$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: VDWFtG/WR/RAcIQak72QT9r8kZoZ0GTGxp8Jb7VVQn8= Subject key identifier: 41:E6:E3:C4:31:51:16:A4:CC:1B:D7:0B:4A:FA:DE:0D:52:DD:85:77 Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 5DCE87C219CA11CF04ADFE1A8774E55BE1E38EEC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: C0 Signing time: Mon 21 Sep 2026 13:53:46 +0000 Manifest this update: Mon 21 Sep 2026 13:48:46 +0000 Manifest next update: Tue 22 Sep 2026 17:51:46 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 3: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: qk1mnnaIRdDStEL1/XcZRFESTbZTdikVw51xbIz1WdI=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 17:51:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:ce:87:c2:19:ca:11:cf:04:ad:fe:1a:87:74:e5:5b:e1:e3:8e:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Sep 21 13:48:46 2026 GMT Not After : Sep 22 17:51:46 2026 GMT Subject: CN=41E6E3C4315116A4CC1BD70B4AFADE0D52DD8577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:af:64:24:81:9a:fd:ea:8b:ff:4d:36:54:27: 0f:d8:3c:1f:19:ea:5f:3f:e4:df:c7:43:25:f3:f8: 66:16:e5:1a:43:58:23:3e:25:e4:1c:5b:f4:7a:5c: 9f:20:db:99:d6:b4:95:1c:c8:4e:35:bd:90:c8:16: 55:3a:c8:d2:fc:29:c9:b8:54:42:2c:49:e5:8d:bb: 4a:cf:e9:3f:6a:a0:97:8e:ff:c9:3f:bd:47:82:ea: 74:54:66:e1:65:c3:f4:29:3e:ff:1a:6f:72:d7:34: b5:1d:45:94:6a:db:89:3c:26:1c:9b:58:d1:21:af: 8d:7d:f1:16:a1:ab:26:0d:57:11:ff:9e:a0:a0:de: 7e:ab:bf:37:15:5a:30:37:8d:a1:30:69:4f:b4:37: 58:eb:b1:a4:0c:b4:37:52:9a:d8:39:ba:ef:0f:de: fb:7c:53:1e:a2:bb:51:61:b6:34:20:1c:ab:53:2a: 21:18:b4:1b:00:2b:d8:96:36:05:bb:3e:b7:73:f9: 83:9f:bf:bc:ae:80:3b:65:8d:6f:15:e6:2f:21:36: 5b:fc:f3:41:d2:1b:62:a7:a0:84:8c:ba:07:b9:5f: 24:ea:a1:d7:18:e8:a7:94:cc:7f:de:ea:f5:dd:20: 75:94:bd:f2:be:49:b4:97:88:a8:e2:5b:3b:53:9c: e4:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:E6:E3:C4:31:51:16:A4:CC:1B:D7:0B:4A:FA:DE:0D:52:DD:85:77 X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:33:a7:c7:1f:f6:fc:67:9d:3d:c5:b7:4a:b8:2c:09:7e:ce: d9:f7:99:16:cf:f7:18:44:00:90:e6:b7:da:31:3c:c1:47:6e: 82:cb:d2:b5:c9:bd:b1:78:68:6c:ab:b6:63:38:b0:38:bc:59: 75:ac:22:97:e3:b0:91:71:79:c1:19:c0:e6:7e:61:9a:94:e3: bc:3f:78:e2:82:4d:f6:b3:f2:13:62:f6:80:7d:20:a0:1e:4b: 01:46:ba:cf:27:92:5f:43:09:b6:6f:3b:06:c4:44:32:bc:e4: 9d:c1:88:19:6e:c3:b8:18:a5:98:1d:26:b5:97:89:e6:7e:15: 8b:a9:79:2b:2d:da:4b:fb:1d:09:73:d8:59:8e:ae:2b:af:ed: 4c:92:52:62:6a:87:3f:0a:34:56:54:14:0c:c2:f2:8f:12:32: 22:80:4f:db:16:01:47:06:60:c0:cc:e5:04:fe:09:ac:c9:e5: 14:67:37:35:1f:58:3f:20:91:e1:0e:e2:1a:08:ce:0a:81:b3: c9:35:63:34:7e:eb:c4:9c:61:fa:09:f3:e0:f8:26:af:4d:58: 04:68:23:89:39:d0:0d:76:92:66:1b:db:52:00:37:e3:f6:5a: 30:6d:df:19:e1:f7:c6:3d:0b:22:29:50:d3:8b:00:85:53:ef: f9:45:59:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXc6HwhnKEc8Erf4ah3TlW+HjjuwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA5MjExMzQ4NDZaFw0yNjA5MjIxNzUxNDZaMDMxMTAvBgNV BAMTKDQxRTZFM0M0MzE1MTE2QTRDQzFCRDcwQjRBRkFERTBENTJERDg1NzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+r2QkgZr96ov/TTZUJw/YPB8Z 6l8/5N/HQyXz+GYW5RpDWCM+JeQcW/R6XJ8g25nWtJUcyE41vZDIFlU6yNL8Kcm4 VEIsSeWNu0rP6T9qoJeO/8k/vUeC6nRUZuFlw/QpPv8ab3LXNLUdRZRq24k8Jhyb WNEhr4198RahqyYNVxH/nqCg3n6rvzcVWjA3jaEwaU+0N1jrsaQMtDdSmtg5uu8P 3vt8Ux6iu1FhtjQgHKtTKiEYtBsAK9iWNgW7Prdz+YOfv7yugDtljW8V5i8hNlv8 80HSG2KnoISMuge5XyTqodcY6KeUzH/e6vXdIHWUvfK+SbSXiKjiWztTnOQLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQebjxDFRFqTMG9cLSvreDVLdhXcwHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALczp8cf9vxnnT3Ft0q4LAl+ztn3mRbP9xhE AJDmt9oxPMFHboLL0rXJvbF4aGyrtmM4sDi8WXWsIpfjsJFxecEZwOZ+YZqU47w/ eOKCTfaz8hNi9oB9IKAeSwFGus8nkl9DCbZvOwbERDK85J3BiBluw7gYpZgdJrWX ieZ+FYupeSst2kv7HQlz2FmOriuv7UySUmJqhz8KNFZUFAzC8o8SMiKAT9sWAUcG YMDM5QT+CazJ5RRnNzUfWD8gkeEO4hoIzgqBs8k1YzR+68ScYfoJ8+D4Jq9NWARo I4k50A12kmYb21IAN+P2WjBt3xnh98Y9CyIpUNOLAIVT7/lFWc8= -----END CERTIFICATE-----Generated at Tue Sep 22 01:06:54 2026 by rpki-client