$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: Yh+X84b73itLscGY03mn9ZerEB4dZC5xI+c4EJ0Lpuk= Subject key identifier: D7:1F:CB:BB:26:AA:E1:71:A9:7D:E6:B3:18:FF:9F:92:4B:50:B2:A6 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 55477DB111344D9FD4D8C49EA6E34982FC36207F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: E6 Signing time: Wed 25 Mar 2026 06:51:42 +0000 Manifest this update: Wed 25 Mar 2026 06:46:42 +0000 Manifest next update: Sat 28 Mar 2026 17:22:42 +0000 Files and hashes: 1: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 2: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 3: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: dYRFyoulLGqzAB8NLMgp36jaLoV4w6Csii1sEsrCn04=) 4: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) 5: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 6: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 7: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 8: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:47:7d:b1:11:34:4d:9f:d4:d8:c4:9e:a6:e3:49:82:fc:36:20:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Mar 25 06:46:42 2026 GMT Not After : Mar 28 17:22:42 2026 GMT Subject: CN=D71FCBBB26AAE171A97DE6B318FF9F924B50B2A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:fa:cc:1a:d1:f1:b0:de:ea:1d:7c:5a:1a:7c: fc:97:1d:58:3b:c9:3a:64:3c:2c:4f:2a:76:ab:fb: 71:95:06:a7:d2:ae:33:ba:18:dc:20:9f:cf:02:7c: 25:f7:ce:9d:65:09:23:78:03:52:41:62:d6:7f:cf: f8:7a:64:2a:78:39:b3:ed:58:ee:b6:0f:f5:9d:8a: 0c:14:e7:d5:aa:87:6f:b1:84:dd:0f:8a:87:86:bb: 7b:40:99:cb:4c:d7:1b:63:3e:6e:0a:f9:43:90:28: d0:6a:ae:a9:8a:f0:9e:55:1f:0d:08:ec:55:d0:3f: 60:36:af:74:2e:69:03:2f:1c:e1:7e:22:18:06:c6: b9:eb:cf:a5:83:58:8a:ca:35:e0:0f:1f:94:32:87: 59:7a:6f:14:8d:71:50:22:a4:1b:32:ed:99:22:de: d2:2c:6e:7b:0f:1b:b2:81:0c:bc:45:97:f9:84:e5: b5:0a:ae:25:ff:33:f4:59:fc:dc:b3:9b:7e:c5:64: ef:6c:ff:9c:14:cc:2c:6b:b6:5f:cb:63:2e:49:ee: 6f:70:3b:d3:7b:9d:ea:c7:16:bd:7e:09:54:db:00: ab:1b:b2:01:20:ed:10:16:64:a6:e8:11:d9:c4:1f: 45:d7:ee:03:3c:47:78:fc:fa:51:2f:55:47:22:9d: 10:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1F:CB:BB:26:AA:E1:71:A9:7D:E6:B3:18:FF:9F:92:4B:50:B2:A6 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:45:8d:d9:12:01:86:36:d2:84:4f:d1:70:0d:2f:b3:af:72: cb:97:5b:6e:5e:84:55:c5:2e:8f:66:75:36:64:27:37:58:a0: 68:00:7b:36:f3:a9:2d:25:68:f4:8a:47:9a:2f:01:69:6d:4b: 06:41:d8:1e:0d:6a:cd:2e:01:57:a5:82:fc:02:0f:13:3e:68: 05:67:0f:7d:6c:be:54:b2:92:65:58:54:d4:80:b9:14:fa:62: b9:86:a3:01:27:d6:21:f0:53:d2:c6:4c:2d:f8:24:d6:36:a8: e6:41:fe:4f:8d:fd:58:4d:8f:b9:66:ac:34:c7:ee:f8:b7:21: 27:92:de:bb:f6:55:7c:93:21:0c:c2:78:4b:c7:53:c5:b7:7b: ef:0e:11:8d:11:2b:f5:ac:54:5b:92:18:6a:42:e8:bd:4a:09: ca:bf:6a:fb:71:6d:74:46:fa:3a:ca:45:47:b1:b6:4a:6b:bd: b4:a5:31:e3:28:fa:80:eb:df:25:41:91:aa:a9:75:2e:48:ec: f5:9b:f1:4d:1e:7a:25:e8:f5:f0:62:99:dc:45:c8:c3:57:f6: 77:03:14:69:5c:d0:ad:97:04:cd:5e:c4:66:8d:9c:cf:9f:47: 29:7c:08:a5:27:4a:c4:43:21:9d:90:52:b2:9c:6e:f5:9a:87: 9e:cc:22:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVUd9sRE0TZ/U2MSepuNJgvw2IH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNjAzMjUwNjQ2NDJaFw0yNjAzMjgxNzIyNDJaMDMxMTAvBgNV BAMTKEQ3MUZDQkJCMjZBQUUxNzFBOTdERTZCMzE4RkY5RjkyNEI1MEIyQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+swa0fGw3uodfFoafPyXHVg7 yTpkPCxPKnar+3GVBqfSrjO6GNwgn88CfCX3zp1lCSN4A1JBYtZ/z/h6ZCp4ObPt WO62D/WdigwU59Wqh2+xhN0PioeGu3tAmctM1xtjPm4K+UOQKNBqrqmK8J5VHw0I 7FXQP2A2r3QuaQMvHOF+IhgGxrnrz6WDWIrKNeAPH5Qyh1l6bxSNcVAipBsy7Zki 3tIsbnsPG7KBDLxFl/mE5bUKriX/M/RZ/Nyzm37FZO9s/5wUzCxrtl/LYy5J7m9w O9N7nerHFr1+CVTbAKsbsgEg7RAWZKboEdnEH0XX7gM8R3j8+lEvVUcinRAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1x/Luyaq4XGpfeazGP+fkktQsqYwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxFjdkSAYY20oRP0XANL7OvcsuXW25ehFXF Lo9mdTZkJzdYoGgAezbzqS0laPSKR5ovAWltSwZB2B4Nas0uAVelgvwCDxM+aAVn D31svlSykmVYVNSAuRT6YrmGowEn1iHwU9LGTC34JNY2qOZB/k+N/VhNj7lmrDTH 7vi3ISeS3rv2VXyTIQzCeEvHU8W3e+8OEY0RK/WsVFuSGGpC6L1KCcq/avtxbXRG +jrKRUextkprvbSlMeMo+oDr3yVBkaqpdS5I7PWb8U0eeiXo9fBimdxFyMNX9ncD FGlc0K2XBM1exGaNnM+fRyl8CKUnSsRDIZ2QUrKcbvWah57MItk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:02:47 2026 by rpki-client