
$ rpki-client -vvf repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
File: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft (raw, json)
Hash identifier: 3qiLr7kEEwTF9XFgDk4OBKH9vyemNK/fpWA6SOiC1wU=
Subject key identifier: F1:25:97:F1:8F:DE:CF:F3:E7:04:2E:55:CC:00:97:91:D6:1A:CD:ED
Authority key identifier: 15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D
Certificate issuer: /CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
Certificate serial: 0AB2F7F9B98D1E43E238E121BD4664C734E3A96E
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
Manifest number: 01D1
Signing time: Wed 25 Mar 2026 15:21:45 +0000
Manifest this update: Wed 25 Mar 2026 15:16:45 +0000
Manifest next update: Sun 29 Mar 2026 00:47:45 +0000
Files and hashes: 1: 15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl (hash: CnUlEUA6Zc7zz481ayxatrWhiB/LlJfc0soRqAvdz1A=)
2: 3130332e3134392e34322e302f32342d3234203d3e20313530353236.roa (hash: CFMMeUCwt3u6soEKOfFxVb6+3CB6NoHwfl39FZsC3dQ=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl
rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sun 29 Mar 2026 00:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0a:b2:f7:f9:b9:8d:1e:43:e2:38:e1:21:bd:46:64:c7:34:e3:a9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B7AAB48355A98C761DD27A589DF602A4D38E3D
Validity
Not Before: Mar 25 15:16:45 2026 GMT
Not After : Mar 29 00:47:45 2026 GMT
Subject: CN=F12597F18FDECFF3E7042E55CC009791D61ACDED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:3d:48:40:ff:8f:95:fb:11:c0:7d:d8:ab:49:
7e:86:b1:da:1e:1e:47:4c:d7:a4:a5:44:a7:03:a8:
61:f8:77:7d:b2:4f:b7:5e:5e:55:11:67:3b:ec:81:
c7:9e:45:53:6e:e1:3b:42:a9:96:d6:3c:65:6a:fd:
99:50:d0:00:98:1e:f4:57:6f:31:ed:de:ac:11:09:
03:b6:c6:6e:e1:7b:55:cf:97:aa:60:ef:ff:d7:65:
6a:9b:15:06:c6:d4:f8:e9:59:d5:9c:8e:e5:df:71:
10:e1:d9:af:24:d1:bc:ca:aa:df:2c:09:7f:e4:18:
4b:54:32:bb:03:25:5a:bf:4c:59:16:95:e4:ff:c7:
6b:a5:13:30:a6:28:bb:b7:f2:1c:a6:19:a0:56:17:
57:46:92:dc:a3:0c:46:26:eb:f6:c5:76:2c:44:33:
da:bb:8b:ba:13:bf:2d:5e:51:b2:c1:3f:c6:e7:b0:
02:ba:3d:31:78:4f:b8:c2:21:f1:19:a7:85:59:4b:
09:cb:a4:ab:d6:3b:a5:5b:2d:8d:60:14:ed:5e:ce:
d2:94:05:7d:de:0f:8a:5e:3d:ee:5f:31:7b:92:e5:
28:d7:26:73:ed:e5:3c:75:c1:16:d1:12:ef:fc:99:
a7:58:5d:9d:d4:f6:be:a8:9f:83:2f:d1:47:55:15:
b1:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:25:97:F1:8F:DE:CF:F3:E7:04:2E:55:CC:00:97:91:D6:1A:CD:ED
X509v3 Authority Key Identifier:
keyid:15:B7:AA:B4:83:55:A9:8C:76:1D:D2:7A:58:9D:F6:02:A4:D3:8E:3D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7AAB48355A98C761DD27A589DF602A4D38E3D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/786599a6-d86b-471a-a05b-a9fafe3bb69a/0/15B7AAB48355A98C761DD27A589DF602A4D38E3D.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:43:3f:d9:1f:c4:72:d0:ee:a8:3c:4b:5c:00:28:55:4b:65:
09:3b:72:9c:5b:e5:bc:62:d2:a6:a6:c5:c2:ad:69:90:0f:20:
06:83:e8:3b:be:c7:8a:36:3a:b6:3d:46:d2:31:18:29:03:42:
ed:71:d2:7d:6b:67:61:1a:13:1d:e6:93:77:3f:76:dd:00:ed:
ca:d8:6a:ad:cb:d6:80:2c:8d:f3:a6:f8:34:ce:b0:79:e0:33:
22:d6:0d:50:69:39:8c:d1:ae:b8:d5:83:bf:21:64:d4:92:5e:
ec:fa:a2:8c:99:62:44:7d:cf:00:e1:30:c9:df:3d:2c:e1:22:
22:6f:3d:32:e6:93:88:e8:80:1e:84:b2:ca:00:a4:d8:4b:8d:
3c:b8:20:f2:cb:81:d7:dc:0d:b4:59:e1:ff:14:7f:19:e6:64:
d0:11:af:32:01:a9:f3:2f:57:21:2e:c9:32:a0:fd:ec:05:0c:
75:ae:99:86:71:0b:d6:a9:ff:20:bc:3a:86:76:7e:b1:7d:59:
e3:ca:7a:a3:ee:6c:f3:b0:5b:5c:86:64:60:67:ef:01:56:34:
b2:e0:96:88:f5:71:65:1b:28:2a:a3:64:33:a3:8e:be:0f:d7:
9f:ca:33:00:cd:4f:b6:ac:45:55:83:c9:59:1e:00:33:a8:6e:
f8:ea:5c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:20:58 2026 by rpki-client