
$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft (raw, json)
Hash identifier: g9I/E7t7rmc0zqn2q/K4mhOLnESvpEH7lHSPbrpoSx8=
Subject key identifier: 1C:80:57:89:35:9D:CD:BB:BB:C0:E4:F7:55:88:8D:4B:C9:63:22:5A
Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92
Certificate issuer: /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
Certificate serial: 21FEF3C8BEB14A1810A57412F14ACC9988F935DB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
Manifest number: 02F2
Signing time: Sat 28 Feb 2026 13:01:52 +0000
Manifest this update: Sat 28 Feb 2026 12:56:52 +0000
Manifest next update: Tue 03 Mar 2026 14:18:52 +0000
Files and hashes: 1: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: BOXleI82qkqA+XBkcaVMr9vBsmwOlXi/gSfu64m+8zY=)
2: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: 00o5kwNuKSJ5PpNjUI86eyQMeGSOAboXshPfZ04uCOQ=)
3: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl (hash: HmzvIUe0Db2jfLC7x2V25njlWEIy8mI1ZJPL6X5AOEU=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl
rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 03 Mar 2026 14:18:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:fe:f3:c8:be:b1:4a:18:10:a5:74:12:f1:4a:cc:99:88:f9:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592
Validity
Not Before: Feb 28 12:56:52 2026 GMT
Not After : Mar 3 14:18:52 2026 GMT
Subject: CN=1C805789359DCDBBBBC0E4F755888D4BC963225A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:85:ca:dd:5f:d2:57:51:1a:dc:f2:8d:15:4e:
a1:40:75:57:7a:04:b5:76:3b:8c:08:6e:ba:b4:c4:
51:6a:aa:d1:af:3d:d6:c5:75:ab:c6:98:41:72:25:
3f:d1:6e:a0:43:f4:fe:2a:29:72:5e:a3:c2:ef:3f:
f1:6b:54:8e:76:74:01:c4:52:7c:68:f6:fe:4c:99:
a2:af:d2:8e:9d:ec:ac:13:8b:01:e5:75:a4:f9:7f:
b5:c3:8f:a9:56:12:4d:09:fa:15:5c:af:64:dc:27:
bb:0d:68:b5:0d:73:0c:4c:83:9b:91:83:fc:fd:02:
1d:07:cc:c6:56:92:f6:75:c4:bf:b6:96:49:02:4b:
27:7f:d1:16:f9:fd:6f:74:a6:36:2e:5c:18:1f:59:
ae:54:d5:bd:67:4b:09:cd:c8:53:64:ad:92:9b:ba:
a8:57:fc:84:0a:a7:fe:aa:4b:9f:3f:e2:32:16:cf:
71:26:5a:a7:3a:9f:c7:a0:a6:e0:c3:64:de:9e:f7:
34:cf:22:91:0b:b0:ae:71:9f:a9:a3:24:51:6c:2d:
26:46:7c:49:2f:2a:08:8f:82:4d:4d:d2:1a:59:5a:
f4:24:3d:3e:a6:b4:fb:57:80:45:87:29:f8:93:70:
19:da:cf:ae:ac:9e:f6:d9:69:e6:1c:6c:9d:a6:08:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:80:57:89:35:9D:CD:BB:BB:C0:E4:F7:55:88:8D:4B:C9:63:22:5A
X509v3 Authority Key Identifier:
keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:5b:3d:5b:8e:4b:0a:92:58:d9:08:e7:21:27:80:bb:b4:c1:
f5:d7:f6:c6:c3:81:c5:c8:56:ed:fe:6d:79:1a:ea:f6:89:7f:
35:e8:c5:5c:6e:32:dc:a1:d3:23:f7:bf:32:52:00:7a:63:54:
13:c1:77:77:b9:c0:82:67:15:2a:9f:d9:48:fa:35:23:1b:16:
79:68:a6:4e:c8:58:45:54:6d:2c:c5:2a:f4:88:0c:1a:d4:3d:
41:bb:c7:64:7b:19:23:69:66:48:86:7b:92:e1:7b:9c:ff:0b:
35:b8:99:86:f7:1d:b6:4c:86:c2:46:52:c8:17:43:20:37:5f:
dc:bb:07:48:7f:bc:96:61:d4:54:e5:da:0b:6c:fb:ec:a2:2b:
21:f4:64:d9:ee:a5:d6:2c:cb:76:7e:03:17:1b:d5:ae:de:04:
91:78:d0:88:c0:84:52:7d:2a:03:04:14:33:32:e5:06:04:87:
1b:c2:87:aa:7f:f9:39:ac:08:e9:a7:80:41:f6:4e:92:81:05:
cd:1d:72:a2:51:73:62:88:70:4d:76:a4:6c:60:4a:4f:6f:bd:
03:be:23:75:be:6d:95:f5:e9:ed:9f:1a:63:85:1f:36:f0:4f:
e9:c4:76:aa:bd:56:7d:4b:c0:8d:24:c2:c5:23:9a:f9:4f:7c:
ff:e3:20:df
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUIf7zyL6xShgQpXQS8UrMmYj5NdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0
QzlCMDU5MjAeFw0yNjAyMjgxMjU2NTJaFw0yNjAzMDMxNDE4NTJaMDMxMTAvBgNV
BAMTKDFDODA1Nzg5MzU5RENEQkJCQkMwRTRGNzU1ODg4RDRCQzk2MzIyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohcrdX9JXURrc8o0VTqFAdVd6
BLV2O4wIbrq0xFFqqtGvPdbFdavGmEFyJT/RbqBD9P4qKXJeo8LvP/FrVI52dAHE
Unxo9v5MmaKv0o6d7KwTiwHldaT5f7XDj6lWEk0J+hVcr2TcJ7sNaLUNcwxMg5uR
g/z9Ah0HzMZWkvZ1xL+2lkkCSyd/0Rb5/W90pjYuXBgfWa5U1b1nSwnNyFNkrZKb
uqhX/IQKp/6qS58/4jIWz3EmWqc6n8egpuDDZN6e9zTPIpELsK5xn6mjJFFsLSZG
fEkvKgiPgk1N0hpZWvQkPT6mtPtXgEWHKfiTcBnaz66snvbZaeYcbJ2mCM2ZAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUHIBXiTWdzbu7wOT3VYiNS8ljIlowHwYDVR0j
BBgwFoAUfVJxPA0mky3B7sx1ywwReEybBZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMC83RDUyNzEzQzBE
MjY5MzJEQzFFRUNDNzVDQjBDMTE3ODRDOUIwNTkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0QzlC
MDU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx
YjQtZDQ0NTdjZWYxMjcwLzAvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzEx
Nzg0QzlCMDU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAC9bPVuOSwqSWNkI5yEngLu0wfXX9sbDgcXI
Vu3+bXka6vaJfzXoxVxuMtyh0yP3vzJSAHpjVBPBd3e5wIJnFSqf2Uj6NSMbFnlo
pk7IWEVUbSzFKvSIDBrUPUG7x2R7GSNpZkiGe5Lhe5z/CzW4mYb3HbZMhsJGUsgX
QyA3X9y7B0h/vJZh1FTl2gts++yiKyH0ZNnupdYsy3Z+Axcb1a7eBJF40IjAhFJ9
KgMEFDMy5QYEhxvCh6p/+TmsCOmngEH2TpKBBc0dcqJRc2KIcE12pGxgSk9vvQO+
I3W+bZX16e2fGmOFHzbwT+nEdqq9Vn1LwI0kwsUjmvlPfP/jIN8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:20:22 2026 by rpki-client