$ rpki-client -vvf repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft File: 915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft (raw, json) Hash identifier: +FgdLvJzYMblZp5euLrZtCKpRS1HaCvemq9dUuQPsdA= Subject key identifier: AA:DF:19:46:F6:68:B8:FD:DB:09:87:B8:71:32:EC:A0:A3:33:BF:E3 Authority key identifier: 91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 Certificate issuer: /CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5 Certificate serial: 79CB68022598C2ADB0DB25BA826891F72CA11460 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft Manifest number: 33 Signing time: Tue 24 Mar 2026 10:11:25 +0000 Manifest this update: Tue 24 Mar 2026 10:06:25 +0000 Manifest next update: Fri 27 Mar 2026 13:55:25 +0000 Files and hashes: 1: 915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl (hash: O5G3VBVIsIgOtaJRnaGF+LZX1ys/VeLeAbjltCSznxY=) 2: 3130332e332e34362e302f32342d3234203d3e203536323337.roa (hash: oMyB49fjG0qXg06zokEf9C1O9cFBM5Wz4/XD4oP7uLw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:55:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:cb:68:02:25:98:c2:ad:b0:db:25:ba:82:68:91:f7:2c:a1:14:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5 Validity Not Before: Mar 24 10:06:25 2026 GMT Not After : Mar 27 13:55:25 2026 GMT Subject: CN=AADF1946F668B8FDDB0987B87132ECA0A333BFE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:4e:cc:8f:9b:4b:0c:2c:ae:7e:58:24:c5:40: ba:13:b6:32:65:79:b0:3b:38:cd:c3:f2:72:37:e1: bf:d0:cd:88:27:f3:d0:18:40:bf:e3:80:d2:f0:5e: 2c:52:31:45:ae:c2:96:cb:31:fe:93:d0:fb:8b:9c: 55:f6:ab:cc:60:a9:7e:f1:64:6a:92:5b:f4:6d:d4: cb:9f:e1:84:8c:95:0b:e8:5a:4f:59:fc:ef:c6:a0: eb:ee:da:c1:dc:26:94:b4:ea:01:0b:15:7c:7e:e7: 6d:36:a9:f4:32:d0:98:83:9a:1b:71:8e:fc:56:9e: b9:a6:47:a5:00:ef:f2:df:80:b1:d1:90:3f:0a:ae: ab:32:51:4b:f5:99:78:61:9e:2a:29:69:6a:e3:49: a8:ea:2c:2f:b4:85:4e:9e:ec:65:91:1a:68:21:8a: 4a:6e:da:6a:f7:ac:0d:9d:a7:89:09:40:02:11:e1: de:47:94:cb:30:04:a1:5d:a8:67:fa:16:1b:8b:af: 38:ec:09:83:07:48:58:f4:81:13:be:12:4d:36:78: 9e:6f:c9:38:fc:6d:82:21:72:02:b0:10:15:6f:5c: 98:24:4a:30:7d:e9:3c:bb:e4:db:08:98:4d:25:91: 5b:f9:34:91:f2:c7:a4:9a:c2:bb:f5:9b:f6:0d:67: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:DF:19:46:F6:68:B8:FD:DB:09:87:B8:71:32:EC:A0:A3:33:BF:E3 X509v3 Authority Key Identifier: keyid:91:5F:81:BA:8B:D8:28:80:FF:7D:BC:AD:0D:C9:96:85:CC:BD:17:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fbe10d1-fe64-433f-b5e8-09e8c704ec91/0/915F81BA8BD82880FF7DBCAD0DC99685CCBD17B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:b0:35:59:db:6f:0f:88:1d:b6:af:b6:a7:df:cf:51:63:27: 