$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: oqzvEZwpIvjQ3M6yIB30obsxdTItKStOC4EaHVRgLH4= Subject key identifier: 5C:E0:41:12:44:16:FF:14:D3:12:8D:DD:78:0B:7D:75:06:B6:A2:0A Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 7281DDD8E43060E8511C2345D335B66A6EE226FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01E8 Signing time: Fri 22 Aug 2025 15:51:16 +0000 Manifest this update: Fri 22 Aug 2025 15:46:16 +0000 Manifest next update: Mon 25 Aug 2025 22:44:16 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: 3lcODgmh68u9sSTmkYrJjO9ETaNY58PTanUfw6jC/oI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:81:dd:d8:e4:30:60:e8:51:1c:23:45:d3:35:b6:6a:6e:e2:26:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Aug 22 15:46:16 2025 GMT Not After : Aug 25 22:44:16 2025 GMT Subject: CN=5CE041124416FF14D3128DDD780B7D7506B6A20A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:a6:c7:ba:08:1f:3e:ad:9e:1d:8c:ab:e5:d3: 17:75:7c:74:75:ce:35:ad:a8:dd:5f:e1:77:f6:ff: f2:7e:11:ef:31:73:af:ae:d6:a1:00:85:42:6e:0d: 84:53:9c:cb:16:bf:6b:9e:0e:7a:fc:eb:60:51:f2: d6:2b:6d:fb:71:d7:3e:8e:f5:62:67:d1:c5:c3:06: 8a:51:89:e2:dd:14:b9:02:b0:66:03:45:1e:a5:d4: 0f:b6:0e:b5:0b:cf:5b:eb:d2:ba:77:88:9d:1d:d6: 61:b2:56:06:15:ea:54:0b:89:1f:53:14:bb:e9:aa: 93:b6:18:bd:ac:44:34:38:1a:74:40:58:c5:ab:c2: b3:dd:a8:a2:c4:90:ba:3c:d3:b4:d5:41:75:95:28: 20:51:2b:e5:69:b6:a9:85:e9:01:07:b1:1a:3a:5c: e4:df:4e:81:db:aa:7d:4e:6f:7e:25:50:c6:b6:60: 16:0d:35:66:c3:ec:8c:c8:71:f8:84:ed:bf:b0:11: 0b:ad:89:61:db:10:c7:d5:82:ee:ef:ce:a0:57:e8: 6c:67:9c:fa:f5:c8:92:fe:3d:a5:04:b9:bd:ac:ac: 48:78:7c:44:2f:31:24:51:8d:68:dd:b4:a6:bb:10: 2b:1a:d2:56:40:5a:7f:94:6e:0e:3d:53:95:0c:b2: ce:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:E0:41:12:44:16:FF:14:D3:12:8D:DD:78:0B:7D:75:06:B6:A2:0A X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:eb:22:ef:0e:48:3a:12:e6:be:9d:d8:7a:e8:00:9e:d8:e5: 80:52:b2:e1:de:33:1e:ea:3a:68:2c:b0:a5:ef:31:1c:77:e2: b6:20:e5:32:dd:09:2f:40:d2:7d:52:42:4f:03:78:00:17:70: 13:dd:13:eb:1a:b8:0e:70:7b:a3:c4:a4:f1:9b:ac:79:36:8e: 1b:73:83:80:2f:38:ba:d0:4e:97:37:02:9e:81:49:72:d1:ca: c0:b8:8f:b8:da:d1:fd:00:3c:b9:c3:28:39:e7:19:75:43:34: ac:40:cb:5e:ae:f9:d3:a5:a4:10:be:a2:a1:01:b8:6e:ad:d4: f9:a2:7b:0c:c5:c5:80:79:e7:8b:c5:7f:08:fe:e1:64:96:a6: 34:cf:2b:a0:02:98:f4:ac:55:85:6a:e8:84:3f:de:b7:1c:d5: 66:41:f5:5d:d2:d4:a4:a0:f2:c2:51:7d:7e:59:59:ec:4e:a7: 73:25:a8:6f:a4:06:1e:ce:37:b9:94:6e:00:c9:b4:12:d0:5d: 6a:1c:a9:24:fe:6b:86:c8:d5:86:d7:76:c8:81:b6:e7:9e:79: e3:31:4b:0f:21:93:a6:04:bc:94:08:ad:18:bd:95:f9:88:9c: da:3c:da:63:ea:a0:ee:ac:72:aa:90:54:e8:a8:0d:7c:6c:5e: 40:de:44:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcoHd2OQwYOhRHCNF0zW2am7iJv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA4MjIxNTQ2MTZaFw0yNTA4MjUyMjQ0MTZaMDMxMTAvBgNV BAMTKDVDRTA0MTEyNDQxNkZGMTREMzEyOERERDc4MEI3RDc1MDZCNkEyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDApse6CB8+rZ4djKvl0xd1fHR1 zjWtqN1f4Xf2//J+Ee8xc6+u1qEAhUJuDYRTnMsWv2ueDnr862BR8tYrbftx1z6O 9WJn0cXDBopRieLdFLkCsGYDRR6l1A+2DrULz1vr0rp3iJ0d1mGyVgYV6lQLiR9T FLvpqpO2GL2sRDQ4GnRAWMWrwrPdqKLEkLo807TVQXWVKCBRK+VptqmF6QEHsRo6 XOTfToHbqn1Ob34lUMa2YBYNNWbD7IzIcfiE7b+wEQutiWHbEMfVgu7vzqBX6Gxn nPr1yJL+PaUEub2srEh4fEQvMSRRjWjdtKa7ECsa0lZAWn+Ubg49U5UMss4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXOBBEkQW/xTTEo3deAt9dQa2ogowHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7rIu8OSDoS5r6d2HroAJ7Y5YBSsuHeMx7q OmgssKXvMRx34rYg5TLdCS9A0n1SQk8DeAAXcBPdE+sauA5we6PEpPGbrHk2jhtz g4AvOLrQTpc3Ap6BSXLRysC4j7ja0f0APLnDKDnnGXVDNKxAy16u+dOlpBC+oqEB uG6t1PmiewzFxYB554vFfwj+4WSWpjTPK6ACmPSsVYVq6IQ/3rcc1WZB9V3S1KSg 8sJRfX5ZWexOp3MlqG+kBh7ON7mUbgDJtBLQXWocqST+a4bI1YbXdsiBtueeeeMx Sw8hk6YEvJQIrRi9lfmInNo82mPqoO6scqqQVOioDXxsXkDeRO4= -----END CERTIFICATE-----Generated at Sat Aug 23 18:28:33 2025 by rpki-client