$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft (raw, json) Hash identifier: u/CUigYKchYtzGGRs/Ln/7+bmXnu3kZjRLez1d52mBg= Subject key identifier: 42:DC:C4:A9:0C:F8:27:A3:BB:3D:EE:CA:9B:99:87:AA:D2:64:6C:2C Authority key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E Certificate issuer: /CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Certificate serial: 390BA1DA42FDB318DB7AF433D18B0EE7A7AD72E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:17:30 +0000 Manifest this update: Sat 20 Jun 2026 02:12:30 +0000 Manifest next update: Sun 21 Jun 2026 04:42:30 +0000 Files and hashes: 1: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl (hash: Alwx9DryWTC9pyjsXwXs+DabVC6Xq+gg0aWsbV7AsRU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 04:42:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:0b:a1:da:42:fd:b3:18:db:7a:f4:33:d1:8b:0e:e7:a7:ad:72:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Validity Not Before: Jun 20 02:12:30 2026 GMT Not After : Jun 21 04:42:30 2026 GMT Subject: CN=42DCC4A90CF827A3BB3DEECA9B9987AAD2646C2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:c0:dc:82:2a:4b:22:9f:1a:d1:9b:17:73:90: 3c:30:6c:a8:e5:9a:ce:5a:9b:8d:be:61:93:8c:0b: 88:54:53:f4:e4:fc:c6:7f:63:49:7f:f2:9d:2c:b3: 24:3e:92:f0:3e:f4:c8:de:87:0b:a5:85:58:1f:e7: 64:fe:79:1e:f4:94:62:8d:85:d2:78:87:ef:fb:1b: bf:07:14:91:fa:68:82:86:3c:18:a6:3e:54:97:f2: 19:30:9b:e7:b2:60:68:f4:cf:10:16:53:91:0c:88: a0:f5:75:5b:fc:f5:ac:fc:a7:65:73:17:9a:3e:1a: 1b:e3:51:09:d5:ac:1d:c5:4a:db:7f:84:a8:e1:b7: 0a:bf:fc:8d:59:c5:9c:13:1d:bf:24:03:ea:55:d5: 76:b9:ca:6f:e0:76:34:6c:da:fc:d2:82:58:f3:78: e6:fe:c4:bc:a6:93:7d:8c:bc:ea:9d:14:c1:d4:dd: 2a:71:ad:de:27:6b:b0:55:de:a8:e1:f0:1b:c1:8e: 0d:f5:13:0a:0a:04:74:a1:a9:ec:af:bb:92:c1:c5: ed:03:19:d9:de:55:59:8a:9e:3e:c6:17:24:f5:17: 1c:fa:3e:8d:bf:a2:e8:44:41:44:bc:08:00:ee:e0: 04:1c:49:7f:5d:7c:2b:4a:7c:01:fe:ba:0a:1b:b6: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:DC:C4:A9:0C:F8:27:A3:BB:3D:EE:CA:9B:99:87:AA:D2:64:6C:2C X509v3 Authority Key Identifier: keyid:78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:a4:19:17:0d:65:4d:f4:4e:55:f9:fd:8a:38:50:a1:94:78: a4:ec:9c:86:ec:e7:4c:64:b4:8b:a5:d6:6d:01:52:d5:60:fd: 78:59:4c:66:d6:a7:1c:46:69:54:7d:d4:eb:16:45:cf:43:3a: 73:48:d9:ba:75:84:fb:c4:a6:98:19:61:86:d0:52:03:25:4f: 06:87:22:2e:7c:99:46:b9:24:fb:00:13:f3:c4:e5:52:41:a4: 41:42:95:0a:cb:b3:22:ef:ad:6c:f3:c3:09:d8:bc:d5:94:20: 8a:02:e0:af:46:28:79:49:f4:40:ad:e9:bc:c4:f6:e3:c9:9c: a2:d3:ba:26:f6:3e:77:f4:c8:5f:fa:a8:d3:91:8d:e0:26:fd: 13:ec:64:d1:0c:ea:1f:c1:dd:28:80:93:f7:ca:00:6e:54:c8: d4:f6:77:bc:48:55:35:9a:93:21:55:54:90:a6:58:c7:cc:8b: b5:f7:6e:5c:d5:95:62:5a:65:3c:77:07:21:ab:9c:18:6b:28: ca:27:d7:a3:ad:bc:0f:75:66:14:d4:06:32:74:83:ed:be:3d: 31:d0:2b:e7:3f:ab:98:e2:70:75:88:83:e7:5f:9d:d0:a1:ab: 7d:30:74:8c:69:55:53:fd:7e:04:47:ef:48:e7:e0:72:5b:fb: 02:79:16:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOQuh2kL9sxjbevQz0YsO56etcuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcw NkYzMDU2RTAeFw0yNjA2MjAwMjEyMzBaFw0yNjA2MjEwNDQyMzBaMDMxMTAvBgNV BAMTKDQyRENDNEE5MENGODI3QTNCQjNERUVDQTlCOTk4N0FBRDI2NDZDMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxwNyCKksinxrRmxdzkDwwbKjl ms5am42+YZOMC4hUU/Tk/MZ/Y0l/8p0ssyQ+kvA+9MjehwulhVgf52T+eR70lGKN hdJ4h+/7G78HFJH6aIKGPBimPlSX8hkwm+eyYGj0zxAWU5EMiKD1dVv89az8p2Vz F5o+GhvjUQnVrB3FStt/hKjhtwq//I1ZxZwTHb8kA+pV1Xa5ym/gdjRs2vzSgljz eOb+xLymk32MvOqdFMHU3Spxrd4na7BV3qjh8BvBjg31EwoKBHShqeyvu5LBxe0D GdneVVmKnj7GFyT1Fxz6Po2/ouhEQUS8CADu4AQcSX9dfCtKfAH+ugobtosBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQtzEqQz4J6O7Pe7Km5mHqtJkbCwwHwYDVR0j BBgwFoAUeHt+EEjBarC+hdqwuxFrFwbzBW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0 OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcwNkYzMDU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODdCN0UxMDQ4QzE2QUIwQkU4NURBQjBCQjExNkIxNzA2RjMw NTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZC MTcwNkYzMDU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMCkGRcNZU30TlX5/Yo4UKGUeKTsnIbs50xk tIul1m0BUtVg/XhZTGbWpxxGaVR91OsWRc9DOnNI2bp1hPvEppgZYYbQUgMlTwaH Ii58mUa5JPsAE/PE5VJBpEFClQrLsyLvrWzzwwnYvNWUIIoC4K9GKHlJ9ECt6bzE 9uPJnKLTuib2Pnf0yF/6qNORjeAm/RPsZNEM6h/B3SiAk/fKAG5UyNT2d7xIVTWa kyFVVJCmWMfMi7X3blzVlWJaZTx3ByGrnBhrKMon16OtvA91ZhTUBjJ0g+2+PTHQ K+c/q5jicHWIg+dfndChq30wdIxpVVP9fgRH70jn4HJb+wJ5Fqo= -----END CERTIFICATE-----Generated at Sat Jun 20 09:20:37 2026 by rpki-client