$ rpki-client -vvvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft (raw, json) Hash identifier: uQKQWPNi0q7r1eqeJ954QPD150ZJqjgptU/18eHyno0= Subject key identifier: 9D:8D:A7:43:29:7F:F0:54:C2:FF:C5:C6:50:E8:BA:AE:5F:88:80:3B Authority key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E Certificate issuer: /CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Certificate serial: 70F95E1A71425478C043BE8C3477977D9A3D9681 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 03:32:49 +0000 Manifest this update: Thu 17 Sep 2026 03:27:49 +0000 Manifest next update: Fri 18 Sep 2026 06:27:49 +0000 Files and hashes: 1: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl (hash: 8WphzGSz7WV81B6UNSdGWQ69BI1C5pi8kWpenUvYmz4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 06:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:f9:5e:1a:71:42:54:78:c0:43:be:8c:34:77:97:7d:9a:3d:96:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Validity Not Before: Sep 17 03:27:49 2026 GMT Not After : Sep 18 06:27:49 2026 GMT Subject: CN=9D8DA743297FF054C2FFC5C650E8BAAE5F88803B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:8a:72:0f:68:63:39:eb:72:f3:97:4e:7f: b8:1b:a3:a6:e4:b8:52:8a:50:88:20:4a:bd:0a:c8: a4:48:e7:ef:56:d6:de:c2:25:c2:48:b6:dd:32:10: 2b:bc:0b:e8:6c:16:8c:9f:c5:16:16:09:95:b0:27: 9a:3e:45:61:67:0a:01:9c:97:75:c6:d9:1c:fc:25: 5c:ac:46:f5:fc:25:50:5e:a7:4d:99:42:98:20:ca: 6b:5c:2e:a3:1a:93:9d:75:98:3d:76:5c:4b:77:c3: 9d:45:53:da:7c:c7:a4:1e:57:26:67:cf:90:09:13: f8:b0:dd:cb:4b:92:af:50:19:98:bc:08:f4:ef:5d: 25:be:5d:d3:11:e1:43:b6:c3:b1:ad:02:f4:d6:a0: 00:46:16:03:4c:1d:be:20:04:23:6a:a0:07:53:70: bd:79:79:a2:10:35:c1:ed:0c:e4:5c:7b:5f:99:04: ab:4f:f0:50:22:36:07:60:1a:42:31:00:ef:4d:fb: 95:7f:15:9f:e3:cf:0e:2b:4f:9f:f7:e7:bc:9f:19: fa:fd:42:f9:de:e5:9f:ab:49:cf:5c:9c:e4:0d:92: 34:7d:14:6d:3f:a6:32:34:84:5c:4d:20:40:37:f5: 12:d3:81:69:76:9a:e7:2c:ed:a3:2c:0f:62:2a:bf: 12:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:8D:A7:43:29:7F:F0:54:C2:FF:C5:C6:50:E8:BA:AE:5F:88:80:3B X509v3 Authority Key Identifier: keyid:78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:f7:4f:7a:01:e4:88:5e:5c:43:0f:c8:bb:db:44:6e:93:ab: 4c:e7:d2:c7:49:5b:fe:ee:b5:51:f0:08:f3:43:e5:8a:13:cf: 85:c7:96:26:6b:37:19:9b:3d:df:1b:f2:23:58:4b:9d:60:40: 9e:d0:b2:95:d8:b1:27:0d:8d:ac:b4:42:7a:b9:a1:b9:53:d9: f0:32:91:6b:ff:2f:63:ef:9b:4b:84:df:c3:d6:d0:68:8d:50: 4f:1e:05:87:da:b2:ba:6b:9c:2b:ee:fb:fc:d3:40:51:12:b8: c0:ea:11:15:42:e4:cd:66:d6:64:96:25:a0:0a:e3:fb:eb:8f: 07:24:fc:d9:61:07:3a:5f:b4:22:6b:b6:71:93:1d:b7:c0:86: f0:6d:3a:00:88:ea:05:e0:25:72:a1:47:ef:7c:c5:46:52:b1: 16:c0:5e:ec:77:45:38:c2:24:12:9b:d6:51:b3:c0:4a:29:65: 9d:93:c4:2f:64:8f:90:2e:a3:0c:cf:14:ee:1b:72:3b:ec:f4: 44:ca:6b:5c:73:cf:bb:aa:a3:83:64:3d:c3:d7:2d:1c:09:3b: f6:92:f3:d8:73:18:df:ab:78:ae:26:e1:ff:37:28:a6:1b:f2: 32:86:cf:df:91:e0:41:7f:86:6b:5e:72:be:2b:e4:06:b2:bf: b6:1d:3d:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcPleGnFCVHjAQ76MNHeXfZo9loEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcw NkYzMDU2RTAeFw0yNjA5MTcwMzI3NDlaFw0yNjA5MTgwNjI3NDlaMDMxMTAvBgNV BAMTKDlEOERBNzQzMjk3RkYwNTRDMkZGQzVDNjUwRThCQUFFNUY4ODgwM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClpopyD2hjOety85dOf7gbo6bk uFKKUIggSr0KyKRI5+9W1t7CJcJItt0yECu8C+hsFoyfxRYWCZWwJ5o+RWFnCgGc l3XG2Rz8JVysRvX8JVBep02ZQpggymtcLqMak511mD12XEt3w51FU9p8x6QeVyZn z5AJE/iw3ctLkq9QGZi8CPTvXSW+XdMR4UO2w7GtAvTWoABGFgNMHb4gBCNqoAdT cL15eaIQNcHtDORce1+ZBKtP8FAiNgdgGkIxAO9N+5V/FZ/jzw4rT5/357yfGfr9 Qvne5Z+rSc9cnOQNkjR9FG0/pjI0hFxNIEA39RLTgWl2mucs7aMsD2IqvxI/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnY2nQyl/8FTC/8XGUOi6rl+IgDswHwYDVR0j BBgwFoAUeHt+EEjBarC+hdqwuxFrFwbzBW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0 OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcwNkYzMDU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODdCN0UxMDQ4QzE2QUIwQkU4NURBQjBCQjExNkIxNzA2RjMw NTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZC MTcwNkYzMDU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAD3T3oB5IheXEMPyLvbRG6Tq0zn0sdJW/7u tVHwCPND5YoTz4XHliZrNxmbPd8b8iNYS51gQJ7QspXYsScNjay0Qnq5oblT2fAy kWv/L2Pvm0uE38PW0GiNUE8eBYfasrprnCvu+/zTQFESuMDqERVC5M1m1mSWJaAK 4/vrjwck/NlhBzpftCJrtnGTHbfAhvBtOgCI6gXgJXKhR+98xUZSsRbAXux3RTjC JBKb1lGzwEopZZ2TxC9kj5AuowzPFO4bcjvs9ETKa1xzz7uqo4NkPcPXLRwJO/aS 89hzGN+reK4m4f83KKYb8jKGz9+R4EF/hmtecr4r5Aayv7YdPdo= -----END CERTIFICATE-----Generated at Thu Sep 17 11:05:43 2026 by rpki-client