$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: sZe0g+GOEPGIHbwg/Z4bwvTmprovO2exIeRRvxm6oHk= Subject key identifier: CA:AA:0F:69:09:FF:98:68:7A:90:E5:A8:40:14:E0:9A:B3:2A:F2:DE Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 519DA024C7C3889F12C7800F39F2A34BA06F7795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01E4 Signing time: Thu 26 Mar 2026 02:31:02 +0000 Manifest this update: Thu 26 Mar 2026 02:26:02 +0000 Manifest next update: Sun 29 Mar 2026 07:26:02 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: w9DzeCf4DdUsJ9+sp1mBS9s4OsNh87aWwAOFwYnxDaI=) 2: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: V9LLfdPKT1tW+siU8HIJ1OXl3Y1dtcMCrhPo+V7abfM=) 3: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: cY+LM6NiUoco74TgyZdBH2R3JLEsrVC/xUBsKMjQsNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:9d:a0:24:c7:c3:88:9f:12:c7:80:0f:39:f2:a3:4b:a0:6f:77:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Mar 26 02:26:02 2026 GMT Not After : Mar 29 07:26:02 2026 GMT Subject: CN=CAAA0F6909FF98687A90E5A84014E09AB32AF2DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:73:a1:ed:c8:4b:c6:f3:3a:91:ce:33:54:3a: 90:9c:2c:a7:c0:66:4f:53:93:60:19:98:be:bb:7b: 7a:57:43:6f:be:1d:8d:74:50:e7:f1:1c:bc:45:9a: 74:95:3b:30:5b:36:1c:7c:cb:eb:7c:2f:3c:98:84: 9e:5a:5c:1c:6b:51:46:ff:dc:db:a1:e7:22:a4:a2: cd:54:80:68:8d:e5:89:6a:85:f4:6a:96:d9:51:71: c5:25:11:a7:78:47:9a:0d:a1:3e:72:0d:08:7e:f3: 8e:6b:25:9a:43:50:29:0b:a8:d4:d2:ec:f1:d8:c4: 6a:54:83:a7:73:d2:10:e6:a9:15:2e:fc:77:c0:67: ae:64:0c:f2:ea:08:06:93:76:50:44:92:9e:4c:30: 4a:9f:94:18:ef:43:ac:73:5b:28:bc:da:29:45:ed: 83:cb:56:ae:13:d6:78:d8:ac:43:c6:07:35:1e:39: 7b:62:74:fd:c1:16:4d:39:e3:45:b6:8d:14:a3:13: 81:54:63:27:9f:b1:67:2b:6e:01:8f:6b:11:5d:7a: 0a:f4:41:10:52:45:e5:84:7d:00:b3:47:27:5c:b6: 55:d8:41:58:a7:4f:2f:82:cf:f7:8b:c8:23:59:e8: 5d:4a:22:f4:03:3e:b9:2c:6e:ba:91:ff:77:15:40: 6d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AA:0F:69:09:FF:98:68:7A:90:E5:A8:40:14:E0:9A:B3:2A:F2:DE X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:64:3f:73:43:5f:0f:1d:95:e8:30:fa:6c:13:34:5b:55:7a: 9f:15:ed:f6:7f:25:39:68:18:8d:d4:6b:90:44:18:6b:f8:df: 3b:ab:a5:b2:d7:0d:73:f3:05:a8:89:8e:c4:ae:a8:fe:b4:c5: db:80:a6:bc:c4:84:3b:88:65:a7:bf:09:df:51:04:ff:c8:96: 56:18:27:1b:5a:a5:ba:a7:c4:0c:46:df:27:bc:88:aa:48:de: 05:64:7a:8f:cf:7f:6d:c3:e2:20:02:57:02:a3:88:57:c8:f5: 40:61:4b:72:d3:c0:90:eb:2a:77:51:02:36:83:89:18:31:cc: 09:4d:48:bc:06:96:7f:b3:7b:6e:a6:cb:75:f2:bb:4f:a8:5c: b1:33:e1:92:f2:86:bc:c3:f5:d5:c4:0f:3d:c9:eb:69:fc:4f: b7:75:7f:8a:d2:3a:92:04:c0:6b:ab:e7:e6:e8:0c:3f:c9:fe: 4e:1e:cc:34:16:b9:9f:ec:ec:27:37:c5:1d:8f:72:fd:da:af: 30:fa:41:7d:0e:cf:e4:54:78:38:cf:7b:2d:d7:7d:ac:62:ab: c7:be:d3:48:85:32:95:2e:11:13:eb:5b:9b:19:06:ba:49:00: e3:f2:0d:bc:47:ab:5e:b7:50:a5:0b:46:e0:12:8a:6b:3a:b1: 98:82:2d:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZ2gJMfDiJ8Sx4APOfKjS6Bvd5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNjAzMjYwMjI2MDJaFw0yNjAzMjkwNzI2MDJaMDMxMTAvBgNV BAMTKENBQUEwRjY5MDlGRjk4Njg3QTkwRTVBODQwMTRFMDlBQjMyQUYyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnc6HtyEvG8zqRzjNUOpCcLKfA Zk9Tk2AZmL67e3pXQ2++HY10UOfxHLxFmnSVOzBbNhx8y+t8LzyYhJ5aXBxrUUb/ 3Nuh5yKkos1UgGiN5YlqhfRqltlRccUlEad4R5oNoT5yDQh+845rJZpDUCkLqNTS 7PHYxGpUg6dz0hDmqRUu/HfAZ65kDPLqCAaTdlBEkp5MMEqflBjvQ6xzWyi82ilF 7YPLVq4T1njYrEPGBzUeOXtidP3BFk0540W2jRSjE4FUYyefsWcrbgGPaxFdegr0 QRBSReWEfQCzRydctlXYQVinTy+Cz/eLyCNZ6F1KIvQDPrksbrqR/3cVQG2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqoPaQn/mGh6kOWoQBTgmrMq8t4wHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlkP3NDXw8dlegw+mwTNFtVep8V7fZ/JTlo GI3Ua5BEGGv43zurpbLXDXPzBaiJjsSuqP60xduAprzEhDuIZae/Cd9RBP/IllYY JxtapbqnxAxG3ye8iKpI3gVkeo/Pf23D4iACVwKjiFfI9UBhS3LTwJDrKndRAjaD iRgxzAlNSLwGln+ze26my3Xyu0+oXLEz4ZLyhrzD9dXEDz3J62n8T7d1f4rSOpIE wGur5+boDD/J/k4ezDQWuZ/s7Cc3xR2Pcv3arzD6QX0Oz+RUeDjPey3Xfaxiq8e+ 00iFMpUuERPrW5sZBrpJAOPyDbxHq163UKULRuASims6sZiCLcI= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:30 2026 by rpki-client