$ rpki-client -vvf repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft File: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft (raw, json) Hash identifier: uwo/pH8i9HHCzKSZVpTXla5hwXYhHYpmTCyhi8I3CM0= Subject key identifier: 99:1E:3A:32:BA:20:70:ED:46:A5:6A:7E:B9:35:D1:77:A0:BC:2B:1E Authority key identifier: 25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 Certificate issuer: /CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Certificate serial: 4E6216165A3B9CC3819110A835E36158A65C477E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft Manifest number: 013A Signing time: Thu 16 Apr 2026 22:41:49 +0000 Manifest this update: Thu 16 Apr 2026 22:36:49 +0000 Manifest next update: Sun 19 Apr 2026 23:26:49 +0000 Files and hashes: 1: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: bSChIDo0CglmTqFSV6p630tLNxr15ZtjkZahOcEGfmY=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: +OevkhB7r44OnQm82LNlP8LRDK9Y7/yxi7S+eG9f5A4=) 3: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: 58riNyfqbPP7fKRqZA+ufvmL363qEOUl7N/mxlGGnOA=) 4: 2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl (hash: kCMb7nWdBRorwSjTa0Tf6sjRNu8HpomWvLuhlTgq3lw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:15:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:62:16:16:5a:3b:9c:c3:81:91:10:a8:35:e3:61:58:a6:5c:47:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2 Validity Not Before: Apr 16 22:36:49 2026 GMT Not After : Apr 19 23:26:49 2026 GMT Subject: CN=991E3A32BA2070ED46A56A7EB935D177A0BC2B1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:5d:ee:7c:fc:48:57:75:8e:7b:70:cf:9d:f7: 9c:1c:eb:34:ba:1f:1d:3a:47:08:51:0d:3c:92:0a: 1f:6f:30:29:1c:5f:38:cf:4c:31:57:de:ab:e3:90: 55:7d:2f:51:02:85:f5:56:fe:29:d9:e6:34:ae:57: 6d:0c:57:17:46:70:67:71:32:f9:86:6d:36:8c:da: 92:98:ce:ca:fe:1e:61:9e:f9:74:82:4b:23:41:d6: 5a:b3:5d:cf:69:68:d1:89:c5:bf:c5:6a:fa:d4:2d: 7d:16:df:20:b9:72:5e:0b:6c:bb:c8:61:99:74:c7: ad:43:57:42:21:32:6d:94:45:cd:1d:d5:f3:a8:e2: 8c:1c:24:8e:41:99:21:ee:c7:f0:16:aa:38:0a:59: ea:37:35:95:c7:b6:d2:74:de:8b:a9:d4:6e:99:07: 55:34:8f:a1:cb:44:ae:d2:bd:a1:97:71:b8:f6:80: 33:f7:ff:14:14:d8:dc:45:2c:de:cf:3f:f6:f4:2d: 33:e0:64:bf:3a:e7:d2:b3:dd:74:c3:88:50:ef:8f: 02:3a:27:73:1c:b0:c6:82:98:ad:86:af:05:fc:5d: fd:63:42:66:74:7f:a9:4c:62:ee:6a:c5:b6:18:44: 47:c3:74:2a:ff:ac:fc:09:09:9c:c1:a5:c2:6e:e4: 05:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1E:3A:32:BA:20:70:ED:46:A5:6A:7E:B9:35:D1:77:A0:BC:2B:1E X509v3 Authority Key Identifier: