$ rpki-client -vvf repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft File: B152586AE46FCAB640629D941147319E05FCF34B.mft (raw, json) Hash identifier: 3fweHa1EW9YHnkQDDOIWfuIj1PJZh5PmADbLQLxOueE= Subject key identifier: D6:B7:A0:CC:E4:2E:AE:69:C3:B3:A6:C4:78:17:97:4F:39:D1:D9:97 Authority key identifier: B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B Certificate issuer: /CN=B152586AE46FCAB640629D941147319E05FCF34B Certificate serial: 16B7EB882FCBBD19D9CDEAA48B763790BD21132C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft Manifest number: 028F Signing time: Wed 25 Mar 2026 08:01:10 +0000 Manifest this update: Wed 25 Mar 2026 07:56:10 +0000 Manifest next update: Sat 28 Mar 2026 10:54:10 +0000 Files and hashes: 1: 323030313a6466303a376334303a3a2f34382d3438203d3e20313437313534.roa (hash: U633ym5jUdptckJshhV25CxUbvCB8/wjZ9iL8MKR52I=) 2: B152586AE46FCAB640629D941147319E05FCF34B.crl (hash: /piyvVI06A0ORZLIm13eePz/X3WZv34H4lbwfHGMCF8=) 3: 3130332e3137362e3232372e302f32342d3234203d3e20313437313534.roa (hash: DwzbcXroI8gNYKGQ4eUqNjfcLXfCqCYoHIzRD47u86M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:54:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:b7:eb:88:2f:cb:bd:19:d9:cd:ea:a4:8b:76:37:90:bd:21:13:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B152586AE46FCAB640629D941147319E05FCF34B Validity Not Before: Mar 25 07:56:10 2026 GMT Not After : Mar 28 10:54:10 2026 GMT Subject: CN=D6B7A0CCE42EAE69C3B3A6C47817974F39D1D997 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:e3:ea:8c:e2:a5:b0:c0:de:cc:4e:f9:b1:8c: 8a:5b:72:fa:db:09:a9:66:bc:a0:cd:a5:49:55:3b: 3f:64:b0:e5:32:d3:ef:2a:91:5a:f5:6b:c4:f2:ac: 31:77:b7:2b:e8:d4:62:0f:a6:c6:91:80:76:ec:06: a3:93:36:c3:e7:60:3a:fa:a3:72:22:9e:d6:9d:ea: 6f:99:16:03:a2:d6:cc:51:48:e7:a4:97:f2:cb:9f: d4:8b:02:75:0e:93:04:a7:3b:65:75:79:39:ec:02: ed:0f:91:bc:09:e7:b3:75:d2:4c:d2:04:2e:90:f5: 0e:1c:7e:28:2a:ab:00:0e:b0:b7:e6:e6:b1:dc:be: 56:b5:57:99:12:b6:43:b1:78:76:b3:58:39:5d:6f: fe:60:31:ec:99:e0:6e:4f:1d:8b:88:80:a1:ac:74: d7:67:83:ab:c7:92:d3:92:45:64:4c:aa:cc:56:97: 42:c7:e4:ed:48:d6:9b:fc:c1:28:ca:94:b6:7c:47: 01:65:e9:cd:10:90:18:13:e3:de:36:0c:ea:b5:6f: 7e:3d:35:46:43:8c:26:20:2b:8a:f9:63:20:03:99: 1d:8e:30:f3:89:ca:66:3e:1e:c0:36:83:2d:78:e1: 52:7a:3e:00:84:5d:48:5b:51:8c:0c:b3:b6:75:5f: 53:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:B7:A0:CC:E4:2E:AE:69:C3:B3:A6:C4:78:17:97:4F:39:D1:D9:97 X509v3 Authority Key Identifier: