$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft File: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft (raw, json) Hash identifier: 98s0k8HoI1MIz5jt3xmh/K41QvTKJlo10YKto5iHNl0= Subject key identifier: F6:DE:CE:18:04:EC:EC:B1:A5:E3:5C:A8:00:E3:67:73:75:BB:16:F4 Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE Certificate issuer: /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Certificate serial: 17A5C414BD6E340626C8096C89FFA6928A02527D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft Manifest number: 04DE Signing time: Wed 25 Mar 2026 18:31:02 +0000 Manifest this update: Wed 25 Mar 2026 18:26:01 +0000 Manifest next update: Sat 28 Mar 2026 23:17:01 +0000 Files and hashes: 1: 3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (hash: NxUfSTs+o4y49KJqzzCvLvRJmV1ctiR4iGydszaWllw=) 2: 3130332e3136312e3138352e302f32342d3234203d3e20313431363233.roa (hash: beBQaTk2//EAP6NnfuhmfkJxxOAnhB8nJqrnoVbonBA=) 3: 215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl (hash: bhktdv1bmpSeHXY1iNFpuRAxaW3aBSFtDtnBO5mYN2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:17:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:a5:c4:14:bd:6e:34:06:26:c8:09:6c:89:ff:a6:92:8a:02:52:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE Validity Not Before: Mar 25 18:26:01 2026 GMT Not After : Mar 28 23:17:01 2026 GMT Subject: CN=F6DECE1804ECECB1A5E35CA800E3677375BB16F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:4e:b1:5f:ef:7a:31:df:2e:06:75:f8:49:e4: 32:73:9c:c6:56:c4:0e:1e:7e:00:0f:0c:c3:f4:11: 40:b8:90:5e:ea:4b:86:77:42:11:60:f2:69:86:f2: 6e:56:a8:58:d8:43:f2:e1:5c:38:c2:ea:66:d8:a5: 25:bf:bd:84:08:86:7d:e7:89:06:90:71:87:bd:db: 8e:b4:04:7e:fe:e6:6e:75:db:13:95:6c:f1:c2:c1: 41:f5:26:05:37:05:25:4d:a7:76:f0:11:fc:46:f2: 0e:0f:3c:0b:b8:02:94:f1:6d:c9:43:24:30:b2:43: c7:8a:4b:22:5f:c2:fa:96:5f:af:2b:6c:b9:eb:c1: 43:95:90:ee:f2:83:af:e9:6a:ee:2c:30:8b:21:a2: d1:fd:7e:98:b5:cc:cd:eb:57:69:db:55:3c:d8:5a: a1:73:5c:88:8d:0e:ae:d8:14:70:db:8d:da:2a:12: 17:0e:ce:44:6d:e8:c9:10:a2:ee:5a:47:5c:16:73: a0:b4:1b:9a:47:03:4f:95:87:7f:30:ed:71:cd:ee: 03:a4:3f:81:99:1e:e4:85:b6:3c:4d:3d:85:d9:7e: cb:8d:02:ce:e0:22:9d:85:3e:70:71:7c:4b:97:d9: 81:63:67:66:29:a4:04:5f:64:98:98:27:4a:5e:4a: bc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:DE:CE:18:04:EC:EC:B1:A5:E3:5C:A8:00:E3:67:73:75:BB:16:F4 X509v3 Authority Key Identifier: keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:10:7b:e1:59:0d:87:f8:83:19:9b:7e:7c:5d:73:f7:bf:5f: bf:67:e5:9c:cf:4c:72:10:62:4e:92:81:60:8b:27:a1:85:79: 06:b6:16:e9:66:f8:f6:e0:19:cd:38:33:07:0c:14:74:52:ee: 05:92:c2:9f:c1:09:2c:d5:92:2e:b7:3f:0c:42:87:09:27:26: f3:e4:75:26:6a:af:0e:18:25:ca:3d:b1:53:66:18:34:01:71: 13:06:18:fd:93:c2:b5:22:45:41:11:82:4f:fd:c6:fd:8e:88: 1e:89:e3:2c:70:3d:20:43:41:a8:b2:9b:f5:de:27:43:06:73: fb:5d:b4:c6:88:f2:77:8e:a9:96:30:d3:2d:14:61:aa:81:25: 37:12:26:f7:38:be:07:fe:dc:80:2a:6c:13:13:25:11:d2:b4: 3f:5a:65:f5:2c:1b:d0:d4:49:db:9b:46:f1:ab:8d:b0:41:81: 57:87:8d:6a:60:1c:53:ca:97:c9:62:ec:7a:c1:78:90:f3:40: 52:4a:f7:1f:ab:b0:07:67:9d:5f:e1:eb:43:12:4c:96:70:5f: d0:0e:d2:78:90:32:c7:28:e6:e3:d3:77:24:d5:2f:88:85:ce: 0e:f4:14:4b:75:84:ee:be:9d:8a:b0:1f:95:01:0b:cb:72:86: e3:22:ca:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF6XEFL1uNAYmyAlsif+mkooCUn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNB MDk2QjJGRTAeFw0yNjAzMjUxODI2MDFaFw0yNjAzMjgyMzE3MDFaMDMxMTAvBgNV BAMTKEY2REVDRTE4MDRFQ0VDQjFBNUUzNUNBODAwRTM2NzczNzVCQjE2RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8TrFf73ox3y4GdfhJ5DJznMZW xA4efgAPDMP0EUC4kF7qS4Z3QhFg8mmG8m5WqFjYQ/LhXDjC6mbYpSW/vYQIhn3n iQaQcYe92460BH7+5m512xOVbPHCwUH1JgU3BSVNp3bwEfxG8g4PPAu4ApTxbclD JDCyQ8eKSyJfwvqWX68rbLnrwUOVkO7yg6/pau4sMIshotH9fpi1zM3rV2nbVTzY WqFzXIiNDq7YFHDbjdoqEhcOzkRt6MkQou5aR1wWc6C0G5pHA0+Vh38w7XHN7gOk P4GZHuSFtjxNPYXZfsuNAs7gIp2FPnBxfEuX2YFjZ2YppARfZJiYJ0peSry7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9t7OGATs7LGl41yoAONnc3W7FvQwHwYDVR0j BBgwFoAUIV/H5eIrjEaRDU18ohTJI6CWsv4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2VhYzljMC1kZTFiLTQ2ZGQtYmYzNy0xOGZlM2E4ZDVmYmYvMC8yMTVGQzdFNUUy MkI4QzQ2OTEwRDREN0NBMjE0QzkyM0EwOTZCMkZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5MjNBMDk2 QjJGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlYWM5YzAtZGUxYi00NmRkLWJm MzctMThmZTNhOGQ1ZmJmLzAvMjE1RkM3RTVFMjJCOEM0NjkxMEQ0RDdDQTIxNEM5 MjNBMDk2QjJGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8Qe+FZDYf4gxmbfnxdc/e/X79n5ZzPTHIQ Yk6SgWCLJ6GFeQa2Fulm+PbgGc04MwcMFHRS7gWSwp/BCSzVki63PwxChwknJvPk dSZqrw4YJco9sVNmGDQBcRMGGP2TwrUiRUERgk/9xv2OiB6J4yxwPSBDQaiym/Xe J0MGc/tdtMaI8neOqZYw0y0UYaqBJTcSJvc4vgf+3IAqbBMTJRHStD9aZfUsG9DU SdubRvGrjbBBgVeHjWpgHFPKl8li7HrBeJDzQFJK9x+rsAdnnV/h60MSTJZwX9AO 0niQMsco5uPTdyTVL4iFzg70FEt1hO6+nYqwH5UBC8tyhuMiyv4= -----END CERTIFICATE-----Generated at Thu Mar 26 05:51:11 2026 by rpki-client