$ rpki-client -vvf repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft File: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft (raw, json) Hash identifier: fBd7N2Qngyl6yboI6rZXKDGLUuR8QUeycfFZB+1yizs= Subject key identifier: 78:B4:9C:D7:01:04:82:F2:36:25:7C:29:1A:6B:7D:66:FF:B2:4C:03 Authority key identifier: 15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE Certificate issuer: /CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Certificate serial: 3172C725639AF4F2067329950BAE056C0174B3C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft Manifest number: 01D9 Signing time: Sun 01 Mar 2026 02:01:02 +0000 Manifest this update: Sun 01 Mar 2026 01:56:02 +0000 Manifest next update: Wed 04 Mar 2026 09:08:02 +0000 Files and hashes: 1: 151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl (hash: AzWW9q7Sigr7qYHP799psr/BCDr84L70X+z7oSjGGr4=) 2: 323430373a366634303a3a2f33322d3332203d3e203538383230.roa (hash: cY+LM6NiUoco74TgyZdBH2R3JLEsrVC/xUBsKMjQsNo=) 3: 323430373a366634303a3a2f33322d3438203d3e203538383230.roa (hash: V9LLfdPKT1tW+siU8HIJ1OXl3Y1dtcMCrhPo+V7abfM=) 4: 3130332e3136372e3133322e302f32332d3234203d3e20313339343536.roa (hash: JhgF1MSWlQxw36SgZrQfFzd6pgr9ZX5Xk0n79qTJS9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:72:c7:25:63:9a:f4:f2:06:73:29:95:0b:ae:05:6c:01:74:b3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=151AB754D8D5F171FE636D5DB7C89D082E1A90CE Validity Not Before: Mar 1 01:56:02 2026 GMT Not After : Mar 4 09:08:02 2026 GMT Subject: CN=78B49CD7010482F236257C291A6B7D66FFB24C03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:28:a1:8f:da:0a:e8:4e:29:87:f8:7c:54:86: 6f:2a:3a:ee:b3:94:7d:f8:1f:86:da:81:c8:fc:ab: bf:2e:46:5b:9d:a3:43:e5:8b:c5:5c:83:c2:09:d3: 20:46:41:35:3a:a1:c9:1f:d3:fe:3f:e7:1c:84:2e: 83:1b:e6:34:6c:19:23:45:da:43:a4:38:06:fe:f1: c8:13:08:1b:a1:95:3a:32:05:2b:05:8a:4f:13:bb: 53:1d:d7:51:2f:11:ed:9f:f2:e2:58:b8:68:b5:68: b1:c2:dc:b3:ef:1a:e8:98:9d:b8:53:ac:e3:6e:6e: 54:34:2e:dd:68:75:14:49:89:4c:68:20:1c:be:f3: 85:df:f2:01:20:6f:99:aa:3d:5e:3d:88:86:8e:f7: 22:a5:b4:81:24:0e:d1:3e:63:a3:37:03:2e:6c:b4: 84:e1:a9:37:57:c1:73:5c:bf:c0:47:98:98:48:43: f5:0e:68:11:96:5b:cf:5f:1e:44:d3:df:27:d0:94: 1b:58:13:23:36:bf:43:19:43:8e:72:29:69:29:a4: f3:1b:39:f5:1c:fe:09:3f:ba:62:d5:75:60:46:b4: 40:af:f4:b0:09:51:d4:e9:f4:2b:15:e7:3b:de:ef: 2e:50:71:c1:70:ce:d1:0f:f7:3b:61:d2:0a:2a:3b: 11:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:B4:9C:D7:01:04:82:F2:36:25:7C:29:1A:6B:7D:66:FF:B2:4C:03 X509v3 Authority Key Identifier: