$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: rgTBYQTJJhPhcr1/IYOGU5JlEqYBFyY/vqeBpa7WOgc= Subject key identifier: C6:31:94:DA:E9:A4:E6:10:22:B4:11:76:91:87:33:38:BF:F0:22:77 Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 727FF8B268B712D90D9E3CCFDEAF5BDCE5A9F121 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: BE Signing time: Mon 21 Sep 2026 17:02:42 +0000 Manifest this update: Mon 21 Sep 2026 16:57:42 +0000 Manifest next update: Tue 22 Sep 2026 20:41:42 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: 6VN11SqB1mFA/vamhRLGUIeftq4hFcuFJKaQHeEixGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 20:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:7f:f8:b2:68:b7:12:d9:0d:9e:3c:cf:de:af:5b:dc:e5:a9:f1:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Sep 21 16:57:42 2026 GMT Not After : Sep 22 20:41:42 2026 GMT Subject: CN=C63194DAE9A4E61022B4117691873338BFF02277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bf:f5:fc:eb:4f:df:2e:23:28:ef:4a:bd:24: 06:68:b7:1d:4f:1f:1c:4a:74:a8:12:83:f7:e8:14: 9f:49:b0:7d:d9:c1:cf:c0:2a:c2:9c:4a:98:b4:25: 22:55:d6:92:26:6d:68:ed:91:68:10:b9:0a:a5:06: c6:2e:fa:cd:e8:16:38:9a:7e:af:83:fb:ce:a0:cb: b8:f1:cd:f1:15:f3:cf:c2:d2:b6:d4:96:0f:8a:58: 18:b3:97:dd:f7:3b:70:22:6d:ce:b3:33:89:86:27: 91:55:18:6d:22:2d:06:76:43:27:8f:c9:e9:a1:b0: 05:fd:7f:39:71:b4:30:e7:c1:7f:c6:bd:26:a6:72: c2:04:1e:3b:d5:d7:76:0b:39:5c:d3:d0:e9:d2:c1: 6a:ec:9d:2d:43:9c:e8:6c:d9:0d:7f:e8:68:66:f8: 14:da:2d:f1:87:b0:c7:13:0d:c3:67:20:0d:31:36: da:71:96:30:be:0c:be:07:99:81:36:8b:e2:4a:dc: e2:ec:9d:d0:a5:d4:0b:c9:22:93:5f:04:16:4b:25: bc:da:44:86:1a:a4:c8:4f:3b:53:ca:c8:00:29:2d: dd:c5:7a:49:25:e8:81:ce:72:1a:8c:a3:b9:cd:e5: a3:65:6b:57:08:fd:44:f4:0b:3f:0b:d1:c7:c2:16: ef:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:31:94:DA:E9:A4:E6:10:22:B4:11:76:91:87:33:38:BF:F0:22:77 X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:97:b4:8a:c3:24:e2:5d:0e:71:25:e2:d2:3e:1b:4e:b8:c5: c4:92:43:07:c0:12:81:e1:3b:47:17:f1:92:bb:da:52:7b:f1: ce:ff:b2:4e:c4:68:59:3b:2e:be:ed:40:41:18:76:59:50:de: 55:35:dd:9c:ac:71:85:38:61:2c:b9:af:ca:1b:79:af:24:a6: 62:7e:bb:25:92:99:2c:54:22:d5:7b:37:c5:a8:1d:a1:54:dd: a6:9b:a3:1d:15:ec:5c:af:56:b3:88:b7:a3:49:71:bb:44:2c: f1:09:65:70:b8:ce:70:e9:62:fa:76:08:c0:f8:a5:f4:8c:d3: 9a:7f:06:cb:e6:3c:2b:03:77:29:36:93:bc:2c:be:f4:61:c7: 81:b9:ee:f6:15:f2:71:f8:ba:fc:48:ab:4f:01:4a:41:78:14: af:ed:94:a5:c5:4e:60:88:c0:bd:2d:f0:09:c1:67:28:84:4e: a9:2e:9c:d2:13:44:5e:18:fc:70:b4:d5:0e:f1:0e:fe:8f:7f: ca:6d:88:2d:30:b5:59:f2:46:50:1c:5a:eb:36:3f:77:e9:96: e0:2c:3d:45:69:c5:69:e4:d5:36:76:71:a1:07:74:d0:30:f3: 85:06:ff:94:7b:d3:43:25:e2:cc:ab:3e:7f:18:55:4a:90:57: 60:c8:39:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcn/4smi3EtkNnjzP3q9b3OWp8SEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA5MjExNjU3NDJaFw0yNjA5MjIyMDQxNDJaMDMxMTAvBgNV BAMTKEM2MzE5NERBRTlBNEU2MTAyMkI0MTE3NjkxODczMzM4QkZGMDIyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClv/X860/fLiMo70q9JAZotx1P HxxKdKgSg/foFJ9JsH3Zwc/AKsKcSpi0JSJV1pImbWjtkWgQuQqlBsYu+s3oFjia fq+D+86gy7jxzfEV88/C0rbUlg+KWBizl933O3Aibc6zM4mGJ5FVGG0iLQZ2QyeP yemhsAX9fzlxtDDnwX/GvSamcsIEHjvV13YLOVzT0OnSwWrsnS1DnOhs2Q1/6Ghm +BTaLfGHsMcTDcNnIA0xNtpxljC+DL4HmYE2i+JK3OLsndCl1AvJIpNfBBZLJbza RIYapMhPO1PKyAApLd3Fekkl6IHOchqMo7nN5aNla1cI/UT0Cz8L0cfCFu/FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxjGU2umk5hAitBF2kYczOL/wIncwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImXtIrDJOJdDnEl4tI+G064xcSSQwfAEoHh O0cX8ZK72lJ78c7/sk7EaFk7Lr7tQEEYdllQ3lU13ZyscYU4YSy5r8obea8kpmJ+ uyWSmSxUItV7N8WoHaFU3aabox0V7FyvVrOIt6NJcbtELPEJZXC4znDpYvp2CMD4 pfSM05p/BsvmPCsDdyk2k7wsvvRhx4G57vYV8nH4uvxIq08BSkF4FK/tlKXFTmCI wL0t8AnBZyiETqkunNITRF4Y/HC01Q7xDv6Pf8ptiC0wtVnyRlAcWus2P3fpluAs PUVpxWnk1TZ2caEHdNAw84UG/5R700Ml4syrPn8YVUqQV2DIOeI= -----END CERTIFICATE-----Generated at Tue Sep 22 12:38:05 2026 by rpki-client