$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft File: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft (raw, json) Hash identifier: Lrl1/lkc4CjB5GS5+WSZUIVOPVdFQdkf/Epr8JaTroA= Subject key identifier: C5:24:A3:2D:D0:8E:3F:36:76:0F:4D:B9:87:06:45:40:6E:7A:B3:1F Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 Certificate issuer: /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Certificate serial: 17ADB0D4A6F44A8C6D6419AB50B98C5CDAD571E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft Manifest number: 0551 Signing time: Sat 18 Apr 2026 12:31:18 +0000 Manifest this update: Sat 18 Apr 2026 12:26:18 +0000 Manifest next update: Tue 21 Apr 2026 19:30:18 +0000 Files and hashes: 1: 515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl (hash: sgrT4TcRjw25/roaDYrT3v0NraJf3tCIIvxUFcTLCeQ=) 2: 3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (hash: cS4xFcJiF1zKuj0BZNhYothbCLKeaVj2VbTjqbuS5CU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 19:30:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ad:b0:d4:a6:f4:4a:8c:6d:64:19:ab:50:b9:8c:5c:da:d5:71:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1 Validity Not Before: Apr 18 12:26:18 2026 GMT Not After : Apr 21 19:30:18 2026 GMT Subject: CN=C524A32DD08E3F36760F4DB9870645406E7AB31F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f1:de:b5:4e:04:f8:5a:35:61:05:cb:30:b3: 5e:fa:c7:78:25:78:40:8e:11:6f:c9:31:92:2a:9d: 30:e2:ef:a5:d8:79:8b:62:41:31:c6:58:2e:27:b0: 92:4a:4f:47:3d:1c:21:7c:84:de:6a:30:ea:ac:10: 8b:e6:45:f4:fe:06:0c:d6:da:81:ed:11:54:dd:6e: bb:57:7b:af:a3:2d:7f:ab:65:90:0c:2a:a1:5c:af: db:d3:7b:90:f3:44:11:9e:95:23:f2:6c:ae:ed:36: b8:dc:fc:e5:9c:51:c5:83:36:92:8f:fe:4f:ff:9a: 46:9a:85:18:ad:d8:84:26:d4:4c:9f:97:5d:c0:5c: 5f:8a:2b:ad:d4:2e:be:81:d1:55:cd:35:13:b9:af: da:0f:5e:98:4b:7a:32:3c:75:7f:d7:d0:0b:de:7f: 83:5a:18:5d:e0:a4:61:96:50:01:ee:39:ec:41:2c: 05:6f:24:de:02:ca:86:31:b3:6d:b6:60:0b:99:a7: 02:0b:a7:c8:ed:78:09:f6:01:00:6d:00:cf:ff:69: 4f:94:ef:24:ca:93:f7:dc:b0:8b:b1:2c:ba:4f:8b: 07:68:de:25:49:b8:57:47:9a:e9:d6:4c:79:93:6c: 61:64:25:2b:a3:ae:09:8c:a7:47:bf:63:e2:d7:36: f9:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:24:A3:2D:D0:8E:3F:36:76:0F:4D:B9:87:06:45:40:6E:7A:B3:1F X509v3 Authority Key Identifier: keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:63:31:8e:b7:75:79:55:c9:76:90:ac:60:56:08:3f:ae:2f: d7:aa:dd:a7:e6:8b:f5:09:97:cd:71:6e:02:1c:ad:89:07:a7: 2d:1f:3e:41:9f:e1:5a:1d:bc:36:7c:f0:0c:36:6b:41:b9:99: 41:02:f6:e2:6d:e7:3d:4e:81:ac:cc:14:7e:01:70:a5:53:7f: e0:34:fe:16:a5:c5:18:a4:9d:f4:af:5d:59:58:bf:13:51:91: a2:6d:7d:24:6e:fa:f2:65:8f:ed:ce:77:a4:aa:ab:a2:e8:97: e4:67:df:f5:3a:80:ab:83:ff:a9:45:df:b2:97:b2:49:c8:da: 36:3c:04:cf:c2:0d:de:34:7a:b8:50:81:45:9f:4b:14:03:a8: 6b:5c:38:48:d0:ba:02:64:6c:0a:48:fc:99:9a:f3:2f:40:a0: ae:02:2f:dc:43:e2:21:7b:70:16:ae:29:7b:ae:13:4f:20:3c: 73:ad:11:f4:e9:76:71:00:fb:a6:b2:f3:4a:ad:6d:f8:4e:2f: 8d:3d:9e:7e:79:65:93:10:a2:18:8e:31:25:ee:31:25:08:7d: 8a:54:79:e4:2b:62:6c:25:32:5d:1c:18:b2:98:85:69:40:3a: f3:fb:e5:82:ba:62:a7:4a:bf:99:e3:bf:ee:d7:73:00:42:8c: d8:62:8d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF62w1Kb0SoxtZBmrULmMXNrVceUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC NkFGNzNGMTAeFw0yNjA0MTgxMjI2MThaFw0yNjA0MjExOTMwMThaMDMxMTAvBgNV BAMTKEM1MjRBMzJERDA4RTNGMzY3NjBGNERCOTg3MDY0NTQwNkU3QUIzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ8d61TgT4WjVhBcsws176x3gl eECOEW/JMZIqnTDi76XYeYtiQTHGWC4nsJJKT0c9HCF8hN5qMOqsEIvmRfT+BgzW 2oHtEVTdbrtXe6+jLX+rZZAMKqFcr9vTe5DzRBGelSPybK7tNrjc/OWcUcWDNpKP /k//mkaahRit2IQm1Eyfl13AXF+KK63ULr6B0VXNNRO5r9oPXphLejI8dX/X0Ave f4NaGF3gpGGWUAHuOexBLAVvJN4CyoYxs222YAuZpwILp8jteAn2AQBtAM//aU+U 7yTKk/fcsIuxLLpPiwdo3iVJuFdHmunWTHmTbGFkJSujrgmMp0e/Y+LXNvnxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxSSjLdCOPzZ2D025hwZFQG56sx8wHwYDVR0j BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG NzNGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGZkZmYzOTAtMTY5NS00NGVlLTg4 ZTUtNDJlZDEyODE2YjAwLzAvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3 QTBCNkFGNzNGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAdjMY63dXlVyXaQrGBWCD+uL9eq3afmi/UJ l81xbgIcrYkHpy0fPkGf4VodvDZ88Aw2a0G5mUEC9uJt5z1OgazMFH4BcKVTf+A0 /halxRiknfSvXVlYvxNRkaJtfSRu+vJlj+3Od6Sqq6Lol+Rn3/U6gKuD/6lF37KX sknI2jY8BM/CDd40erhQgUWfSxQDqGtcOEjQugJkbApI/Jma8y9AoK4CL9xD4iF7 cBauKXuuE08gPHOtEfTpdnEA+6ay80qtbfhOL409nn55ZZMQohiOMSXuMSUIfYpU eeQrYmwlMl0cGLKYhWlAOvP75YK6YqdKv5njv+7XcwBCjNhijVM= -----END CERTIFICATE-----Generated at Sun Apr 19 13:43:54 2026 by rpki-client