$ rpki-client -vvf repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft File: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft (raw, json) Hash identifier: 5Jyq9nAmj207y9hvrABUbHnio4oMZGTHQSztA6G6ciU= Subject key identifier: EC:20:C4:DF:6A:AF:BE:B9:28:F3:62:0E:8F:92:F8:8C:F6:3E:5A:66 Authority key identifier: 52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 Certificate issuer: /CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Certificate serial: 766F72E3220D42B1A1231ACD983441B990A924E1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft Manifest number: 0145 Signing time: Tue 24 Mar 2026 17:42:42 +0000 Manifest this update: Tue 24 Mar 2026 17:37:42 +0000 Manifest next update: Sat 28 Mar 2026 01:12:42 +0000 Files and hashes: 1: 528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl (hash: AKN3+R1j5suYb1How17pEj+7GVBM1BneFisOFMRroiw=) 2: 3135372e36362e35352e302f32342d3234203d3e20313431383932.roa (hash: fgi/RIj7sYpJdHqRDzIuhzoLoFOkkFMT4aRYQZbrQb8=) 3: 3135372e36362e35342e302f32332d3233203d3e20313431383932.roa (hash: estSt0lx87WBVBswIF9rRgY2flq/yvc9a4g4mDVN9PM=) 4: 3135372e36362e35342e302f32342d3234203d3e20313431383932.roa (hash: F96L0yc/c15YBDiUbZaA4t2m3dfSrwQEZzoiaMFZJBQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:6f:72:e3:22:0d:42:b1:a1:23:1a:cd:98:34:41:b9:90:a9:24:e1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=528098CFFE1330AD3E557BCFEC2D8B4692F51248 Validity Not Before: Mar 24 17:37:42 2026 GMT Not After : Mar 28 01:12:42 2026 GMT Subject: CN=EC20C4DF6AAFBEB928F3620E8F92F88CF63E5A66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:d9:a8:83:24:68:37:c4:e9:a5:7b:29:e1:50: 28:24:ae:df:58:df:a8:0d:29:3f:fc:06:d0:ff:95: 03:93:87:97:7d:ad:82:33:0d:05:62:1d:24:99:f1: a1:bb:7c:1c:89:b6:d2:2f:78:b6:01:1d:54:ad:b9: a3:26:2b:e8:70:36:bc:8a:34:cd:8b:d5:0d:bf:80: 80:d3:77:24:e5:3b:dd:d4:fe:28:d9:ae:5a:5c:57: 28:d5:1e:dc:69:29:06:f6:1a:85:bd:d4:96:96:d5: 40:af:5c:89:b7:94:b0:c3:4c:a4:46:2f:a9:f8:60: 63:f4:15:cd:9e:84:0f:ab:82:ac:2c:c2:da:4b:8d: 5a:be:0c:58:68:38:b6:57:bc:41:13:47:dd:42:49: c9:3e:2e:b6:69:07:0e:c2:1b:80:9c:03:26:7c:97: 7a:7c:4c:8f:bd:08:ab:ec:02:7b:8d:41:41:d4:ae: da:27:4e:77:a4:3e:98:e1:7a:41:37:2b:c6:6b:4a: 34:7c:ab:b4:73:0d:2a:93:82:01:c7:e6:7a:60:77: b0:50:6b:14:1b:4c:39:64:91:e7:7c:83:67:44:ea: 34:54:24:7e:bf:e1:34:d9:55:74:83:c8:12:8a:ff: 3a:f7:78:d4:1e:af:25:5d:b3:52:ce:d9:df:ad:6c: 9f:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:20:C4:DF:6A:AF:BE:B9:28:F3:62:0E:8F:92:F8:8C:F6:3E:5A:66 X509v3 Authority Key Identifier: keyid:52:80:98:CF:FE:13:30:AD:3E:55:7B:CF:EC:2D:8B:46:92:F5:12:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/528098CFFE1330AD3E557BCFEC2D8B4692F51248.