38:fc:0d:4b:e2:cf:2a:54:7b:68:f7:e9:b9:e2:fa:15:b4:56: f5:15:c3:90:54:16:94:6f:c1:f6:77:a6:04:2b:5e:f4:36:db: 8b:04:99:e2:94:eb:bd:e3:5f:8c:92:70:f3:e6:89:66:38:af: 37:c0:4a:cd:f2:95:c8:e7:ab:67:25:18:94:34:6d:24:93:94: 4e:5c:26:95:17:c8:40:41:37:53:9a:a8:5b:14:19:20:b4:fa: 2b:17:91:81:94:c9:38:cf:ca:b6:ca:da:8f:8b:36:28:64:19: bf:dc:c2:dc:e7:23:96:7f:14:92:90:9e:f6:66:40:f9:64:bb: e4:34:c6:84:1d:0d:f1:ef:f5:08:19:5c:0c:1e:fd:31:e8:26: 75:20:af:8f:78:a9:7b:05:3a:52:cd:42:41:15:bd:bc:69:e0: 9d:d6:d0:dd:f2:be:f2:ad:ec:1e:11:4f:e2:ba:19:8d:fa:18: 69:e9:f4:55:da:22:3c:89:e1:3d:b6:26:0e:9f:3b:b1:c2:5c: 39:52:a1:26:0c:67:c8:69:26:0e:d6:82:c0:47:e0:11:e8:94: 82:32:3c:c1:3a:25:51:b2:59:eb:3b:b3:fc:23:45:58:34:42: b3:3c:30:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUectoAiWYwq2w2yW6gmiR9yyhFGAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2ODVD Q0JEMTdCNTAeFw0yNjAzMjQxMDA2MjVaFw0yNjAzMjcxMzU1MjVaMDMxMTAvBgNV BAMTKEFBREYxOTQ2RjY2OEI4RkREQjA5ODdCODcxMzJFQ0EwQTMzM0JGRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkTsyPm0sMLK5+WCTFQLoTtjJl ebA7OM3D8nI34b/QzYgn89AYQL/jgNLwXixSMUWuwpbLMf6T0PuLnFX2q8xgqX7x ZGqSW/Rt1Muf4YSMlQvoWk9Z/O/GoOvu2sHcJpS06gELFXx+5202qfQy0JiDmhtx jvxWnrmmR6UA7/LfgLHRkD8KrqsyUUv1mXhhniopaWrjSajqLC+0hU6e7GWRGmgh ikpu2mr3rA2dp4kJQAIR4d5HlMswBKFdqGf6FhuLrzjsCYMHSFj0gRO+Ek02eJ5v yTj8bYIhcgKwEBVvXJgkSjB96Ty75NsImE0lkVv5NJHyx6Sawrv1m/YNZwe9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqt8ZRvZouP3bCYe4cTLsoKMzv+MwHwYDVR0j BBgwFoAUkV+BuovYKID/fbytDcmWhcy9F7UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmJlMTBkMS1mZTY0LTQzM2YtYjVlOC0wOWU4YzcwNGVjOTEvMC85MTVGODFCQThC RDgyODgwRkY3REJDQUQwREM5OTY4NUNDQkQxN0I1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2ODVDQ0JE MTdCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZiZTEwZDEtZmU2NC00MzNmLWI1 ZTgtMDllOGM3MDRlYzkxLzAvOTE1RjgxQkE4QkQ4Mjg4MEZGN0RCQ0FEMERDOTk2 ODVDQ0JEMTdCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACywNVnbbw+IHbavtqffz1FjJzj8DUvizypU e2j36bni+hW0VvUVw5BUFpRvwfZ3pgQrXvQ224sEmeKU673jX4yScPPmiWY4rzfA Ss3ylcjnq2clGJQ0bSSTlE5cJpUXyEBBN1OaqFsUGSC0+isXkYGUyTjPyrbK2o+L NihkGb/cwtznI5Z/FJKQnvZmQPlku+Q0xoQdDfHv9QgZXAwe/THoJnUgr494qXsF OlLNQkEVvbxp4J3W0N3yvvKt7B4RT+K6GY36GGnp9FXaIjyJ4T22Jg6fO7HCXDlS oSYMZ8hpJg7WgsBH4BHolIIyPME6JVGyWes7s/wjRVg0QrM8MCQ= -----END CERTIFICATE-----Generated at Thu Mar 26 12:01:47 2026 by rpki-client