$ rpki-client -vvf repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft File: 286C9A362D81776DD721F49AC1EDBE51BF15D486.mft (raw, json) Hash identifier: 6nm/GvSQ1DD4ZkvFdnudNuV60cGFthjP5/KP8ChKjww= Subject key identifier: 7B:00:CC:EC:0B:68:D4:30:1F:42:6F:41:64:D2:61:8B:0E:A9:4A:30 Authority key identifier: 28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 Certificate issuer: /CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Certificate serial: 1731026F89E39246B4CB0E8338EDBCCDEBAAD935 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft Manifest number: 01D9 Signing time: Sat 19 Jul 2025 13:01:16 +0000 Manifest this update: Sat 19 Jul 2025 12:56:16 +0000 Manifest next update: Tue 22 Jul 2025 20:28:16 +0000 Files and hashes: 1: 286C9A362D81776DD721F49AC1EDBE51BF15D486.crl (hash: hhtsq1TwMPIhWdM4DzDP9QLngXTxHj3SMlmYzTHvyX8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 20:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:31:02:6f:89:e3:92:46:b4:cb:0e:83:38:ed:bc:cd:eb:aa:d9:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286C9A362D81776DD721F49AC1EDBE51BF15D486 Validity Not Before: Jul 19 12:56:16 2025 GMT Not After : Jul 22 20:28:16 2025 GMT Subject: CN=7B00CCEC0B68D4301F426F4164D2618B0EA94A30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:e2:63:7a:b9:af:05:74:18:b1:98:23:31:77: 04:ef:74:40:31:c0:37:d6:90:76:33:dd:c8:b5:23: 85:07:ef:3b:94:01:d6:e6:4a:06:a4:87:b2:d4:21: 67:4f:e1:6a:5d:e2:e6:00:63:cc:4b:f1:ac:23:f3: 11:03:ce:6f:9c:77:f1:72:e1:b3:47:3c:01:bf:4d: 76:03:4d:c6:c0:33:fb:1c:09:95:14:bf:79:54:0b: b8:f0:63:11:0c:9c:b4:71:6c:3e:05:a3:93:09:bc: 3b:61:55:97:45:3f:c4:b2:85:a2:66:e9:9d:9e:41: ea:45:10:51:58:e5:ff:09:d1:b8:cd:dc:70:86:28: c1:a8:0b:ed:e1:03:be:5e:d8:aa:49:0b:60:c9:79: 20:40:b6:a2:d8:1f:e6:11:2d:8f:2f:dd:11:b7:c9: c3:dd:e6:25:8a:0c:9e:3e:35:9d:86:d7:16:2a:c4: 47:e1:3d:d7:2c:21:80:93:1e:b1:b8:64:d6:e1:86: 0c:d2:bf:15:d4:60:17:1c:50:9e:2b:cf:d9:b5:41: bc:60:d7:2c:74:6d:7c:16:c8:7a:81:80:f6:d7:23: 7c:6d:bb:d7:1f:53:1d:d2:7f:e1:da:4a:26:a4:a4: f0:c3:f5:d7:0f:cf:e3:9d:2a:65:7d:5d:b5:de:91: 57:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:00:CC:EC:0B:68:D4:30:1F:42:6F:41:64:D2:61:8B:0E:A9:4A:30 X509v3 Authority Key Identifier: keyid:28:6C:9A:36:2D:81:77:6D:D7:21:F4:9A:C1:ED:BE:51:BF:15:D4:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/286C9A362D81776DD721F49AC1EDBE51BF15D486.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2f1274c6-783c-4f3d-a9b6-75b3b46f854c/0/286C9A362D81776DD721F49AC1EDBE51BF15D486.