$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: nwywDciL4W3i5J7RIyPIOOoGcWe+VR2DJc9fq4aLI8Q= Subject key identifier: 0B:F7:31:B5:7B:84:76:E1:FC:CA:F3:EA:C8:DC:4B:4F:70:D6:2C:B3 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 6DE6B29633AD5274263B0E46D9FA133C71194F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01E1 Signing time: Wed 18 Mar 2026 23:31:04 +0000 Manifest this update: Wed 18 Mar 2026 23:26:04 +0000 Manifest next update: Sun 22 Mar 2026 09:58:04 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: Y7VHTsC2izD0tluvnkezQBsGMCwJgpS6DXh2uDeCJmE=) 2: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: V9LLfdPKT1tW+siU8HIJ1OXl3Y1dtcMCrhPo+V7abfM=) 4: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: cY+LM6NiUoco74TgyZdBH2R3JLEsrVC/xUBsKMjQsNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 09:37:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:e6:b2:96:33:ad:52:74:26:3b:0e:46:d9:fa:13:3c:71:19:4f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Mar 18 23:26:04 2026 GMT Not After : Mar 22 09:58:04 2026 GMT Subject: CN=0BF731B57B8476E1FCCAF3EAC8DC4B4F70D62CB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:29:1b:12:09:78:f3:3f:6f:76:93:c3:36:20: 45:62:fc:28:14:c8:3c:c9:23:00:7d:f3:6b:cb:53: bf:41:42:50:52:ca:a0:0b:ab:f3:16:f2:d8:00:5c: d5:05:32:e2:1e:06:84:92:ae:0a:16:a3:fb:2e:97: 5f:4e:71:1f:52:d8:9d:fb:68:d3:bc:50:af:27:c8: bf:a9:20:f4:19:c6:22:f5:82:76:1a:cd:8c:22:fd: 29:20:a2:4d:91:4b:65:56:46:ab:37:df:59:b6:4e: 58:b8:1f:27:3b:db:96:e4:d2:3e:13:17:ce:8a:d7: 8d:32:af:1a:c4:0b:aa:64:b5:c4:1e:61:8e:a5:54: db:22:db:05:99:52:5d:5a:fc:4d:5d:f0:93:a2:57: f2:1f:14:72:3b:b4:b5:0f:8c:bc:61:4a:79:34:16: 81:be:fa:ae:13:a3:7b:7b:25:b1:bb:1f:97:c4:e8: 47:9c:2f:ed:78:ff:46:60:03:b7:4e:74:9d:30:70: 09:91:f0:d5:81:e0:14:6d:c4:0e:cc:de:20:4a:f9: 38:df:1d:48:2c:27:6c:d6:b3:04:f7:9f:85:42:0b: 2c:b8:f3:8d:1b:bf:bf:7e:3a:0e:53:fa:4e:61:8c: 87:67:6b:35:69:9f:36:ff:c6:aa:35:3f:ce:3a:1b: 16:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:F7:31:B5:7B:84:76:E1:FC:CA:F3:EA:C8:DC:4B:4F:70:D6:2C:B3 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:26:d8:cb:56:11:6f:00:12:fc:82:57:e0:8e:ec:07:91:be: ac:a4:1c:82:fb:f9:14:ed:08:79:6d:ca:f9:19:a4:e5:7d:1b: 75:e5:64:d6:5a:f5:08:34:83:05:f3:b3:08:08:1d:60:85:65: cf:9a:d0:26:98:9b:43:ae:47:17:6e:ac:30:d3:3a:5b:a7:07: da:d7:5b:cf:87:50:ce:3d:3e:58:47:83:30:d2:63:1a:f6:56: 3a:07:30:ae:53:35:2c:80:8e:5f:98:19:d8:81:41:de:fd:dc: ee:ee:09:2a:b2:e2:57:7f:fd:65:9c:70:fc:80:d4:ea:8c:2a: 06:7d:0b:cc:0e:2b:54:b4:57:11:04:31:ce:eb:2a:3b:8c:28: 9f:e5:b4:6f:35:2c:01:6f:07:71:df:fa:40:2e:cc:79:15:a9: 08:7e:ae:a1:4c:64:77:c5:ab:c7:89:e4:51:df:79:b4:93:2b: 95:7e:54:4b:a7:a8:56:54:2c:d1:ab:01:43:5c:eb:b2:64:1e: ca:b8:1c:fd:5d:a9:70:09:48:e9:65:cd:55:fe:7d:0e:e5:54: 5a:b9:50:92:57:10:4b:c4:2b:13:df:21:14:2d:ed:a7:04:fa: 24:69:62:18:15:c2:69:35:80:fc:f7:96:ea:06:60:93:72:9c: 8c:35:8d:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbeayljOtUnQmOw5G2foTPHEZT18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNjAzMTgyMzI2MDRaFw0yNjAzMjIwOTU4MDRaMDMxMTAvBgNV BAMTKDBCRjczMUI1N0I4NDc2RTFGQ0NBRjNFQUM4REM0QjRGNzBENjJDQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOKRsSCXjzP292k8M2IEVi/CgU yDzJIwB982vLU79BQlBSyqALq/MW8tgAXNUFMuIeBoSSrgoWo/sul19OcR9S2J37 aNO8UK8nyL+pIPQZxiL1gnYazYwi/Skgok2RS2VWRqs331m2Tli4Hyc725bk0j4T F86K140yrxrEC6pktcQeYY6lVNsi2wWZUl1a/E1d8JOiV/IfFHI7tLUPjLxhSnk0 FoG++q4To3t7JbG7H5fE6EecL+14/0ZgA7dOdJ0wcAmR8NWB4BRtxA7M3iBK+Tjf HUgsJ2zWswT3n4VCCyy4840bv79+Og5T+k5hjIdnazVpnzb/xqo1P846GxbLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC/cxtXuEduH8yvPqyNxLT3DWLLMwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALUm2MtWEW8AEvyCV+CO7AeRvqykHIL7+RTt CHltyvkZpOV9G3XlZNZa9Qg0gwXzswgIHWCFZc+a0CaYm0OuRxdurDDTOlunB9rX W8+HUM49PlhHgzDSYxr2VjoHMK5TNSyAjl+YGdiBQd793O7uCSqy4ld//WWccPyA 1OqMKgZ9C8wOK1S0VxEEMc7rKjuMKJ/ltG81LAFvB3Hf+kAuzHkVqQh+rqFMZHfF q8eJ5FHfebSTK5V+VEunqFZULNGrAUNc67JkHsq4HP1dqXAJSOllzVX+fQ7lVFq5 UJJXEEvEKxPfIRQt7acE+iRpYhgVwmk1gPz3luoGYJNynIw1jY4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:05 2026 by rpki-client