$ rpki-client -vvf repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft File: 528A271B82B6185862B06F250499140113F6FE20.mft (raw, json) Hash identifier: 4OSuM5qUqjKcUJ8lpljxlJTecg6vGE/uUUYsiTLxGKw= Subject key identifier: FE:30:BD:AA:40:FA:25:81:24:AC:48:FB:52:58:ED:D3:EC:9F:5C:1D Authority key identifier: 52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 Certificate issuer: /CN=528A271B82B6185862B06F250499140113F6FE20 Certificate serial: 761F164F3A8157DE7A49E96F057BDEECFD54BFF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft Manifest number: 026D Signing time: Wed 25 Mar 2026 22:31:06 +0000 Manifest this update: Wed 25 Mar 2026 22:26:06 +0000 Manifest next update: Sun 29 Mar 2026 07:23:06 +0000 Files and hashes: 1: 528A271B82B6185862B06F250499140113F6FE20.crl (hash: /d1cG+IqT6+39tNJY3r7+t1LacMhRmhHk4PhIhBKayY=) 2: 3130332e3138392e36302e302f32332d3234203d3e20313439373432.roa (hash: KE1lMtasfHajvAT4hQBitWQJIMm3oss3cXTQ3t2jS64=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:23:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1f:16:4f:3a:81:57:de:7a:49:e9:6f:05:7b:de:ec:fd:54:bf:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528A271B82B6185862B06F250499140113F6FE20 Validity Not Before: Mar 25 22:26:06 2026 GMT Not After : Mar 29 07:23:06 2026 GMT Subject: CN=FE30BDAA40FA258124AC48FB5258EDD3EC9F5C1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:8d:6c:9e:a5:30:76:47:e5:6b:ed:a6:6f:70: 0a:be:5d:30:58:23:80:51:81:34:b3:83:eb:d8:65: af:65:8a:fd:08:bd:cb:84:73:29:26:fe:38:73:a2: 34:25:2d:72:07:6c:cd:4b:5b:85:e8:b1:9d:37:a1: cf:2d:50:f1:6a:83:db:21:e6:fa:48:72:a1:7b:c9: db:c6:ab:0b:04:fb:c1:0c:ac:79:11:38:a6:6c:b2: 4a:ef:76:f4:26:0b:02:b2:a0:e8:fc:33:88:a5:fe: e7:69:4b:16:e6:d2:de:15:30:80:b9:c7:ab:8d:3c: 31:7e:84:d9:07:5b:4d:9a:92:ba:1c:e9:6e:6d:06: f3:bd:2d:d7:83:77:61:b8:65:fa:54:23:52:a7:87: c4:d5:5e:f8:cd:bb:ac:5f:66:50:55:48:e6:53:8d: 44:82:02:52:bb:8c:ee:5e:8a:0d:7f:16:b7:08:5a: f3:ad:df:38:e4:55:3d:ea:d1:73:92:3c:bf:11:9c: 21:39:b4:03:b0:4c:b1:fa:d0:e9:38:bd:17:3e:aa: b8:8f:6f:62:5f:8a:23:8e:51:04:84:40:92:06:f9: 4f:56:1f:9e:23:fe:da:72:05:90:3d:68:a1:f1:53: 72:86:99:39:bf:94:b2:8d:7d:4d:a7:99:ee:f2:41: a3:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:30:BD:AA:40:FA:25:81:24:AC:48:FB:52:58:ED:D3:EC:9F:5C:1D X509v3 Authority Key Identifier: keyid:52:8A:27:1B:82:B6:18:58:62:B0:6F:25:04:99:14:01:13:F6:FE:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/528A271B82B6185862B06F250499140113F6FE20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ad3cc8a-9738-451b-a798-7b76b0940b4b/0/528A271B82B6185862B06F250499140113F6FE20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:e4:47:ae:58:48:2b:2f:f2:2b:3e:93:3b:cb:49:f8:e5:3b: 