$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: SiQTLmUkjz1lywGhBaAF1H9mE5uQXS0mqzZei4eGH/Q= Subject key identifier: AA:10:0E:79:A8:3A:66:54:6D:8D:D0:5D:89:80:D3:D2:AA:4E:8F:9F Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 5C40435C73F4958188F3356D77C15933CC6CA855 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 023D Signing time: Sun 01 Mar 2026 22:41:25 +0000 Manifest this update: Sun 01 Mar 2026 22:36:25 +0000 Manifest next update: Thu 05 Mar 2026 09:14:25 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: B6EMS95q4+ZWUssuBjnH8AQd+B6hpn4GuKGjDNujplI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:40:43:5c:73:f4:95:81:88:f3:35:6d:77:c1:59:33:cc:6c:a8:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Mar 1 22:36:25 2026 GMT Not After : Mar 5 09:14:25 2026 GMT Subject: CN=AA100E79A83A66546D8DD05D8980D3D2AA4E8F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:44:77:e5:4a:e6:b3:96:df:18:40:dd:84: f8:eb:40:7f:92:c5:dd:5c:59:58:81:55:50:3f:2f: 52:11:93:1c:a5:d8:1f:f1:d5:f8:bd:49:71:86:e3: e6:a6:20:31:1e:45:37:90:b0:ad:8e:e4:f2:1f:6a: d0:5b:c2:12:65:c7:29:94:6d:ed:9d:4e:c5:26:1d: f7:51:77:37:c1:3d:06:53:32:6d:80:10:3d:01:ea: 17:d6:b2:f5:f2:1f:da:9a:96:2c:cc:9f:83:04:04: 5d:28:52:c2:05:0b:2e:93:bd:ca:eb:d0:8d:81:bc: da:20:81:a9:ce:74:00:e2:9f:1d:85:5d:b9:40:3b: 9a:7a:a5:94:d8:a1:20:32:8e:77:e0:d1:31:28:cd: d5:cf:67:11:8c:b3:0f:38:73:c5:a3:d2:3a:c7:72: 22:8c:7f:58:fc:dd:51:5f:19:b5:51:0a:38:c9:f1: 6e:42:c2:04:38:9b:01:89:76:1f:e8:85:73:74:ce: d2:65:31:52:df:9a:a8:ca:50:31:ff:54:92:b8:bc: d1:37:09:a7:a3:f4:d3:85:48:14:a6:7f:a3:23:30: 88:67:4a:2a:8c:f0:9d:49:59:fb:df:df:fb:51:cd: 49:b7:f5:c1:7c:f6:4a:5e:d6:60:d6:1d:c1:d0:b1: 14:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:10:0E:79:A8:3A:66:54:6D:8D:D0:5D:89:80:D3:D2:AA:4E:8F:9F X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3e:bf:3d:94:5e:16:d0:d9:12:4a:1a:ef:13:c2:6f:0f:6d: 45:61:f4:65:2a:d5:53:49:d8:70:9a:79:e7:4e:bf:6a:a3:4a: b8:ba:ef:34:9c:0d:62:48:a0:ba:81:9a:44:c5:46:41:49:6a: 4d:26:49:01:bd:10:5b:30:8a:a1:ba:cc:26:b5:c8:77:8e:79: 41:8a:77:a9:a4:79:db:d5:2e:22:9a:e9:7b:6b:12:47:45:43: 6e:f1:e1:10:b8:30:bf:3e:eb:25:fa:3f:fa:a0:4b:aa:62:56: c6:7b:05:ba:83:ca:5e:51:37:c8:e8:8f:6e:b4:c5:66:d5:49: 6e:d0:7f:fc:ed:4c:4d:17:00:8d:f7:e2:b1:b6:2f:23:cc:cf: c8:59:42:01:e3:56:ae:65:42:13:0b:6b:77:2a:44:48:fe:c5: 5c:55:8b:2d:e1:5a:5b:fa:54:53:38:0f:31:3d:03:03:30:db: 6f:29:2e:0d:60:d4:d6:ae:55:72:43:ed:cb:80:f5:61:de:91: 7e:c9:af:7d:92:be:fc:da:bf:1b:5d:c2:3d:b7:40:ab:b8:44: 48:09:13:0b:69:47:8f:2c:a9:3b:aa:21:93:4c:c1:d5:ee:32: 0c:cc:07:bf:88:b8:e2:a0:58:67:18:bb:2e:87:27:6e:ef:8d: 75:06:8f:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXEBDXHP0lYGI8zVtd8FZM8xsqFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNjAzMDEyMjM2MjVaFw0yNjAzMDUwOTE0MjVaMDMxMTAvBgNV BAMTKEFBMTAwRTc5QTgzQTY2NTQ2RDhERDA1RDg5ODBEM0QyQUE0RThGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAUR35Urms5bfGEDdhPjrQH+S xd1cWViBVVA/L1IRkxyl2B/x1fi9SXGG4+amIDEeRTeQsK2O5PIfatBbwhJlxymU be2dTsUmHfdRdzfBPQZTMm2AED0B6hfWsvXyH9qalizMn4MEBF0oUsIFCy6Tvcrr 0I2BvNogganOdADinx2FXblAO5p6pZTYoSAyjnfg0TEozdXPZxGMsw84c8Wj0jrH ciKMf1j83VFfGbVRCjjJ8W5CwgQ4mwGJdh/ohXN0ztJlMVLfmqjKUDH/VJK4vNE3 Caej9NOFSBSmf6MjMIhnSiqM8J1JWfvf3/tRzUm39cF89kpe1mDWHcHQsRQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqhAOeag6ZlRtjdBdiYDT0qpOj58wHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM+vz2UXhbQ2RJKGu8Twm8PbUVh9GUq1VNJ 2HCaeedOv2qjSri67zScDWJIoLqBmkTFRkFJak0mSQG9EFswiqG6zCa1yHeOeUGK d6mkedvVLiKa6XtrEkdFQ27x4RC4ML8+6yX6P/qgS6piVsZ7BbqDyl5RN8joj260 xWbVSW7Qf/ztTE0XAI334rG2LyPMz8hZQgHjVq5lQhMLa3cqREj+xVxViy3hWlv6 VFM4DzE9AwMw228pLg1g1NauVXJD7cuA9WHekX7Jr32Svvzavxtdwj23QKu4REgJ EwtpR48sqTuqIZNMwdXuMgzMB7+IuOKgWGcYuy6HJ27vjXUGjzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:31 2026 by rpki-client