$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: kgxxVudLfXi84CihzkyRWWXmhyYVdXpmfx14hfRLCM0= Subject key identifier: F7:21:DD:41:19:2A:0D:75:08:19:2E:7B:A1:8E:09:B3:76:12:5C:0C Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 6D32379321FF33AC451B2A46DB626F6CE44B4525 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 0125 Signing time: Sat 28 Feb 2026 13:51:48 +0000 Manifest this update: Sat 28 Feb 2026 13:46:48 +0000 Manifest next update: Tue 03 Mar 2026 17:28:48 +0000 Files and hashes: 1: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: 93YYxDDq8+f/Khx/2GnLN/kmjkNijzZ2VSNum/bWLqg=) 2: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: 5HetFGZszR8N+jVJsMmxP9KoRUdy7YyfVMX9PkmHTvY=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: THBM8LqDnCB9g6mrX4v3sCaW9RltHiaa0G5I3swxXAw=) 4: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: iuLwKTgIHR4llulxRbgz97uJsvndZ7B1svGIwMQFlsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:28:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:32:37:93:21:ff:33:ac:45:1b:2a:46:db:62:6f:6c:e4:4b:45:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Feb 28 13:46:48 2026 GMT Not After : Mar 3 17:28:48 2026 GMT Subject: CN=F721DD41192A0D7508192E7BA18E09B376125C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8e:63:71:1a:1d:76:1a:57:de:8d:4e:6b:19: 05:cf:a0:d3:83:2e:d6:19:14:75:4c:66:ff:74:7d: 2e:78:5a:11:3c:f4:6b:e3:0d:a8:99:67:fa:6e:fb: 47:9a:46:56:1a:e8:bf:76:f0:69:14:7f:53:29:c5: dd:d7:9e:6a:c9:bb:88:14:f4:0c:c4:1b:8f:ce:96: a0:88:6d:18:d3:12:6f:e3:dd:a1:3c:55:94:2a:dd: c1:7d:39:dd:36:01:d2:54:09:ad:fd:7b:2c:e5:f4: d4:04:26:22:5f:ec:b8:81:72:6b:72:c7:9a:0a:05: bd:c3:fa:9e:eb:a1:e8:0f:08:64:24:ba:d4:5f:ce: 46:fc:16:47:25:ad:35:e6:b9:4b:4b:35:fc:78:13: 97:50:9c:46:3d:15:5e:c3:ae:c7:3f:5d:ad:bc:28: 49:49:90:89:b4:e1:2a:da:39:4c:96:42:22:0e:39: d2:cc:11:c6:e4:89:92:a2:e9:3d:95:7e:ce:87:dc: a0:ca:cd:d7:00:ad:98:f8:c3:74:eb:0a:84:5c:a9: 2f:91:18:84:6c:1e:4a:46:7b:96:49:bd:22:6b:6d: 8e:93:d4:1c:27:dd:26:a0:e8:df:ec:c9:57:2c:ba: 0e:a3:02:35:1f:89:56:33:91:ce:f0:2b:6c:61:cb: c3:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:21:DD:41:19:2A:0D:75:08:19:2E:7B:A1:8E:09:B3:76:12:5C:0C X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:e2:45:cd:ba:70:f8:e9:32:77:97:3d:92:8b:84:41:f5:9c: f4:b4:42:95:cd:a1:80:f9:13:b2:43:39:32:f0:da:c4:64:7e: 31:cd:43:2a:bc:40:13:63:92:64:06:1e:f4:ef:6a:8a:2e:d7: 85:12:92:2a:7f:52:69:d2:15:e6:b3:b2:92:ce:33:19:b7:90: 60:52:ce:c1:2b:80:62:eb:50:af:8d:95:4e:c1:5f:29:d3:5e: ef:e4:41:fc:60:e4:4b:97:3a:88:8f:2c:d8:93:a8:f5:db:89: 32:8c:08:d5:47:52:80:17:f6:76:37:78:ba:74:16:3b:ac:7b: 02:54:36:3f:8b:37:75:56:be:4b:b5:c7:18:d5:50:66:b6:f9: 58:8e:e5:a0:e3:48:0b:70:6f:15:9f:59:8f:41:29:d2:55:51: 98:bd:50:6b:04:07:8b:2c:b4:78:a7:cc:93:79:b3:d6:17:76: 58:2a:1c:af:80:34:1a:17:ca:aa:ba:7d:fe:0f:a6:a4:89:d9: 02:38:77:e1:a4:6b:fd:0c:05:53:7d:b9:17:0c:23:01:98:6b: a7:61:04:f5:0e:83:5d:1e:78:50:c5:4b:d4:7d:28:a0:21:5d: f2:8d:f3:17:94:08:ac:d4:9f:18:6d:22:66:d9:27:37:f6:38: 6a:76:9e:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbTI3kyH/M6xFGypG22JvbORLRSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNjAyMjgxMzQ2NDhaFw0yNjAzMDMxNzI4NDhaMDMxMTAvBgNV BAMTKEY3MjFERDQxMTkyQTBENzUwODE5MkU3QkExOEUwOUIzNzYxMjVDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjmNxGh12GlfejU5rGQXPoNOD LtYZFHVMZv90fS54WhE89GvjDaiZZ/pu+0eaRlYa6L928GkUf1Mpxd3XnmrJu4gU 9AzEG4/OlqCIbRjTEm/j3aE8VZQq3cF9Od02AdJUCa39eyzl9NQEJiJf7LiBcmty x5oKBb3D+p7roegPCGQkutRfzkb8FkclrTXmuUtLNfx4E5dQnEY9FV7Drsc/Xa28 KElJkIm04SraOUyWQiIOOdLMEcbkiZKi6T2Vfs6H3KDKzdcArZj4w3TrCoRcqS+R GIRsHkpGe5ZJvSJrbY6T1Bwn3Sag6N/syVcsug6jAjUfiVYzkc7wK2xhy8NZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9yHdQRkqDXUIGS57oY4Js3YSXAwwHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB/iRc26cPjpMneXPZKLhEH1nPS0QpXNoYD5 E7JDOTLw2sRkfjHNQyq8QBNjkmQGHvTvaoou14USkip/UmnSFeazspLOMxm3kGBS zsErgGLrUK+NlU7BXynTXu/kQfxg5EuXOoiPLNiTqPXbiTKMCNVHUoAX9nY3eLp0 FjusewJUNj+LN3VWvku1xxjVUGa2+ViO5aDjSAtwbxWfWY9BKdJVUZi9UGsEB4ss tHinzJN5s9YXdlgqHK+ANBoXyqq6ff4PpqSJ2QI4d+Gka/0MBVN9uRcMIwGYa6dh BPUOg10eeFDFS9R9KKAhXfKN8xeUCKzUnxhtImbZJzf2OGp2nnM= -----END CERTIFICATE-----Generated at Mon Mar 2 15:09:57 2026 by rpki-client