5d:25:a4:01:b9:1f:34:9e:07:08:9f:49:60:13:c1:b6:e2:13: 26:74:84:fd:eb:d7:1e:d0:46:3b:2b:47:9c:44:44:74:f4:7d: f1:27:af:2d:b6:95:4e:b3:05:7a:10:0a:e8:cc:18:b7:b0:f2: cc:3c:d1:ff:c8:95:38:2e:ec:f8:fd:a6:32:bc:fd:d2:73:e9: eb:35:8c:6a:10:44:7d:2e:fd:d0:21:49:9b:53:f8:cc:3d:70: 69:d2:07:84:99:a7:5b:25:76:cb:a9:19:8a:df:37:35:48:63: ca:21:96:50:81:ec:12:84:f8:61:34:b3:60:b1:c4:25:ef:7e: 27:da:65:95:2d:96:59:1e:3d:39:79:63:53:4c:14:b0:1b:4b: 4d:60:0d:54:fa:40:2c:e5:f2:f4:1a:80:b4:a9:3f:ce:51:a9: 30:7d:52:1e:fb:d2:4d:2f:67:de:77:51:8c:23:ce:13:6e:b0: fd:f6:61:85:c3:ec:41:44:5f:36:69:36:f9:53:b7:57:79:41: ad:e7:e9:cd:a1:c2:92:b6:d1:c3:98:de:92:9a:9e:0a:c7:8c: dd:73:dd:76:23:93:36:81:16:18:00:2e:77:3d:2a:26:85:a6: 43:6b:ab:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdh8WTzqBV956SelvBXve7P1Uv/IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDEx M0Y2RkUyMDAeFw0yNjAzMjUyMjI2MDZaFw0yNjAzMjkwNzIzMDZaMDMxMTAvBgNV BAMTKEZFMzBCREFBNDBGQTI1ODEyNEFDNDhGQjUyNThFREQzRUM5RjVDMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdjWyepTB2R+Vr7aZvcAq+XTBY I4BRgTSzg+vYZa9liv0IvcuEcykm/jhzojQlLXIHbM1LW4XosZ03oc8tUPFqg9sh 5vpIcqF7ydvGqwsE+8EMrHkROKZsskrvdvQmCwKyoOj8M4il/udpSxbm0t4VMIC5 x6uNPDF+hNkHW02akroc6W5tBvO9LdeDd2G4ZfpUI1Knh8TVXvjNu6xfZlBVSOZT jUSCAlK7jO5eig1/FrcIWvOt3zjkVT3q0XOSPL8RnCE5tAOwTLH60Ok4vRc+qriP b2JfiiOOUQSEQJIG+U9WH54j/tpyBZA9aKHxU3KGmTm/lLKNfU2nme7yQaPTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/jC9qkD6JYEkrEj7Uljt0+yfXB0wHwYDVR0j BBgwFoAUUoonG4K2GFhisG8lBJkUARP2/iAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YWQzY2M4YS05NzM4LTQ1MWItYTc5OC03Yjc2YjA5NDBiNGIvMC81MjhBMjcxQjgy QjYxODU4NjJCMDZGMjUwNDk5MTQwMTEzRjZGRTIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0MDExM0Y2 RkUyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGFkM2NjOGEtOTczOC00NTFiLWE3 OTgtN2I3NmIwOTQwYjRiLzAvNTI4QTI3MUI4MkI2MTg1ODYyQjA2RjI1MDQ5OTE0 MDExM0Y2RkUyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvkR65YSCsv8is+kzvLSfjlO10lpAG5HzSe BwifSWATwbbiEyZ0hP3r1x7QRjsrR5xERHT0ffEnry22lU6zBXoQCujMGLew8sw8 0f/IlTgu7Pj9pjK8/dJz6es1jGoQRH0u/dAhSZtT+Mw9cGnSB4SZp1sldsupGYrf NzVIY8ohllCB7BKE+GE0s2CxxCXvfifaZZUtllkePTl5Y1NMFLAbS01gDVT6QCzl 8vQagLSpP85RqTB9Uh770k0vZ953UYwjzhNusP32YYXD7EFEXzZpNvlTt1d5Qa3n 6c2hwpK20cOY3pKangrHjN1z3XYjkzaBFhgALnc9KiaFpkNrq6Q= -----END CERTIFICATE-----Generated at Thu Mar 26 16:32:12 2026 by rpki-client