$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: wZsGWX9CPLMwsjBwXlTA5GTrv9KIn9fxITu4sWd3/eo= Subject key identifier: 04:86:3C:18:C9:EE:06:38:8C:C0:17:3B:EA:3D:36:6A:3B:47:FE:30 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 2DE18B6DF2DC32D8DE6CA08A19B0845588711B16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 014F Signing time: Wed 15 Apr 2026 18:02:43 +0000 Manifest this update: Wed 15 Apr 2026 17:57:43 +0000 Manifest next update: Sun 19 Apr 2026 05:16:43 +0000 Files and hashes: 1: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: F96L0yc/c15YBDiUbZaA4t2m3dfSrwQEZzoiaMFZJBQ=) 2: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: estSt0lx87WBVBswIF9rRgY2flq/yvc9a4g4mDVN9PM=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: fgi/RIj7sYpJdHqRDzIuhzoLoFOkkFMT4aRYQZbrQb8=) 4: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: ms/HbBvKy/z9mFmY1aGmMnd+Rkw8crgTbL6jYeMwlSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 05:16:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:e1:8b:6d:f2:dc:32:d8:de:6c:a0:8a:19:b0:84:55:88:71:1b:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Apr 15 17:57:43 2026 GMT Not After : Apr 19 05:16:43 2026 GMT Subject: CN=04863C18C9EE06388CC0173BEA3D366A3B47FE30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:cc:39:aa:78:1f:3a:1f:2d:a0:e6:8a:c0:d8: 93:c0:9c:4c:4a:6e:5b:ea:96:da:4e:1c:17:62:11: d0:4f:92:e4:22:97:af:e7:93:3e:31:fa:e6:1a:87: ed:8a:65:32:be:36:ee:60:23:94:ca:6e:cd:6e:38: 24:60:46:2f:48:5d:ab:5f:06:2b:bc:b7:a6:4a:77: 1c:09:f6:80:c3:5e:82:f8:72:43:dc:5b:96:7f:5c: 03:9a:10:86:fb:9b:6b:e6:6a:6e:5c:46:71:6a:0e: 7d:9e:15:88:86:31:8b:d1:fe:02:ef:35:5e:b8:fd: 94:29:81:8f:d1:a2:00:43:f0:c6:8b:55:8f:80:47: a9:c8:c1:00:16:50:f0:7a:3a:21:06:3c:41:ad:ab: ee:4d:2a:73:da:23:bd:9f:17:d7:d9:f8:34:55:e3: 79:95:81:7f:aa:e3:ac:32:50:d5:90:cb:a1:0e:3b: 62:60:bf:ab:82:27:22:f0:05:4d:32:ee:2e:3e:8d: 66:60:9c:74:97:60:94:09:ac:98:aa:45:20:01:9f: 87:01:4e:59:d3:e7:6e:1e:a4:39:e9:4f:ea:c5:c2: 98:60:0f:0a:9f:91:44:89:e2:3b:b2:7b:2f:98:7b: 08:61:61:4b:2a:9b:d3:fb:91:e5:90:e3:ab:b5:da: 84:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:86:3C:18:C9:EE:06:38:8C:C0:17:3B:EA:3D:36:6A:3B:47:FE:30 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:54:c6:c3:ea:9e:a7:52:bb:db:8c:cd:74:61:1e:f5:21:01: de:02:a0:76:8b:05:3e:0d:6f:dc:3f:3b:42:a5:64:1a:a7:91: dc:02:97:c5:4a:26:a3:f0:f6:4f:53:05:a4:21:00:77:4b:02: 17:b7:76:b8:71:3b:3e:6f:b6:a1:eb:a6:5d:b9:29:19:f7:46: 36:94:f0:17:49:44:35:c2:8b:f1:64:a7:a2:d5:0c:94:95:1a: 9a:e7:4f:82:88:62:b0:a0:ee:da:4d:7e:27:3d:c9:9d:1b:48: 4b:ba:2a:93:42:e9:ba:c2:ab:07:6c:cd:58:00:b3:cc:04:ca: e5:0a:8c:08:49:72:dc:19:7e:31:07:38:66:3e:05:a0:dd:ba: cc:9e:82:1d:ea:f8:4c:ef:cb:c8:b3:46:8a:7f:a4:1f:5a:76: a7:c5:31:1e:01:87:d7:a1:32:d3:2d:3f:ef:72:97:fb:e6:d4: a6:48:34:f1:cc:56:1f:b4:7f:93:00:3e:2f:4a:a1:a0:55:51: 0e:b2:45:7d:b9:3d:71:8d:5b:db:92:b4:71:57:cf:30:75:e0: e9:3c:37:de:8d:28:ec:04:20:95:48:28:0e:e4:46:a4:39:7a: 5d:17:cd:e9:70:ad:15:7e:b9:1c:84:66:a2:b0:16:49:96:7d: 23:49:1e:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULeGLbfLcMtjebKCKGbCEVYhxGxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjA0MTUxNzU3NDNaFw0yNjA0MTkwNTE2NDNaMDMxMTAvBgNV BAMTKDA0ODYzQzE4QzlFRTA2Mzg4Q0MwMTczQkVBM0QzNjZBM0I0N0ZFMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYzDmqeB86Hy2g5orA2JPAnExK blvqltpOHBdiEdBPkuQil6/nkz4x+uYah+2KZTK+Nu5gI5TKbs1uOCRgRi9IXatf Biu8t6ZKdxwJ9oDDXoL4ckPcW5Z/XAOaEIb7m2vmam5cRnFqDn2eFYiGMYvR/gLv NV64/ZQpgY/RogBD8MaLVY+AR6nIwQAWUPB6OiEGPEGtq+5NKnPaI72fF9fZ+DRV 43mVgX+q46wyUNWQy6EOO2Jgv6uCJyLwBU0y7i4+jWZgnHSXYJQJrJiqRSABn4cB TlnT524epDnpT+rFwphgDwqfkUSJ4juyey+YewhhYUsqm9P7keWQ46u12oT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBIY8GMnuBjiMwBc76j02ajtH/jAwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHBUxsPqnqdSu9uMzXRhHvUhAd4CoHaLBT4N b9w/O0KlZBqnkdwCl8VKJqPw9k9TBaQhAHdLAhe3drhxOz5vtqHrpl25KRn3RjaU 8BdJRDXCi/Fkp6LVDJSVGprnT4KIYrCg7tpNfic9yZ0bSEu6KpNC6brCqwdszVgA s8wEyuUKjAhJctwZfjEHOGY+BaDdusyegh3q+Ezvy8izRop/pB9adqfFMR4Bh9eh MtMtP+9yl/vm1KZINPHMVh+0f5MAPi9KoaBVUQ6yRX25PXGNW9uStHFXzzB14Ok8 N96NKOwEIJVIKA7kRqQ5el0XzelwrRV+uRyEZqKwFkmWfSNJHhM= -----END CERTIFICATE-----Generated at Fri Apr 17 14:05:48 2026 by rpki-client