$ rpki-client -vvf rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft File: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft (raw, json) Hash identifier: uStU/vWk9XWKbEfu9lN3BYDV+oAhXzTbUmW6KzH4EkQ= Subject key identifier: 5E:D7:44:34:03:92:7C:C1:D2:74:2C:25:E3:89:D7:4A:18:4B:83:45 Authority key identifier: 78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E Certificate issuer: /CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Certificate serial: 303900415FAFBBD0D3632F304B38A4AFDC9C3AC4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 22:17:03 +0000 Manifest this update: Thu 23 Jul 2026 22:12:03 +0000 Manifest next update: Sat 25 Jul 2026 00:11:03 +0000 Files and hashes: 1: 787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl (hash: 3jHxMGLk9ZmL5bfpClzIjf6GBcL/WamOONgjbEBQKmc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 00:11:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:39:00:41:5f:af:bb:d0:d3:63:2f:30:4b:38:a4:af:dc:9c:3a:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=787B7E1048C16AB0BE85DAB0BB116B1706F3056E Validity Not Before: Jul 23 22:12:03 2026 GMT Not After : Jul 25 00:11:03 2026 GMT Subject: CN=5ED7443403927CC1D2742C25E389D74A184B8345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:a5:72:c4:2c:fa:16:43:59:b5:bc:3a:b3:32: 89:aa:3f:eb:ff:79:ee:7c:e6:c7:00:01:18:ba:96: cd:90:51:7e:34:5b:5f:e5:38:10:b5:59:68:45:d0: 0c:a5:5b:d7:23:bc:fc:29:d3:a8:16:b5:08:e3:61: 53:87:8d:2b:7f:0e:88:86:c0:cf:24:73:62:97:cc: 4e:d3:53:2b:60:65:49:a1:d6:77:0a:0e:96:39:7c: 90:72:af:10:bd:c1:33:37:73:51:c4:5e:d1:ed:c9: 71:50:d5:4b:73:3f:f8:ff:af:a5:45:ea:61:72:50: 48:d5:f0:db:e0:0b:99:ac:e3:91:61:ed:cf:ce:b2: d3:47:e5:45:30:c0:1e:83:c9:bd:91:24:1b:94:fa: 58:70:f9:15:f3:a8:63:aa:41:1c:ab:9d:d7:76:a0: 14:cd:59:3e:32:5a:4d:d6:f2:cf:61:40:16:7e:69: c3:3f:1c:63:b2:9b:33:e8:b0:77:a0:b5:05:76:bf: 08:15:fe:40:0e:d4:a9:00:2a:19:a4:73:c8:21:68: 6a:9e:89:db:c6:ff:4d:d0:92:d6:16:0a:16:9e:25: d3:53:2f:05:f8:4f:c9:79:f0:72:e5:50:e4:48:e8: 2a:4a:c5:fb:e2:9e:4a:51:66:83:5f:06:57:31:ab: e9:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:D7:44:34:03:92:7C:C1:D2:74:2C:25:E3:89:D7:4A:18:4B:83:45 X509v3 Authority Key Identifier: keyid:78:7B:7E:10:48:C1:6A:B0:BE:85:DA:B0:BB:11:6B:17:06:F3:05:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/1/787B7E1048C16AB0BE85DAB0BB116B1706F3056E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:2a:06:3d:0b:e9:0b:b0:7b:56:9d:c8:f3:0f:57:b5:95:a2: d3:ed:07:16:59:20:72:4f:84:69:6d:3c:3b:07:33:90:87:dc: f8:7f:89:a3:a3:de:95:fe:f8:3c:88:55:f9:01:ed:f5:26:4a: 83:0c:36:38:e0:25:fb:db:a2:4d:cd:a8:49:c6:c5:14:de:c0: 33:af:0a:ff:dd:f9:f8:bf:2b:5a:15:31:9f:4c:8f:f4:c3:15: 6a:8a:7c:51:d9:27:2e:26:a6:3a:33:24:79:8c:41:88:e0:c0: c2:dc:94:5e:9f:6a:76:b9:30:ae:70:ff:9d:f6:84:70:04:75: 63:42:d1:4f:df:22:49:f7:1c:2e:d0:92:09:23:c6:58:90:31: 3d:f9:be:88:d6:14:dd:93:0d:4a:ed:f8:2c:9f:3f:2e:ff:60: 64:2c:bb:5e:c9:1a:69:b6:7c:10:04:e2:2a:8d:41:e3:43:8d: d5:c2:10:84:d9:85:8b:a9:e8:68:2e:b9:5e:20:4a:14:45:67: 64:b7:36:64:f4:4f:2e:7f:10:6f:cc:f4:66:19:61:ff:98:3b: 3e:5c:37:7d:28:a7:08:ef:38:3f:70:38:5d:82:8d:c1:88:4c: e5:dc:a4:25:87:25:18:dd:80:83:30:0a:b4:11:a7:8c:92:a3: 74:1e:0e:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDkAQV+vu9DTYy8wSzikr9ycOsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcw NkYzMDU2RTAeFw0yNjA3MjMyMjEyMDNaFw0yNjA3MjUwMDExMDNaMDMxMTAvBgNV BAMTKDVFRDc0NDM0MDM5MjdDQzFEMjc0MkMyNUUzODlENzRBMTg0QjgzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCepXLELPoWQ1m1vDqzMomqP+v/ ee585scAARi6ls2QUX40W1/lOBC1WWhF0AylW9cjvPwp06gWtQjjYVOHjSt/DoiG wM8kc2KXzE7TUytgZUmh1ncKDpY5fJByrxC9wTM3c1HEXtHtyXFQ1UtzP/j/r6VF 6mFyUEjV8NvgC5ms45Fh7c/OstNH5UUwwB6Dyb2RJBuU+lhw+RXzqGOqQRyrndd2 oBTNWT4yWk3W8s9hQBZ+acM/HGOymzPosHegtQV2vwgV/kAO1KkAKhmkc8ghaGqe idvG/03QktYWChaeJdNTLwX4T8l58HLlUORI6CpKxfvinkpRZoNfBlcxq+mlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXtdENAOSfMHSdCwl44nXShhLg0UwHwYDVR0j BBgwFoAUeHt+EEjBarC+hdqwuxFrFwbzBW4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NWQ4ZWYxMTktN2RkZi00NWU1LTg2MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0 OEMxNkFCMEJFODVEQUIwQkIxMTZCMTcwNkYzMDU2RS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83ODdCN0UxMDQ4QzE2QUIwQkU4NURBQjBCQjExNkIxNzA2RjMw NTZFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzEvNzg3QjdFMTA0OEMxNkFCMEJFODVEQUIwQkIxMTZC MTcwNkYzMDU2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoqBj0L6Quwe1adyPMPV7WVotPtBxZZIHJP hGltPDsHM5CH3Ph/iaOj3pX++DyIVfkB7fUmSoMMNjjgJfvbok3NqEnGxRTewDOv Cv/d+fi/K1oVMZ9Mj/TDFWqKfFHZJy4mpjozJHmMQYjgwMLclF6fana5MK5w/532 hHAEdWNC0U/fIkn3HC7QkgkjxliQMT35vojWFN2TDUrt+CyfPy7/YGQsu17JGmm2 fBAE4iqNQeNDjdXCEITZhYup6GguuV4gShRFZ2S3NmT0Ty5/EG/M9GYZYf+YOz5c N30opwjvOD9wOF2CjcGITOXcpCWHJRjdgIMwCrQRp4ySo3QeDkA= -----END CERTIFICATE-----Generated at Fri Jul 24 12:42:20 2026 by rpki-client