
$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json)
Hash identifier: uM9xk9XijdqFFEqaSngouf3QhREyzz+rz07xdPE3uTs=
Subject key identifier: 7B:F7:41:14:3C:74:78:E3:96:28:85:C2:4F:5B:F4:3D:D8:20:45:9E
Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20
Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20
Certificate serial: 2B02F00D0BB4D7D0326757F7545DF6A0AA533D44
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
Manifest number: 0262
Signing time: Sat 28 Feb 2026 21:11:09 +0000
Manifest this update: Sat 28 Feb 2026 21:06:09 +0000
Manifest next update: Wed 04 Mar 2026 00:11:09 +0000
Files and hashes: 1: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: KE1lMtasfHajvAT4hQBitWQJIMm3oss3cXTQ3t2jS64=)
2: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: oNnW70Ko3SQ0LXXxQq/BVZrXrqrfYxrMZpHEFhBhbyU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl
rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 00:11:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2b:02:f0:0d:0b:b4:d7:d0:32:67:57:f7:54:5d:f6:a0:aa:53:3d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=528A271B82B6185862B06F250499140113F6FE20
Validity
Not Before: Feb 28 21:06:09 2026 GMT
Not After : Mar 4 00:11:09 2026 GMT
Subject: CN=7BF741143C7478E3962885C24F5BF43DD820459E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:72:f1:54:53:d5:f7:4e:0b:bd:57:3a:f5:22:
9c:74:82:b9:97:25:b2:2d:45:01:63:a9:67:24:59:
62:73:31:34:e7:5b:3d:85:af:9a:12:80:dd:53:ed:
cd:ab:e2:0f:27:23:ae:8c:f5:48:a2:bd:57:a5:4e:
08:a5:88:71:4e:cd:cc:80:0f:95:b0:b1:5c:d1:3a:
aa:f5:fd:92:28:3d:0a:8e:d3:a7:e2:86:a0:4d:99:
36:0d:ab:fb:5d:91:d1:05:e7:1e:a9:24:4c:03:e8:
de:d3:0d:cd:2e:3e:08:74:d5:82:b3:f4:95:d3:72:
8b:b4:01:1c:34:64:71:b4:17:ac:73:8f:90:4c:99:
43:1d:25:b2:70:96:1a:8b:35:f1:31:13:50:bf:68:
e7:ff:b4:3a:39:77:52:c4:ea:52:10:3e:f8:d6:4b:
60:fc:16:78:b1:33:e3:0a:2b:64:b9:e2:a5:50:d5:
3f:a3:bb:46:a3:9c:18:09:ce:0e:4f:b1:11:68:49:
9c:86:df:09:58:c6:e1:ff:c6:a0:d0:b8:b3:e7:db:
71:3c:23:9f:82:bd:f7:af:bd:50:dc:f3:ae:af:ac:
46:ba:27:23:9b:05:18:ba:a2:7d:d8:3a:4c:76:5a:
38:de:5c:97:0b:89:1f:27:e2:e5:3d:4c:78:50:bc:
c7:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:F7:41:14:3C:74:78:E3:96:28:85:C2:4F:5B:F4:3D:D8:20:45:9E
X509v3 Authority Key Identifier:
keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:00:15:23:ba:37:03:a1:15:ad:e6:81:23:6b:c8:0f:30:bd:
6a:56:55:6d:17:3f:5a:e9:61:90:f7:13:02:b6:fd:a5:49:a1:
a1:1c:11:d5:74:1f:88:d9:bc:49:24:4b:2c:d8:43:e8:87:65:
93:e5:b4:2a:19:12:34:0d:15:25:b3:13:34:7c:64:f5:4f:05:
61:14:7b:ef:f2:df:42:02:81:db:ac:5a:91:73:64:db:a8:45:
b2:70:d3:9c:81:11:eb:d3:da:02:64:ce:96:0e:cb:f2:4e:96:
64:50:0f:f1:38:08:d9:44:d0:81:be:8c:ea:29:8d:01:41:51:
29:8b:03:bc:33:95:ed:52:8a:32:de:41:05:5a:9b:5c:22:8b:
53:93:c4:a3:a4:ba:fd:16:18:bf:8b:22:ba:94:6f:4d:42:45:
53:2b:6c:0a:e8:bc:ec:03:34:cd:63:b0:55:00:ae:35:73:a8:
05:21:af:e9:f8:1f:7a:bc:6f:9f:5a:b0:08:a1:6b:03:2a:80:
f1:0f:b5:4d:55:dd:97:0e:ea:d6:ab:10:e9:64:d3:3f:f0:ad:
53:49:ff:33:98:a9:ad:c9:3f:c6:97:27:78:89:20:53:86:bd:
99:fe:df:ff:17:2c:07:8c:af:6f:8b:43:1a:5c:5d:c5:a0:e8:
73:2e:8e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:49:59 2026 by rpki-client