$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: TOgKUYAJdPpNqFvex/MuG18Hrx5o34hKl3fCNPWUE+Q= Subject key identifier: 43:F7:A9:F7:A2:B2:25:04:82:DE:9A:1F:D2:26:E9:99:F8:19:61:C2 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 4C26E7B3422C2C4544E558AE32FB695912CF6CD8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 0128 Signing time: Fri 06 Mar 2026 22:11:45 +0000 Manifest this update: Fri 06 Mar 2026 22:06:45 +0000 Manifest next update: Tue 10 Mar 2026 07:32:45 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 2: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 3: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 4: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: 7LY1Z8yo1D87vgaTIPl68LgC0OjuSyoqus3eZw9/tDc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:26:e7:b3:42:2c:2c:45:44:e5:58:ae:32:fb:69:59:12:cf:6c:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Mar 6 22:06:45 2026 GMT Not After : Mar 10 07:32:45 2026 GMT Subject: CN=43F7A9F7A2B2250482DE9A1FD226E999F81961C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:52:66:e0:fb:de:00:37:b9:05:59:4b:16:10: b9:81:21:d1:36:26:20:84:ad:ea:50:44:fa:8f:60: 3a:40:47:13:c4:97:db:ec:6c:23:ef:23:f2:35:e9: e8:55:f2:a0:01:db:88:35:b5:11:12:f0:53:6d:51: 7a:18:2d:47:f6:8d:10:bf:2e:11:01:ed:6e:92:14: 8a:49:22:a8:22:00:84:44:da:c0:7f:48:ff:1b:50: 12:dc:39:b6:b7:22:10:2f:7b:51:88:5c:de:11:d4: 7d:3f:64:80:26:45:a0:91:ad:de:c7:b6:b8:5d:1e: a3:5a:61:85:68:bc:27:4c:12:67:97:e0:aa:0c:37: 3d:a7:e8:2c:97:89:0b:fd:28:73:d0:51:ec:9f:52: 4d:c3:ce:c6:88:c4:c1:76:f0:41:2c:9e:7f:4d:92: 97:36:28:dc:3f:8c:a4:af:3b:73:27:46:8a:a8:ca: e0:1c:3e:89:57:cf:f2:07:9d:32:0c:c1:40:06:63: 28:c9:de:5b:9e:f3:fc:7f:7d:cd:14:c9:d0:7c:22: c1:ca:93:9f:5d:ad:80:b7:47:ef:56:00:a6:81:80: 42:3c:8e:2f:f6:44:0f:f8:bc:83:75:74:19:96:fb: 38:20:97:69:cd:99:f6:85:0d:84:dc:df:96:30:49: 5a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:F7:A9:F7:A2:B2:25:04:82:DE:9A:1F:D2:26:E9:99:F8:19:61:C2 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:66:da:90:41:36:a1:48:e8:b1:fc:3b:a0:44:c4:f4:be:0b: 99:d1:f9:f5:e8:05:99:88:d1:10:4f:b3:f4:53:4a:3a:1e:6e: 61:b9:b3:76:07:57:89:51:90:9a:55:df:93:f7:06:eb:6c:fe: 87:56:81:cf:67:c7:9a:78:1d:37:6a:bb:1e:e0:84:57:86:9e: 66:03:4d:14:c9:f5:f4:55:32:47:11:c9:ed:30:bf:d2:8d:72: c5:ee:84:f2:00:a2:7a:0a:dc:ee:f3:c1:03:cb:ec:29:75:bb: 5f:ce:cc:3f:96:6c:12:20:c6:36:b3:1a:f2:e7:d8:84:93:25: be:f2:da:2b:6e:76:46:9b:31:fd:f1:56:65:dc:a6:e7:15:27: 88:24:01:78:f5:28:24:58:dc:71:7d:40:c7:a4:36:63:0a:36: 95:57:9c:39:c2:00:77:94:dc:6f:c7:21:51:83:53:83:02:fb: bb:6d:ec:63:9e:c2:86:a9:2e:6a:05:78:fb:17:da:f8:86:36: 62:00:57:8e:18:df:a4:26:c4:a3:4f:1b:35:0b:26:58:18:1a: 25:b3:74:8c:3b:f3:43:34:c9:a6:fc:e6:e8:d9:76:39:6a:82: 84:7c:61:5a:9e:28:3e:33:0d:43:fc:8f:7d:99:a5:e7:bd:ff: ca:cb:8a:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTCbns0IsLEVE5ViuMvtpWRLPbNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNjAzMDYyMjA2NDVaFw0yNjAzMTAwNzMyNDVaMDMxMTAvBgNV BAMTKDQzRjdBOUY3QTJCMjI1MDQ4MkRFOUExRkQyMjZFOTk5RjgxOTYxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeUmbg+94AN7kFWUsWELmBIdE2 JiCErepQRPqPYDpARxPEl9vsbCPvI/I16ehV8qAB24g1tRES8FNtUXoYLUf2jRC/ LhEB7W6SFIpJIqgiAIRE2sB/SP8bUBLcOba3IhAve1GIXN4R1H0/ZIAmRaCRrd7H trhdHqNaYYVovCdMEmeX4KoMNz2n6CyXiQv9KHPQUeyfUk3DzsaIxMF28EEsnn9N kpc2KNw/jKSvO3MnRoqoyuAcPolXz/IHnTIMwUAGYyjJ3lue8/x/fc0UydB8IsHK k59drYC3R+9WAKaBgEI8ji/2RA/4vIN1dBmW+zggl2nNmfaFDYTc35YwSVoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ/ep96KyJQSC3pof0ibpmfgZYcIwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5m2pBBNqFI6LH8O6BExPS+C5nR+fXoBZmI 0RBPs/RTSjoebmG5s3YHV4lRkJpV35P3Buts/odWgc9nx5p4HTdqux7ghFeGnmYD TRTJ9fRVMkcRye0wv9KNcsXuhPIAonoK3O7zwQPL7Cl1u1/OzD+WbBIgxjazGvLn 2ISTJb7y2itudkabMf3xVmXcpucVJ4gkAXj1KCRY3HF9QMekNmMKNpVXnDnCAHeU 3G/HIVGDU4MC+7tt7GOewoapLmoFePsX2viGNmIAV44Y36QmxKNPGzULJlgYGiWz dIw780M0yab85ujZdjlqgoR8YVqeKD4zDUP8j32Zpee9/8rLil8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:52:18 2026 by rpki-client