
$ rpki-client -vvf repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
File: 28351380A86044778274FC7CEC0F116CF3B3CA39.mft (raw, json)
Hash identifier: M3ZbaA01GWhNQxMfSBzlsKFChtDi7sH55s3iDeOPQ7o=
Subject key identifier: 82:C2:DE:3A:F6:D4:D9:EF:96:3B:AA:F6:DF:50:29:2F:88:52:90:6B
Authority key identifier: 28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
Certificate issuer: /CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Certificate serial: 121076D88EEF4EA0FE67A0CE08C60BD4FBEA5D74
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
Manifest number: 0554
Signing time: Sun 01 Mar 2026 00:20:52 +0000
Manifest this update: Sun 01 Mar 2026 00:15:52 +0000
Manifest next update: Wed 04 Mar 2026 01:09:52 +0000
Files and hashes: 1: 3230332e38302e31352e302f32342d3234203d3e203234323034.roa (hash: +tRBG8B/+C8vTbXJTWqe0liAiPTh4alenhwEBf60dxs=)
2: 3230332e38302e31312e302f32342d3234203d3e203234323034.roa (hash: wP5JcTumZVhD5RKTIHW84jMQLqPiyj2qPNYzd9k1ZOs=)
3: 3230332e38302e31322e302f32342d3234203d3e203234323034.roa (hash: iP5DwSyfUL5exxyNjMDQ+1fcb6ngK3/LzByJJLI9xyw=)
4: 28351380A86044778274FC7CEC0F116CF3B3CA39.crl (hash: B+J03Xc0k4qEooqk69aen5WmkePfbZNXA3zlMq6r3IY=)
5: 3230332e38302e31332e302f32342d3234203d3e203234323034.roa (hash: OqfsOYg/HuhRheOY7XtpBvVh7Zqp58h+Rj/M/YaFZNI=)
6: 3230332e38302e31342e302f32342d3234203d3e203234323034.roa (hash: meqQFV3Ai00Xi6pHJ24Fpc5SOLYd2Ucdi8hBuOG/mOI=)
7: 3230332e38302e382e302f32342d3234203d3e203234323034.roa (hash: WygMqvrzr917+KMa/vGo8fQyT0ctkaWPjHAmxb/T5Js=)
8: 323430353a386530303a3a2f33322d3332203d3e203234323034.roa (hash: qKSq3uz3mAbrZSzfHP44tJYlF6gqnOloWG4wyUGOKH8=)
9: 3230332e38302e392e302f32342d3234203d3e203234323034.roa (hash: D4SmgWinw2uDnNDHY1kT9jgep4MItUVn6E6KY3uTDIU=)
10: 3230332e38302e31302e302f32342d3234203d3e203234323034.roa (hash: GDVJSN1CaQCPhQqR3FRWg5swzCjmjmNit8vMHebzfag=)
Validation: OK
Signature path: rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 04 Mar 2026 01:09:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:10:76:d8:8e:ef:4e:a0:fe:67:a0:ce:08:c6:0b:d4:fb:ea:5d:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28351380A86044778274FC7CEC0F116CF3B3CA39
Validity
Not Before: Mar 1 00:15:52 2026 GMT
Not After : Mar 4 01:09:52 2026 GMT
Subject: CN=82C2DE3AF6D4D9EF963BAAF6DF50292F8852906B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:02:dc:e6:b0:5d:ee:f2:0b:83:17:17:d3:27:
cf:44:99:e6:45:e7:70:76:ce:42:82:cf:94:8e:f9:
08:05:fb:2b:21:9d:66:e5:1b:bd:01:36:9b:ad:53:
30:d9:5b:d9:e4:20:e9:e1:95:f9:39:4a:7a:d1:2e:
47:d4:f7:52:40:ac:d0:08:d2:03:fc:ce:21:2a:8c:
49:12:a1:5f:69:53:50:65:96:d6:9e:11:8b:64:0f:
0c:c6:f2:6c:7b:33:70:ba:e3:a4:41:f2:36:11:58:
0f:e5:60:a8:9d:62:aa:7b:c9:28:af:5f:4f:d6:ee:
53:0e:f7:e8:f6:29:3a:30:d5:de:e0:b4:70:ac:9e:
e2:e6:77:4e:30:1c:7f:fb:59:cd:04:b4:00:2a:19:
18:78:1c:ea:4e:7a:89:1c:05:9d:c1:0b:42:80:cf:
3a:32:87:b7:b2:c4:86:de:d3:64:e8:2f:19:39:6d:
db:30:33:da:0f:c3:4f:53:2a:46:c2:6e:22:d5:cd:
18:36:cc:24:89:d8:7b:c8:f1:66:f2:b7:15:62:9c:
89:3b:43:93:87:01:19:34:b1:55:2e:f0:4b:19:93:
a6:b1:3a:14:bb:1d:ab:e4:fa:bc:a7:61:cf:cd:51:
76:69:62:7b:c6:0d:ba:1a:b3:4c:d7:1f:c5:f3:69:
04:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:C2:DE:3A:F6:D4:D9:EF:96:3B:AA:F6:DF:50:29:2F:88:52:90:6B
X509v3 Authority Key Identifier:
keyid:28:35:13:80:A8:60:44:77:82:74:FC:7C:EC:0F:11:6C:F3:B3:CA:39
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28351380A86044778274FC7CEC0F116CF3B3CA39.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/524a9105-8d2a-4b38-a6ae-05ead69719a3/0/28351380A86044778274FC7CEC0F116CF3B3CA39.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:97:c2:63:85:c0:80:52:98:b4:7f:49:72:d4:6e:ff:b1:d7:
a9:eb:3d:78:fd:fc:d6:46:61:95:a5:a3:be:ca:e9:fc:6b:0c:
4c:fd:b6:cf:3b:ea:f3:31:c4:95:b6:e0:e0:e6:26:9b:25:09:
87:70:65:27:36:5d:4c:57:66:71:d8:fc:6b:05:bf:9d:8f:97:
47:f0:b2:3e:2b:70:79:67:f6:d1:ba:08:1f:79:a1:0e:34:81:
41:46:05:f0:ed:8e:73:c1:8c:34:23:df:aa:a3:27:aa:fa:c6:
f0:14:6b:d4:ed:b7:a2:9f:b2:be:42:02:23:4c:45:e9:b1:b5:
b9:09:ee:02:11:51:4e:68:47:00:04:9a:04:e6:79:ec:b4:54:
43:b5:49:55:32:66:b5:33:28:3b:e7:26:b9:26:cb:3a:7d:11:
6f:aa:5b:86:ab:1e:c5:ad:3b:8a:27:b6:17:6a:28:13:cb:14:
54:ad:8c:94:71:d5:93:bf:b9:2a:83:29:05:1b:d0:f3:4a:b3:
7b:46:48:09:c7:49:cc:e8:f9:aa:f1:ab:8b:39:28:9f:78:59:
91:56:45:8b:d7:9c:48:10:d2:9d:ea:73:9e:ca:4c:85:f9:4e:
87:01:3c:e2:7d:fa:82:bf:8b:c5:89:c4:73:5f:b1:89:3b:f7:
f3:3a:a1:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:32:53 2026 by rpki-client