$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: +h4B5+XDxrVDTGsCGrXIAU/HRbo1o8c3HKvS/EesJlg= Subject key identifier: 6F:B8:95:41:1E:7D:5C:7B:63:9E:83:7A:86:09:E0:64:DD:47:42:C7 Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 37AA2880ED15C2E71585C3567628288FDD552BCA Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: F7 Signing time: Mon 02 Nov 2026 02:00:08 +0000 Manifest this update: Mon 02 Nov 2026 01:55:08 +0000 Manifest next update: Tue 03 Nov 2026 05:50:08 +0000 Files and hashes: 1: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 2: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 3: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: NLUbe94vtMY1s8Iix4o5ut6EX0Rk6pPDmoTRValTpKg=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 05:17:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:aa:28:80:ed:15:c2:e7:15:85:c3:56:76:28:28:8f:dd:55:2b:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Nov 2 01:55:08 2026 GMT Not After : Nov 3 05:50:08 2026 GMT Subject: CN=6FB895411E7D5C7B639E837A8609E064DD4742C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a2:15:b3:79:0d:91:1d:dc:7f:cc:0e:2e:1b: c3:11:12:79:77:5a:1e:d4:78:0c:b8:f9:db:3c:0b: e3:74:3a:01:07:e1:ab:40:1c:6a:45:77:9e:0e:d9: de:cc:0f:cf:47:4d:1d:4b:2a:fc:48:f0:1e:23:91: 2c:a1:25:2f:a8:8a:97:77:82:8c:a7:ab:90:7f:1d: 0c:f3:fb:fb:f3:50:ae:9b:16:ca:71:b2:8d:2d:57: 5a:50:98:b7:c5:3b:35:40:f9:02:70:0e:06:4c:f3: 75:8d:e3:b2:03:e6:c1:3a:92:07:52:76:ed:d8:68: 48:50:63:54:13:14:26:4b:a3:e3:78:50:96:ca:ec: b5:58:ba:22:42:6a:59:59:ee:c3:32:7a:1f:76:6e: 8b:ee:9c:b0:8c:a5:b5:25:82:40:d4:a5:ad:10:6d: 86:fe:46:c6:3e:28:db:4c:e8:57:ac:a3:9c:50:c0: ce:37:ef:49:21:cc:a0:20:cb:39:17:e1:44:b8:67: 9a:53:05:4a:b2:13:52:49:47:94:e4:c1:cc:78:ae: 28:13:1b:69:1e:7e:80:14:09:b4:f5:e3:c0:a0:e3: 01:7f:50:ac:90:2c:19:20:39:aa:34:27:98:5d:51: 62:05:73:8a:93:30:4d:ba:cb:51:6a:a6:8e:01:bf: 34:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B8:95:41:1E:7D:5C:7B:63:9E:83:7A:86:09:E0:64:DD:47:42:C7 X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:47:59:7e:9c:72:b9:60:1f:ab:53:e0:92:db:79:0e:c5:d4: 25:8a:6f:ae:57:4e:89:7c:8e:2e:83:56:8a:9f:fc:23:07:6c: 6d:50:4e:ed:b5:99:da:74:69:51:54:ac:5a:e5:49:7c:49:a1: be:cc:ec:70:88:30:b6:22:5b:7c:0b:56:6a:8f:d5:37:64:db: 4f:2d:6b:ed:77:e8:47:e7:41:62:81:e1:4f:04:2f:b0:1d:cb: d7:04:af:1d:fd:90:16:e3:06:7e:c2:ac:d0:a7:48:1d:d1:61: a0:12:c3:3b:56:66:27:42:db:2d:35:5d:0b:89:15:fa:a3:52: cc:d7:07:6e:6b:c1:47:5b:ae:31:8e:40:ab:0b:0a:bd:ec:44: 23:54:68:8f:4b:8e:5d:90:bd:84:fb:50:5b:df:5f:41:d5:2e: 64:af:eb:58:eb:f2:b2:84:a8:57:3c:7e:c1:0a:6d:70:c7:03: 3a:0b:c8:f5:bc:b8:ea:86:e4:a5:d6:db:27:b8:b2:3d:2a:eb: c4:90:22:6e:c8:38:d5:15:6d:8b:12:6b:f7:45:e6:57:c6:6b: 71:36:37:c0:a9:1d:85:c0:2c:0f:7c:ae:b3:59:e9:b1:d4:6d: 07:26:cf:31:78:70:c7:3f:c6:f7:e9:ef:23:fa:34:10:f9:38: ee:f5:f8:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN6oogO0VwucVhcNWdigoj91VK8owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjExMDIwMTU1MDhaFw0yNjExMDMwNTUwMDhaMDMxMTAvBgNV BAMTKDZGQjg5NTQxMUU3RDVDN0I2MzlFODM3QTg2MDlFMDY0REQ0NzQyQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ohWzeQ2RHdx/zA4uG8MREnl3 Wh7UeAy4+ds8C+N0OgEH4atAHGpFd54O2d7MD89HTR1LKvxI8B4jkSyhJS+oipd3 goynq5B/HQzz+/vzUK6bFspxso0tV1pQmLfFOzVA+QJwDgZM83WN47ID5sE6kgdS du3YaEhQY1QTFCZLo+N4UJbK7LVYuiJCallZ7sMyeh92bovunLCMpbUlgkDUpa0Q bYb+RsY+KNtM6Feso5xQwM4370khzKAgyzkX4US4Z5pTBUqyE1JJR5Tkwcx4rigT G2kefoAUCbT148Cg4wF/UKyQLBkgOao0J5hdUWIFc4qTME26y1Fqpo4BvzRnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7iVQR59XHtjnoN6hgngZN1HQscwHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9HWX6ccrlgH6tT4JLbeQ7F1CWKb65XTol8 ji6DVoqf/CMHbG1QTu21mdp0aVFUrFrlSXxJob7M7HCIMLYiW3wLVmqP1Tdk208t a+136EfnQWKB4U8EL7Ady9cErx39kBbjBn7CrNCnSB3RYaASwztWZidC2y01XQuJ FfqjUszXB25rwUdbrjGOQKsLCr3sRCNUaI9Ljl2QvYT7UFvfX0HVLmSv61jr8rKE qFc8fsEKbXDHAzoLyPW8uOqG5KXW2ye4sj0q68SQIm7IONUVbYsSa/dF5lfGa3E2 N8CpHYXALA98rrNZ6bHUbQcmzzF4cMc/xvfp7yP6NBD5OO71+Dk= -----END CERTIFICATE-----Generated at Mon Nov 2 05:55:23 2026 by rpki-client