$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: NUSJod0UPkN+WyZCE62/CkNbLLAdbl6ks2wdsqhdB3s= Subject key identifier: 96:04:C8:5E:C8:97:9F:89:86:94:A8:9C:9E:73:DC:AB:15:60:4E:11 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 0AEDAD27E396DC3D7414B259A769DDFDC896F3CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01EE Signing time: Fri 17 Apr 2026 20:51:05 +0000 Manifest this update: Fri 17 Apr 2026 20:46:05 +0000 Manifest next update: Mon 20 Apr 2026 21:15:05 +0000 Files and hashes: 1: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: cY+LM6NiUoco74TgyZdBH2R3JLEsrVC/xUBsKMjQsNo=) 2: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: W1FUfSF01V6/TRH8MryolmBrFSzHOLIhyZTxsfRbAdI=) 3: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) 4: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: V9LLfdPKT1tW+siU8HIJ1OXl3Y1dtcMCrhPo+V7abfM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 21:15:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ed:ad:27:e3:96:dc:3d:74:14:b2:59:a7:69:dd:fd:c8:96:f3:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Apr 17 20:46:05 2026 GMT Not After : Apr 20 21:15:05 2026 GMT Subject: CN=9604C85EC8979F898694A89C9E73DCAB15604E11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:80:a4:20:4b:28:52:e7:0b:42:e8:ce:ee: 2b:95:cd:70:43:a7:53:09:58:62:79:02:42:e7:0b: e7:68:2c:13:1a:a7:22:98:89:7d:d2:da:22:ac:45: 91:25:38:29:0e:46:19:06:c7:74:16:2b:f5:da:a7: c2:98:44:60:90:46:c6:b4:10:74:8f:5a:84:b5:26: aa:95:4e:4f:2c:2e:8a:1e:e3:eb:5b:ea:8b:e7:a8: 84:75:1a:40:26:a9:d5:f4:17:14:85:17:21:cc:c6: 2c:fa:8a:a0:7c:92:41:20:d2:f7:93:32:34:d0:63: a3:a1:81:7a:5e:db:ee:8f:04:6e:19:fb:63:0b:01: 64:f4:e0:2c:bd:3a:18:6e:f5:2c:62:8e:27:ca:49: 2d:35:53:54:cb:e1:66:38:ae:d7:54:7e:5a:30:40: 15:fe:4f:c6:fe:16:99:c4:5f:61:69:0e:23:74:90: 4e:2a:48:30:95:b9:11:77:dd:cf:22:7d:83:78:27: 4c:61:f9:74:8e:b8:c0:11:3f:65:93:f3:d9:0c:54: 3e:3d:1e:2c:92:7a:93:8b:0e:0b:cf:1b:64:fa:47: 55:77:d9:d8:ae:ac:86:0c:74:5c:26:f1:1f:fa:26: 66:13:d7:65:6f:17:97:59:a3:dd:2f:0b:2a:95:10: f6:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:04:C8:5E:C8:97:9F:89:86:94:A8:9C:9E:73:DC:AB:15:60:4E:11 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7d:fb:bd:ef:81:eb:03:99:42:27:97:a4:59:75:e0:18:d8: 59:2b:7f:87:27:f6:b7:0a:3f:23:d3:9e:4b:d9:9c:91:87:99: 6d:3b:1b:37:a3:ed:98:69:52:73:0d:35:42:c7:ba:fd:31:ad: c1:6c:06:94:e1:2f:8f:c4:b0:65:90:56:5a:62:33:59:d8:ec: c7:c6:42:59:a3:e8:42:da:0d:ca:b8:3d:2a:00:6d:a8:48:a8: d9:48:5c:1a:93:9d:44:00:f6:b8:b0:93:9e:df:5c:88:d1:8a: 92:6c:a4:17:b8:63:a4:ab:98:03:1c:8a:b5:9b:2c:1e:68:e9: 52:b2:32:20:c6:63:07:bc:f4:6c:ac:5c:ae:cf:bf:e5:4b:f3: ff:13:fc:34:d7:e5:15:9e:dd:bd:97:bc:d8:8d:5c:a1:78:b7: 73:23:51:ec:df:e4:0b:5f:3e:cc:18:a3:8b:3a:52:85:d7:0d: 26:cc:7e:cd:a5:69:c8:68:d4:e2:89:6c:77:17:48:fe:32:2e: 7b:9a:2c:ce:5c:b3:0d:2c:25:12:b6:06:61:8d:39:de:32:ed: 9d:ab:79:f4:ee:1b:95:dd:ab:f6:74:e2:ae:71:fd:32:b5:16: 3d:17:0e:46:e4:af:5e:83:d7:9c:02:27:1c:68:8a:1d:31:80: bf:5d:c2:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCu2tJ+OW3D10FLJZp2nd/ciW888wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNjA0MTcyMDQ2MDVaFw0yNjA0MjAyMTE1MDVaMDMxMTAvBgNV BAMTKDk2MDRDODVFQzg5NzlGODk4Njk0QTg5QzlFNzNEQ0FCMTU2MDRFMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzYCkIEsoUucLQujO7iuVzXBD p1MJWGJ5AkLnC+doLBMapyKYiX3S2iKsRZElOCkORhkGx3QWK/Xap8KYRGCQRsa0 EHSPWoS1JqqVTk8sLooe4+tb6ovnqIR1GkAmqdX0FxSFFyHMxiz6iqB8kkEg0veT MjTQY6OhgXpe2+6PBG4Z+2MLAWT04Cy9Ohhu9SxijifKSS01U1TL4WY4rtdUflow QBX+T8b+FpnEX2FpDiN0kE4qSDCVuRF33c8ifYN4J0xh+XSOuMARP2WT89kMVD49 HiySepOLDgvPG2T6R1V32diurIYMdFwm8R/6JmYT12VvF5dZo90vCyqVEPaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlgTIXsiXn4mGlKicnnPcqxVgThEwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl9+73vgesDmUInl6RZdeAY2Fkrf4cn9rcK PyPTnkvZnJGHmW07Gzej7ZhpUnMNNULHuv0xrcFsBpThL4/EsGWQVlpiM1nY7MfG Qlmj6ELaDcq4PSoAbahIqNlIXBqTnUQA9riwk57fXIjRipJspBe4Y6SrmAMcirWb LB5o6VKyMiDGYwe89GysXK7Pv+VL8/8T/DTX5RWe3b2XvNiNXKF4t3MjUezf5Atf PswYo4s6UoXXDSbMfs2lacho1OKJbHcXSP4yLnuaLM5csw0sJRK2BmGNOd4y7Z2r efTuG5Xdq/Z04q5x/TK1Fj0XDkbkr16D15wCJxxoih0xgL9dwjc= -----END CERTIFICATE-----Generated at Sat Apr 18 01:23:54 2026 by rpki-client