
$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
File: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft (raw, json)
Hash identifier: Ce6ItdPsJALgJL3v4s7hgl78ScDEVNHc5+FGp3ro5oA=
Subject key identifier: 2D:D2:1E:60:C9:85:CC:81:DD:65:8F:3A:23:7E:42:50:F3:EC:E7:61
Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Certificate issuer: /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
Certificate serial: 3883A7C1922423D7AC1DAAE57CB21111DA7EC55D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
Manifest number: 01BC
Signing time: Fri 27 Feb 2026 23:41:53 +0000
Manifest this update: Fri 27 Feb 2026 23:36:53 +0000
Manifest next update: Tue 03 Mar 2026 09:07:53 +0000
Files and hashes: 1: 15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl (hash: sGNwbhR5bjWq6mFf2EszJuD4cTWMtga/6mTDphH3G0c=)
2: 3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (hash: eebbaU9D24srRwLLDjhH3Gb9Ffk+0AMZdq/x3Fci1NA=)
3: 3130332e3230352e35362e302f32332d3233203d3e20313334363339.roa (hash: E4T0PDjwEBHhZ8rTA7NcZIYLEz1fBZeS9wMtn/x/Srs=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl
rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 09:07:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:83:a7:c1:92:24:23:d7:ac:1d:aa:e5:7c:b2:11:11:da:7e:c5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
Validity
Not Before: Feb 27 23:36:53 2026 GMT
Not After : Mar 3 09:07:53 2026 GMT
Subject: CN=2DD21E60C985CC81DD658F3A237E4250F3ECE761
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:4a:a0:d5:ff:38:68:b5:8a:2f:50:9c:e2:c3:
8a:c2:19:57:cd:29:2c:a4:fc:c1:17:b3:30:17:30:
74:6c:a4:29:3e:c5:c2:13:97:98:8e:1c:51:11:b5:
ac:06:b5:d6:0d:3b:6e:1e:ba:32:12:6e:2a:7c:47:
eb:13:14:c7:d7:fd:79:fc:3e:09:1d:af:79:86:f4:
1a:66:57:a5:fd:40:aa:10:b0:30:2d:e3:c0:79:53:
cb:b0:ae:dc:dc:95:0a:43:01:c7:57:ee:e0:b0:b8:
93:f9:e0:43:12:6c:46:64:72:ae:2c:61:86:97:1f:
36:7c:d5:8e:35:76:1d:8e:35:4d:b5:2e:29:96:84:
42:93:cd:39:41:b6:4d:7d:f1:f7:fd:9f:fe:59:dc:
d1:ea:e1:3f:52:ae:34:8f:29:cb:e4:55:fd:ca:e3:
61:a7:a0:58:77:30:81:37:cd:bc:ea:d5:b1:4e:03:
5d:4a:53:54:36:9e:e9:04:6c:0b:a1:5a:60:25:6f:
9d:91:bf:66:4a:62:f2:66:d6:56:8f:5b:09:d4:cb:
bc:96:e2:4a:95:75:d4:50:ae:d5:60:7a:99:1d:41:
b5:4d:d4:e9:bc:91:88:1c:b8:8d:12:06:88:00:7c:
20:ff:e0:f4:00:c4:09:10:f7:68:6d:2f:eb:ff:9f:
cf:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:D2:1E:60:C9:85:CC:81:DD:65:8F:3A:23:7E:42:50:F3:EC:E7:61
X509v3 Authority Key Identifier:
keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:de:c7:f6:e7:84:81:f6:99:3b:8a:2b:e9:14:f4:7a:16:3f:
af:75:ed:65:ce:f9:87:94:c6:15:3d:5a:59:48:93:60:4e:88:
13:74:2d:33:9b:05:b8:c1:6b:21:76:71:0a:2a:cb:55:fe:c6:
d8:33:8f:e7:0e:4f:48:f1:fb:83:d6:9d:48:cc:02:9a:cf:52:
47:68:12:cc:2c:4f:ea:dc:95:d2:32:47:bf:65:f0:0a:94:11:
02:5f:48:aa:45:4e:fa:44:62:02:bc:d4:8a:d4:4b:2b:19:3e:
40:e2:0e:9f:f2:c1:f8:2e:84:af:2c:36:87:f5:11:01:b9:54:
fb:50:21:30:6e:87:a2:75:c9:2e:c5:6a:cb:41:a8:8c:d3:ac:
cb:89:c0:6b:18:3c:87:8b:e2:6d:ab:58:94:8c:52:7f:46:2b:
75:79:72:28:e2:86:bd:bf:50:a8:10:e9:7a:15:65:2b:f2:b9:
60:0a:20:a7:5d:87:03:a3:a1:ef:3a:61:d7:31:94:18:f4:e5:
8d:db:cb:62:18:60:7d:76:99:51:c2:3c:15:04:6a:e0:cf:50:
0e:f2:ec:72:73:83:b3:31:c5:9e:73:97:be:15:fc:ac:5d:2b:
f6:c8:f0:4c:0e:fc:11:aa:4d:66:34:d2:ac:4e:0d:85:09:5d:
29:24:73:b4
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUOIOnwZIkI9esHarlfLIREdp+xV0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2
QUNEODcxNzAeFw0yNjAyMjcyMzM2NTNaFw0yNjAzMDMwOTA3NTNaMDMxMTAvBgNV
BAMTKDJERDIxRTYwQzk4NUNDODFERDY1OEYzQTIzN0U0MjUwRjNFQ0U3NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYSqDV/zhotYovUJziw4rCGVfN
KSyk/MEXszAXMHRspCk+xcITl5iOHFERtawGtdYNO24eujISbip8R+sTFMfX/Xn8
Pgkdr3mG9BpmV6X9QKoQsDAt48B5U8uwrtzclQpDAcdX7uCwuJP54EMSbEZkcq4s
YYaXHzZ81Y41dh2ONU21LimWhEKTzTlBtk198ff9n/5Z3NHq4T9SrjSPKcvkVf3K
42GnoFh3MIE3zbzq1bFOA11KU1Q2nukEbAuhWmAlb52Rv2ZKYvJm1laPWwnUy7yW
4kqVddRQrtVgepkdQbVN1Om8kYgcuI0SBogAfCD/4PQAxAkQ92htL+v/n8+jAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQULdIeYMmFzIHdZY86I35CUPPs52EwHwYDVR0j
BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF
NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE
ODcxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzMwYzhmODYtYmNkNS00YjdhLWE5
YjEtNDY1ZWYwYzlmODdhLzAvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNG
ODg2QUNEODcxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAI3ex/bnhIH2mTuKK+kU9HoWP6917WXO+YeU
xhU9WllIk2BOiBN0LTObBbjBayF2cQoqy1X+xtgzj+cOT0jx+4PWnUjMAprPUkdo
EswsT+rcldIyR79l8AqUEQJfSKpFTvpEYgK81IrUSysZPkDiDp/ywfguhK8sNof1
EQG5VPtQITBuh6J1yS7FastBqIzTrMuJwGsYPIeL4m2rWJSMUn9GK3V5cijihr2/
UKgQ6XoVZSvyuWAKIKddhwOjoe86YdcxlBj05Y3by2IYYH12mVHCPBUEauDPUA7y
7HJzg7MxxZ5zl74V/KxdK/bI8EwO/BGqTWY00qxODYUJXSkkc7Q=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:59:17 2026 by rpki-client