$ rpki-client -vvf repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft File: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft (raw, json) Hash identifier: S5TJMuiKuuI+nRJvo7pQOyd89kBnl7Ri5JDGsxhrew8= Subject key identifier: D9:5E:B6:66:63:9A:AB:62:DE:3E:57:6F:A9:C6:45:9B:4A:A3:B0:28 Authority key identifier: 71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 Certificate issuer: /CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Certificate serial: 1EC85838CC89C255E2F1B35D3C78B33126E4E771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft Manifest number: 04A0 Signing time: Tue 24 Mar 2026 07:30:44 +0000 Manifest this update: Tue 24 Mar 2026 07:25:44 +0000 Manifest next update: Fri 27 Mar 2026 10:03:44 +0000 Files and hashes: 1: 3130332e3136312e3139302e302f32332d3233203d3e20313333383233.roa (hash: ghtilaMZ6RJAQvHOL9rJ7eLcuLTYk5ZeH+7mykIlzjM=) 2: 3130332e3136312e3139312e302f32342d3234203d3e20313333383233.roa (hash: KGskRiaq/+lRAEP6f41FobsVw96uMstK/fLzsAVB4eg=) 3: 715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl (hash: NSoYRWC1yIsgEzFhWGIsmQSu9jK+LbgXBnejY99tU6s=) 4: 3130332e3136312e3139302e302f32342d3234203d3e20313333383233.roa (hash: inNvDvxX4hbCC8+Dho69jFxrO3UdsZFxdsWq+NYPKcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:03:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:c8:58:38:cc:89:c2:55:e2:f1:b3:5d:3c:78:b3:31:26:e4:e7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1 Validity Not Before: Mar 24 07:25:44 2026 GMT Not After : Mar 27 10:03:44 2026 GMT Subject: CN=D95EB666639AAB62DE3E576FA9C6459B4AA3B028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ef:ae:7e:5b:ab:c3:53:2e:87:f7:89:44:d5: 19:a0:1f:7c:78:ef:9c:7e:f4:71:f4:6c:6e:4e:3c: 1b:96:09:6b:d1:82:4b:36:52:c1:26:b9:fb:bb:09: 5b:98:6e:83:cb:1e:34:32:a7:35:59:79:7d:81:d0: 02:98:00:5f:33:44:fa:e7:9e:57:c2:8a:bc:fb:d2: d0:d6:43:9d:72:69:1d:78:c8:95:6b:90:13:0a:82: 50:ee:ab:74:5e:23:38:96:52:32:aa:03:4f:b4:d1: b0:35:ee:d9:69:fa:3a:31:a8:0c:05:e6:6f:36:97: dc:30:40:61:84:d2:6d:7b:7c:b6:98:b2:f6:c2:b4: 14:de:39:bd:7c:31:10:81:56:68:fe:d0:4b:c2:94: 99:74:19:69:fe:29:c8:74:6f:1d:04:7c:c5:62:8d: f9:91:81:98:6c:2f:6c:ea:bb:fa:97:87:cc:f4:71: 3a:bb:3a:09:a9:34:0c:65:37:dd:28:93:b1:0d:13: 96:df:e8:37:80:4b:df:14:38:92:42:27:ef:64:e0: 75:c3:e9:7b:d6:d5:4d:ff:e4:d2:55:93:3e:1d:df: 08:be:44:25:64:d3:0c:86:51:b7:a9:53:70:39:8e: 87:9a:1a:35:c5:82:93:cf:c9:18:48:1a:e6:26:99: a7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:5E:B6:66:63:9A:AB:62:DE:3E:57:6F:A9:C6:45:9B:4A:A3:B0:28 X509v3 Authority Key Identifier: