$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: 3vPjptRNeDKKZv4n+qfxfHz6NjwUrwaw1RndbO7ZeRc= Subject key identifier: E9:89:03:0F:B5:FB:47:06:34:90:BA:97:4C:0C:27:B6:5C:1A:F9:56 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 5602B78F0F59FEAB9CB7396B5C148F83A164CCEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01C9 Signing time: Fri 13 Jun 2025 18:02:27 +0000 Manifest this update: Fri 13 Jun 2025 17:57:27 +0000 Manifest next update: Tue 17 Jun 2025 04:43:27 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: SpEpZpQSc1mdV7TSQ2UYwnX7vQxlA2rH4T9f/FwzE3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 04:43:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:02:b7:8f:0f:59:fe:ab:9c:b7:39:6b:5c:14:8f:83:a1:64:cc:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Jun 13 17:57:27 2025 GMT Not After : Jun 17 04:43:27 2025 GMT Subject: CN=E989030FB5FB47063490BA974C0C27B65C1AF956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b7:c9:0b:70:66:cf:3b:82:72:4b:7c:02:d9: 82:da:69:c8:c3:06:82:64:c5:e3:4d:10:db:18:a9: af:40:fe:b2:27:22:e7:84:ca:93:79:b7:f4:01:2b: 81:13:ca:79:5d:37:86:3d:52:6e:e6:9d:20:8a:21: 1f:98:a2:6f:a8:fa:c0:25:56:c0:55:4d:b9:79:b8: a1:e3:5d:bd:7e:5f:d3:3f:ac:e0:72:f1:2f:29:a9: bc:78:00:da:d1:cc:15:0d:3e:e0:8e:e3:a3:da:6e: fd:da:44:e1:49:e9:5d:88:67:cf:b4:b3:16:b7:73: 0e:5e:7b:65:d3:3b:a4:23:71:90:1a:49:84:7d:19: e8:b4:87:df:3c:c3:2d:b9:79:ea:e2:dc:37:62:03: 98:8a:b6:ef:3b:d8:b4:da:ae:52:6e:a1:dc:83:7b: ac:49:fe:88:a0:ea:ee:59:f8:99:ea:f0:4f:bc:92: 8a:21:21:e1:09:0c:94:5a:f6:61:02:94:71:2d:1c: 7d:64:bd:74:50:66:01:36:aa:3f:6d:24:39:4c:3f: 13:f3:34:e9:46:a2:53:02:0e:51:f5:de:1b:65:17: 89:cb:25:1c:a6:0a:d5:cd:5c:09:21:47:ac:e4:da: 33:94:d1:17:f9:e9:2c:9c:da:8a:71:c7:96:18:c1: 88:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:89:03:0F:B5:FB:47:06:34:90:BA:97:4C:0C:27:B6:5C:1A:F9:56 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:05:68:b8:7e:5f:13:b4:55:a6:98:8d:8a:78:c8:cd:45:a7: 9d:e9:23:2d:97:00:77:7d:63:4f:81:fc:9a:8b:be:bd:fa:a5: 95:32:2b:49:1d:50:b1:95:bf:97:49:2d:be:3c:53:46:d6:e6: 5b:66:3e:ec:4d:02:0e:81:a3:3d:12:76:3e:66:fa:ae:14:bb: 9c:97:dc:02:79:ae:98:b1:8d:ee:3b:4e:a7:98:84:d4:96:f1: a2:35:6c:03:f9:f8:3d:a2:80:6d:67:7a:ba:84:33:43:4c:db: bc:cd:c1:1e:1f:90:d1:5d:5b:fb:34:6a:d3:2c:3c:61:9c:61: ee:16:25:68:74:cd:cf:72:d1:12:43:d9:1f:62:fd:97:fd:5b: f6:b2:b6:13:ed:26:2e:6e:45:e4:19:70:49:94:8a:02:72:2d: ab:d9:c4:71:43:6d:df:04:5a:33:c0:69:4c:53:d0:fd:96:42: 67:82:9f:0e:8d:59:e1:bc:3e:8a:d8:f9:fe:e1:b5:8d:97:3a: 5c:ae:4e:4e:e6:23:2b:06:f0:5b:a3:2b:7e:91:eb:78:84:3e: 5a:56:3c:6a:83:72:02:73:93:dc:d4:c3:4d:06:b6:93:b0:0c: b5:1a:14:39:0a:26:b0:75:27:a9:fc:ed:04:80:30:5f:69:3f: b3:88:cc:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgK3jw9Z/quctzlrXBSPg6FkzOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA2MTMxNzU3MjdaFw0yNTA2MTcwNDQzMjdaMDMxMTAvBgNV BAMTKEU5ODkwMzBGQjVGQjQ3MDYzNDkwQkE5NzRDMEMyN0I2NUMxQUY5NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAt8kLcGbPO4JyS3wC2YLaacjD BoJkxeNNENsYqa9A/rInIueEypN5t/QBK4ETynldN4Y9Um7mnSCKIR+Yom+o+sAl VsBVTbl5uKHjXb1+X9M/rOBy8S8pqbx4ANrRzBUNPuCO46Pabv3aROFJ6V2IZ8+0 sxa3cw5ee2XTO6QjcZAaSYR9Gei0h988wy25eeri3DdiA5iKtu872LTarlJuodyD e6xJ/oig6u5Z+Jnq8E+8koohIeEJDJRa9mEClHEtHH1kvXRQZgE2qj9tJDlMPxPz NOlGolMCDlH13htlF4nLJRymCtXNXAkhR6zk2jOU0Rf56Syc2opxx5YYwYg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6YkDD7X7RwY0kLqXTAwntlwa+VYwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsFaLh+XxO0VaaYjYp4yM1Fp53pIy2XAHd9 Y0+B/JqLvr36pZUyK0kdULGVv5dJLb48U0bW5ltmPuxNAg6Boz0Sdj5m+q4Uu5yX 3AJ5rpixje47TqeYhNSW8aI1bAP5+D2igG1nerqEM0NM27zNwR4fkNFdW/s0atMs PGGcYe4WJWh0zc9y0RJD2R9i/Zf9W/aythPtJi5uReQZcEmUigJyLavZxHFDbd8E WjPAaUxT0P2WQmeCnw6NWeG8PorY+f7htY2XOlyuTk7mIysG8FujK36R63iEPlpW PGqDcgJzk9zUw00GtpOwDLUaFDkKJrB1J6n87QSAMF9pP7OIzHo= -----END CERTIFICATE-----Generated at Mon Jun 16 01:29:33 2025 by rpki-client