$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft File: 286FEF74182957F840C8CD66D505DD9A8BF4A606.mft (raw, json) Hash identifier: t+qX724/30dAB1sI1C+XxTnb6RawR+nVQz3tDr9P00I= Subject key identifier: AD:8E:1E:05:CF:CB:45:19:3D:EC:19:F0:16:19:59:63:5B:2B:F0:61 Authority key identifier: 28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 Certificate issuer: /CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Certificate serial: 43F6FCAF31A590C06040FEB84D8A03EAE7A23808 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft Manifest number: BA Signing time: Thu 17 Sep 2026 04:03:28 +0000 Manifest this update: Thu 17 Sep 2026 03:58:28 +0000 Manifest next update: Fri 18 Sep 2026 04:27:28 +0000 Files and hashes: 1: 3130332e34332e32372e302f32342d3234203d3e20313530323832.roa (hash: qLtwF3ISuvLzArijpMOF5fAjENE5AmrknqjjuwJX4QM=) 2: 3130332e34332e32362e302f32342d3234203d3e20313530323832.roa (hash: AthlSg+fC+KDbEL8BU+u7C1PwYX8FKjL7COZzuS8GwQ=) 3: 286FEF74182957F840C8CD66D505DD9A8BF4A606.crl (hash: Q2Nh9jwqfqcgRkSomqAcygN2/py20a1neTirD0GPz1A=) 4: 3130332e34332e32362e302f32332d3233203d3e20313530323832.roa (hash: B28bgCxG5yIMS8RvUUNRnlY6fRGrdbq+yR9rEsAykN0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 04:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:f6:fc:af:31:a5:90:c0:60:40:fe:b8:4d:8a:03:ea:e7:a2:38:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=286FEF74182957F840C8CD66D505DD9A8BF4A606 Validity Not Before: Sep 17 03:58:28 2026 GMT Not After : Sep 18 04:27:28 2026 GMT Subject: CN=AD8E1E05CFCB45193DEC19F0161959635B2BF061 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:bb:cb:cb:a0:62:a5:35:4b:5e:c4:b4:58:75: 8a:9f:a4:1a:1b:1a:38:b5:de:6b:d8:1c:c8:0a:00: ff:ee:4b:4f:a1:aa:90:9a:9c:06:b1:58:78:6d:31: 1c:5d:9f:1d:69:aa:ad:65:0f:ae:91:50:83:92:4d: 00:f1:54:22:b8:98:44:96:54:4a:ef:d8:a7:65:b8: a5:65:bb:a2:90:f4:df:b2:9a:1b:5e:07:42:1d:44: 87:77:99:3b:ef:5f:08:1c:4c:38:59:44:d3:01:67: 56:4c:0c:57:67:c5:4d:90:06:3e:25:1f:f9:76:b0: ab:e7:33:be:ea:21:05:1f:10:e9:e6:fb:9a:92:0c: db:fa:55:d4:e8:52:44:52:c5:47:de:26:8c:79:26: 4a:42:cd:98:0e:97:5b:84:34:29:59:5f:7e:3c:22: ec:ad:57:ee:0a:bb:da:f0:28:a8:7f:40:e9:13:1f: f0:92:5f:cf:97:2e:2b:7c:66:c2:de:76:61:61:f6: e4:0e:3e:b5:18:45:a4:42:11:c5:5d:c3:b7:01:8d: 85:9d:0a:1d:b8:8f:a9:bf:2f:10:59:37:a0:c7:5e: 64:86:e4:6e:93:f4:8b:50:9d:d8:2e:59:56:95:59: aa:89:5e:69:8e:d6:88:e8:5e:7a:93:dd:e1:4d:37: 0a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:8E:1E:05:CF:CB:45:19:3D:EC:19:F0:16:19:59:63:5B:2B:F0:61 X509v3 Authority Key Identifier: keyid:28:6F:EF:74:18:29:57:F8:40:C8:CD:66:D5:05:DD:9A:8B:F4:A6:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/286FEF74182957F840C8CD66D505DD9A8BF4A606.