keyid:25:15:D4:BF:9E:F7:AA:E5:AE:BC:22:F5:2C:17:FF:17:DC:D6:FD:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ba098f00-a0a0-4b5c-9e83-606737128cb1/0/2515D4BF9EF7AAE5AEBC22F52C17FF17DCD6FDC2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:96:8a:63:2f:42:76:bd:bb:6c:36:51:5c:da:7c:e1:c6:37: 34:be:e0:d3:5d:94:d7:0e:0a:bb:66:3e:fe:a9:ef:fc:9f:52: d1:4f:6a:57:6b:86:c1:df:e6:c6:70:25:e9:e1:61:df:72:48: b9:d8:9c:52:34:ba:d5:06:65:53:b1:c4:f5:37:af:85:3d:92: e8:23:1d:ff:a2:a7:4a:5c:c1:34:b8:89:1d:80:5e:a3:4c:c2: 41:8d:83:1d:61:0c:2b:c6:83:7e:1f:f0:a9:00:05:67:7a:10: 78:71:be:ba:b3:11:c8:6f:68:fa:d8:83:01:68:c4:10:de:ef: b8:22:bb:09:bd:70:37:d5:03:96:ce:4c:a4:be:43:fb:e2:8e: 93:f4:61:de:fd:d0:d7:26:9b:96:c3:78:d0:42:27:9a:fd:d4: 81:97:03:bd:80:7d:64:a6:9a:39:e7:e9:93:13:d3:11:a5:0b: 9b:28:d4:f5:b8:5d:5e:cf:4b:dc:19:90:21:99:36:74:c1:13: 1e:fb:49:e6:1e:f0:da:7a:21:d3:0e:56:71:0e:0d:e1:ba:98: 2c:2a:d6:b0:3e:6c:15:03:17:ce:1c:e0:0b:7e:14:0a:80:96: 63:1d:fb:b0:7f:29:ba:2c:c2:a8:23:c0:d3:e9:eb:5b:ab:82: 8d:a8:94:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTmIWFlo7nMOBkRCoNeNhWKZcR34wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdE Q0Q2RkRDMjAeFw0yNjA0MTYyMjM2NDlaFw0yNjA0MTkyMzI2NDlaMDMxMTAvBgNV BAMTKDk5MUUzQTMyQkEyMDcwRUQ0NkE1NkE3RUI5MzVEMTc3QTBCQzJCMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOXe58/EhXdY57cM+d95wc6zS6 Hx06RwhRDTySCh9vMCkcXzjPTDFX3qvjkFV9L1EChfVW/inZ5jSuV20MVxdGcGdx MvmGbTaM2pKYzsr+HmGe+XSCSyNB1lqzXc9paNGJxb/FavrULX0W3yC5cl4LbLvI YZl0x61DV0IhMm2URc0d1fOo4owcJI5BmSHux/AWqjgKWeo3NZXHttJ03oup1G6Z B1U0j6HLRK7SvaGXcbj2gDP3/xQU2NxFLN7PP/b0LTPgZL8659Kz3XTDiFDvjwI6 J3McsMaCmK2GrwX8Xf1jQmZ0f6lMYu5qxbYYREfDdCr/rPwJCZzBpcJu5AVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmR46MrogcO1GpWp+uTXRd6C8Kx4wHwYDVR0j BBgwFoAUJRXUv573quWuvCL1LBf/F9zW/cIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YTA5OGYwMC1hMGEwLTRiNWMtOWU4My02MDY3MzcxMjhjYjEvMC8yNTE1RDRCRjlF RjdBQUU1QUVCQzIyRjUyQzE3RkYxN0RDRDZGREMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZGMTdEQ0Q2 RkRDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmEwOThmMDAtYTBhMC00YjVjLTll ODMtNjA2NzM3MTI4Y2IxLzAvMjUxNUQ0QkY5RUY3QUFFNUFFQkMyMkY1MkMxN0ZG MTdEQ0Q2RkRDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6WimMvQna9u2w2UVzafOHGNzS+4NNdlNcO CrtmPv6p7/yfUtFPaldrhsHf5sZwJenhYd9ySLnYnFI0utUGZVOxxPU3r4U9kugj Hf+ip0pcwTS4iR2AXqNMwkGNgx1hDCvGg34f8KkABWd6EHhxvrqzEchvaPrYgwFo xBDe77giuwm9cDfVA5bOTKS+Q/vijpP0Yd790Ncmm5bDeNBCJ5r91IGXA72AfWSm mjnn6ZMT0xGlC5so1PW4XV7PS9wZkCGZNnTBEx77SeYe8Np6IdMOVnEODeG6mCwq 1rA+bBUDF84c4At+FAqAlmMd+7B/KboswqgjwNPp61urgo2olH4= -----END CERTIFICATE-----Generated at Fri Apr 17 11:07:52 2026 by rpki-client