$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: yLJAfP2yUU6t5nGpcmBHi9PJkje+i0q8PotkPRw9TT0= Subject key identifier: 9F:C8:49:BC:C2:4C:46:39:84:9C:4F:34:0B:F1:42:0E:39:6E:23:6E Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 71AD8E2DAA58946A4A29B9599CDAFAB8F2D7E1A9 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: 6C Signing time: Mon 20 Jul 2026 15:51:06 +0000 Manifest this update: Mon 20 Jul 2026 15:46:06 +0000 Manifest next update: Tue 21 Jul 2026 16:16:06 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) 2: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: khp3Zg+Swuu1WpX7mH1QMveS686uVU5qiiOYLaG77zE=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 4: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 16:16:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:ad:8e:2d:aa:58:94:6a:4a:29:b9:59:9c:da:fa:b8:f2:d7:e1:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Jul 20 15:46:06 2026 GMT Not After : Jul 21 16:16:06 2026 GMT Subject: CN=9FC849BCC24C4639849C4F340BF1420E396E236E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b9:ec:11:17:ae:dc:f2:d5:19:f8:4c:b7:e5: f8:06:40:cc:d8:21:9b:8f:dc:78:5f:c5:20:53:07: d9:cb:7d:c7:a4:5b:13:95:db:a7:ac:fb:83:22:57: d0:f6:35:59:00:29:bc:4b:2c:60:5b:35:3c:dc:d7: 69:ab:f9:df:23:cc:77:2b:5d:01:15:3b:1e:c0:f5: 07:f6:a0:ae:56:38:f2:17:b4:20:4f:cf:65:67:6b: b9:7a:eb:a2:36:7f:4c:0e:fa:75:92:29:b9:b1:88: 15:8a:69:df:b4:ed:bb:94:6f:80:41:78:43:78:7d: 0b:e9:ce:3c:e4:5b:b1:57:3e:de:0c:05:35:47:85: ce:0a:a9:e4:de:40:49:10:55:b9:10:f2:72:33:8a: 10:15:5a:ed:a4:88:27:f3:61:47:2c:73:e2:17:44: 27:99:af:34:e9:1e:42:59:a0:88:1e:80:65:ca:86: e1:08:f4:54:2d:b5:2d:5d:cb:24:61:43:d4:90:59: ae:9f:75:73:36:6a:20:dd:4c:a7:c6:ad:ad:3c:f6: c6:cd:81:27:63:6d:d6:94:74:21:6d:07:e7:c6:55: ae:dd:bf:f4:73:e8:25:7f:c5:a6:11:bf:b0:11:dd: 20:f0:a6:c6:8b:cc:70:7f:92:fa:31:7d:39:4d:fc: d4:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:C8:49:BC:C2:4C:46:39:84:9C:4F:34:0B:F1:42:0E:39:6E:23:6E X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:c2:c2:85:29:ef:c7:45:3a:cc:94:3e:66:d3:7c:9c:7d:82: 14:29:9d:6e:c9:28:2e:e3:80:f8:9d:5a:51:d7:68:cd:c9:6c: e8:47:47:24:8b:bb:99:a9:07:a3:74:e1:a4:70:bb:2b:06:49: d5:b3:0d:ef:07:a4:a3:d6:4e:93:bc:36:65:d8:dc:08:49:e5: 97:d1:02:0a:76:c4:00:14:e5:dc:29:fe:c3:e4:8d:cf:35:64: ef:8b:c4:3e:20:62:c7:e5:5d:e4:34:35:35:c0:74:b4:d3:23: 2d:89:48:e0:c8:9e:c4:6e:2c:16:00:dd:c2:62:fb:e7:3a:87: 51:fb:4c:8e:48:46:fa:23:fd:10:0b:7d:ba:26:5f:7a:fd:a7: 5c:73:c7:dd:cf:1f:5a:04:db:0e:e1:49:90:5c:d3:7b:ed:4c: 4d:f4:4b:c9:a3:d0:ed:4f:26:69:4a:ad:50:95:3f:09:8e:ab: 64:62:5b:b2:13:dd:42:c4:d0:25:7e:b3:67:0a:f2:2f:a6:1e: d5:39:1d:b2:1a:18:1e:1e:1d:77:89:16:0f:19:f0:49:00:99: f1:35:a7:2d:9d:94:bb:97:1a:45:ef:bc:56:f3:fe:23:05:4c: 4b:0c:61:96:bf:c2:93:b5:1b:c4:f6:f7:7e:bc:9d:17:da:8e: bc:f1:05:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUca2OLapYlGpKKblZnNr6uPLX4akwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA3MjAxNTQ2MDZaFw0yNjA3MjExNjE2MDZaMDMxMTAvBgNV BAMTKDlGQzg0OUJDQzI0QzQ2Mzk4NDlDNEYzNDBCRjE0MjBFMzk2RTIzNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8uewRF67c8tUZ+Ey35fgGQMzY IZuP3HhfxSBTB9nLfcekWxOV26es+4MiV9D2NVkAKbxLLGBbNTzc12mr+d8jzHcr XQEVOx7A9Qf2oK5WOPIXtCBPz2Vna7l666I2f0wO+nWSKbmxiBWKad+07buUb4BB eEN4fQvpzjzkW7FXPt4MBTVHhc4KqeTeQEkQVbkQ8nIzihAVWu2kiCfzYUcsc+IX RCeZrzTpHkJZoIgegGXKhuEI9FQttS1dyyRhQ9SQWa6fdXM2aiDdTKfGra089sbN gSdjbdaUdCFtB+fGVa7dv/Rz6CV/xaYRv7AR3SDwpsaLzHB/kvoxfTlN/NThAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn8hJvMJMRjmEnE80C/FCDjluI24wHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfCwoUp78dFOsyUPmbTfJx9ghQpnW7JKC7j gPidWlHXaM3JbOhHRySLu5mpB6N04aRwuysGSdWzDe8HpKPWTpO8NmXY3AhJ5ZfR Agp2xAAU5dwp/sPkjc81ZO+LxD4gYsflXeQ0NTXAdLTTIy2JSODInsRuLBYA3cJi ++c6h1H7TI5IRvoj/RALfbomX3r9p1xzx93PH1oE2w7hSZBc03vtTE30S8mj0O1P JmlKrVCVPwmOq2RiW7IT3ULE0CV+s2cK8i+mHtU5HbIaGB4eHXeJFg8Z8EkAmfE1 py2dlLuXGkXvvFbz/iMFTEsMYZa/wpO1G8T29368nRfajrzxBW4= -----END CERTIFICATE-----Generated at Tue Jul 21 06:39:52 2026 by rpki-client