$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: HvxAwcah2HuY2BI/QoHL3U4U09RvEbYFHnSJOPEHvto= Subject key identifier: A0:DB:26:CD:92:C2:6B:6D:B7:50:E1:8B:24:F9:D4:7B:FF:E4:D5:FC Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 563EF462BB60BCBFC993AA513168138B380ACB4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: B7 Signing time: Wed 16 Sep 2026 14:47:21 +0000 Manifest this update: Wed 16 Sep 2026 14:42:21 +0000 Manifest next update: Thu 17 Sep 2026 18:03:21 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: IIQCJjYmqNKv+1l2YY11BpoqGLlMZQsIfg58AcmBE3E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 18:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:3e:f4:62:bb:60:bc:bf:c9:93:aa:51:31:68:13:8b:38:0a:cb:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Sep 16 14:42:21 2026 GMT Not After : Sep 17 18:03:21 2026 GMT Subject: CN=A0DB26CD92C26B6DB750E18B24F9D47BFFE4D5FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:10:88:23:a2:6f:52:5e:93:14:23:72:58:3f: 40:d9:73:37:2b:f1:98:69:fe:27:c4:6b:67:12:86: bf:80:54:5d:20:d9:d2:f3:90:ac:3e:db:84:d7:6e: 3d:50:3c:93:9b:b2:8c:b3:49:9c:04:7b:b8:56:f6: 34:46:00:35:05:d2:fa:df:04:ec:6f:e6:5e:82:1d: 5e:d6:47:57:58:60:a5:81:d3:12:9c:da:f1:ba:77: 69:84:8d:95:b4:23:6c:bf:b5:c7:3a:b2:e2:b1:58: 7c:df:4a:db:45:7c:5e:4b:bc:c8:10:f7:ae:e7:3a: 05:86:5e:fa:ed:25:cd:ed:dd:d7:81:8b:aa:b7:70: 4c:b1:00:8c:2e:62:fc:9c:fc:2d:23:92:71:d4:c1: d2:b9:49:c5:b1:55:0d:e9:9d:d3:da:79:cd:48:d5: 28:6f:e4:e2:e9:cc:b8:81:f7:ab:2e:36:ce:53:dd: f8:cf:62:37:5b:ee:0a:3c:91:0a:03:7d:5e:2b:e2: 36:0b:a8:37:d0:70:11:b6:64:78:88:75:8e:27:e2: 54:7c:d7:5b:8d:64:f0:78:74:c9:5c:ef:b3:6d:a0: a3:ef:6d:78:94:8e:3e:53:9c:8d:fa:c0:a0:b1:62: 01:9b:3e:95:b0:0b:3e:dd:a6:cd:ae:c2:3f:0c:09: b8:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:DB:26:CD:92:C2:6B:6D:B7:50:E1:8B:24:F9:D4:7B:FF:E4:D5:FC X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:3b:57:0d:46:fa:49:34:69:e4:0f:1d:94:34:ed:5e:2f:86: 19:b2:58:5a:30:30:b5:81:4d:d7:4c:50:f7:78:c4:29:12:11: e4:44:42:6f:1d:f5:44:d2:be:6a:ba:85:02:dc:91:1e:4b:74: 11:12:4a:88:ba:ce:d8:8e:0b:6f:c9:d5:30:6a:2f:0b:98:06: c1:59:4d:9a:c3:9e:13:cb:f6:9f:29:4d:de:c5:c9:2f:19:dd: 4c:2d:0e:60:4d:80:e9:0a:56:a0:27:12:fb:86:11:e8:66:9a: 83:36:28:d4:34:7e:81:91:a2:c4:20:05:88:7e:2e:4f:f8:9f: d5:0c:c5:20:91:a0:82:b0:d1:a6:9c:ea:47:bb:06:26:8e:7d: 7e:82:15:05:a6:7c:aa:1f:15:71:d1:3e:02:1b:a3:62:31:3e: 67:f2:67:72:84:5e:21:af:25:ca:7c:ef:57:3c:c6:9c:aa:a7: c2:f0:bf:22:c8:f7:ba:03:9a:8a:07:04:e7:20:c3:7f:08:5d: 3e:a8:24:45:e2:d5:77:02:f8:47:3d:85:0c:42:8c:8e:43:b4: 86:ac:95:a9:7b:c9:d3:84:e6:30:67:8d:73:cb:04:ca:f8:b5: 4c:b9:8e:df:86:47:22:3a:75:6f:05:7d:4d:a2:58:0e:1a:46: 5a:a0:b2:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVj70YrtgvL/Jk6pRMWgTizgKy0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA5MTYxNDQyMjFaFw0yNjA5MTcxODAzMjFaMDMxMTAvBgNV BAMTKEEwREIyNkNEOTJDMjZCNkRCNzUwRTE4QjI0RjlENDdCRkZFNEQ1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNEIgjom9SXpMUI3JYP0DZczcr 8Zhp/ifEa2cShr+AVF0g2dLzkKw+24TXbj1QPJObsoyzSZwEe7hW9jRGADUF0vrf BOxv5l6CHV7WR1dYYKWB0xKc2vG6d2mEjZW0I2y/tcc6suKxWHzfSttFfF5LvMgQ 967nOgWGXvrtJc3t3deBi6q3cEyxAIwuYvyc/C0jknHUwdK5ScWxVQ3pndPaec1I 1Shv5OLpzLiB96suNs5T3fjPYjdb7go8kQoDfV4r4jYLqDfQcBG2ZHiIdY4n4lR8 11uNZPB4dMlc77NtoKPvbXiUjj5TnI36wKCxYgGbPpWwCz7dps2uwj8MCbhrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoNsmzZLCa223UOGLJPnUe//k1fwwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL07Vw1G+kk0aeQPHZQ07V4vhhmyWFowMLWB TddMUPd4xCkSEeREQm8d9UTSvmq6hQLckR5LdBESSoi6ztiOC2/J1TBqLwuYBsFZ TZrDnhPL9p8pTd7FyS8Z3UwtDmBNgOkKVqAnEvuGEehmmoM2KNQ0foGRosQgBYh+ Lk/4n9UMxSCRoIKw0aac6ke7BiaOfX6CFQWmfKofFXHRPgIbo2IxPmfyZ3KEXiGv Jcp871c8xpyqp8LwvyLI97oDmooHBOcgw38IXT6oJEXi1XcC+Ec9hQxCjI5DtIas lal7ydOE5jBnjXPLBMr4tUy5jt+GRyI6dW8FfU2iWA4aRlqgstY= -----END CERTIFICATE-----Generated at Thu Sep 17 06:39:19 2026 by rpki-client