$ rpki-client -vvf repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft File: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft (raw, json) Hash identifier: 6WyxO5rbeEmmxMkp8CBPhSPmbYA/QvS8x85pZBgDMbw= Subject key identifier: 06:AD:4A:89:7E:BA:77:80:EE:45:CE:35:B1:E8:B7:F2:00:A2:F9:A6 Authority key identifier: 15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A Certificate issuer: /CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Certificate serial: 4ACBC72FCE6F75BDD8561951E1BB60FF5F0914EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft Manifest number: DB Signing time: Sat 28 Feb 2026 09:41:35 +0000 Manifest this update: Sat 28 Feb 2026 09:36:35 +0000 Manifest next update: Tue 03 Mar 2026 11:47:35 +0000 Files and hashes: 1: 3130332e37352e35322e302f32342d3234203d3e203436303233.roa (hash: jrvWdDxnPwyaZeoT4XE3YhrJWOxok241/P+m4LKDews=) 2: 3130332e37352e35342e302f32342d3234203d3e203436303233.roa (hash: itzoTElJfDBgRSPccVv4bZDERMP8o0I1zPcdqucno78=) 3: 3130332e37352e35322e302f32332d3234203d3e203436303233.roa (hash: T0MXrhbK6xjnBNdXhOMqxz1Yf/0TdUbbbVSQf9Bnwwk=) 4: 3130332e37352e35352e302f32342d3234203d3e203436303233.roa (hash: BOb9anLJdpDwlKD+KK0kxGNWqYzi/fXunRvflhVgFzc=) 5: 3130332e37352e35332e302f32342d3234203d3e203436303233.roa (hash: u/Rqg/DBL28ST9LkFtb756oaQy6poB4UdD9nfAM75kQ=) 6: 154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl (hash: KAjyp4ZJJLtOTv3iKtImhjic+x/k3moF6HFpHsAXBDg=) 7: 3130332e37352e35342e302f32332d3234203d3e203436303233.roa (hash: W72scnHA7zHvPLJz5BxsoijLHmQFgwe9kKm/vIV1T+I=) 8: 3130332e37352e35322e302f32322d3234203d3e203436303233.roa (hash: qyDdwv5epobK+GRznDOnZgdcRlyuSTrE0I2ZxAmsKz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:47:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:cb:c7:2f:ce:6f:75:bd:d8:56:19:51:e1:bb:60:ff:5f:09:14:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A Validity Not Before: Feb 28 09:36:35 2026 GMT Not After : Mar 3 11:47:35 2026 GMT Subject: CN=06AD4A897EBA7780EE45CE35B1E8B7F200A2F9A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:54:58:ab:72:5a:f2:6f:30:9e:99:7a:6d:00: ae:c6:bb:8f:96:f5:c3:07:71:9a:bf:df:72:bb:4c: ed:40:34:97:54:ba:a2:35:b7:83:08:d4:bb:a6:34: 51:69:c1:3c:90:40:ae:56:c4:06:ed:73:96:11:a5: 46:9c:6a:bb:c7:ce:85:2e:dc:7a:ef:3f:90:fb:6f: 5b:14:9b:5c:03:5c:5b:66:ac:59:90:1d:c5:24:0c: 2f:eb:91:e1:00:9d:08:bf:87:50:e0:9d:4d:f6:0f: 0a:2b:1f:c5:ff:9c:9f:fd:bd:5c:1a:0f:1d:a2:78: 25:e1:fe:b1:dd:95:3f:e9:5d:7e:47:d4:26:79:31: 3f:ec:f8:89:95:a3:82:a4:de:b3:87:6d:0f:9c:79: 70:ba:b0:0a:cf:91:a9:0e:b9:3c:9e:0b:0e:70:20: 2f:9d:64:3a:62:6a:88:46:d7:93:c1:dc:7c:30:96: 6d:5c:30:4d:1e:b6:64:fd:fb:98:01:2d:00:0f:49: 8f:8c:dd:bd:db:98:e2:ea:1a:07:95:9c:34:12:b3: 2c:80:1f:c4:3b:37:44:9d:52:00:62:eb:ff:12:4a: 4e:49:e7:47:a2:a6:e9:bd:78:34:fe:fc:1e:06:2a: 0f:a3:b3:09:83:21:ed:3f:f8:a0:d9:de:35:1e:76: 