$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: o/bIpl9jYqfNfBSkqgzQBV5yIuUIrrkEQYd7Qs3bA/k= Subject key identifier: EE:DF:40:6F:38:97:9F:FF:E8:71:72:19:1E:C8:52:4F:00:BD:6E:66 Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 3933071CB61776E623F657FE2231D5D22BFF19D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 0546 Signing time: Tue 24 Mar 2026 09:21:19 +0000 Manifest this update: Tue 24 Mar 2026 09:16:19 +0000 Manifest next update: Fri 27 Mar 2026 17:03:19 +0000 Files and hashes: 1: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) 2: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: hSI8AN/phUzbfhpScFxW/01eqZHkfqhcHSb1va5KAkk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:33:07:1c:b6:17:76:e6:23:f6:57:fe:22:31:d5:d2:2b:ff:19:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Mar 24 09:16:19 2026 GMT Not After : Mar 27 17:03:19 2026 GMT Subject: CN=EEDF406F38979FFFE87172191EC8524F00BD6E66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:36:10:a9:c5:e3:25:5f:2d:d9:22:a6:f7: 41:cb:e0:0a:cf:6a:39:67:23:a4:36:f9:f1:36:11: 41:74:74:29:ef:78:4f:d2:80:b4:91:b9:a8:01:65: 62:01:bc:b4:56:fb:11:8a:f5:61:79:ef:e6:1a:8d: e5:dc:d6:7c:2b:af:3f:0e:65:78:95:56:60:da:46: 2b:bb:fc:ae:5d:ec:79:43:9e:3c:56:a8:5e:05:24: 78:4b:27:5b:ba:d7:f5:30:f2:20:93:e0:a9:16:d7: 53:10:2b:89:8c:ff:02:ca:dd:79:82:f7:09:82:34: 99:7d:8f:a3:17:7f:f3:25:28:0c:61:64:e3:93:52: 16:fd:50:1a:a0:d3:39:ad:c0:1f:01:56:cf:c5:ac: de:22:a4:d8:13:43:03:04:37:b1:e6:80:13:f8:d2: d2:a1:43:9f:a1:a5:31:b4:c9:20:b0:bc:81:f3:17: fc:63:ed:d9:ce:46:07:7d:ae:c9:5c:7e:db:8d:c1: 42:73:f4:7b:0f:be:c9:02:e4:c7:61:57:0a:cd:23: bf:b2:fc:ab:5b:3f:0b:6b:32:15:0b:1c:f6:b8:c3: 6b:45:25:f4:cc:3b:5a:41:37:fa:3b:87:b0:ff:66: e1:eb:8b:f8:cf:34:9e:d5:5f:ec:ec:5e:2d:7c:38: 2b:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DF:40:6F:38:97:9F:FF:E8:71:72:19:1E:C8:52:4F:00:BD:6E:66 X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:90:16:36:90:d9:ca:64:8f:ec:a7:18:94:93:81:d6:8d:94: 84:52:2f:b8:2d:b5:27:22:7f:77:dc:a0:6e:9b:31:7a:9d:a5: f0:4a:30:84:fa:08:6e:29:87:fe:e2:a1:70:30:80:5e:46:ef: 9f:31:af:84:9a:d4:ff:d2:9f:f9:4a:b4:06:6c:f0:51:9d:2d: 12:6f:15:29:82:60:1f:a7:62:f2:a5:86:10:ef:7f:aa:8f:17: 97:53:28:9a:ba:11:26:83:af:77:92:0e:65:51:26:85:b5:1e: 28:e5:eb:af:72:1a:be:57:d3:df:41:27:9e:79:c0:1f:f6:e1: 3e:7d:5f:31:0f:95:81:27:2b:c6:3a:9e:5a:3a:3e:01:62:3d: 10:fd:15:85:c8:c6:6e:e4:4b:71:59:d2:f8:80:ea:a1:fb:a0: ad:81:b2:a1:8f:21:29:7f:4f:98:7d:4f:8c:9c:a8:16:61:70: 62:59:2e:14:fc:71:ad:26:1a:b0:be:ee:e5:fe:2d:59:87:1a: f7:74:4b:4c:fd:83:72:8e:3a:39:dd:66:49:63:11:62:c8:e6: 29:87:47:e5:21:40:ae:82:c4:9e:c8:3b:3c:bd:92:28:16:bb: e3:3f:e9:d1:60:ae:fd:ec:19:af:28:e5:3e:3b:7d:d0:ad:c1: 85:d0:16:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOTMHHLYXduYj9lf+IjHV0iv/GdAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNjAzMjQwOTE2MTlaFw0yNjAzMjcxNzAzMTlaMDMxMTAvBgNV BAMTKEVFREY0MDZGMzg5NzlGRkZFODcxNzIxOTFFQzg1MjRGMDBCRDZFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTTYQqcXjJV8t2SKm90HL4ArP ajlnI6Q2+fE2EUF0dCnveE/SgLSRuagBZWIBvLRW+xGK9WF57+YajeXc1nwrrz8O ZXiVVmDaRiu7/K5d7HlDnjxWqF4FJHhLJ1u61/Uw8iCT4KkW11MQK4mM/wLK3XmC 9wmCNJl9j6MXf/MlKAxhZOOTUhb9UBqg0zmtwB8BVs/FrN4ipNgTQwMEN7HmgBP4 0tKhQ5+hpTG0ySCwvIHzF/xj7dnORgd9rslcftuNwUJz9HsPvskC5MdhVwrNI7+y /KtbPwtrMhULHPa4w2tFJfTMO1pBN/o7h7D/ZuHri/jPNJ7VX+zsXi18OCsDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7t9AbziXn//ocXIZHshSTwC9bmYwHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAECQFjaQ2cpkj+ynGJSTgdaNlIRSL7gttSci f3fcoG6bMXqdpfBKMIT6CG4ph/7ioXAwgF5G758xr4Sa1P/Sn/lKtAZs8FGdLRJv FSmCYB+nYvKlhhDvf6qPF5dTKJq6ESaDr3eSDmVRJoW1Hijl669yGr5X099BJ555 wB/24T59XzEPlYEnK8Y6nlo6PgFiPRD9FYXIxm7kS3FZ0viA6qH7oK2BsqGPISl/ T5h9T4ycqBZhcGJZLhT8ca0mGrC+7uX+LVmHGvd0S0z9g3KOOjndZkljEWLI5imH R+UhQK6CxJ7IOzy9kigWu+M/6dFgrv3sGa8o5T47fdCtwYXQFkY= -----END CERTIFICATE-----Generated at Thu Mar 26 05:44:40 2026 by rpki-client