$ rpki-client -vvf repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft File: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft (raw, json) Hash identifier: 8hD53RWmJpL8oSndKf4S6fa3qCHqhPYmAA82KMTjqmo= Subject key identifier: 21:EF:D7:DB:98:91:22:D8:91:40:16:A1:FF:82:FE:CB:B6:51:02:59 Authority key identifier: 15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 Certificate issuer: /CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Certificate serial: 62E4DB6B14DFBAF3F2C9CA771B2DD884380DC75E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject info access: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft Manifest number: 0500 Signing time: Tue 24 Mar 2026 16:21:27 +0000 Manifest this update: Tue 24 Mar 2026 16:16:27 +0000 Manifest next update: Fri 27 Mar 2026 20:07:27 +0000 Files and hashes: 1: 3130332e3134312e3130382e302f32332d3234203d3e20313338383836.roa (hash: yIuwDJ7Q95tfvD77KhegvlF4CTHEd3Lu6i61741Xn4E=) 2: 15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl (hash: K1CclvuSYw2Fht3arcmELHVw855mV0c3DroIyKDPpS4=) 3: 323430353a313634303a3a2f33322d3438203d3e20313338383836.roa (hash: MItE47EaO9IAk0e+oiW0dyxlfEYvief1VP6PIxAt77c=) 4: 323430353a313634303a363a3a2f34382d3438203d3e203234343239.roa (hash: K1B+8ghkTLIZ5AJ6fsYXvRX9s2r1jX+7WBmIft8mUyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:07:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:e4:db:6b:14:df:ba:f3:f2:c9:ca:77:1b:2d:d8:84:38:0d:c7:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35 Validity Not Before: Mar 24 16:16:27 2026 GMT Not After : Mar 27 20:07:27 2026 GMT Subject: CN=21EFD7DB989122D8914016A1FF82FECBB6510259 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:56:9d:fe:e7:3f:7b:c7:a4:c1:1d:37:6e:f0: a7:13:59:41:9a:5c:09:85:0c:cd:ac:14:06:77:59: cc:0e:a2:c5:84:fa:07:df:de:c9:e6:d7:0e:ae:7c: 09:6a:df:1d:62:fa:7c:f1:8b:04:a5:6b:db:9b:af: d1:d4:4b:f6:92:2f:21:a0:b6:3c:5c:4b:48:dd:cc: d4:c6:82:af:ef:9e:ff:3d:a7:bc:d4:f6:b9:b1:35: a1:31:a6:9e:d2:b4:bb:38:c5:65:b7:78:a6:74:38: 73:97:5e:34:c6:ee:2a:21:7c:b5:7d:6c:4a:9a:ba: b5:40:e7:f7:df:18:f0:8e:d0:04:b5:ec:55:7c:03: ef:71:1c:7e:c7:b7:c1:91:64:49:fa:ab:fe:c4:7b: 85:97:b0:80:bd:a7:f5:1e:fb:54:ad:f1:67:2d:0c: 5a:0a:74:7f:93:1e:00:d7:29:45:83:40:12:3e:45: 6c:39:27:7f:dd:aa:09:d6:9e:64:c4:3c:54:21:c3: c7:22:71:85:28:ed:f5:38:6e:9b:77:12:b4:72:1d: 18:6d:a0:1a:8e:bf:61:f2:05:73:4e:d4:b7:ea:5b: b9:cc:2b:eb:75:f5:64:b3:ae:17:63:cf:05:51:b1: 6b:67:ee:85:e9:1f:ff:1f:2f:49:97:c4:d4:86:37: b8:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:EF:D7:DB:98:91:22:D8:91:40:16:A1:FF:82:FE:CB:B6:51:02:59 X509v3 Authority Key Identifier: keyid:15:B7:EB:F9:2B:35:FD:B5:BC:69:90:BB:8E:CA:2C:29:7B:45:CB:35 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/df551ab9-8041-4a9a-9b50-c7c6dec2166f/0/15B7EBF92B35FDB5BC6990BB8ECA2C297B45CB35.