$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: twA95Qn7QVyleuZxlRxbDcGlF3aYVkopApGgJSCL0hM= Subject key identifier: 7D:A4:5E:40:4D:40:79:62:FB:AF:24:D7:C8:57:A8:9A:E4:DF:26:37 Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 357E91F259F5B73494F506E76F760E732591A3D7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 20:23:51 +0000 Manifest this update: Tue 16 Jun 2026 20:18:51 +0000 Manifest next update: Wed 17 Jun 2026 21:08:51 +0000 Files and hashes: 1: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 3: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) 4: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: wbI03XNpyob9et6TMMiSFsy8eF6Zm5ewxsxUv+w9CRs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 21:08:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:7e:91:f2:59:f5:b7:34:94:f5:06:e7:6f:76:0e:73:25:91:a3:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Jun 16 20:18:51 2026 GMT Not After : Jun 17 21:08:51 2026 GMT Subject: CN=7DA45E404D407962FBAF24D7C857A89AE4DF2637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:e6:91:ff:0b:4a:2c:88:10:70:3a:08:18:2b: 1d:3d:8b:08:b5:82:3f:d8:62:d3:0b:24:5b:95:62: b1:8b:82:91:52:7e:0d:93:66:44:e6:21:86:e3:1e: 44:3c:23:20:9b:c0:88:f9:ec:dd:35:05:e4:aa:88: 5a:09:52:0b:f3:86:95:59:63:74:93:57:6f:33:ed: 0c:59:a0:bb:07:70:82:83:34:2a:a4:2e:4a:0b:ee: 4a:94:f4:34:14:02:10:26:82:b9:7f:d2:b9:ac:fd: 7d:64:dc:84:75:c7:fd:cf:9d:63:ce:09:6b:c0:00: 13:fd:d2:a2:02:ae:44:74:95:f1:b8:89:23:35:10: b7:2a:33:b3:d3:95:d3:05:4e:b7:53:0b:84:9d:47: f3:8c:26:39:1b:cb:8c:d5:93:6b:c2:2e:3e:16:c7: e7:31:a1:26:ce:3e:95:0a:ef:8a:c6:18:45:09:33: 41:fc:6c:fb:4c:df:cd:7d:a7:40:fc:c5:37:00:87: 7a:55:27:2e:09:8d:87:60:e1:73:d4:b9:ea:c6:aa: dc:45:84:e6:10:ec:26:17:9a:1b:18:87:d1:5f:4c: 9d:bb:c7:61:6f:a5:dc:01:45:9a:0b:01:1d:c2:f2: 25:f8:79:97:7e:8b:e7:2f:ac:43:27:3e:f4:cb:65: e1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:A4:5E:40:4D:40:79:62:FB:AF:24:D7:C8:57:A8:9A:E4:DF:26:37 X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:b7:33:23:c8:fc:d3:6a:06:94:b1:3e:ad:43:be:45:c4:47: 06:90:73:a8:28:8a:75:de:d1:a7:a3:78:40:c4:d7:65:f1:51: c0:b3:c2:b3:55:bd:72:36:73:13:e8:90:26:8f:99:c2:dc:d0: f9:46:7c:8b:f8:78:48:7d:94:29:93:d5:45:b6:82:09:6d:85: 1a:44:52:30:48:89:f0:60:dc:b0:db:af:c5:80:88:e5:62:da: 75:25:21:99:78:85:82:e4:2f:ba:e2:8b:e0:0a:04:4b:8b:52: e9:42:22:b7:2c:1a:e5:c4:a0:0c:b7:9e:56:ad:5a:aa:01:d2: 1b:44:78:5f:85:40:6c:24:1b:34:3d:7a:5c:9e:46:69:34:75: 5a:3a:a1:42:f4:10:7b:07:c7:57:81:a8:b5:81:5b:cf:36:e4: a2:05:30:f9:bc:17:92:a8:ff:f4:93:8d:8a:ce:8f:18:6a:92: e7:4f:ff:6d:48:81:b5:d7:43:bd:ee:33:2d:dc:66:3c:07:e7: e5:d8:88:39:91:75:40:ac:9f:d7:34:27:48:a3:4b:70:9e:37: 04:8c:37:f7:5d:c3:7c:43:9f:8b:a2:df:93:97:40:98:3d:b3: 3a:55:b5:ab:11:b8:28:7b:2a:9d:99:1c:f4:70:28:74:39:42: 22:bd:da:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNX6R8ln1tzSU9Qbnb3YOcyWRo9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA2MTYyMDE4NTFaFw0yNjA2MTcyMTA4NTFaMDMxMTAvBgNV BAMTKDdEQTQ1RTQwNEQ0MDc5NjJGQkFGMjREN0M4NTdBODlBRTRERjI2MzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP5pH/C0osiBBwOggYKx09iwi1 gj/YYtMLJFuVYrGLgpFSfg2TZkTmIYbjHkQ8IyCbwIj57N01BeSqiFoJUgvzhpVZ Y3STV28z7QxZoLsHcIKDNCqkLkoL7kqU9DQUAhAmgrl/0rms/X1k3IR1x/3PnWPO CWvAABP90qICrkR0lfG4iSM1ELcqM7PTldMFTrdTC4SdR/OMJjkby4zVk2vCLj4W x+cxoSbOPpUK74rGGEUJM0H8bPtM3819p0D8xTcAh3pVJy4JjYdg4XPUuerGqtxF hOYQ7CYXmhsYh9FfTJ27x2FvpdwBRZoLAR3C8iX4eZd+i+cvrEMnPvTLZeGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfaReQE1AeWL7ryTXyFeomuTfJjcwHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAe3MyPI/NNqBpSxPq1DvkXERwaQc6goinXe 0aejeEDE12XxUcCzwrNVvXI2cxPokCaPmcLc0PlGfIv4eEh9lCmT1UW2gglthRpE UjBIifBg3LDbr8WAiOVi2nUlIZl4hYLkL7rii+AKBEuLUulCIrcsGuXEoAy3nlat WqoB0htEeF+FQGwkGzQ9elyeRmk0dVo6oUL0EHsHx1eBqLWBW8825KIFMPm8F5Ko //STjYrOjxhqkudP/21IgbXXQ73uMy3cZjwH5+XYiDmRdUCsn9c0J0ijS3CeNwSM N/ddw3xDn4ui35OXQJg9szpVtasRuCh7Kp2ZHPRwKHQ5QiK92kY= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:49 2026 by rpki-client