$ rpki-client -vvf repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft File: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft (raw, json) Hash identifier: dMBlPVdupRNBpI7+ajwPQ9AWgVdBqUNWAaV1ApY4Kb4= Subject key identifier: BC:2F:15:D7:B2:C5:D0:06:1D:FD:FF:5F:AE:1E:B1:8E:F7:D0:C2:A9 Authority key identifier: 11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF Certificate issuer: /CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Certificate serial: 135E048EECB8BCEA58FEE2525313699F154D4520 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft Manifest number: 022E Signing time: Thu 16 Apr 2026 18:22:00 +0000 Manifest this update: Thu 16 Apr 2026 18:17:00 +0000 Manifest next update: Mon 20 Apr 2026 02:50:00 +0000 Files and hashes: 1: 115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl (hash: 8nIpvYu9+bBPTmQ+gKX7PiGSYe1KOPUGlspPdprvqBI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:50:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5e:04:8e:ec:b8:bc:ea:58:fe:e2:52:53:13:69:9f:15:4d:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF Validity Not Before: Apr 16 18:17:00 2026 GMT Not After : Apr 20 02:50:00 2026 GMT Subject: CN=BC2F15D7B2C5D0061DFDFF5FAE1EB18EF7D0C2A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:8e:c0:6f:a7:3c:a0:52:82:fc:21:f8:bc:55: 03:e7:37:57:7d:5c:ab:45:7d:f9:6f:8d:dc:e0:82: 17:a2:cc:ca:21:d6:62:01:67:6a:2b:ca:9b:27:6e: 7a:c9:09:f5:43:bf:9d:c5:97:3a:b8:9f:8e:da:d1: 73:63:3b:8a:23:6c:ea:01:18:bc:e2:e5:c7:1c:92: 89:70:93:59:1d:eb:9b:1f:63:1e:74:0f:e6:69:78: e7:6e:44:49:f0:8c:44:2f:0a:f9:05:35:a7:7d:da: 23:26:f5:08:82:46:4f:24:b6:e4:33:19:3f:bc:15: f7:ac:b2:c2:4f:0f:23:dd:c6:3e:6c:14:21:b7:ec: e5:de:0a:a9:dd:86:c0:9c:94:ea:d0:d9:88:05:a5: db:e1:59:f9:4d:a5:62:3e:e4:9a:06:a2:7f:0e:fd: fa:9b:83:98:05:82:4b:d0:f3:aa:fe:fa:df:1b:5c: 1d:d0:1e:bb:12:c0:15:e6:52:63:ad:a1:34:34:be: 4e:73:16:9c:ce:38:26:58:c2:b5:92:39:32:1f:50: ab:33:0f:f6:8f:22:64:14:04:58:32:fc:ee:8f:0f: 9f:0d:a2:f3:15:0e:a1:ee:fe:24:4a:e8:05:50:29: 0e:0e:1f:83:52:1c:bf:f9:a4:62:fc:fd:69:24:7d: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:2F:15:D7:B2:C5:D0:06:1D:FD:FF:5F:AE:1E:B1:8E:F7:D0:C2:A9 X509v3 Authority Key Identifier: keyid:11:5F:DA:5F:36:D9:1E:E9:38:FA:B5:D4:B2:AB:88:42:2A:3D:4B:BF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c267825-51af-456d-b45a-ae93c5f270ee/0/115FDA5F36D91EE938FAB5D4B2AB88422A3D4BBF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:c5:78:1c:37:44:9c:b5:f8:06:f8:54:92:8c:45:59:c4:bf: