$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: /rtB9cYVWMKZb/7s8KCoPKRVQy22Ghh2SvrOla+R7MI= Subject key identifier: 4F:AA:15:00:95:D0:5B:37:AB:72:F0:02:79:90:0B:54:7A:66:67:E7 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 462BB4D37D415BE8E92F593A1BE0CE95DAF9A681 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 013E Signing time: Sun 08 Mar 2026 05:32:35 +0000 Manifest this update: Sun 08 Mar 2026 05:27:35 +0000 Manifest next update: Wed 11 Mar 2026 11:43:35 +0000 Files and hashes: 1: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: RTXHvyBIxFLXu4QcnBbsIa2tbydAE6CJPm1kz+XZSZs=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: fgi/RIj7sYpJdHqRDzIuhzoLoFOkkFMT4aRYQZbrQb8=) 3: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: F96L0yc/c15YBDiUbZaA4t2m3dfSrwQEZzoiaMFZJBQ=) 4: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: estSt0lx87WBVBswIF9rRgY2flq/yvc9a4g4mDVN9PM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Mar 2026 11:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:2b:b4:d3:7d:41:5b:e8:e9:2f:59:3a:1b:e0:ce:95:da:f9:a6:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Mar 8 05:27:35 2026 GMT Not After : Mar 11 11:43:35 2026 GMT Subject: CN=4FAA150095D05B37AB72F00279900B547A6667E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6b:c4:e2:ec:ae:e3:6c:b6:d4:f3:ab:1b:d3: fd:db:7c:24:58:46:b7:d4:10:47:87:a2:35:23:fa: 03:f6:85:3c:62:56:11:b0:bf:95:64:3c:dc:2f:bd: bb:37:2a:26:c0:d3:9e:74:74:cb:82:b7:8b:7e:85: c4:d2:99:69:ec:45:92:f7:63:55:ef:9d:6a:29:38: 4d:6b:11:cc:f2:20:89:9c:37:ad:75:92:e8:4f:35: 63:4d:28:64:80:df:77:45:10:43:4c:85:25:ea:85: 60:92:dc:3b:e3:76:00:f3:60:b1:d3:b6:44:89:2f: b8:43:9c:d9:df:a6:66:91:25:1b:ae:a0:ae:76:09: c1:c5:63:a1:b3:78:e4:e3:91:bd:77:2b:18:cf:5f: 07:2b:a4:46:b6:b3:f0:b1:32:ba:ba:38:5c:14:31: 8b:29:1e:54:5e:55:4d:da:c0:95:1b:b1:3e:de:d4: 70:f8:40:e2:99:50:d8:28:a6:8e:87:74:3e:14:98: 65:44:fd:26:e9:ce:71:b3:4e:ce:cd:90:c0:e2:9b: 5a:7f:e7:4c:7e:b9:1f:0f:02:55:2c:0e:85:fc:4b: f2:fc:55:4e:46:81:da:2a:21:76:82:3c:60:d0:90: 94:26:1d:e8:9b:3e:bc:b7:94:6f:24:65:06:9f:b6: cb:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:AA:15:00:95:D0:5B:37:AB:72:F0:02:79:90:0B:54:7A:66:67:E7 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:f4:61:aa:1e:b0:8c:aa:f5:de:40:dc:b5:fe:0a:13:03:f5: de:15:d7:33:71:ad:bd:82:98:22:96:e7:4a:84:22:68:c8:ad: 97:d2:32:6c:64:c0:43:f0:be:22:a6:19:4c:df:f4:ae:55:08: 06:12:c4:14:95:8b:ac:fa:1e:c6:b3:40:b6:c6:d6:ad:5d:43: 39:df:62:2f:10:4a:cd:be:8b:2b:1e:68:c8:64:ed:69:ea:d8: a5:36:84:39:06:26:96:ae:d1:bc:56:5e:dc:4c:2f:5a:a1:61: e2:bf:fe:03:97:45:0f:6a:a9:e4:11:f8:7e:f1:84:56:4c:15: 16:75:56:48:9b:90:bb:33:e0:1c:3e:de:34:86:8f:b6:1e:e5: 49:4e:bb:94:39:70:c6:33:4d:9e:ca:4d:50:ce:5e:86:11:0d: 67:b8:c3:15:61:e9:5c:ae:40:21:0f:7b:db:2a:58:d6:4e:3a: 2b:d3:5b:19:fe:5b:9d:2d:5b:b2:d8:13:f6:a0:3d:8c:9a:89: 18:fa:e8:02:93:e6:e9:f9:c2:d6:5e:78:89:6c:5d:97:c7:ac: 21:db:8f:17:b9:38:8f:18:52:fa:2e:66:4b:fa:ca:4a:ce:37: 15:8d:14:13:01:73:1c:c2:10:22:dc:c2:bb:e5:55:dc:0f:1b: ab:f1:6e:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiu0031BW+jpL1k6G+DOldr5poEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjAzMDgwNTI3MzVaFw0yNjAzMTExMTQzMzVaMDMxMTAvBgNV BAMTKDRGQUExNTAwOTVEMDVCMzdBQjcyRjAwMjc5OTAwQjU0N0E2NjY3RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDa8Ti7K7jbLbU86sb0/3bfCRY RrfUEEeHojUj+gP2hTxiVhGwv5VkPNwvvbs3KibA0550dMuCt4t+hcTSmWnsRZL3 Y1XvnWopOE1rEczyIImcN611kuhPNWNNKGSA33dFEENMhSXqhWCS3DvjdgDzYLHT tkSJL7hDnNnfpmaRJRuuoK52CcHFY6GzeOTjkb13KxjPXwcrpEa2s/CxMrq6OFwU MYspHlReVU3awJUbsT7e1HD4QOKZUNgopo6HdD4UmGVE/SbpznGzTs7NkMDim1p/ 50x+uR8PAlUsDoX8S/L8VU5GgdoqIXaCPGDQkJQmHeibPry3lG8kZQaftsvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT6oVAJXQWzercvACeZALVHpmZ+cwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGT0YaoesIyq9d5A3LX+ChMD9d4V1zNxrb2C mCKW50qEImjIrZfSMmxkwEPwviKmGUzf9K5VCAYSxBSVi6z6HsazQLbG1q1dQznf Yi8QSs2+iyseaMhk7Wnq2KU2hDkGJpau0bxWXtxML1qhYeK//gOXRQ9qqeQR+H7x hFZMFRZ1VkibkLsz4Bw+3jSGj7Ye5UlOu5Q5cMYzTZ7KTVDOXoYRDWe4wxVh6Vyu QCEPe9sqWNZOOivTWxn+W50tW7LYE/agPYyaiRj66AKT5un5wtZeeIlsXZfHrCHb jxe5OI8YUvouZkv6ykrONxWNFBMBcxzCECLcwrvlVdwPG6vxbpg= -----END CERTIFICATE-----Generated at Tue Mar 10 07:56:27 2026 by rpki-client