$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: I1ySrTaNeAQKa9KAOfd9Cd90Cmo+rAZjV1ncYySRWmQ= Subject key identifier: B5:DB:C5:62:C6:AF:57:CE:FD:B3:9B:4E:CC:6E:2D:5B:E6:58:49:53 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 2060A630A4CD9C908D3E31787A92CAB30B8BD925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 0247 Signing time: Tue 24 Mar 2026 12:31:26 +0000 Manifest this update: Tue 24 Mar 2026 12:26:26 +0000 Manifest next update: Fri 27 Mar 2026 19:44:26 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: V2EJ+7nw8Ovv1cgyJp/lw1VprXjDzEBR+J4RaQ9Erfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:44:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:60:a6:30:a4:cd:9c:90:8d:3e:31:78:7a:92:ca:b3:0b:8b:d9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Mar 24 12:26:26 2026 GMT Not After : Mar 27 19:44:26 2026 GMT Subject: CN=B5DBC562C6AF57CEFDB39B4ECC6E2D5BE6584953 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:af:96:41:8a:19:33:f4:33:e9:4a:d8:a1:6d: 97:77:d6:1a:e4:ba:b2:d3:66:2d:8f:ec:48:e2:9c: bb:e6:5f:0c:12:e5:b4:89:87:0f:6f:bc:ba:45:61: 12:c2:41:58:b5:e8:83:eb:aa:a0:27:78:5b:3b:1a: 4a:23:28:e7:e5:52:b4:3d:5b:ed:08:13:dd:d4:cb: 73:be:c3:c4:fb:10:6a:a0:06:d7:f9:b3:4a:7f:9d: 94:e0:0f:6a:ad:a5:ab:53:ee:f9:b5:cc:18:3f:77: 49:f3:dd:6e:48:68:e6:86:29:1d:f0:3d:23:d9:a4: 25:22:ff:68:d1:b3:5c:d7:cd:ec:96:bb:ed:f6:17: f2:85:77:57:fa:f4:bd:01:fa:26:9c:a2:ae:93:82: c3:4c:2a:17:03:cc:eb:50:d6:92:e8:42:a4:f1:c5: e4:f9:a5:50:d0:52:d9:9d:6c:e8:8f:02:91:db:7a: 5a:7b:38:32:43:0e:12:8d:4c:fd:11:f3:b9:e2:67: c4:0b:9c:15:65:bf:a9:fd:d6:78:e5:6d:1a:b7:1a: f2:f1:69:be:1f:77:5b:e3:76:5d:af:01:68:a8:cd: ba:15:59:49:3f:60:6a:40:55:d7:53:48:df:c1:f1: 6f:74:64:3c:75:83:d8:8b:f3:c1:e1:f2:9f:89:87: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:DB:C5:62:C6:AF:57:CE:FD:B3:9B:4E:CC:6E:2D:5B:E6:58:49:53 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:00:2d:6c:f1:16:08:83:f0:6e:4f:05:d2:1b:e8:2e:ee:8a: 95:00:8b:57:23:f0:55:d2:8a:0f:85:82:e3:ab:a9:f0:42:fc: 24:c3:47:6e:79:c1:e2:5a:f1:b0:c2:63:e3:34:54:86:cc:24: 4c:64:73:e0:ef:6e:a8:35:1d:00:64:56:0a:e1:39:3c:79:92: 1d:53:a7:c3:ba:aa:b5:e9:47:64:4c:24:12:63:43:76:98:c3: 31:6b:f0:ff:66:73:00:a5:1d:a4:bc:e0:a1:73:f3:42:b9:c3: 92:5e:5f:2d:27:32:ae:67:99:7f:ad:8e:37:48:5d:b8:cb:9e: 15:68:0a:9d:a3:bb:0a:6b:a8:3a:73:25:d5:43:e3:de:f9:60: 2a:aa:bc:3e:c7:df:2e:45:ad:65:f5:ca:da:6f:c1:94:9a:37: 7e:33:78:6b:71:20:7e:7f:b8:9d:ba:be:8f:e8:f3:5a:04:dc: 5b:80:f2:60:92:cd:c2:63:08:48:2a:e3:82:91:5b:21:82:38: d7:82:35:62:e5:a8:c7:2b:d0:cb:95:d0:84:31:15:a1:38:e4: cc:8c:f7:9e:d2:91:62:cf:03:6b:9c:60:e8:f9:41:d7:79:f2: c2:54:61:8b:07:e7:d5:e1:80:47:c2:02:75:02:55:4f:ff:7c: 80:f3:ef:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIGCmMKTNnJCNPjF4epLKswuL2SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNjAzMjQxMjI2MjZaFw0yNjAzMjcxOTQ0MjZaMDMxMTAvBgNV BAMTKEI1REJDNTYyQzZBRjU3Q0VGREIzOUI0RUNDNkUyRDVCRTY1ODQ5NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDur5ZBihkz9DPpStihbZd31hrk urLTZi2P7EjinLvmXwwS5bSJhw9vvLpFYRLCQVi16IPrqqAneFs7GkojKOflUrQ9 W+0IE93Uy3O+w8T7EGqgBtf5s0p/nZTgD2qtpatT7vm1zBg/d0nz3W5IaOaGKR3w PSPZpCUi/2jRs1zXzeyWu+32F/KFd1f69L0B+iacoq6TgsNMKhcDzOtQ1pLoQqTx xeT5pVDQUtmdbOiPApHbelp7ODJDDhKNTP0R87niZ8QLnBVlv6n91njlbRq3GvLx ab4fd1vjdl2vAWiozboVWUk/YGpAVddTSN/B8W90ZDx1g9iL88Hh8p+JhyvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdvFYsavV879s5tOzG4tW+ZYSVMwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKcALWzxFgiD8G5PBdIb6C7uipUAi1cj8FXS ig+FguOrqfBC/CTDR255weJa8bDCY+M0VIbMJExkc+Dvbqg1HQBkVgrhOTx5kh1T p8O6qrXpR2RMJBJjQ3aYwzFr8P9mcwClHaS84KFz80K5w5JeXy0nMq5nmX+tjjdI XbjLnhVoCp2juwprqDpzJdVD4975YCqqvD7H3y5FrWX1ytpvwZSaN34zeGtxIH5/ uJ26vo/o81oE3FuA8mCSzcJjCEgq44KRWyGCONeCNWLlqMcr0MuV0IQxFaE45MyM 957SkWLPA2ucYOj5Qdd58sJUYYsH59XhgEfCAnUCVU//fIDz7+Q= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:00 2026 by rpki-client