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f8dc0849-83fb-4cc8-8c21-be6ca7a2ed83/0/528098CFFE1330AD3E557BCFEC2D8B4692F51248.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:4f:c0:b3:ae:0d:c1:7a:34:cc:75:37:5c:a0:51:ac:30:1e: 28:35:71:3c:23:d8:d0:c6:b1:99:98:12:7c:1d:15:96:97:71: 2e:ae:8a:71:6f:b1:bd:a3:e5:35:92:82:58:02:62:ce:14:54: e5:df:e4:fa:66:d3:9b:0a:b1:5b:00:72:2a:a5:aa:ec:f1:90: 76:af:13:e6:10:39:a9:e0:a5:65:02:0b:e6:ad:57:91:bd:9d: bc:cf:5f:73:60:70:d2:c8:67:41:c0:8d:5b:c1:ff:ff:1c:a9: bf:24:6e:d1:b8:b1:a9:d0:a2:b5:4d:5b:f2:f2:95:8e:fa:7c: 69:b1:80:e4:b3:57:16:ef:9c:fc:9b:cf:da:a4:1a:6a:bb:14: 95:d5:b2:f1:eb:ef:89:0f:27:55:0d:3e:ec:8b:ec:1b:9e:d1: 46:40:3f:30:5f:a0:3a:30:a2:71:2e:9e:dc:1e:a4:66:4d:32: 29:9a:aa:d6:d1:16:fd:85:d6:55:5b:68:89:c3:9b:f6:3e:68: e1:73:0c:b3:bb:6e:98:a9:dd:4d:77:21:ac:0a:92:7b:af:8d: 34:06:6f:23:65:09:ce:c8:49:5d:95:95:48:d8:6a:fa:2a:a6: d2:10:58:06:53:1f:47:45:d8:ff:b5:65:e8:eb:b8:a0:69:73: e5:aa:d4:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdm9y4yINQrGhIxrNmDRBuZCpJOEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5 MkY1MTI0ODAeFw0yNjAzMjQxNzM3NDJaFw0yNjAzMjgwMTEyNDJaMDMxMTAvBgNV BAMTKEVDMjBDNERGNkFBRkJFQjkyOEYzNjIwRThGOTJGODhDRjYzRTVBNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA2aiDJGg3xOmleynhUCgkrt9Y 36gNKT/8BtD/lQOTh5d9rYIzDQViHSSZ8aG7fByJttIveLYBHVStuaMmK+hwNryK NM2L1Q2/gIDTdyTlO93U/ijZrlpcVyjVHtxpKQb2GoW91JaW1UCvXIm3lLDDTKRG L6n4YGP0Fc2ehA+rgqwswtpLjVq+DFhoOLZXvEETR91CSck+LrZpBw7CG4CcAyZ8 l3p8TI+9CKvsAnuNQUHUrtonTnekPpjhekE3K8ZrSjR8q7RzDSqTggHH5npgd7BQ axQbTDlkked8g2dE6jRUJH6/4TTZVXSDyBKK/zr3eNQeryVds1LO2d+tbJ97AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7CDE32qvvrko82IOj5L4jPY+WmYwHwYDVR0j BBgwFoAUUoCYz/4TMK0+VXvP7C2LRpL1EkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OGRjMDg0OS04M2ZiLTRjYzgtOGMyMS1iZTZjYTdhMmVkODMvMC81MjgwOThDRkZF MTMzMEFEM0U1NTdCQ0ZFQzJEOEI0NjkyRjUxMjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhCNDY5MkY1 MTI0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjhkYzA4NDktODNmYi00Y2M4LThj MjEtYmU2Y2E3YTJlZDgzLzAvNTI4MDk4Q0ZGRTEzMzBBRDNFNTU3QkNGRUMyRDhC NDY5MkY1MTI0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxPwLOuDcF6NMx1N1ygUawwHig1cTwj2NDG sZmYEnwdFZaXcS6uinFvsb2j5TWSglgCYs4UVOXf5Ppm05sKsVsAciqlquzxkHav E+YQOangpWUCC+atV5G9nbzPX3NgcNLIZ0HAjVvB//8cqb8kbtG4sanQorVNW/Ly lY76fGmxgOSzVxbvnPybz9qkGmq7FJXVsvHr74kPJ1UNPuyL7Bue0UZAPzBfoDow onEuntwepGZNMimaqtbRFv2F1lVbaInDm/Y+aOFzDLO7bpip3U13IawKknuvjTQG byNlCc7ISV2VlUjYavoqptIQWAZTH0dF2P+1ZejruKBpc+Wq1FM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:51:30 2026 by rpki-client