keyid:15:1A:B7:54:D8:D5:F1:71:FE:63:6D:5D:B7:C8:9D:08:2E:1A:90:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ed47202-de60-47f3-a2a7-608a74a1e874/0/151AB754D8D5F171FE636D5DB7C89D082E1A90CE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:62:6f:b0:ab:4d:c6:6d:0d:d7:5d:4d:ae:f2:d1:17:cc:6b: e6:c7:08:e0:1b:53:98:3e:7b:55:1c:e2:35:3e:4c:46:11:0d: c4:26:d7:17:1d:54:4c:15:a7:ab:65:ae:80:0f:6d:11:07:aa: 14:50:c4:72:b4:aa:cb:33:19:cf:fb:00:a3:f6:1c:98:03:87: 87:bd:78:ab:79:c2:1b:0e:09:98:11:5f:50:1e:39:4c:72:72: 64:36:42:1a:1e:e6:3e:c1:a9:9f:30:84:6a:d5:a7:f7:bb:8f: cf:62:79:46:2f:aa:52:e4:81:ed:70:0c:05:c7:d8:65:8e:69: fd:48:a9:87:4a:b0:13:13:fc:a8:71:ae:a3:91:fd:e2:c5:46: 88:be:ac:f4:86:72:29:6c:3f:a7:92:de:32:68:f4:61:3c:02: 84:03:c2:d1:3a:02:54:60:24:01:39:83:76:21:89:71:89:ce: f9:d9:be:59:42:4b:b5:71:56:c4:5d:7a:e8:57:72:fc:ed:e1: 11:61:09:a4:ee:e5:b9:ff:7a:1e:00:f7:28:4c:cb:2e:af:98: 63:a4:00:29:f3:d5:1f:a6:81:94:34:0f:0a:6b:2c:92:38:08: 55:b1:7e:b5:ff:03:da:a5:e5:ab:da:7a:5a:f3:d4:a6:05:12: 59:9c:00:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMXLHJWOa9PIGcymVC64FbAF0s8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgy RTFBOTBDRTAeFw0yNjAzMDEwMTU2MDJaFw0yNjAzMDQwOTA4MDJaMDMxMTAvBgNV BAMTKDc4QjQ5Q0Q3MDEwNDgyRjIzNjI1N0MyOTFBNkI3RDY2RkZCMjRDMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1KKGP2groTimH+HxUhm8qOu6z lH34H4bagcj8q78uRludo0Pli8Vcg8IJ0yBGQTU6ockf0/4/5xyELoMb5jRsGSNF 2kOkOAb+8cgTCBuhlToyBSsFik8Tu1Md11EvEe2f8uJYuGi1aLHC3LPvGuiYnbhT rONublQ0Lt1odRRJiUxoIBy+84Xf8gEgb5mqPV49iIaO9yKltIEkDtE+Y6M3Ay5s tIThqTdXwXNcv8BHmJhIQ/UOaBGWW89fHkTT3yfQlBtYEyM2v0MZQ45yKWkppPMb OfUc/gk/umLVdWBGtECv9LAJUdTp9CsV5zve7y5QccFwztEP9zth0goqOxGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeLSc1wEEgvI2JXwpGmt9Zv+yTAMwHwYDVR0j BBgwFoAUFRq3VNjV8XH+Y21dt8idCC4akM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZWQ0NzIwMi1kZTYwLTQ3ZjMtYTJhNy02MDhhNzRhMWU4NzQvMC8xNTFBQjc1NEQ4 RDVGMTcxRkU2MzZENURCN0M4OUQwODJFMUE5MENFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlEMDgyRTFB OTBDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmVkNDcyMDItZGU2MC00N2YzLWEy YTctNjA4YTc0YTFlODc0LzAvMTUxQUI3NTREOEQ1RjE3MUZFNjM2RDVEQjdDODlE MDgyRTFBOTBDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALdib7CrTcZtDdddTa7y0RfMa+bHCOAbU5g+ e1Uc4jU+TEYRDcQm1xcdVEwVp6tlroAPbREHqhRQxHK0qsszGc/7AKP2HJgDh4e9 eKt5whsOCZgRX1AeOUxycmQ2Qhoe5j7BqZ8whGrVp/e7j89ieUYvqlLkge1wDAXH 2GWOaf1IqYdKsBMT/KhxrqOR/eLFRoi+rPSGcilsP6eS3jJo9GE8AoQDwtE6AlRg JAE5g3YhiXGJzvnZvllCS7VxVsRdeuhXcvzt4RFhCaTu5bn/eh4A9yhMyy6vmGOk ACnz1R+mgZQ0DwprLJI4CFWxfrX/A9ql5avaelrz1KYFElmcANo= -----END CERTIFICATE-----Generated at Mon Mar 2 00:53:16 2026 by rpki-client