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:c2:ce:1f:56:88:b8:6c:e2:f7:36:55:f3:f3:b8:9c:87:1b: e1:71:d0:da:6f:4d:bd:21:e8:b5:3d:84:bb:8e:7c:6f:74:45: 79:77:e9:97:aa:a7:89:ca:c9:69:42:d6:e0:f4:6f:89:8f:f1: d0:d7:64:db:d9:91:48:91:2f:3f:7f:c7:00:69:4f:7d:81:2a: e0:dc:86:97:9d:ed:ca:d3:2a:a7:b3:16:6f:3a:93:8e:c4:73: 9c:db:1d:fd:ea:71:99:36:8a:ff:2d:89:7c:43:26:57:fc:f9: 83:f9:43:33:cf:fd:73:8c:32:e1:be:b9:c2:f8:ae:20:d0:c1: 2b:84:5b:22:e1:00:8b:fa:82:d4:98:c1:6f:a4:67:3e:b5:7d: 3d:4c:a7:89:cc:8f:37:a6:12:87:a0:d3:4a:26:8a:39:1e:c1: e8:71:ad:40:3d:c8:68:5c:d0:2c:50:8e:84:1c:dd:72:1f:55: 65:2d:c9:a7:76:85:6c:89:37:e7:8f:90:2b:be:92:72:5c:c2: c2:d4:06:8e:7f:54:ed:08:b0:c1:04:d4:50:91:2a:6d:d0:a7: bb:b3:5c:13:d0:6f:62:93:da:63:bc:85:1e:84:53:fb:36:c8: 91:f8:48:0c:3f:d6:ff:47:6b:35:65:11:7f:60:30:42:84:83: fe:43:91:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYuTbaxTfuvPyycp3Gy3YhDgNx14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3 QjQ1Q0IzNTAeFw0yNjAzMjQxNjE2MjdaFw0yNjAzMjcyMDA3MjdaMDMxMTAvBgNV BAMTKDIxRUZEN0RCOTg5MTIyRDg5MTQwMTZBMUZGODJGRUNCQjY1MTAyNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkVp3+5z97x6TBHTdu8KcTWUGa XAmFDM2sFAZ3WcwOosWE+gff3snm1w6ufAlq3x1i+nzxiwSla9ubr9HUS/aSLyGg tjxcS0jdzNTGgq/vnv89p7zU9rmxNaExpp7StLs4xWW3eKZ0OHOXXjTG7iohfLV9 bEqaurVA5/ffGPCO0AS17FV8A+9xHH7Ht8GRZEn6q/7Ee4WXsIC9p/Ue+1St8Wct DFoKdH+THgDXKUWDQBI+RWw5J3/dqgnWnmTEPFQhw8cicYUo7fU4bpt3ErRyHRht oBqOv2HyBXNO1LfqW7nMK+t19WSzrhdjzwVRsWtn7oXpH/8fL0mXxNSGN7gxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIe/X25iRItiRQBah/4L+y7ZRAlkwHwYDVR0j BBgwFoAUFbfr+Ss1/bW8aZC7jsosKXtFyzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZjU1MWFiOS04MDQxLTRhOWEtOWI1MC1jN2M2ZGVjMjE2NmYvMC8xNUI3RUJGOTJC MzVGREI1QkM2OTkwQkI4RUNBMkMyOTdCNDVDQjM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJDMjk3QjQ1 Q0IzNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGY1NTFhYjktODA0MS00YTlhLTli NTAtYzdjNmRlYzIxNjZmLzAvMTVCN0VCRjkyQjM1RkRCNUJDNjk5MEJCOEVDQTJD Mjk3QjQ1Q0IzNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjCzh9WiLhs4vc2VfPzuJyHG+Fx0NpvTb0h 6LU9hLuOfG90RXl36Zeqp4nKyWlC1uD0b4mP8dDXZNvZkUiRLz9/xwBpT32BKuDc hped7crTKqezFm86k47Ec5zbHf3qcZk2iv8tiXxDJlf8+YP5QzPP/XOMMuG+ucL4 riDQwSuEWyLhAIv6gtSYwW+kZz61fT1Mp4nMjzemEoeg00omijkewehxrUA9yGhc 0CxQjoQc3XIfVWUtyad2hWyJN+ePkCu+knJcwsLUBo5/VO0IsMEE1FCRKm3Qp7uz XBPQb2KT2mO8hR6EU/s2yJH4SAw/1v9HazVlEX9gMEKEg/5DkdU= -----END CERTIFICATE-----Generated at Thu Mar 26 18:25:37 2026 by rpki-client