$ rpki-client -vvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: Y2JcSbXuAC5u1nXg7caALN2UKjyUzUyrfsuw/RoRV1I= Subject key identifier: 83:4E:DC:0C:72:A8:24:73:2E:3A:50:00:86:12:A9:C2:2D:66:30:FE Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 33581CA25DB3570187A79D4D9F10F65680F8A094 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 20:29:49 +0000 Manifest this update: Tue 02 Jun 2026 20:24:49 +0000 Manifest next update: Wed 03 Jun 2026 22:25:49 +0000 Files and hashes: 1: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 2: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: G6hivaT2Gwm0WqBpEmqYKKDLsQqecxqGjAhD5hYPH5g=) 3: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) 4: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:58:1c:a2:5d:b3:57:01:87:a7:9d:4d:9f:10:f6:56:80:f8:a0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Jun 2 20:24:49 2026 GMT Not After : Jun 3 22:25:49 2026 GMT Subject: CN=834EDC0C72A824732E3A50008612A9C22D6630FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:ea:ad:c4:dc:4f:08:33:dd:fc:28:ff:57:31: f0:af:64:81:90:17:1f:88:2c:e6:c1:a0:0c:ff:89: 7c:bd:ae:be:ed:be:70:db:c2:5a:a9:3e:31:11:55: 3a:60:9e:1e:c9:15:8e:b1:a6:b0:9a:fc:56:87:96: aa:4c:43:6c:fa:ae:20:b6:b3:5a:17:a4:3a:08:86: e3:c8:9f:14:26:f5:7e:ea:de:98:b8:78:90:b7:9a: 5f:72:30:ce:32:ea:bb:e6:96:d8:97:94:78:3f:ec: b2:8b:06:9d:4f:29:35:e0:b7:83:f8:45:55:95:70: b1:d3:fa:4f:24:5a:9c:50:c1:fd:04:b9:a4:a8:9d: df:3e:64:71:df:f3:d8:91:7f:f4:15:08:06:b0:7b: 38:90:66:8f:fe:31:34:70:e4:93:b8:57:f2:ab:40: eb:86:29:ed:83:68:39:bb:5a:6b:19:14:56:9d:7b: f5:4f:4b:3e:4d:8f:e0:62:bf:c1:cf:8f:1c:db:a6: 6b:11:ff:68:c1:63:1c:8a:50:f2:ca:48:7c:e7:c5: b7:5e:ef:20:0f:57:b9:26:9e:36:03:76:08:9d:6f: 79:41:46:ff:41:77:03:d3:78:64:60:da:49:4c:f1: 53:77:46:22:0f:f2:52:28:51:fe:1d:1a:7c:eb:f4: 95:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:4E:DC:0C:72:A8:24:73:2E:3A:50:00:86:12:A9:C2:2D:66:30:FE X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:96:42:e4:3d:d5:46:a6:5b:e8:ce:29:2c:5c:36:a5:64:5a: bd:30:1f:6c:e7:d5:85:49:d2:76:08:31:40:01:5c:df:05:a9: ec:75:96:4e:d9:3b:91:e9:31:e6:ab:49:15:0f:30:f9:8f:90: b4:d2:a0:4b:e6:78:92:83:ff:82:ee:fa:9e:30:49:bb:02:7a: c2:21:0d:51:24:5f:9d:ca:e2:98:96:d0:24:1f:b5:cd:ea:1f: 46:9c:80:b7:2f:0f:02:01:51:af:b4:30:1f:67:c5:67:00:66: 5c:e4:7f:0c:31:cd:7c:c6:d1:d8:31:42:91:9f:81:7e:d6:10: 99:ef:5a:22:40:16:32:5a:82:84:d0:b8:ff:03:f6:a6:2c:54: dc:28:6a:87:87:5d:9a:da:37:ee:16:fd:24:7b:fc:e5:fb:ce: a9:d7:62:a2:8f:87:45:1d:3c:4f:54:9a:f7:16:54:c9:e6:53: d0:e9:8b:34:ff:aa:c9:4c:28:ea:ed:a7:b7:54:ea:12:44:16: 27:7b:88:70:bb:8f:27:cc:73:ae:8e:a1:15:e1:e7:64:31:a6: 11:85:b2:47:82:e6:38:9a:f4:9b:0a:19:b1:91:25:b3:df:98: 50:51:5d:b0:1d:75:55:f8:27:32:81:5c:94:1a:d1:54:81:bd: 06:0c:bd:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1gcol2zVwGHp51NnxD2VoD4oJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA2MDIyMDI0NDlaFw0yNjA2MDMyMjI1NDlaMDMxMTAvBgNV BAMTKDgzNEVEQzBDNzJBODI0NzMyRTNBNTAwMDg2MTJBOUMyMkQ2NjMwRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP6q3E3E8IM938KP9XMfCvZIGQ Fx+ILObBoAz/iXy9rr7tvnDbwlqpPjERVTpgnh7JFY6xprCa/FaHlqpMQ2z6riC2 s1oXpDoIhuPInxQm9X7q3pi4eJC3ml9yMM4y6rvmltiXlHg/7LKLBp1PKTXgt4P4 RVWVcLHT+k8kWpxQwf0EuaSond8+ZHHf89iRf/QVCAaweziQZo/+MTRw5JO4V/Kr QOuGKe2DaDm7WmsZFFade/VPSz5Nj+Biv8HPjxzbpmsR/2jBYxyKUPLKSHznxbde 7yAPV7kmnjYDdgidb3lBRv9BdwPTeGRg2klM8VN3RiIP8lIoUf4dGnzr9JWRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg07cDHKoJHMuOlAAhhKpwi1mMP4wHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGWQuQ91UamW+jOKSxcNqVkWr0wH2zn1YVJ 0nYIMUABXN8Fqex1lk7ZO5HpMearSRUPMPmPkLTSoEvmeJKD/4Lu+p4wSbsCesIh DVEkX53K4piW0CQftc3qH0acgLcvDwIBUa+0MB9nxWcAZlzkfwwxzXzG0dgxQpGf gX7WEJnvWiJAFjJagoTQuP8D9qYsVNwoaoeHXZraN+4W/SR7/OX7zqnXYqKPh0Ud PE9UmvcWVMnmU9DpizT/qslMKOrtp7dU6hJEFid7iHC7jyfMc66OoRXh52QxphGF skeC5jia9JsKGbGRJbPfmFBRXbAddVX4JzKBXJQa0VSBvQYMvTo= -----END CERTIFICATE-----Generated at Wed Jun 3 04:15:46 2026 by rpki-client