$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: qcjelTRU5w7XHxF4S/b0j2+jNKoFs/lbMVoO2IwGfUs= Subject key identifier: 00:68:6F:04:5C:22:25:6A:78:9D:ED:2F:1D:12:C1:9E:49:F2:9B:0F Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 2B002C2FA55574408F356DF363A478CEA316CB42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01E1 Signing time: Wed 06 Aug 2025 17:01:16 +0000 Manifest this update: Wed 06 Aug 2025 16:56:16 +0000 Manifest next update: Sat 09 Aug 2025 20:37:16 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: z6+9t91CQGA8uNboqhEhZ331/YtgDdAaLl2cDJ7EGbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:37:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:00:2c:2f:a5:55:74:40:8f:35:6d:f3:63:a4:78:ce:a3:16:cb:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Aug 6 16:56:16 2025 GMT Not After : Aug 9 20:37:16 2025 GMT Subject: CN=00686F045C22256A789DED2F1D12C19E49F29B0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fc:b2:af:15:c8:f8:9e:b1:b2:49:15:6a:70: 9b:9c:c7:ca:9f:e0:bc:60:8a:b1:d6:0f:82:de:a1: 73:bc:e4:73:5e:1d:6d:cf:8d:df:bf:fc:7b:f4:15: fa:a0:63:ca:8d:83:36:97:e9:28:88:34:6d:d1:ab: c7:5b:91:1b:7c:51:fb:6e:db:36:bd:fa:45:ba:45: 3b:44:60:81:ac:57:b7:e2:76:b2:24:8e:6c:bd:d0: bb:e9:70:16:1f:7f:64:10:69:f1:66:1c:fe:d2:9e: e2:9d:68:7d:35:c7:b2:28:5a:f1:65:c3:91:e5:58: 5e:c8:c9:a3:55:8d:4c:a5:ab:52:66:0a:96:22:b3: 0a:6b:8f:65:34:40:3a:b2:c7:d7:36:8f:8d:8e:ea: 79:30:d2:ee:e5:24:e2:00:b2:12:6e:83:db:f5:82: 17:ef:6c:4f:15:93:76:69:30:f0:20:de:db:c0:14: b3:0e:f6:5b:ec:ba:4f:42:58:28:ed:e8:58:b8:6d: f3:1d:98:59:15:ca:4b:07:e9:0e:90:7f:92:7e:d8: 94:95:ee:50:95:f4:dc:8e:53:56:79:a2:4b:c2:a3: 36:1e:cb:ab:6e:dd:cd:e0:e5:9e:f0:bc:ec:1d:30: df:63:7d:12:8e:6a:7e:c2:b9:9e:5e:36:03:cc:f0: 3d:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:68:6F:04:5C:22:25:6A:78:9D:ED:2F:1D:12:C1:9E:49:F2:9B:0F X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e4:ab:9e:16:95:a0:88:3a:f7:4a:32:32:65:bd:6a:f1:77:53: c7:fd:9d:6e:ed:93:25:89:0c:0f:a6:5e:f9:01:58:49:5e:1a: 17:8a:47:c2:8a:07:15:ce:1a:85:d9:de:0c:19:85:a5:03:41: 69:ff:43:12:11:8b:71:20:b5:5b:68:84:24:ab:9f:59:b8:bd: 96:b7:b0:8f:98:9f:67:83:1a:ce:4d:d6:a2:c8:bd:ec:e6:2a: 4a:92:2a:36:46:51:dd:34:c8:88:9b:ff:5e:b2:f3:8c:21:4a: 25:4f:6b:e6:43:20:2e:c1:51:d0:e5:d0:91:da:c5:d6:9e:92: 46:3e:27:44:fc:6c:ff:32:66:3f:8a:e9:4a:a1:53:8e:66:d8: 69:a6:ab:5b:04:0b:41:ba:a0:ef:25:53:b7:da:07:56:ae:62: 59:66:ca:16:d3:a9:b9:95:3a:3c:dc:a7:7a:78:bc:c2:b1:ca: cd:48:9c:d7:c8:16:9f:5f:20:91:0f:0d:c9:7a:51:b2:5e:fc: 48:34:fe:fd:94:ba:27:a5:e3:18:85:11:e6:bf:dc:0f:44:20: bd:8a:e3:de:7d:88:72:cd:41:12:01:74:70:2b:0c:24:b6:70: d2:61:ac:1e:90:ca:ae:4d:6e:27:8e:87:23:70:e3:35:9c:e9: 01:7d:a5:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKwAsL6VVdECPNW3zY6R4zqMWy0IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA4MDYxNjU2MTZaFw0yNTA4MDkyMDM3MTZaMDMxMTAvBgNV BAMTKDAwNjg2RjA0NUMyMjI1NkE3ODlERUQyRjFEMTJDMTlFNDlGMjlCMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm/LKvFcj4nrGySRVqcJucx8qf 4LxgirHWD4LeoXO85HNeHW3Pjd+//Hv0FfqgY8qNgzaX6SiING3Rq8dbkRt8Uftu 2za9+kW6RTtEYIGsV7fidrIkjmy90LvpcBYff2QQafFmHP7SnuKdaH01x7IoWvFl w5HlWF7IyaNVjUylq1JmCpYiswprj2U0QDqyx9c2j42O6nkw0u7lJOIAshJug9v1 ghfvbE8Vk3ZpMPAg3tvAFLMO9lvsuk9CWCjt6Fi4bfMdmFkVyksH6Q6Qf5J+2JSV 7lCV9NyOU1Z5okvCozYey6tu3c3g5Z7wvOwdMN9jfRKOan7CuZ5eNgPM8D2rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAGhvBFwiJWp4ne0vHRLBnknymw8wHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOSrnhaVoIg690oyMmW9avF3U8f9nW7tkyWJ DA+mXvkBWEleGheKR8KKBxXOGoXZ3gwZhaUDQWn/QxIRi3EgtVtohCSrn1m4vZa3 sI+Yn2eDGs5N1qLIvezmKkqSKjZGUd00yIib/16y84whSiVPa+ZDIC7BUdDl0JHa xdaekkY+J0T8bP8yZj+K6UqhU45m2Gmmq1sEC0G6oO8lU7faB1auYllmyhbTqbmV Ojzcp3p4vMKxys1InNfIFp9fIJEPDcl6UbJe/Eg0/v2Uuiel4xiFEea/3A9EIL2K 4959iHLNQRIBdHArDCS2cNJhrB6Qyq5NbieOhyNw4zWc6QF9pZ4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:03 2025 by rpki-client