$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: AoJdCggdQ9Pd62F34t8r/pH0Q0puvBr3rQGi16xgJLk= Subject key identifier: 54:91:F7:27:97:9E:A0:3C:EA:A9:76:39:79:3D:8D:59:FD:3C:EB:4C Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 4D9CC237771DF737718C123F82DE3548F6E0ACCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01D0 Signing time: Sun 29 Jun 2025 03:21:15 +0000 Manifest this update: Sun 29 Jun 2025 03:16:15 +0000 Manifest next update: Wed 02 Jul 2025 12:33:15 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: Si284yJ0erqeqym6bcO0sW3qO+ozDKdoe2Ya3JquTdY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:9c:c2:37:77:1d:f7:37:71:8c:12:3f:82:de:35:48:f6:e0:ac:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Jun 29 03:16:15 2025 GMT Not After : Jul 2 12:33:15 2025 GMT Subject: CN=5491F727979EA03CEAA97639793D8D59FD3CEB4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c8:fa:01:23:27:53:c3:d8:58:ff:90:f5:78: 6e:fe:02:a2:06:f5:18:1f:17:cf:e0:67:f8:8f:0f: 80:c9:bb:43:24:e4:27:e1:ca:e6:ad:bc:98:65:a6: fb:12:d7:c7:36:75:35:12:8d:99:53:40:f9:f7:ee: eb:07:3d:7f:ca:68:8d:d7:6a:94:9d:a9:a9:13:a2: 5e:38:39:28:57:1d:2e:f3:ab:11:3b:4b:02:f2:40: a5:2f:c0:b5:c3:80:bc:48:45:c4:dc:b6:df:85:ee: bd:51:15:78:12:4f:66:b5:05:df:2d:45:20:ea:e2: 80:d7:59:05:5b:e1:51:2c:85:f6:f7:5d:fb:81:17: 5e:4b:7c:5b:83:55:77:31:21:97:f2:8f:b5:dc:d3: 33:14:b7:89:e9:00:75:b5:86:f3:f6:bd:3a:6e:6a: ef:59:1e:f1:49:ac:61:bc:0c:8e:18:e8:19:fc:ac: db:f5:14:f1:99:63:34:1d:b3:f2:42:ca:22:30:f5: c8:b4:6c:c3:da:5a:ad:3a:ce:00:ac:90:cd:63:a3: e6:8a:97:72:83:c0:29:e2:d8:0a:3b:04:c5:58:24: 26:cb:a3:63:14:63:94:05:11:9d:03:34:84:58:25: 81:1c:10:cd:6f:75:da:2c:bd:8c:08:11:fd:f7:4a: d7:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:91:F7:27:97:9E:A0:3C:EA:A9:76:39:79:3D:8D:59:FD:3C:EB:4C X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption dd:45:93:71:84:dd:5e:9d:24:12:ee:ff:af:1a:d7:40:78:ab: 42:8f:eb:a2:11:f4:3b:e7:50:a5:4f:18:da:f9:24:7f:fd:f1: 4d:3b:7e:bc:4c:82:7c:71:d7:c8:1c:3e:09:da:71:a0:41:6c: 9a:09:78:4e:04:30:36:66:14:c3:33:45:76:7c:11:de:9d:44: 73:9e:db:cb:a1:a1:16:5f:a8:cd:75:89:81:ca:c9:49:8e:db: 53:4f:94:c6:7a:d6:9e:e8:8d:d8:1c:2d:ef:d3:a8:5a:70:15: 53:ab:d5:b6:d3:ee:6d:c7:f9:c7:12:08:69:96:0b:13:fd:f9: a1:1e:8c:c8:dd:56:be:5a:50:ef:41:ba:2e:88:b5:7c:6f:f0: d9:c1:d3:ad:09:eb:43:d1:b9:b4:ef:42:ce:f6:c0:ae:c3:1e: 05:29:bb:d3:e6:fe:eb:3f:cf:ba:18:db:5a:6c:72:76:9e:82: 36:42:0c:ac:f5:47:01:71:7e:2c:4e:0b:23:30:9b:4f:f2:59: 17:76:16:eb:37:bf:45:77:48:01:ee:53:1a:5b:91:51:7c:cd: 5c:69:eb:35:3b:5f:bd:b3:88:ea:57:b9:66:0f:c7:23:85:34: a3:d9:43:73:75:c2:ac:80:e6:b7:ce:95:79:27:f1:ba:6f:c2: 35:e9:21:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTZzCN3cd9zdxjBI/gt41SPbgrM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA2MjkwMzE2MTVaFw0yNTA3MDIxMjMzMTVaMDMxMTAvBgNV BAMTKDU0OTFGNzI3OTc5RUEwM0NFQUE5NzYzOTc5M0Q4RDU5RkQzQ0VCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyPoBIydTw9hY/5D1eG7+AqIG 9RgfF8/gZ/iPD4DJu0Mk5CfhyuatvJhlpvsS18c2dTUSjZlTQPn37usHPX/KaI3X apSdqakTol44OShXHS7zqxE7SwLyQKUvwLXDgLxIRcTctt+F7r1RFXgST2a1Bd8t RSDq4oDXWQVb4VEshfb3XfuBF15LfFuDVXcxIZfyj7Xc0zMUt4npAHW1hvP2vTpu au9ZHvFJrGG8DI4Y6Bn8rNv1FPGZYzQds/JCyiIw9ci0bMPaWq06zgCskM1jo+aK l3KDwCni2Ao7BMVYJCbLo2MUY5QFEZ0DNIRYJYEcEM1vddosvYwIEf33StdLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVJH3J5eeoDzqqXY5eT2NWf0860wwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN1Fk3GE3V6dJBLu/68a10B4q0KP66IR9Dvn UKVPGNr5JH/98U07frxMgnxx18gcPgnacaBBbJoJeE4EMDZmFMMzRXZ8Ed6dRHOe 28uhoRZfqM11iYHKyUmO21NPlMZ61p7ojdgcLe/TqFpwFVOr1bbT7m3H+ccSCGmW CxP9+aEejMjdVr5aUO9Bui6ItXxv8NnB060J60PRubTvQs72wK7DHgUpu9Pm/us/ z7oY21pscnaegjZCDKz1RwFxfixOCyMwm0/yWRd2Fus3v0V3SAHuUxpbkVF8zVxp 6zU7X72ziOpXuWYPxyOFNKPZQ3N1wqyA5rfOlXkn8bpvwjXpIdg= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:17 2025 by rpki-client