keyid:B1:52:58:6A:E4:6F:CA:B6:40:62:9D:94:11:47:31:9E:05:FC:F3:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B152586AE46FCAB640629D941147319E05FCF34B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6a9e2898-023b-4741-8735-a0718cc6cf2b/0/B152586AE46FCAB640629D941147319E05FCF34B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:6e:b2:88:11:65:f2:92:6c:73:32:0c:36:a6:29:a7:d7:2f: b3:55:c3:19:ed:f5:9b:c3:de:84:27:f7:0f:fe:04:80:e0:9f: b4:76:a2:3c:ec:29:1b:80:45:32:b9:31:cc:0c:a6:92:72:4a: 86:76:fa:f9:a9:bc:b4:f3:8e:75:c3:37:fa:6e:e0:b3:07:05: 5a:49:eb:d6:e5:70:ab:db:25:b1:f3:b6:72:ff:5c:9f:99:7a: 18:dd:ef:21:df:d4:b1:31:20:4d:e8:4b:2a:39:0a:f8:87:d7: 56:09:11:e4:b6:e4:f6:95:7b:e3:27:7c:8f:c5:ee:d5:b8:20: fa:b2:73:6c:65:20:58:b3:e2:2e:f2:ad:75:0f:ba:8b:89:44: 57:25:a4:a1:28:43:66:a6:0e:05:3a:1f:83:bf:ab:9a:08:24: 4f:3d:0f:af:10:23:43:3d:3c:61:46:5f:e6:98:aa:af:7d:0d: 89:1d:2d:0c:ab:ba:2f:56:76:1c:1b:47:40:f3:3d:7a:91:3b: c1:e5:ff:f6:cb:fa:b0:41:0c:53:6a:3b:68:96:fd:ac:05:cf: e7:2e:a6:a0:33:af:f3:2c:aa:f3:5b:54:73:51:4b:f0:1a:47: 9d:3b:2d:2e:43:69:0a:75:fb:b1:c8:86:e0:c2:bd:bf:ae:c2: f1:1d:11:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFrfriC/LvRnZzeqki3Y3kL0hEywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUw NUZDRjM0QjAeFw0yNjAzMjUwNzU2MTBaFw0yNjAzMjgxMDU0MTBaMDMxMTAvBgNV BAMTKEQ2QjdBMENDRTQyRUFFNjlDM0IzQTZDNDc4MTc5NzRGMzlEMUQ5OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ4+qM4qWwwN7MTvmxjIpbcvrb CalmvKDNpUlVOz9ksOUy0+8qkVr1a8TyrDF3tyvo1GIPpsaRgHbsBqOTNsPnYDr6 o3Iintad6m+ZFgOi1sxRSOekl/LLn9SLAnUOkwSnO2V1eTnsAu0PkbwJ57N10kzS BC6Q9Q4cfigqqwAOsLfm5rHcvla1V5kStkOxeHazWDldb/5gMeyZ4G5PHYuIgKGs dNdng6vHktOSRWRMqsxWl0LH5O1I1pv8wSjKlLZ8RwFl6c0QkBgT4942DOq1b349 NUZDjCYgK4r5YyADmR2OMPOJymY+HsA2gy144VJ6PgCEXUhbUYwMs7Z1X1MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1regzOQurmnDs6bEeBeXTznR2ZcwHwYDVR0j BBgwFoAUsVJYauRvyrZAYp2UEUcxngX880swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YTllMjg5OC0wMjNiLTQ3NDEtODczNS1hMDcxOGNjNmNmMmIvMC9CMTUyNTg2QUU0 NkZDQUI2NDA2MjlEOTQxMTQ3MzE5RTA1RkNGMzRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMxOUUwNUZD RjM0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmE5ZTI4OTgtMDIzYi00NzQxLTg3 MzUtYTA3MThjYzZjZjJiLzAvQjE1MjU4NkFFNDZGQ0FCNjQwNjI5RDk0MTE0NzMx OUUwNUZDRjM0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtusogRZfKSbHMyDDamKafXL7NVwxnt9ZvD 3oQn9w/+BIDgn7R2ojzsKRuARTK5McwMppJySoZ2+vmpvLTzjnXDN/pu4LMHBVpJ 69blcKvbJbHztnL/XJ+Zehjd7yHf1LExIE3oSyo5CviH11YJEeS25PaVe+MnfI/F 7tW4IPqyc2xlIFiz4i7yrXUPuouJRFclpKEoQ2amDgU6H4O/q5oIJE89D68QI0M9 PGFGX+aYqq99DYkdLQyrui9WdhwbR0DzPXqRO8Hl//bL+rBBDFNqO2iW/awFz+cu pqAzr/MsqvNbVHNRS/AaR507LS5DaQp1+7HIhuDCvb+uwvEdEbU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:56:54 2026 by rpki-client