$ rpki-client -vvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: jTrleuk4Ein/jophziuKObIuEUWbzwgD7wZabsngU0Q= Subject key identifier: F3:9D:BE:63:AF:0B:C8:78:C7:33:A8:CE:39:80:A9:70:72:22:FE:69 Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 38932787E89D901944E2B151E98B338E7C35767F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: 41 Signing time: Sat 20 Jun 2026 02:22:40 +0000 Manifest this update: Sat 20 Jun 2026 02:17:40 +0000 Manifest next update: Sun 21 Jun 2026 06:09:40 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: wkaEeNbl9dlCaLXIlsrO/cuGutS7qeEFo/UQ3TB1UXQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:09:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:93:27:87:e8:9d:90:19:44:e2:b1:51:e9:8b:33:8e:7c:35:76:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Jun 20 02:17:40 2026 GMT Not After : Jun 21 06:09:40 2026 GMT Subject: CN=F39DBE63AF0BC878C733A8CE3980A9707222FE69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a3:c3:0d:f5:45:39:99:5f:05:5d:0a:22:05: 66:ec:7f:86:a8:30:82:94:b4:29:d2:2b:1b:f4:8d: 71:f0:0c:19:1d:dc:35:d5:b6:51:e5:e4:b6:8f:da: b9:0d:2c:8c:80:3e:96:b9:4c:1b:f7:6f:37:15:0b: a5:04:d7:47:c2:4d:f7:02:e8:d5:50:5c:6d:52:3e: b3:97:5c:21:2f:7e:a5:4a:7d:4d:74:9c:23:40:d0: f6:89:39:5a:0c:0d:8c:2e:ef:aa:bd:34:78:c5:a5: 2d:52:b5:df:38:81:9c:b1:0e:2c:52:76:e4:77:f2: 4d:4a:e4:35:ef:d5:df:c2:c9:28:91:61:c3:ba:1a: de:cb:7c:a8:18:67:1e:df:ab:d5:5c:bd:a2:84:55: f3:4f:34:8a:f8:90:c0:1b:b1:10:3f:94:34:98:11: 51:d0:de:ab:32:96:99:89:fc:70:c0:35:59:0c:a7: 80:e7:da:e3:8c:98:4e:3e:23:b8:7c:de:74:f0:6a: 09:8c:cd:d4:07:9e:4c:dc:0f:00:57:a8:5d:0e:34: b3:7f:f8:c9:27:59:d2:5c:72:4e:08:05:18:5c:11: 0d:57:f1:88:66:81:98:26:9d:7f:66:df:1b:c0:5c: 58:0e:43:69:09:b6:af:57:bd:fd:50:36:62:ac:53: 4b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:9D:BE:63:AF:0B:C8:78:C7:33:A8:CE:39:80:A9:70:72:22:FE:69 X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:32:33:58:8b:5c:2e:8b:22:73:d7:f8:8d:fd:8c:62:e0:34: 40:01:2a:6f:3a:c1:80:91:63:34:48:76:f0:2e:bc:6c:35:bf: 4e:6f:bc:9d:81:46:9f:fd:0f:9a:ac:d6:26:12:37:66:66:b2: 88:3c:79:5c:50:2a:87:e9:03:94:3a:03:c0:97:bf:35:58:b5: 11:1d:bb:a7:b2:77:8e:2e:bb:3f:e3:b8:4b:70:da:19:e2:3f: 87:d4:c2:09:48:8a:74:4d:87:6b:d3:8a:d0:92:25:95:8f:97: e4:31:d0:8c:fd:c0:f7:da:b9:39:5d:85:e1:de:bf:8a:c8:50: f8:a4:29:6d:59:47:03:29:16:a7:d5:c2:1b:39:80:35:41:b8: 45:8c:17:7b:e6:ba:61:48:bc:df:03:04:01:8a:d4:01:83:ed: 07:0b:84:a4:77:19:33:a9:f2:9a:70:5f:59:06:30:85:1b:c9: ed:ae:6f:dd:e7:33:16:3c:2c:d4:68:34:62:fe:22:19:49:93: f1:97:10:76:e1:ca:ca:b1:3a:2f:de:b1:84:25:47:5d:23:20: 2a:90:62:12:bd:a1:a9:a6:32:16:ac:ca:f2:2b:91:3f:d9:d4: b5:19:34:a2:31:e1:de:2c:4b:32:fe:d5:36:b4:05:68:e7:de: ad:6c:0b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJMnh+idkBlE4rFR6Yszjnw1dn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA2MjAwMjE3NDBaFw0yNjA2MjEwNjA5NDBaMDMxMTAvBgNV BAMTKEYzOURCRTYzQUYwQkM4NzhDNzMzQThDRTM5ODBBOTcwNzIyMkZFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCno8MN9UU5mV8FXQoiBWbsf4ao MIKUtCnSKxv0jXHwDBkd3DXVtlHl5LaP2rkNLIyAPpa5TBv3bzcVC6UE10fCTfcC 6NVQXG1SPrOXXCEvfqVKfU10nCNA0PaJOVoMDYwu76q9NHjFpS1Std84gZyxDixS duR38k1K5DXv1d/CySiRYcO6Gt7LfKgYZx7fq9VcvaKEVfNPNIr4kMAbsRA/lDSY EVHQ3qsylpmJ/HDANVkMp4Dn2uOMmE4+I7h83nTwagmMzdQHnkzcDwBXqF0ONLN/ +MknWdJcck4IBRhcEQ1X8YhmgZgmnX9m3xvAXFgOQ2kJtq9Xvf1QNmKsU0tTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU852+Y68LyHjHM6jOOYCpcHIi/mkwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMyM1iLXC6LInPX+I39jGLgNEABKm86wYCR YzRIdvAuvGw1v05vvJ2BRp/9D5qs1iYSN2Zmsog8eVxQKofpA5Q6A8CXvzVYtREd u6eyd44uuz/juEtw2hniP4fUwglIinRNh2vTitCSJZWPl+Qx0Iz9wPfauTldheHe v4rIUPikKW1ZRwMpFqfVwhs5gDVBuEWMF3vmumFIvN8DBAGK1AGD7QcLhKR3GTOp 8ppwX1kGMIUbye2ub93nMxY8LNRoNGL+IhlJk/GXEHbhysqxOi/esYQlR10jICqQ YhK9oammMhasyvIrkT/Z1LUZNKIx4d4sSzL+1Ta0BWjn3q1sCwA= -----END CERTIFICATE-----Generated at Sat Jun 20 09:21:06 2026 by rpki-client