$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: sY6LBKwRnO5UJJDNsARo3Vxhj1d1Kb6STfcZUEYrUrQ= Subject key identifier: 75:73:EB:3D:78:0A:29:79:9D:41:C3:4C:AD:D2:27:AC:39:9C:09:13 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 0BCA52EA96F5823A577B5866A6AB31081F1742DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 013B Signing time: Sun 01 Mar 2026 08:12:37 +0000 Manifest this update: Sun 01 Mar 2026 08:07:37 +0000 Manifest next update: Wed 04 Mar 2026 19:55:37 +0000 Files and hashes: 1: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: estSt0lx87WBVBswIF9rRgY2flq/yvc9a4g4mDVN9PM=) 2: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: o94M/PUkXPwJv9aB+AVuT++6v4brmj0SwL8nvguq4L4=) 3: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: fgi/RIj7sYpJdHqRDzIuhzoLoFOkkFMT4aRYQZbrQb8=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: F96L0yc/c15YBDiUbZaA4t2m3dfSrwQEZzoiaMFZJBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:ca:52:ea:96:f5:82:3a:57:7b:58:66:a6:ab:31:08:1f:17:42:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Mar 1 08:07:37 2026 GMT Not After : Mar 4 19:55:37 2026 GMT Subject: CN=7573EB3D780A29799D41C34CADD227AC399C0913 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:da:7f:97:36:5a:9e:49:8f:f9:d9:6f:12:c7: bc:b9:85:bd:f8:ad:68:8f:4e:5c:ee:9e:8d:fa:e5: 6d:fd:98:3e:ff:42:b0:9b:1e:9f:f9:a4:00:79:26: 13:d3:76:99:bf:a7:87:56:e3:01:ee:98:eb:95:19: 4b:28:20:0c:b9:5a:f0:8c:6d:53:91:20:06:9b:44: 38:3e:ae:4c:fc:26:7b:66:6e:da:fb:fa:f1:b7:ff: f2:85:3f:c7:fe:91:0d:29:34:55:37:86:e5:9a:d8: 4d:db:4a:39:03:9a:af:57:5f:22:32:30:0c:1e:b5: d0:27:cc:a7:1c:c7:89:a3:2d:06:2b:8b:f6:cc:60: d0:96:48:2a:19:2d:94:22:bb:54:4b:7f:f5:5b:f9: 0e:ed:73:2a:68:7b:7e:a3:6b:bf:5f:ff:b2:e5:21: c2:71:ca:fb:dd:95:19:55:ca:0b:ca:76:ab:0e:42: 85:7b:54:bc:14:5a:c5:e0:45:19:c9:46:4d:1c:bb: 6d:55:79:af:d5:9e:20:ad:45:4d:a5:3e:3c:2a:79: 7c:88:85:84:bb:3a:33:2c:d4:22:82:9b:d8:8b:be: b2:80:2c:a5:a4:26:b4:c6:bc:31:82:5c:a2:6b:d5: 02:05:36:89:f6:3c:8e:fa:21:da:cf:6a:38:4e:14: f7:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:73:EB:3D:78:0A:29:79:9D:41:C3:4C:AD:D2:27:AC:39:9C:09:13 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:53:c8:b3:21:dd:53:7b:e5:6c:e2:c6:a9:e6:c3:73:57:57: 8b:af:8a:62:bc:73:a4:32:25:c7:b3:ad:dc:1c:a2:e4:f3:7d: 55:3d:da:63:08:e5:5a:13:4c:64:53:a4:e5:51:d7:c5:ca:af: e6:72:05:c5:50:a8:fa:63:14:64:e5:b5:91:49:aa:55:ee:03: 3e:c2:57:78:f4:a8:f5:a9:e0:67:2d:bf:c5:17:5d:b2:6c:af: dd:68:23:64:a0:c7:a1:47:32:3d:bd:01:ab:b8:2a:48:ef:d8: 93:7e:0c:a8:5e:3d:b5:44:83:4a:27:71:6f:ac:26:63:a5:87: c3:0c:d2:78:85:46:19:ad:c5:09:60:a1:da:33:53:3f:f2:45: ac:c5:c8:11:80:de:cd:6b:83:4e:be:cc:4e:ce:37:67:69:9a: fe:97:29:8b:2e:66:bf:87:8d:72:6e:01:48:51:bc:98:bb:9b: e2:06:f5:4f:80:27:0b:7b:97:b8:57:c8:54:2a:e4:f8:0a:b0: eb:8b:58:1e:63:d4:e4:d1:32:a5:ec:14:4d:96:80:f6:97:a9: a2:af:90:0d:43:7a:30:fc:24:5d:95:e4:3c:68:3a:77:40:7b: 46:71:9a:c5:30:92:4a:36:c8:38:8b:6b:4e:e1:f8:f0:43:81: 32:b2:f8:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC8pS6pb1gjpXe1hmpqsxCB8XQt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjAzMDEwODA3MzdaFw0yNjAzMDQxOTU1MzdaMDMxMTAvBgNV BAMTKDc1NzNFQjNENzgwQTI5Nzk5RDQxQzM0Q0FERDIyN0FDMzk5QzA5MTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDj2n+XNlqeSY/52W8Sx7y5hb34 rWiPTlzuno365W39mD7/QrCbHp/5pAB5JhPTdpm/p4dW4wHumOuVGUsoIAy5WvCM bVORIAabRDg+rkz8Jntmbtr7+vG3//KFP8f+kQ0pNFU3huWa2E3bSjkDmq9XXyIy MAwetdAnzKccx4mjLQYri/bMYNCWSCoZLZQiu1RLf/Vb+Q7tcypoe36ja79f/7Ll IcJxyvvdlRlVygvKdqsOQoV7VLwUWsXgRRnJRk0cu21Vea/VniCtRU2lPjwqeXyI hYS7OjMs1CKCm9iLvrKALKWkJrTGvDGCXKJr1QIFNon2PI76IdrPajhOFPctAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdXPrPXgKKXmdQcNMrdInrDmcCRMwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlTyLMh3VN75Wzixqnmw3NXV4uvimK8c6Qy JcezrdwcouTzfVU92mMI5VoTTGRTpOVR18XKr+ZyBcVQqPpjFGTltZFJqlXuAz7C V3j0qPWp4Gctv8UXXbJsr91oI2Sgx6FHMj29Aau4Kkjv2JN+DKhePbVEg0oncW+s JmOlh8MM0niFRhmtxQlgodozUz/yRazFyBGA3s1rg06+zE7ON2dpmv6XKYsuZr+H jXJuAUhRvJi7m+IG9U+AJwt7l7hXyFQq5PgKsOuLWB5j1OTRMqXsFE2WgPaXqaKv kA1DejD8JF2V5DxoOndAe0ZxmsUwkko2yDiLa07h+PBDgTKy+LA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:34:28 2026 by rpki-client