7d:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:AD:4A:89:7E:BA:77:80:EE:45:CE:35:B1:E8:B7:F2:00:A2:F9:A6 X509v3 Authority Key Identifier: keyid:15:4C:AF:94:6B:4F:EF:9C:2E:E0:FF:A2:45:BB:A4:29:C0:3B:4D:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6e504c5-d7ba-4fe9-9e56-792dc01a97cb/0/154CAF946B4FEF9C2EE0FFA245BBA429C03B4D2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:dc:77:83:31:b3:01:98:3f:9d:23:53:e8:63:75:3c:b3:af: 8d:7a:f0:7c:5d:bf:af:b3:ad:5b:e1:45:08:a0:df:c2:e5:c1: 91:d6:9b:9a:b9:9b:24:31:47:c9:79:a2:a9:e4:a0:e6:66:18: 09:26:7b:99:56:61:f2:59:82:85:62:f3:a0:06:59:b0:50:4f: 79:f4:c7:a6:d4:1b:4c:cb:8b:cc:d1:93:85:e5:b9:af:4f:70: 77:b8:62:ee:fc:b7:73:a3:22:16:ef:97:8e:0a:52:d3:5a:c2: 70:f6:4d:01:fd:61:47:01:9f:85:10:3f:3c:94:b6:dd:c2:2c: f7:41:a5:70:06:38:d0:6b:07:70:e8:8e:6a:ca:b6:a9:40:21: b5:df:71:09:e2:14:4b:49:b0:5e:26:c6:7b:1e:4f:20:78:a9: 14:9d:45:6e:84:6a:ab:59:a0:3a:d9:f1:b0:33:87:ba:1f:7a: d0:d2:e5:15:13:c4:7f:79:73:ae:df:ea:de:cf:56:52:2f:b1: 50:47:a1:79:ee:4a:35:b2:17:69:40:19:75:8d:31:7a:94:af: 59:b4:df:b7:17:6b:81:d4:fc:c2:25:4f:09:5b:1f:a5:36:59: 46:38:25:b9:b0:60:34:26:72:39:1f:ea:e4:2b:9f:d2:91:8e: 3b:68:6c:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSsvHL85vdb3YVhlR4btg/18JFOowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlD MDNCNEQyQTAeFw0yNjAyMjgwOTM2MzVaFw0yNjAzMDMxMTQ3MzVaMDMxMTAvBgNV BAMTKDA2QUQ0QTg5N0VCQTc3ODBFRTQ1Q0UzNUIxRThCN0YyMDBBMkY5QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVFirclrybzCemXptAK7Gu4+W 9cMHcZq/33K7TO1ANJdUuqI1t4MI1LumNFFpwTyQQK5WxAbtc5YRpUacarvHzoUu 3HrvP5D7b1sUm1wDXFtmrFmQHcUkDC/rkeEAnQi/h1DgnU32DworH8X/nJ/9vVwa Dx2ieCXh/rHdlT/pXX5H1CZ5MT/s+ImVo4Kk3rOHbQ+ceXC6sArPkakOuTyeCw5w IC+dZDpiaohG15PB3Hwwlm1cME0etmT9+5gBLQAPSY+M3b3bmOLqGgeVnDQSsyyA H8Q7N0SdUgBi6/8SSk5J50eipum9eDT+/B4GKg+jswmDIe0/+KDZ3jUedn2PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBq1KiX66d4DuRc41sei38gCi+aYwHwYDVR0j BBgwFoAUFUyvlGtP75wu4P+iRbukKcA7TSowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NmU1MDRjNS1kN2JhLTRmZTktOWU1Ni03OTJkYzAxYTk3Y2IvMC8xNTRDQUY5NDZC NEZFRjlDMkVFMEZGQTI0NUJCQTQyOUMwM0I0RDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0MjlDMDNC NEQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjZlNTA0YzUtZDdiYS00ZmU5LTll NTYtNzkyZGMwMWE5N2NiLzAvMTU0Q0FGOTQ2QjRGRUY5QzJFRTBGRkEyNDVCQkE0 MjlDMDNCNEQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKzcd4MxswGYP50jU+hjdTyzr4168Hxdv6+z rVvhRQig38LlwZHWm5q5myQxR8l5oqnkoOZmGAkme5lWYfJZgoVi86AGWbBQT3n0 x6bUG0zLi8zRk4Xlua9PcHe4Yu78t3OjIhbvl44KUtNawnD2TQH9YUcBn4UQPzyU tt3CLPdBpXAGONBrB3DojmrKtqlAIbXfcQniFEtJsF4mxnseTyB4qRSdRW6EaqtZ oDrZ8bAzh7ofetDS5RUTxH95c67f6t7PVlIvsVBHoXnuSjWyF2lAGXWNMXqUr1m0 37cXa4HU/MIlTwlbH6U2WUY4JbmwYDQmcjkf6uQrn9KRjjtobLs= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:28 2026 by rpki-client