$ rpki-client -vvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: hkVbWYmehvd19Kb4OzrikELJDuA9fP2elcUGr/TpM20= Subject key identifier: 2A:60:AE:E0:12:0A:49:9D:9D:31:B0:D3:57:82:4A:6A:8B:C7:F7:EB Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 6079F73F4B97FDB1131A410F14A15F7B6B1EF2CF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: 3D Signing time: Wed 17 Jun 2026 05:55:00 +0000 Manifest this update: Wed 17 Jun 2026 05:50:00 +0000 Manifest next update: Thu 18 Jun 2026 06:26:00 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: sAnKJKIsaiBb5osB29hZVD1R3fQBEbAj2rG9RfCC1xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:79:f7:3f:4b:97:fd:b1:13:1a:41:0f:14:a1:5f:7b:6b:1e:f2:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Jun 17 05:50:00 2026 GMT Not After : Jun 18 06:26:00 2026 GMT Subject: CN=2A60AEE0120A499D9D31B0D357824A6A8BC7F7EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:8f:2b:2c:de:06:16:7e:2d:d0:66:ad:d5:aa: c0:d4:5e:3d:e0:f3:c8:2e:11:25:98:be:25:b9:88: c5:59:15:76:83:9d:7f:38:81:fa:81:f5:1b:bf:b3: 20:3a:46:ea:ed:44:f7:10:91:4b:1c:06:25:1f:69: fb:5d:b2:58:f8:0c:a2:f5:6b:b1:52:2e:5d:92:0c: 1d:a1:46:36:70:6b:ee:86:45:32:4a:16:de:ec:ea: 21:f4:11:b7:8a:cf:06:47:9b:ff:ce:f8:70:05:1c: 72:f2:8a:7a:79:bc:1c:0c:02:bb:43:aa:88:3c:77: ae:c1:84:79:38:2f:c5:31:5e:b5:0b:d1:98:9d:3a: c4:e6:c3:98:9e:12:d0:9f:8d:cd:96:b7:bd:02:ab: e4:b7:9a:ae:1d:96:75:b1:46:c1:37:c9:c3:23:8d: b0:00:62:35:54:70:15:6e:07:e2:cf:1b:4f:42:eb: ed:7b:34:92:fd:98:8b:75:05:06:da:b1:a1:a9:f8: 0c:79:23:62:15:a6:3c:70:42:dc:6f:02:20:da:cc: fc:8d:60:c2:0f:a4:08:52:34:4c:c0:f1:c9:6b:c4: 11:77:6a:de:dc:9d:b1:fc:14:9b:bb:0b:36:6b:69: f9:f7:5d:c7:bd:91:a5:cb:4e:22:d0:7e:d6:e7:19: ee:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:60:AE:E0:12:0A:49:9D:9D:31:B0:D3:57:82:4A:6A:8B:C7:F7:EB X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:81:23:14:a9:8c:ff:22:91:5a:8c:f1:0d:ce:4e:2a:a6:8f: a1:5f:db:8a:52:12:a4:3d:4a:89:23:43:88:f5:fb:6e:4f:86: e9:66:74:5a:f6:64:25:ce:c3:7c:cb:50:96:41:5e:77:c5:30: ea:3a:d6:bd:ab:90:cf:79:16:4a:d0:04:32:3b:7e:99:58:4a: 0b:d0:e3:54:0b:df:7d:46:79:5a:26:1e:e9:51:07:c9:80:54: 9c:11:70:35:6e:2e:07:8f:d7:6b:10:1c:6e:37:77:3a:0f:3d: 65:82:9e:05:21:71:11:e0:05:db:22:a5:56:ab:71:91:c7:38: ef:01:d5:25:31:4c:3c:d3:99:e6:51:a6:5a:7c:5b:8e:3b:36: 10:6e:f7:d2:7d:04:84:34:93:bc:03:1a:c9:2a:63:9b:c6:b6: 3f:23:6d:3e:7e:d4:26:33:a1:5a:ab:28:ac:80:a7:45:62:70: d9:01:3f:28:20:2e:db:26:dd:51:f8:0f:73:e5:c3:86:d3:e8: c6:58:46:d8:a8:9c:13:d4:5c:6c:7e:23:e2:7e:64:7f:6f:21: 8f:8a:46:4b:36:5f:22:67:c2:90:1d:b9:a1:f2:ac:c0:c1:71: bf:38:e1:4c:bc:7c:6c:ee:b5:82:ff:e9:a4:c5:71:22:58:b2: 34:53:40:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHn3P0uX/bETGkEPFKFfe2se8s8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA2MTcwNTUwMDBaFw0yNjA2MTgwNjI2MDBaMDMxMTAvBgNV BAMTKDJBNjBBRUUwMTIwQTQ5OUQ5RDMxQjBEMzU3ODI0QTZBOEJDN0Y3RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzjyss3gYWfi3QZq3VqsDUXj3g 88guESWYviW5iMVZFXaDnX84gfqB9Ru/syA6RurtRPcQkUscBiUfaftdslj4DKL1 a7FSLl2SDB2hRjZwa+6GRTJKFt7s6iH0EbeKzwZHm//O+HAFHHLyinp5vBwMArtD qog8d67BhHk4L8UxXrUL0ZidOsTmw5ieEtCfjc2Wt70Cq+S3mq4dlnWxRsE3ycMj jbAAYjVUcBVuB+LPG09C6+17NJL9mIt1BQbasaGp+Ax5I2IVpjxwQtxvAiDazPyN YMIPpAhSNEzA8clrxBF3at7cnbH8FJu7CzZrafn3Xce9kaXLTiLQftbnGe4rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKmCu4BIKSZ2dMbDTV4JKaovH9+swHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaBIxSpjP8ikVqM8Q3OTiqmj6Ff24pSEqQ9 SokjQ4j1+25PhulmdFr2ZCXOw3zLUJZBXnfFMOo61r2rkM95FkrQBDI7fplYSgvQ 41QL331GeVomHulRB8mAVJwRcDVuLgeP12sQHG43dzoPPWWCngUhcRHgBdsipVar cZHHOO8B1SUxTDzTmeZRplp8W447NhBu99J9BIQ0k7wDGskqY5vGtj8jbT5+1CYz oVqrKKyAp0VicNkBPyggLtsm3VH4D3Plw4bT6MZYRtionBPUXGx+I+J+ZH9vIY+K Rks2XyJnwpAduaHyrMDBcb844Uy8fGzutYL/6aTFcSJYsjRTQFQ= -----END CERTIFICATE-----Generated at Wed Jun 17 10:33:38 2026 by rpki-client