$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: sTFay1xLVzG0MpF1KAA2+Fn/JH2jnuPIbXbyJFURK3o= Subject key identifier: E6:F6:6D:1C:A1:DC:1E:7C:7F:CA:9C:B8:67:F5:C3:63:E1:7F:19:B1 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 0964A7822D057FF17C8416DB4BFC5DF2E3D37B53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0201 Signing time: Sat 18 Oct 2025 03:41:16 +0000 Manifest this update: Sat 18 Oct 2025 03:36:16 +0000 Manifest next update: Tue 21 Oct 2025 13:50:16 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: rwymOdk2ZHSgVzD7+rQBEBTm88YLNPtrQL6NxLKCBoc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 13:50:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:64:a7:82:2d:05:7f:f1:7c:84:16:db:4b:fc:5d:f2:e3:d3:7b:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Oct 18 03:36:16 2025 GMT Not After : Oct 21 13:50:16 2025 GMT Subject: CN=E6F66D1CA1DC1E7C7FCA9CB867F5C363E17F19B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:37:b3:5b:b9:4a:c6:52:a9:46:ba:eb:dd:13: b7:f9:90:47:5a:95:b3:f8:ed:18:f5:6c:fe:64:b6: fe:d8:66:3b:2b:97:ec:eb:8c:8d:1c:73:7a:2c:07: fd:b2:88:89:35:cc:56:a6:c3:a4:59:75:09:51:96: 48:0e:bb:18:65:29:cf:3d:9a:2a:2d:6f:51:f6:35: 76:7c:5b:a7:94:04:c2:71:68:58:24:d3:43:fa:aa: 08:32:7d:78:44:d1:cc:25:f5:26:22:84:13:90:af: b5:51:0a:ee:a0:03:0b:28:8e:f0:e7:63:50:ce:0c: be:a4:28:3f:4a:1e:37:c9:ca:ba:da:91:2b:bc:16: 42:1d:30:79:8c:5d:9e:2c:bf:8c:a6:9f:b5:85:b7: 59:5e:5a:96:02:28:63:34:9a:1a:f8:35:98:61:7b: 02:ea:80:5b:72:bc:3e:14:e7:99:2f:fc:c6:1d:03: f4:a0:49:d7:b0:c0:69:15:83:90:76:69:38:d3:54: 37:a8:fa:86:2e:69:23:e5:5f:2f:4c:eb:36:23:b0: c5:20:22:58:da:68:23:a8:2a:53:03:2a:28:eb:09: fe:99:65:16:dd:c1:aa:13:fa:75:f1:f7:ac:51:4b: d9:82:2f:5e:1c:25:84:98:35:a8:27:9e:d4:84:90: db:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:F6:6D:1C:A1:DC:1E:7C:7F:CA:9C:B8:67:F5:C3:63:E1:7F:19:B1 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:16:47:41:73:44:b1:fe:9a:54:91:b1:c6:34:ca:49:02:40: 63:a7:0c:4d:55:bb:a9:48:c0:e3:0d:ec:ab:a9:c2:44:da:7b: 3e:84:fd:0f:86:94:40:f7:cd:b8:08:50:73:ab:88:bf:da:01: c2:8f:ae:1c:68:7d:e0:8f:b5:5f:df:8b:8f:fa:00:53:e1:47: a9:94:49:bf:9a:55:95:db:14:7f:88:4d:77:55:8d:e7:27:7d: 33:28:fc:9d:39:0e:0b:a9:8d:2c:a4:7b:53:94:42:9f:e7:f4: c5:9c:f9:55:44:1f:7a:bb:a6:4d:af:84:f5:b0:c3:05:9b:80: 76:c1:db:60:d9:75:20:78:85:52:8c:0a:a7:49:2c:4f:4b:39: 1d:08:4e:17:4d:f2:1e:ff:38:1d:98:9b:03:5d:6f:b9:bf:d7: 2d:18:7c:4b:56:bd:d3:8f:80:f7:85:16:49:63:81:17:1b:08: 95:87:4b:bc:75:58:b7:aa:90:c6:bf:6b:94:35:7d:6a:09:d3: f5:5f:44:d6:9a:8d:b1:7c:df:d8:3d:f5:a2:f4:b0:e4:e6:f7: a7:77:2e:e6:29:d8:60:94:3c:00:4e:91:f1:9d:cf:dd:bd:25: 11:e2:ea:70:19:8e:26:c0:41:50:02:bc:89:54:cf:9f:1a:15: d6:eb:f8:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCWSngi0Ff/F8hBbbS/xd8uPTe1MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTEwMTgwMzM2MTZaFw0yNTEwMjExMzUwMTZaMDMxMTAvBgNV BAMTKEU2RjY2RDFDQTFEQzFFN0M3RkNBOUNCODY3RjVDMzYzRTE3RjE5QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4N7NbuUrGUqlGuuvdE7f5kEda lbP47Rj1bP5ktv7YZjsrl+zrjI0cc3osB/2yiIk1zFamw6RZdQlRlkgOuxhlKc89 miotb1H2NXZ8W6eUBMJxaFgk00P6qggyfXhE0cwl9SYihBOQr7VRCu6gAwsojvDn Y1DODL6kKD9KHjfJyrrakSu8FkIdMHmMXZ4sv4ymn7WFt1leWpYCKGM0mhr4NZhh ewLqgFtyvD4U55kv/MYdA/SgSdewwGkVg5B2aTjTVDeo+oYuaSPlXy9M6zYjsMUg IljaaCOoKlMDKijrCf6ZZRbdwaoT+nXx96xRS9mCL14cJYSYNagnntSEkNvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5vZtHKHcHnx/ypy4Z/XDY+F/GbEwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcWR0FzRLH+mlSRscY0ykkCQGOnDE1Vu6lI wOMN7KupwkTaez6E/Q+GlED3zbgIUHOriL/aAcKPrhxofeCPtV/fi4/6AFPhR6mU Sb+aVZXbFH+ITXdVjecnfTMo/J05DgupjSyke1OUQp/n9MWc+VVEH3q7pk2vhPWw wwWbgHbB22DZdSB4hVKMCqdJLE9LOR0IThdN8h7/OB2YmwNdb7m/1y0YfEtWvdOP gPeFFkljgRcbCJWHS7x1WLeqkMa/a5Q1fWoJ0/VfRNaajbF839g99aL0sOTm96d3 LuYp2GCUPABOkfGdz929JRHi6nAZjibAQVACvIlUz58aFdbr+GQ= -----END CERTIFICATE-----Generated at Mon Oct 20 12:26:16 2025 by rpki-client