f8:f9:71:9a:93:17:a3:f5:71:17:27:e8:97:07:13:ce:3b:81: c4:bd:d3:32:b2:bc:b0:57:7d:49:bc:61:fe:c1:e9:28:4f:a9: 5e:0e:dc:ac:6a:98:c3:93:1d:12:1c:12:85:ac:d9:82:4d:55: 65:60:c2:89:29:27:bd:3f:89:2b:b6:62:d3:c4:e6:93:aa:19: 20:85:51:88:8e:43:dc:4e:0a:09:20:04:27:d1:46:f7:f6:1e: 88:89:9d:04:e1:e5:4e:9e:ad:c5:ac:05:d8:fc:f7:56:24:a1: ad:2a:68:72:d0:ed:0d:19:17:69:1e:71:46:66:6b:2e:76:4c: db:f7:93:50:3c:a3:fb:fb:0d:78:b3:45:a1:45:64:bd:e9:69: 5a:fb:19:56:18:a3:33:8f:ce:1a:a9:18:a8:9e:d4:2b:36:5e: 11:c6:2f:8f:28:fa:e5:47:8e:75:53:d6:de:69:34:3b:28:8b: 1e:ce:6b:cf:47:35:66:9d:fd:bc:a7:0b:fb:29:cb:a8:7d:5e: d5:9b:22:a9:6c:81:56:86:b2:74:03:1d:77:3b:be:46:44:a6: 3d:de:4b:f5:7d:4d:0a:a9:e1:76:26:bb:e4:07:c9:c1:fc:1f: 63:d6:83:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE14Ejuy4vOpY/uJSUxNpnxVNRSAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIy QTNENEJCRjAeFw0yNjA0MTYxODE3MDBaFw0yNjA0MjAwMjUwMDBaMDMxMTAvBgNV BAMTKEJDMkYxNUQ3QjJDNUQwMDYxREZERkY1RkFFMUVCMThFRjdEMEMyQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCajsBvpzygUoL8Ifi8VQPnN1d9 XKtFfflvjdzggheizMoh1mIBZ2orypsnbnrJCfVDv53Flzq4n47a0XNjO4ojbOoB GLzi5ccckolwk1kd65sfYx50D+ZpeOduREnwjEQvCvkFNad92iMm9QiCRk8ktuQz GT+8FfesssJPDyPdxj5sFCG37OXeCqndhsCclOrQ2YgFpdvhWflNpWI+5JoGon8O /fqbg5gFgkvQ86r++t8bXB3QHrsSwBXmUmOtoTQ0vk5zFpzOOCZYwrWSOTIfUKsz D/aPImQUBFgy/O6PD58NovMVDqHu/iRK6AVQKQ4OH4NSHL/5pGL8/WkkfXxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvC8V17LF0AYd/f9frh6xjvfQwqkwHwYDVR0j BBgwFoAUEV/aXzbZHuk4+rXUsquIQio9S78wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI2NzgyNS01MWFmLTQ1NmQtYjQ1YS1hZTkzYzVmMjcwZWUvMC8xMTVGREE1RjM2 RDkxRUU5MzhGQUI1RDRCMkFCODg0MjJBM0Q0QkJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4NDIyQTNE NEJCRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyNjc4MjUtNTFhZi00NTZkLWI0 NWEtYWU5M2M1ZjI3MGVlLzAvMTE1RkRBNUYzNkQ5MUVFOTM4RkFCNUQ0QjJBQjg4 NDIyQTNENEJCRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDFeBw3RJy1+Ab4VJKMRVnEv/j5cZqTF6P1 cRcn6JcHE847gcS90zKyvLBXfUm8Yf7B6ShPqV4O3KxqmMOTHRIcEoWs2YJNVWVg wokpJ70/iSu2YtPE5pOqGSCFUYiOQ9xOCgkgBCfRRvf2HoiJnQTh5U6ercWsBdj8 91Ykoa0qaHLQ7Q0ZF2kecUZmay52TNv3k1A8o/v7DXizRaFFZL3paVr7GVYYozOP zhqpGKie1Cs2XhHGL48o+uVHjnVT1t5pNDsoix7Oa89HNWad/bynC/spy6h9XtWb IqlsgVaGsnQDHXc7vkZEpj3eS/V9TQqp4XYmu+QHycH8H2PWg2c= -----END CERTIFICATE-----Generated at Fri Apr 17 20:47:25 2026 by rpki-client