$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: BDfjBnetVGGVaoTW2Jf8qZ5ngeTlr8GB6z69DfuRCy4= Subject key identifier: AA:E8:B9:51:74:B6:84:72:C8:75:1E:DA:65:96:39:A3:8C:1D:63:CA Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 549E3C0DF1F494D105F2AA79387D8E5CE71D7733 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: 0F Signing time: Tue 12 May 2026 17:06:49 +0000 Manifest this update: Tue 12 May 2026 17:01:49 +0000 Manifest next update: Wed 13 May 2026 18:47:49 +0000 Files and hashes: 1: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 3: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: 21oHFRxjDKwBYAGT20HNrpjhEmBTWX88fNfweC3iJsY=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:9e:3c:0d:f1:f4:94:d1:05:f2:aa:79:38:7d:8e:5c:e7:1d:77:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: May 12 17:01:49 2026 GMT Not After : May 13 18:47:49 2026 GMT Subject: CN=AAE8B95174B68472C8751EDA659639A38C1D63CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:f0:d0:2d:b2:8e:38:be:b8:f2:e8:d1:e1:d6: f4:f5:dd:cc:7b:ee:10:d0:9a:1a:65:80:7d:58:2e: a8:73:8a:69:54:05:ae:f7:2a:0d:78:1c:d5:88:07: 50:de:b8:b6:a9:75:01:da:0f:3b:ae:18:68:c0:71: cc:c2:04:c3:2c:95:a3:66:b0:21:62:6f:e6:3b:26: 88:96:fc:b1:ef:ea:38:8c:77:ae:1e:44:ea:5d:f6: 71:14:a0:64:52:a1:2a:b5:3f:9b:94:3b:73:68:f9: 85:2d:20:53:0a:09:81:4c:12:f1:14:12:4c:42:4c: ef:b1:fd:cc:a7:b0:b0:42:1a:7c:cf:13:00:6f:20: e7:81:fb:51:0a:f1:d9:5f:86:c6:3e:91:d6:98:71: 34:ab:d8:58:22:e1:9d:77:42:bb:14:c9:aa:5c:f4: 8a:f5:a6:91:94:94:66:1e:dd:7e:6b:39:59:11:ab: 1b:6f:d5:8d:d8:7d:8d:b8:33:50:0d:ad:db:ba:84: 8c:cb:ec:c7:90:cc:f2:02:ae:58:88:b4:58:6a:ef: 1e:51:39:f3:ee:79:73:da:22:12:d3:30:83:16:81: 90:f9:34:24:09:14:1e:cd:f6:f5:1c:8f:93:44:73: 3c:6c:a0:f7:92:e0:fc:f7:06:a6:4a:7f:29:fe:ad: c6:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:E8:B9:51:74:B6:84:72:C8:75:1E:DA:65:96:39:A3:8C:1D:63:CA X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:f3:6b:be:d6:30:3b:72:61:59:67:d2:44:d7:b5:dd:53:64: 02:5c:06:aa:e0:2c:69:75:dc:fc:ce:b9:04:34:fa:d8:b5:f4: e7:a3:b5:fa:5a:ff:1a:7b:f8:ee:66:d4:44:6b:2b:21:fb:72: e4:f7:f8:e8:33:b1:58:1c:2f:0a:06:7e:ef:4f:d9:03:2b:14: 91:3b:a6:b5:1e:0d:9a:c5:16:71:73:c1:b0:62:3f:69:59:78: a6:49:01:9b:26:96:92:e9:0f:e0:91:25:e6:5b:a6:28:ac:9b: eb:45:3a:4b:c4:d8:9a:9e:5d:ae:09:d2:46:5d:5c:4e:f7:24: bd:ea:02:2f:bf:83:3d:c4:56:66:5b:8e:f8:19:84:7a:c8:c7: 69:b4:2c:9e:bd:44:f1:10:2b:ec:43:55:ba:a2:61:85:28:4f: 30:93:ee:8f:40:c4:97:23:4a:45:d4:b8:7f:3a:8f:3a:e9:a9: 70:4a:14:40:44:3c:51:d0:ce:52:77:4f:45:7b:5d:71:22:d9: 06:bd:81:85:e4:3d:25:98:9e:9d:9e:61:56:6e:b6:82:1c:5d: 1c:76:d8:4e:62:e4:a7:a5:0b:a0:66:db:11:64:ca:61:16:41: a3:92:18:d3:99:83:98:1e:ee:b0:b0:93:b1:01:61:58:fd:f2: 76:28:66:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVJ48DfH0lNEF8qp5OH2OXOcddzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA1MTIxNzAxNDlaFw0yNjA1MTMxODQ3NDlaMDMxMTAvBgNV BAMTKEFBRThCOTUxNzRCNjg0NzJDODc1MUVEQTY1OTYzOUEzOEMxRDYzQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu8NAtso44vrjy6NHh1vT13cx7 7hDQmhplgH1YLqhzimlUBa73Kg14HNWIB1DeuLapdQHaDzuuGGjAcczCBMMslaNm sCFib+Y7JoiW/LHv6jiMd64eROpd9nEUoGRSoSq1P5uUO3No+YUtIFMKCYFMEvEU EkxCTO+x/cynsLBCGnzPEwBvIOeB+1EK8dlfhsY+kdaYcTSr2Fgi4Z13QrsUyapc 9Ir1ppGUlGYe3X5rOVkRqxtv1Y3YfY24M1ANrdu6hIzL7MeQzPICrliItFhq7x5R OfPueXPaIhLTMIMWgZD5NCQJFB7N9vUcj5NEczxsoPeS4Pz3BqZKfyn+rca3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqui5UXS2hHLIdR7aZZY5o4wdY8owHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM3za77WMDtyYVln0kTXtd1TZAJcBqrgLGl1 3PzOuQQ0+ti19Oejtfpa/xp7+O5m1ERrKyH7cuT3+OgzsVgcLwoGfu9P2QMrFJE7 prUeDZrFFnFzwbBiP2lZeKZJAZsmlpLpD+CRJeZbpiism+tFOkvE2JqeXa4J0kZd XE73JL3qAi+/gz3EVmZbjvgZhHrIx2m0LJ69RPEQK+xDVbqiYYUoTzCT7o9AxJcj SkXUuH86jzrpqXBKFEBEPFHQzlJ3T0V7XXEi2Qa9gYXkPSWYnp2eYVZutoIcXRx2 2E5i5KelC6Bm2xFkymEWQaOSGNOZg5ge7rCwk7EBYVj98nYoZvk= -----END CERTIFICATE-----Generated at Tue May 12 22:19:40 2026 by rpki-client