$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json) Hash identifier: K7rWKx3a2ceE/1xdX+K/Q9txngzwC0c3LQDuEw4wbDk= Subject key identifier: 9F:0E:C5:D9:29:25:81:8B:07:9F:71:E9:56:95:E0:A0:70:44:00:30 Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Certificate serial: 3483FB46BA17A50A22982FE4C5AF6BA265FDA4EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft Manifest number: 01C8 Signing time: Wed 25 Mar 2026 00:01:54 +0000 Manifest this update: Tue 24 Mar 2026 23:56:54 +0000 Manifest next update: Sat 28 Mar 2026 03:39:54 +0000 Files and hashes: 1: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: BWkU9o6TaBm9ICWXFZCFeasC+1my7Mnww8xQDu1G+bI=) 2: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: oUmyAqWBCyYKBofz2DnTh0nCs+4QdNXeqAbkeSKTtJc=) 3: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: X7U6Nfg8aziHHVToy8L18dYTQrmR8o6W4wdMG2jrZeY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:39:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:83:fb:46:ba:17:a5:0a:22:98:2f:e4:c5:af:6b:a2:65:fd:a4:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717 Validity Not Before: Mar 24 23:56:54 2026 GMT Not After : Mar 28 03:39:54 2026 GMT Subject: CN=9F0EC5D92925818B079F71E95695E0A070440030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2f:fe:ba:57:d0:36:9e:b0:3e:b4:41:83:4e: 94:59:c3:95:cb:d9:6b:86:36:08:bd:ec:a6:94:72: ef:73:5f:e4:d2:16:23:e9:14:29:a9:e5:f3:c1:f9: a4:31:af:f0:ee:ca:07:e9:8d:6c:f4:d0:a1:9b:41: 7b:b4:29:da:1e:5b:bd:64:37:11:e7:0e:16:41:7b: fc:ce:cc:4c:78:3f:20:7f:4b:be:11:57:6d:b1:a9: f0:74:31:02:83:1e:c6:ba:27:52:79:d7:4d:fd:37: 85:5e:a3:dc:88:a5:c5:88:2c:30:fd:e2:3d:0a:7b: 5c:16:41:65:11:ba:73:da:4f:ec:e3:e2:18:6b:16: 61:c9:cb:8b:f4:14:7d:5f:f8:9b:6f:f6:3d:58:9d: bb:18:e5:41:5d:d6:32:e2:dc:7a:93:db:2c:d5:25: e4:28:a1:7c:0d:ac:3b:eb:60:c3:90:57:67:84:63: 89:78:f6:0c:6c:ce:f1:99:92:cd:48:ea:6d:31:be: f3:d5:51:8f:0d:4c:c3:4b:2e:c5:ab:7a:35:9a:a9: bb:06:c0:6a:22:18:da:29:37:80:17:e9:9b:e8:0d: 3a:1d:d6:98:d1:76:7a:b1:37:71:cd:9c:05:0c:c0: 0c:0d:6a:dd:66:b9:8a:94:bf:b0:70:4d:2a:71:79: fe:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:0E:C5:D9:29:25:81:8B:07:9F:71:E9:56:95:E0:A0:70:44:00:30 X509v3 Authority Key Identifier: keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:aa:5b:9d:cb:3c:0f:0c:3d:d2:17:72:74:67:63:d3:f6:ce: 35:d7:82:00:4f:ae:a5:16:6d:fb:16:c2:83:94:52:e2:56:bc: b3:a3:1c:38:30:6f:67:32:5e:ef:f8:ff:1e:f1:0a:d6:d4:c4: 6e:a6:af:7d:2c:23:5c:09:cc:e7:58:f0:47:5e:ab:ff:33:b5: c0:07:08:6a:80:b4:21:48:1e:4b:4a:1c:36:65:2a:95:f6:6f: c1:92:0a:f0:91:42:82:6c:33:22:99:32:4b:4e:d8:19:0f:b6: f6:7c:18:95:b6:df:a5:74:c1:e5:4d:21:b4:a3:83:90:b9:c4: b4:68:f3:d8:68:99:e2:e6:c1:ae:bf:27:b8:79:61:43:fa:6f: e0:7f:e8:02:ab:a3:91:80:64:f8:5d:56:e0:f7:27:9e:64:95: d0:e0:39:4b:85:83:cd:42:4e:c0:b9:33:2a:23:76:46:13:49: 6a:dc:ca:25:08:55:6b:37:4d:a4:93:1f:19:13:62:b2:7d:4b: 54:2b:f0:92:99:33:d6:b0:f8:01:32:b3:eb:d0:10:76:32:8d: b5:40:80:c0:2e:1b:85:4b:51:dd:09:33:bd:1b:f5:1b:ae:85: 54:92:91:35:5a:7e:0d:66:76:09:fa:ce:13:93:e1:a0:f7:90: 57:31:8b:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNIP7RroXpQoimC/kxa9romX9pO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2 QUNEODcxNzAeFw0yNjAzMjQyMzU2NTRaFw0yNjAzMjgwMzM5NTRaMDMxMTAvBgNV BAMTKDlGMEVDNUQ5MjkyNTgxOEIwNzlGNzFFOTU2OTVFMEEwNzA0NDAwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjL/66V9A2nrA+tEGDTpRZw5XL 2WuGNgi97KaUcu9zX+TSFiPpFCmp5fPB+aQxr/DuygfpjWz00KGbQXu0KdoeW71k NxHnDhZBe/zOzEx4PyB/S74RV22xqfB0MQKDHsa6J1J51039N4Veo9yIpcWILDD9 4j0Ke1wWQWURunPaT+zj4hhrFmHJy4v0FH1f+Jtv9j1YnbsY5UFd1jLi3HqT2yzV JeQooXwNrDvrYMOQV2eEY4l49gxszvGZks1I6m0xvvPVUY8NTMNLLsWrejWaqbsG wGoiGNopN4AX6ZvoDTod1pjRdnqxN3HNnAUMwAwNat1muYqUv7BwTSpxef4jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnw7F2SklgYsHn3HpVpXgoHBEADAwHwYDVR0j BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5 YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEqqW53LPA8MPdIXcnRnY9P2zjXXggBPrqUW bfsWwoOUUuJWvLOjHDgwb2cyXu/4/x7xCtbUxG6mr30sI1wJzOdY8Edeq/8ztcAH CGqAtCFIHktKHDZlKpX2b8GSCvCRQoJsMyKZMktO2BkPtvZ8GJW236V0weVNIbSj g5C5xLRo89homeLmwa6/J7h5YUP6b+B/6AKro5GAZPhdVuD3J55kldDgOUuFg81C TsC5MyojdkYTSWrcyiUIVWs3TaSTHxkTYrJ9S1Qr8JKZM9aw+AEys+vQEHYyjbVA gMAuG4VLUd0JM70b9RuuhVSSkTVafg1mdgn6zhOT4aD3kFcxi/8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:03:39 2026 by rpki-client