keyid:71:5D:C6:DE:A8:0F:E5:D8:9F:DC:68:2C:19:C7:B3:0F:5C:77:E2:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5591b59b-1ca5-4464-9982-bf6f6d8a1c94/0/715DC6DEA80FE5D89FDC682C19C7B30F5C77E2C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:eb:42:32:07:5c:5b:6f:5b:57:b1:e0:47:44:0f:ca:05:07: 5c:e2:ed:4b:57:2b:a3:88:a8:93:39:7b:d3:67:84:1d:83:19: bf:59:01:68:79:78:51:ea:59:b2:9a:f0:0f:dd:d9:35:1b:43: 7c:31:0b:e0:7d:1f:59:82:a5:bf:fe:bb:58:e8:d1:2a:8f:cb: ad:fa:8a:63:fa:7e:c4:08:25:5c:00:5b:de:0b:71:67:0a:9a: 12:b9:00:80:92:95:b5:08:27:fd:63:ec:d1:d9:1b:83:1f:af: 14:bb:36:b3:9b:c4:a4:34:96:92:7b:15:d8:ab:9f:9c:4c:58: fb:57:a2:f2:06:00:f1:5c:01:77:ab:5c:a0:31:46:8d:c9:83: 0e:6c:cc:8a:a2:45:f8:22:75:95:17:29:ef:54:f0:d9:58:51: 48:7a:80:5d:49:16:3f:65:18:91:f7:9e:93:a6:ba:70:55:ff: d4:7f:a0:f2:9d:69:24:c1:c7:3a:51:98:df:3f:bf:29:14:f8: f9:96:1a:8a:2c:01:62:bd:4d:23:27:1a:f8:d5:3b:ab:9a:5f: c8:dd:60:a7:39:12:77:49:ab:9f:a6:e1:90:ce:d0:33:92:34: 78:24:af:e6:dc:cf:53:c2:a4:bd:8d:b5:f8:42:fa:56:2e:5c: 65:16:f4:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHshYOMyJwlXi8bNdPHizMSbk53EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1 Qzc3RTJDMTAeFw0yNjAzMjQwNzI1NDRaFw0yNjAzMjcxMDAzNDRaMDMxMTAvBgNV BAMTKEQ5NUVCNjY2NjM5QUFCNjJERTNFNTc2RkE5QzY0NTlCNEFBM0IwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs765+W6vDUy6H94lE1RmgH3x4 75x+9HH0bG5OPBuWCWvRgks2UsEmufu7CVuYboPLHjQypzVZeX2B0AKYAF8zRPrn nlfCirz70tDWQ51yaR14yJVrkBMKglDuq3ReIziWUjKqA0+00bA17tlp+joxqAwF 5m82l9wwQGGE0m17fLaYsvbCtBTeOb18MRCBVmj+0EvClJl0GWn+Kch0bx0EfMVi jfmRgZhsL2zqu/qXh8z0cTq7OgmpNAxlN90ok7ENE5bf6DeAS98UOJJCJ+9k4HXD 6XvW1U3/5NJVkz4d3wi+RCVk0wyGUbepU3A5joeaGjXFgpPPyRhIGuYmmadRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2V62ZmOaq2LePldvqcZFm0qjsCgwHwYDVR0j BBgwFoAUcV3G3qgP5dif3GgsGcezD1x34sEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTkxYjU5Yi0xY2E1LTQ0NjQtOTk4Mi1iZjZmNmQ4YTFjOTQvMC83MTVEQzZERUE4 MEZFNUQ4OUZEQzY4MkMxOUM3QjMwRjVDNzdFMkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0IzMEY1Qzc3 RTJDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTU5MWI1OWItMWNhNS00NDY0LTk5 ODItYmY2ZjZkOGExYzk0LzAvNzE1REM2REVBODBGRTVEODlGREM2ODJDMTlDN0Iz MEY1Qzc3RTJDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADDrQjIHXFtvW1ex4EdED8oFB1zi7UtXK6OI qJM5e9NnhB2DGb9ZAWh5eFHqWbKa8A/d2TUbQ3wxC+B9H1mCpb/+u1jo0SqPy636 imP6fsQIJVwAW94LcWcKmhK5AICSlbUIJ/1j7NHZG4MfrxS7NrObxKQ0lpJ7Fdir n5xMWPtXovIGAPFcAXerXKAxRo3Jgw5szIqiRfgidZUXKe9U8NlYUUh6gF1JFj9l GJH3npOmunBV/9R/oPKdaSTBxzpRmN8/vykU+PmWGoosAWK9TSMnGvjVO6uaX8jd YKc5EndJq5+m4ZDO0DOSNHgkr+bcz1PCpL2NtfhC+lYuXGUW9AA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:38:47 2026 by rpki-client