$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: jEP6DHWMR6V8QhaO1aWjbDRcpJl6Mre05vQgprgbc+E= Subject key identifier: D9:BB:35:96:35:A6:6B:5F:FE:F3:E6:75:DA:32:79:3E:2B:F6:F2:A5 Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 0C4B5747F45E91B4B90B25CBB213992A1ACD047D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 013C Signing time: Tue 21 Apr 2026 03:01:54 +0000 Manifest this update: Tue 21 Apr 2026 02:56:54 +0000 Manifest next update: Fri 24 Apr 2026 08:57:54 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: +OevkhB7r44OnQm82LNlP8LRDK9Y7/yxi7S+eG9f5A4=) 2: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: vkJx9uCm9EoTPSAtT+pEEvHIqiIsZ02J5B3aKNR+Dyg=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: 58riNyfqbPP7fKRqZA+ufvmL363qEOUl7N/mxlGGnOA=) 4: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: bSChIDo0CglmTqFSV6p630tLNxr15ZtjkZahOcEGfmY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:57:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:4b:57:47:f4:5e:91:b4:b9:0b:25:cb:b2:13:99:2a:1a:cd:04:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Apr 21 02:56:54 2026 GMT Not After : Apr 24 08:57:54 2026 GMT Subject: CN=D9BB359635A66B5FFEF3E675DA32793E2BF6F2A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:d9:a8:d5:11:7e:3a:94:66:ed:e5:ee:44: e5:7f:d1:42:0e:f5:4c:af:2f:54:7f:75:68:94:62: 30:21:6d:a4:f6:aa:6d:c9:6a:40:b5:4d:f1:a5:69: 42:f5:31:80:42:fc:7b:f8:6e:96:95:d8:57:a8:ae: b1:0f:84:29:13:aa:dd:98:c6:8c:45:77:11:df:e5: e3:6f:54:3a:94:b0:e6:78:04:7e:da:80:36:de:07: c1:71:fc:eb:9c:58:b6:1d:e0:22:89:42:d4:62:c0: 91:39:76:da:b4:65:e6:68:56:e3:ac:1b:07:e3:b7: d3:ce:38:42:36:c2:00:ba:34:fb:47:ea:05:96:c7: c8:a7:01:ae:fb:d9:74:39:d4:a3:3f:48:d2:72:4a: 5a:9f:a7:e7:b8:ff:29:61:f3:6b:4d:32:21:23:b4: 6e:1d:68:ae:bc:44:ca:c9:e8:3b:33:61:98:b7:53: e4:3a:46:32:9c:70:c2:9e:b0:68:54:13:58:e1:c3: 39:7e:b6:5f:dd:9d:84:f0:ee:d8:e2:3d:b7:b5:bf: 96:f2:2f:b5:f0:3a:a4:30:a2:b5:53:1f:ec:3b:5d: 85:74:eb:80:b9:b1:03:9a:8c:29:92:5e:1a:42:42: aa:5a:a8:0d:57:b1:f7:42:3c:cd:ea:59:4c:51:bc: 71:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:BB:35:96:35:A6:6B:5F:FE:F3:E6:75:DA:32:79:3E:2B:F6:F2:A5 X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:7d:75:c0:d3:b6:d6:18:68:db:0e:70:14:4e:16:be:22:f0: 1f:06:1e:85:6a:7d:34:27:16:76:ef:aa:2c:d2:0f:73:16:86: 35:22:d9:89:07:d1:46:6f:63:84:3c:f1:68:40:fc:25:64:c2: f3:94:f5:98:b1:5e:3c:e3:0b:4c:a8:c2:5b:0d:a0:8a:0c:1c: 10:91:81:7b:31:e8:11:08:8f:fb:ff:7e:b7:77:30:36:f4:eb: 1d:5f:57:84:32:74:10:97:55:23:82:9d:df:68:17:8a:40:28: 78:13:ee:3d:18:68:3e:0b:02:7c:8e:aa:b8:dc:a1:ae:7e:9a: ea:b2:4c:36:f8:9d:7d:a5:eb:84:3a:44:ba:9f:07:22:49:ec: 89:ca:27:d8:67:90:44:e6:36:f9:ea:f6:fb:25:92:10:aa:1c: fb:7b:07:de:a8:a3:c0:61:0d:e5:07:0c:fb:71:59:0d:9f:58: 6a:d6:34:e8:2b:b4:e2:38:a5:ea:16:0f:8c:23:20:d7:9d:5d: 19:67:41:e9:21:19:ed:ea:6b:2f:9c:2d:ae:08:c2:13:67:9b: 61:7f:b8:ec:3f:5d:79:ba:54:56:cc:2f:db:2e:49:ac:15:57: 3d:22:7a:5b:1f:ee:8e:36:08:76:ea:fc:8d:18:4b:57:5b:d4: a6:2b:b7:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEtXR/RekbS5CyXLshOZKhrNBH0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNjA0MjEwMjU2NTRaFw0yNjA0MjQwODU3NTRaMDMxMTAvBgNV BAMTKEQ5QkIzNTk2MzVBNjZCNUZGRUYzRTY3NURBMzI3OTNFMkJGNkYyQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHz9mo1RF+OpRm7eXuROV/0UIO 9UyvL1R/dWiUYjAhbaT2qm3JakC1TfGlaUL1MYBC/Hv4bpaV2FeorrEPhCkTqt2Y xoxFdxHf5eNvVDqUsOZ4BH7agDbeB8Fx/OucWLYd4CKJQtRiwJE5dtq0ZeZoVuOs Gwfjt9POOEI2wgC6NPtH6gWWx8inAa772XQ51KM/SNJySlqfp+e4/ylh82tNMiEj tG4daK68RMrJ6DszYZi3U+Q6RjKccMKesGhUE1jhwzl+tl/dnYTw7tjiPbe1v5by L7XwOqQworVTH+w7XYV064C5sQOajCmSXhpCQqpaqA1XsfdCPM3qWUxRvHGFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2bs1ljWma1/+8+Z12jJ5Piv28qUwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL19dcDTttYYaNsOcBROFr4i8B8GHoVqfTQn FnbvqizSD3MWhjUi2YkH0UZvY4Q88WhA/CVkwvOU9ZixXjzjC0yowlsNoIoMHBCR gXsx6BEIj/v/frd3MDb06x1fV4QydBCXVSOCnd9oF4pAKHgT7j0YaD4LAnyOqrjc oa5+muqyTDb4nX2l64Q6RLqfByJJ7InKJ9hnkETmNvnq9vslkhCqHPt7B96oo8Bh DeUHDPtxWQ2fWGrWNOgrtOI4peoWD4wjINedXRlnQekhGe3qay+cLa4IwhNnm2F/ uOw/XXm6VFbML9suSawVVz0ielsf7o42CHbq/I0YS1db1KYrt1c= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client