
$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft
File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json)
Hash identifier: LXO10gQOAOPCDwG3KyQo+O0ye7fMW2zPQkIi4KNhiTQ=
Subject key identifier: 6F:4D:FB:A4:6C:CA:A5:79:D0:B6:F8:D1:81:1C:EA:E1:58:77:20:66
Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1
Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1
Certificate serial: 70B4DB8C3DF32D74176EB8E91F4D46FC7C15A58A
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft
Manifest number: 053B
Signing time: Sat 28 Feb 2026 08:41:16 +0000
Manifest this update: Sat 28 Feb 2026 08:36:16 +0000
Manifest next update: Tue 03 Mar 2026 14:31:16 +0000
Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: k4JoJznto76y5OMwcJclB7LUOGdSYhtXB8t/EhEqh+o=)
2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl
rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:31:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:b4:db:8c:3d:f3:2d:74:17:6e:b8:e9:1f:4d:46:fc:7c:15:a5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1
Validity
Not Before: Feb 28 08:36:16 2026 GMT
Not After : Mar 3 14:31:16 2026 GMT
Subject: CN=6F4DFBA46CCAA579D0B6F8D1811CEAE158772066
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:55:eb:57:07:17:bf:02:9e:c5:0b:ac:c9:03:
71:6f:81:a7:b0:33:ba:55:5a:23:40:db:58:98:d0:
d4:ca:1f:a9:f5:8c:02:38:e3:58:52:cb:33:23:5b:
31:64:a2:30:e8:5e:c8:a6:4b:5e:6f:04:e0:e1:90:
45:d9:23:6e:18:01:e4:d6:31:03:84:ab:18:43:77:
ca:97:15:06:67:29:4d:b5:68:5c:99:4e:6d:28:39:
fa:a9:37:06:84:1b:7e:77:59:9b:8e:e2:93:25:d7:
ac:8f:70:66:92:2e:38:ac:11:23:f3:67:89:0c:fd:
6c:b5:99:11:31:1b:51:2c:b2:f3:e9:cc:71:95:c1:
02:dd:36:b2:ca:31:d6:78:44:90:79:20:f1:8c:45:
37:c9:1c:8e:de:7c:d0:b5:92:86:48:a1:48:7a:da:
65:13:f5:e4:11:a2:0c:4a:f0:cc:68:a4:e8:cc:6e:
8b:85:39:25:59:6b:82:de:e5:64:31:d9:7a:cd:97:
63:3c:2a:26:83:47:14:96:e5:16:05:b3:c8:74:a1:
62:c3:24:6e:36:32:91:cc:96:8d:f6:39:20:60:c3:
cf:31:e9:09:56:c3:22:25:29:0e:71:f9:87:71:fd:
15:ae:23:65:f3:8b:e2:0c:0e:f3:c7:39:4e:dd:a7:
29:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:4D:FB:A4:6C:CA:A5:79:D0:B6:F8:D1:81:1C:EA:E1:58:77:20:66
X509v3 Authority Key Identifier:
keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:68:81:a2:e8:7e:bf:11:0c:fc:58:85:73:70:a9:3b:e8:74:
b4:c2:91:21:5c:b3:c5:e9:8f:2a:82:2e:27:4a:4c:73:8b:ba:
df:32:66:df:7a:ce:98:21:25:ba:74:29:56:bf:2c:e8:eb:96:
c2:80:8e:bc:80:92:e2:c8:bb:12:0f:fb:32:88:ae:d9:fe:b2:
3a:d7:1e:c3:19:1c:2f:3a:b9:a1:09:5f:b4:e7:16:ea:ea:05:
11:a9:b9:c9:bd:8d:80:ff:91:26:3e:25:09:34:3b:9f:ca:02:
8e:14:05:b7:1e:2c:41:d8:91:2a:36:21:2a:3c:cc:bf:46:69:
d3:f6:e4:b6:d7:ce:41:e8:97:0b:d8:93:56:29:2c:37:2c:75:
cb:a4:c7:27:4d:2b:10:07:c3:b8:d3:e6:bc:e8:8b:2e:69:16:
d5:6a:76:73:1e:17:28:c8:32:38:af:8c:f4:85:a4:1e:55:82:
35:f0:69:4d:86:0e:e7:c7:6d:45:14:6c:3d:3c:3e:54:b2:0a:
b8:12:51:10:a4:34:9a:82:d0:51:82:ad:a3:d9:c0:c6:a6:34:
52:a5:7a:d1:9d:60:7b:eb:a2:29:9f:8c:8c:dd:9e:8a:5c:79:
42:61:c9:ab:3c:20:e8:fc:09:cc:92:b9:7b:25:e4:6f:da:ee:
e9:2b:1d:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:10:03 2026 by rpki-client