$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: jV6ZZ83+2H9Rvx0xugwxSBpkzxA7iLACmxXHhbdnC2A= Subject key identifier: 4C:83:3F:12:90:DF:5C:9E:8C:F0:FB:25:61:60:63:18:CC:74:4F:46 Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 6CC25A68EA409A54C76E8444904224C052DC8A0A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: 70 Signing time: Thu 23 Jul 2026 13:26:26 +0000 Manifest this update: Thu 23 Jul 2026 13:21:26 +0000 Manifest next update: Fri 24 Jul 2026 15:07:26 +0000 Files and hashes: 1: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: 4YMMhMUzBxaY2clo0K49sRZFLH+MMxU42czXxKoHSI0=) 2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 3: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 15:07:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:c2:5a:68:ea:40:9a:54:c7:6e:84:44:90:42:24:c0:52:dc:8a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Jul 23 13:21:26 2026 GMT Not After : Jul 24 15:07:26 2026 GMT Subject: CN=4C833F1290DF5C9E8CF0FB2561606318CC744F46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a5:2f:36:41:61:1a:36:c2:a6:73:0d:72:98: 00:2b:66:76:18:0e:c2:fd:9a:ff:40:3c:21:f1:16: 3c:8e:3a:62:00:59:11:26:6e:d7:6e:a5:4a:3f:93: ad:df:27:0b:f3:94:0a:e6:cc:c1:7e:3c:30:66:d8: 6c:2e:a3:b1:78:44:a5:ab:d0:40:fc:0c:9d:35:99: 4c:a5:1f:88:c5:16:fc:c1:72:3a:82:93:a8:a4:cd: 11:6a:12:93:b2:19:06:7b:61:55:f1:49:8f:e9:57: ed:fd:65:a2:16:3e:0c:6f:3c:42:12:bc:fa:d5:dd: 43:56:38:67:b4:e2:2d:09:6c:bb:f2:3f:f8:85:09: 7e:a1:9f:a9:8e:38:78:6f:55:e2:65:03:37:74:13: b4:3e:b8:d2:a5:35:05:7f:b8:2e:ab:1d:e9:ea:97: 9b:65:9b:b7:aa:67:b2:ff:08:f1:4d:be:6f:4f:a9: 00:ea:18:3f:8a:70:96:4a:9e:57:57:af:0e:8f:d4: 90:41:86:be:cd:6b:36:a0:9c:31:8e:da:98:52:df: 4b:5e:2d:6c:57:c0:85:44:69:40:46:11:bc:89:2d: 66:8e:48:a3:ad:9d:36:31:43:21:c4:d2:7f:84:5b: fc:36:d5:c6:e5:85:11:1e:db:cb:31:dd:7f:73:e4: c4:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:83:3F:12:90:DF:5C:9E:8C:F0:FB:25:61:60:63:18:CC:74:4F:46 X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:77:e8:bc:c1:b9:7b:00:11:aa:72:70:4e:fc:d7:3f:54:5f: d2:b4:03:b2:5b:98:7b:05:b5:ac:59:09:a1:77:51:c0:5e:78: 7b:a6:7e:7f:a8:9a:5a:49:cb:ac:a0:74:63:b8:2e:c7:f8:5f: 39:b5:00:48:5d:22:31:de:5b:7e:2e:79:2d:83:27:6c:c8:b1: 37:d2:c1:e9:bd:8c:21:d4:32:3f:ab:66:a2:86:fd:d1:d8:db: 17:01:8d:a9:5e:2f:6d:f5:2b:61:8a:20:a5:1e:e3:e7:a4:82: 0c:d2:cc:17:42:b3:6d:49:4d:dc:76:7b:84:73:e2:da:7c:1b: e1:7c:cb:e6:7e:94:d5:4f:35:0b:e6:b6:a6:84:c9:da:5f:5a: c4:6f:64:4f:ff:7a:b3:0b:22:9d:b5:ee:6c:aa:39:28:17:15: d8:0e:a2:68:ed:86:d6:52:6d:1e:c1:52:0c:4d:9f:d3:2d:76: 2e:58:28:5f:37:ec:9e:09:b3:12:7e:28:a6:3a:4b:ed:08:5e: 45:e3:31:f7:a6:bd:7e:04:53:1e:93:a2:db:02:a1:cb:63:0c: 8c:10:b9:5d:b9:cc:49:30:8c:4a:46:0e:ea:5d:75:08:84:9d: 46:ba:9c:99:ef:29:e4:29:c8:eb:0d:67:dc:2e:78:14:49:d7: 41:1b:c6:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbMJaaOpAmlTHboREkEIkwFLcigowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA3MjMxMzIxMjZaFw0yNjA3MjQxNTA3MjZaMDMxMTAvBgNV BAMTKDRDODMzRjEyOTBERjVDOUU4Q0YwRkIyNTYxNjA2MzE4Q0M3NDRGNDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2pS82QWEaNsKmcw1ymAArZnYY DsL9mv9APCHxFjyOOmIAWREmbtdupUo/k63fJwvzlArmzMF+PDBm2Gwuo7F4RKWr 0ED8DJ01mUylH4jFFvzBcjqCk6ikzRFqEpOyGQZ7YVXxSY/pV+39ZaIWPgxvPEIS vPrV3UNWOGe04i0JbLvyP/iFCX6hn6mOOHhvVeJlAzd0E7Q+uNKlNQV/uC6rHenq l5tlm7eqZ7L/CPFNvm9PqQDqGD+KcJZKnldXrw6P1JBBhr7NazagnDGO2phS30te LWxXwIVEaUBGEbyJLWaOSKOtnTYxQyHE0n+EW/w21cblhREe28sx3X9z5MTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTIM/EpDfXJ6M8PslYWBjGMx0T0YwHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHB36LzBuXsAEapycE781z9UX9K0A7JbmHsF taxZCaF3UcBeeHumfn+omlpJy6ygdGO4Lsf4Xzm1AEhdIjHeW34ueS2DJ2zIsTfS wem9jCHUMj+rZqKG/dHY2xcBjaleL231K2GKIKUe4+ekggzSzBdCs21JTdx2e4Rz 4tp8G+F8y+Z+lNVPNQvmtqaEydpfWsRvZE//erMLIp217myqOSgXFdgOomjthtZS bR7BUgxNn9Mtdi5YKF837J4JsxJ+KKY6S+0IXkXjMfemvX4EUx6TotsCoctjDIwQ uV25zEkwjEpGDupddQiEnUa6nJnvKeQpyOsNZ9wueBRJ10Ebxv4= -----END CERTIFICATE-----Generated at Fri Jul 24 05:25:04 2026 by rpki-client