$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: V0IbrUDdncdwzSBrIZ/DyAd1ribqbPZSuF7N6mT7k+k= Subject key identifier: 87:28:36:9B:16:3E:2A:78:78:27:A8:DE:08:CE:8D:9C:7B:5C:78:15 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 760D4463896D4F2AE5C54BFB9EE9A18DA513662E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0252 Signing time: Sun 19 Apr 2026 01:21:26 +0000 Manifest this update: Sun 19 Apr 2026 01:16:26 +0000 Manifest next update: Wed 22 Apr 2026 11:27:26 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: d1lWiWcG1SqLN3AWm10EBx/bnw8rZt65Npa9p5pFF+Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:0d:44:63:89:6d:4f:2a:e5:c5:4b:fb:9e:e9:a1:8d:a5:13:66:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Apr 19 01:16:26 2026 GMT Not After : Apr 22 11:27:26 2026 GMT Subject: CN=8728369B163E2A787827A8DE08CE8D9C7B5C7815 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:17:7b:3b:f0:71:8b:82:51:ce:d0:ee:05:0f: 14:f5:59:6a:6e:53:44:1e:84:98:eb:1d:c0:39:93: cf:0f:a4:e9:69:45:8d:eb:ea:3f:e6:d4:90:f1:8b: b2:0c:31:dd:92:e4:02:c8:cc:ea:59:21:eb:f2:f3: 92:d6:0e:ad:63:a1:ce:8c:98:db:3c:08:49:91:2d: 26:7b:c7:5d:db:9f:92:c0:c8:f9:fa:23:bd:e7:cb: 5e:e8:36:4e:38:4a:f1:bb:f0:cc:36:fa:3b:67:1c: 5a:8e:00:4c:22:3e:96:f1:88:5a:36:1a:85:63:24: a8:d8:87:ca:05:54:7d:1b:7e:20:6d:df:ad:79:f7: 9a:d1:5c:9e:90:f7:3a:2a:88:c3:c5:ce:b9:b4:95: 13:09:b9:b3:d7:d7:a4:40:be:99:50:3a:16:79:c6: 6e:f6:ad:ec:1d:a6:65:e4:2a:68:0c:fb:1e:ca:57: 92:51:02:49:cd:d5:f0:47:9c:ff:16:c9:29:1e:ac: d6:fb:8a:f7:f0:3a:6a:34:b0:57:33:52:08:af:14: cb:5a:7b:87:c1:17:4d:a7:d3:f1:64:98:7e:c4:af: e0:0f:bb:86:f7:72:c2:41:bd:89:6d:a8:f7:52:05: 03:8b:9b:0e:ce:ef:fa:53:73:cf:00:f1:c3:ef:1b: 9d:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:28:36:9B:16:3E:2A:78:78:27:A8:DE:08:CE:8D:9C:7B:5C:78:15 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:39:fa:d2:e6:ca:63:7d:ee:60:16:e2:ba:e1:7e:fb:2c:fa: ad:23:40:e5:3e:0a:59:eb:4c:97:f4:77:27:f3:89:e4:d6:2b: b9:ed:1e:37:ef:a6:f1:53:64:60:df:bd:97:53:20:92:0c:04: 12:5a:21:c6:f9:81:16:45:24:09:a0:ee:d3:01:24:95:9b:e6: 55:e4:f6:fa:1b:6c:5b:48:81:09:4e:5d:07:1d:01:73:ba:07: db:3d:ab:f6:c5:79:2a:7f:8a:0c:35:1e:b7:63:24:d2:e9:86: 24:b3:47:15:af:19:92:23:49:ba:65:b2:25:4e:61:d1:37:5b: 11:d4:e7:a7:e5:c9:c1:bb:8f:5c:34:14:17:b8:6d:1d:fd:c7: 95:7b:07:10:4b:28:6c:45:02:f7:29:e1:82:78:45:d2:96:a6: 0c:ac:d7:40:08:27:f2:1e:fb:ce:b5:72:b1:54:c7:16:86:77: a5:7f:88:ce:db:27:2f:78:6e:73:33:d7:25:12:38:b5:67:14: 3a:0d:19:13:a7:25:fa:80:f0:1f:e8:9a:63:c1:22:a5:4e:ef: 4c:69:fc:07:47:78:d7:4e:0a:85:b1:f5:b8:d5:14:62:c7:0d: bd:0b:eb:f2:73:df:11:09:9c:b5:89:10:f5:e6:4f:31:5b:3d: 9e:2b:be:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdg1EY4ltTyrlxUv7numhjaUTZi4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNjA0MTkwMTE2MjZaFw0yNjA0MjIxMTI3MjZaMDMxMTAvBgNV BAMTKDg3MjgzNjlCMTYzRTJBNzg3ODI3QThERTA4Q0U4RDlDN0I1Qzc4MTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6F3s78HGLglHO0O4FDxT1WWpu U0QehJjrHcA5k88PpOlpRY3r6j/m1JDxi7IMMd2S5ALIzOpZIevy85LWDq1joc6M mNs8CEmRLSZ7x13bn5LAyPn6I73ny17oNk44SvG78Mw2+jtnHFqOAEwiPpbxiFo2 GoVjJKjYh8oFVH0bfiBt361595rRXJ6Q9zoqiMPFzrm0lRMJubPX16RAvplQOhZ5 xm72rewdpmXkKmgM+x7KV5JRAknN1fBHnP8WySkerNb7ivfwOmo0sFczUgivFMta e4fBF02n0/FkmH7Er+APu4b3csJBvYltqPdSBQOLmw7O7/pTc88A8cPvG51rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhyg2mxY+Knh4J6jeCM6NnHtceBUwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACg5+tLmymN97mAW4rrhfvss+q0jQOU+Clnr TJf0dyfzieTWK7ntHjfvpvFTZGDfvZdTIJIMBBJaIcb5gRZFJAmg7tMBJJWb5lXk 9vobbFtIgQlOXQcdAXO6B9s9q/bFeSp/igw1HrdjJNLphiSzRxWvGZIjSbplsiVO YdE3WxHU56flycG7j1w0FBe4bR39x5V7BxBLKGxFAvcp4YJ4RdKWpgys10AIJ/Ie +861crFUxxaGd6V/iM7bJy94bnMz1yUSOLVnFDoNGROnJfqA8B/ommPBIqVO70xp /AdHeNdOCoWx9bjVFGLHDb0L6/Jz3xEJnLWJEPXmTzFbPZ4rvow= -----END CERTIFICATE-----Generated at Sun Apr 19 11:00:07 2026 by rpki-client