A6ABC4FEE2A751AC6F6ECFDFFC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:46:eb:f8:94:98:89:30:90:69:e1:88:88:dc:6b:d6:f3:2e: 75:72:f1:93:1b:ad:a6:04:39:4b:18:b2:34:39:a5:cd:51:1b: 9b:a5:3c:28:44:0e:57:e3:7f:4b:40:c1:9d:a2:3c:a2:0f:d7: 5b:c9:a2:1a:b7:65:aa:d4:f1:2b:11:f5:e1:6f:3a:64:b0:f4: 22:73:e0:5f:0f:29:b5:bf:1d:49:3f:d5:a3:e3:54:8d:81:9e: 37:39:0b:da:1f:6c:88:ab:f9:39:30:87:24:fd:44:aa:00:fb: 43:24:5c:b8:7c:19:e0:3f:4f:3c:89:1e:27:1f:d0:93:5e:f6: f8:d6:fa:9f:ef:f3:43:43:7d:25:3a:42:81:8a:86:02:ff:13: 5f:30:25:27:54:b3:df:8f:7c:fb:95:3c:3f:81:ba:98:37:81: 8c:37:89:17:e2:2d:f8:27:f0:75:77:1b:97:3b:b1:eb:89:e0: 84:cc:ff:05:a4:e2:bf:34:54:7d:59:83:3f:41:b2:25:c5:91: 27:ef:48:44:d3:ac:c0:96:ab:77:31:e9:31:7d:e7:bb:da:35: e1:a4:01:ae:00:cc:2d:7f:cb:21:f7:17:52:e5:42:3c:d4:af: 9f:e5:ac:79:32:b4:41:87:d3:91:7f:59:ee:f5:0a:d4:6d:b6: e1:2d:b7:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVho5pSDmT2q7xzc0OcgxoSTk1ckwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZF Q0ZERkZDMjAeFw0yNjA3MTcxNTIyMTFaFw0yNjA3MTgxNTI4MTFaMDMxMTAvBgNV BAMTKEI4ODNGRkNFNjAzQTM0RUMyRjJFNTBDMUNDNDBBRkY1M0E0RDUzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1isNzpmK+9rS3fvxclmdqIhSS 58MMR0sC0wN1X5jAaIaWy/WQIJDqnBm6tjbdPY4hq78yqPWpMEX/DvP2Hy8yabGv 8Lni33A2XDTeTG+drvAKFSwyAHY4KLj53XbOjiUZB1iI9J/DpSl0t+9Bh5yzt9uG CPGSME+uTpPTZ/MZUVAX5U3G5ERKV9Vq+YGPPB8DOKIQCNS8Fp2xnb1b6EQ5WtGP mzOrP5zmBRFDqS26bb9FFHGoNLcUNyuRLA6gCFOousrTc1/kv320zRLDeSzCsZ7K eJSNH6o2S41VFZdUVarDpIfCPQhdF5x12bGli3DSefp/nRvEOXPIeleWdGy9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuIP/zmA6NOwvLlDBzECv9TpNU7YwHwYDVR0j BBgwFoAUUV37mYiRKmq8T+4qdRrG9uz9/8IwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzZjNTcwZWYtNmVmZC00Zjk3LWJmMzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4 ODkxMkE2QUJDNEZFRTJBNzUxQUM2RjZFQ0ZERkZDMi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS81MTVERkI5OTg4OTEyQTZBQkM0RkVFMkE3NTFBQzZGNkVDRkRG RkMyLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvNTE1REZCOTk4ODkxMkE2QUJDNEZFRTJBNzUxQUM2 RjZFQ0ZERkZDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD9G6/iUmIkwkGnhiIjca9bzLnVy8ZMbraYE OUsYsjQ5pc1RG5ulPChEDlfjf0tAwZ2iPKIP11vJohq3ZarU8SsR9eFvOmSw9CJz 4F8PKbW/HUk/1aPjVI2Bnjc5C9ofbIir+TkwhyT9RKoA+0MkXLh8GeA/TzyJHicf 0JNe9vjW+p/v80NDfSU6QoGKhgL/E18wJSdUs9+PfPuVPD+Bupg3gYw3iRfiLfgn 8HV3G5c7seuJ4ITM/wWk4r80VH1Zgz9BsiXFkSfvSETTrMCWq3cx6TF957vaNeGk Aa4AzC1/yyH3F1LlQjzUr5/lrHkytEGH05F/We71CtRttuEttwM= -----END CERTIFICATE-----Generated at Sat Jul 18 02:27:29 2026 by rpki-client