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d8:01:f0:41:09:c2:ba:33:ce:42:e1:21:2e:f3:c3:4f:64:21: ee:64:5e:b8:79:ac:17:c8:3a:b8:d9:f8:92:76:a8:3e:17:fd: 1c:cc:27:70:47:8b:7b:51:be:14:f2:d9:97:41:72:45:62:a8: 2c:0e:c2:c9:80:67:7c:6b:75:91:e7:d1:55:71:2f:1a:b2:e3: 83:ba:bd:66:dd:a6:d4:9a:62:e9:7a:ca:1f:72:39:e4:31:aa: 33:a1:54:eb:1d:8f:db:07:11:e9:6a:51:9c:56:c9:e4:8c:87: df:30:85:93:53:d7:6f:82:4f:41:d7:2c:32:b5:40:97:23:bd: 6b:0d:6f:15:1e:44:c6:68:2e:68:fe:e6:f8:a3:cb:a8:77:44: 03:c9:af:31:16:a7:8c:01:e1:6c:0a:73:d6:47:e2:b3:bb:8d: 09:2f:8e:11:ba:0f:f2:cb:29:39:c6:67:99:31:6e:77:5b:43: dc:8c:d8:d7:b7:09:00:30:9f:a5:b4:b7:87:05:13:70:88:96: 13:a2:e2:6b:ee:e1:7c:2c:a0:3e:00:88:c6:91:a9:03:9a:e5: 1f:41:ca:aa:69:65:87:de:c8:f5:ce:eb:e7:f2:d5:b8:af:5b: ad:ee:93:52:7b:ac:ad:7b:e2:32:b1:1c:96:bf:22:4a:cb:cc: 48:f1:96:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFzECb4njkka0yw6DOO28zeuq2TUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFC RjE1RDQ4NjAeFw0yNTA3MTkxMjU2MTZaFw0yNTA3MjIyMDI4MTZaMDMxMTAvBgNV BAMTKDdCMDBDQ0VDMEI2OEQ0MzAxRjQyNkY0MTY0RDI2MThCMEVBOTRBMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx4mN6ua8FdBixmCMxdwTvdEAx wDfWkHYz3ci1I4UH7zuUAdbmSgakh7LUIWdP4Wpd4uYAY8xL8awj8xEDzm+cd/Fy 4bNHPAG/TXYDTcbAM/scCZUUv3lUC7jwYxEMnLRxbD4Fo5MJvDthVZdFP8SyhaJm 6Z2eQepFEFFY5f8J0bjN3HCGKMGoC+3hA75e2KpJC2DJeSBAtqLYH+YRLY8v3RG3 ycPd5iWKDJ4+NZ2G1xYqxEfhPdcsIYCTHrG4ZNbhhgzSvxXUYBccUJ4rz9m1Qbxg 1yx0bXwWyHqBgPbXI3xtu9cfUx3Sf+HaSiakpPDD9dcPz+OdKmV9XbXekVfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUewDM7Ato1DAfQm9BZNJhiw6pSjAwHwYDVR0j BBgwFoAUKGyaNi2Bd23XIfSawe2+Ub8V1IYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZjEyNzRjNi03ODNjLTRmM2QtYTliNi03NWIzYjQ2Zjg1NGMvMC8yODZDOUEzNjJE ODE3NzZERDcyMUY0OUFDMUVEQkU1MUJGMTVENDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJFNTFCRjE1 RDQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmYxMjc0YzYtNzgzYy00ZjNkLWE5 YjYtNzViM2I0NmY4NTRjLzAvMjg2QzlBMzYyRDgxNzc2REQ3MjFGNDlBQzFFREJF NTFCRjE1RDQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANgB8EEJwrozzkLhIS7zw09kIe5kXrh5rBfI OrjZ+JJ2qD4X/RzMJ3BHi3tRvhTy2ZdBckViqCwOwsmAZ3xrdZHn0VVxLxqy44O6 vWbdptSaYul6yh9yOeQxqjOhVOsdj9sHEelqUZxWyeSMh98whZNT12+CT0HXLDK1 QJcjvWsNbxUeRMZoLmj+5vijy6h3RAPJrzEWp4wB4WwKc9ZH4rO7jQkvjhG6D/LL KTnGZ5kxbndbQ9yM2Ne3CQAwn6W0t4cFE3CIlhOi4mvu4XwsoD4AiMaRqQOa5R9B yqppZYfeyPXO6+fy1bivW63uk1J7rK174jKxHJa/IkrLzEjxli8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:23:18 2025 by rpki-client