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5124b4b5-7813-46cd-9db4-a3cd585e0ed4/0/286FEF74182957F840C8CD66D505DD9A8BF4A606.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:dd:79:06:f3:53:d1:82:87:48:6c:2d:19:f3:f6:a5:f6:f7: 70:da:6a:92:b4:44:08:2c:40:8b:8b:69:c0:a9:c5:e5:ae:82: b4:6d:6f:7b:1f:79:30:1a:31:f4:60:da:09:aa:95:ae:3b:9c: 4c:67:d1:37:6c:ad:fb:7f:ae:27:a1:61:af:d2:ce:12:2e:93: 3d:be:b4:db:e0:2c:8d:d3:fa:3d:b2:c9:a5:bd:dc:b4:8b:ac: cb:34:a2:4f:ca:5d:4e:df:4d:bb:f5:13:89:dd:32:03:a4:b5: 08:33:a4:d4:43:49:cd:10:b8:d2:61:0d:2a:6e:9b:63:aa:1e: be:42:3d:46:9d:dc:5a:56:cd:2e:e6:bf:f9:52:65:c2:7b:34: c8:1d:3f:d3:38:96:23:61:f0:28:16:da:1e:db:d3:27:7d:45: 57:08:d9:85:0e:82:10:17:ab:11:d1:cd:ea:98:ac:03:17:1c: 19:50:6a:57:77:d1:16:c3:7e:3f:3a:5c:7c:31:9b:11:54:7e: 4e:4d:67:3e:46:36:0f:87:2d:aa:ae:8c:e8:24:f9:74:1a:6c: 2d:43:e9:60:23:d9:9a:e6:ab:e9:2f:55:43:e1:11:57:cd:1f: 91:5c:1e:90:c3:8e:f9:f5:6f:14:36:af:6a:eb:96:ad:11:94: 33:b2:3a:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ/b8rzGlkMBgQP64TYoD6ueiOAgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNUREOUE4 QkY0QTYwNjAeFw0yNjA5MTcwMzU4MjhaFw0yNjA5MTgwNDI3MjhaMDMxMTAvBgNV BAMTKEFEOEUxRTA1Q0ZDQjQ1MTkzREVDMTlGMDE2MTk1OTYzNUIyQkYwNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCau8vLoGKlNUtexLRYdYqfpBob Gji13mvYHMgKAP/uS0+hqpCanAaxWHhtMRxdnx1pqq1lD66RUIOSTQDxVCK4mESW VErv2KdluKVlu6KQ9N+ymhteB0IdRId3mTvvXwgcTDhZRNMBZ1ZMDFdnxU2QBj4l H/l2sKvnM77qIQUfEOnm+5qSDNv6VdToUkRSxUfeJox5JkpCzZgOl1uENClZX348 IuytV+4Ku9rwKKh/QOkTH/CSX8+XLit8ZsLedmFh9uQOPrUYRaRCEcVdw7cBjYWd Ch24j6m/LxBZN6DHXmSG5G6T9ItQndguWVaVWaqJXmmO1ojoXnqT3eFNNwqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrY4eBc/LRRk97BnwFhlZY1sr8GEwHwYDVR0j BBgwFoAUKG/vdBgpV/hAyM1m1QXdmov0pgYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NTEyNGI0YjUtNzgxMy00NmNkLTlkYjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQx ODI5NTdGODQwQzhDRDY2RDUwNUREOUE4QkY0QTYwNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yODZGRUY3NDE4Mjk1N0Y4NDBDOENENjZENTA1REQ5QThCRjRB NjA2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNTEyNGI0YjUtNzgxMy00NmNkLTlk YjQtYTNjZDU4NWUwZWQ0LzAvMjg2RkVGNzQxODI5NTdGODQwQzhDRDY2RDUwNURE OUE4QkY0QTYwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIXdeQbzU9GCh0hsLRnz9qX293DaapK0RAgs QIuLacCpxeWugrRtb3sfeTAaMfRg2gmqla47nExn0Tdsrft/riehYa/SzhIukz2+ tNvgLI3T+j2yyaW93LSLrMs0ok/KXU7fTbv1E4ndMgOktQgzpNRDSc0QuNJhDSpu m2OqHr5CPUad3FpWzS7mv/lSZcJ7NMgdP9M4liNh8CgW2h7b0yd9RVcI2YUOghAX qxHRzeqYrAMXHBlQald30RbDfj86XHwxmxFUfk5NZz5GNg+HLaqujOgk+XQabC1D 6WAj2Zrmq+kvVUPhEVfNH5FcHpDDjvn1bxQ2r2rrlq0RlDOyOmA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:51:26 2026 by rpki-client