$ rpki-client -vvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: iYiWDl8341JMus3wy2IiTR9G2N6uHiJ3TEO239aEw1I= Subject key identifier: AF:D4:4B:90:20:46:05:4C:A9:D1:AF:8B:1E:EC:0B:5E:5C:EB:ED:B9 Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 6E9714F7EAF6CD4E9B49A3267E7023D44B9EBEBD Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: 6E Signing time: Thu 23 Jul 2026 17:05:56 +0000 Manifest this update: Thu 23 Jul 2026 17:00:56 +0000 Manifest next update: Fri 24 Jul 2026 19:40:56 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: GFLr7b5SMukbMv7kZnGGx4pyS/IYwlH3RrUePYgtsy0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 19:40:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:97:14:f7:ea:f6:cd:4e:9b:49:a3:26:7e:70:23:d4:4b:9e:be:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Jul 23 17:00:56 2026 GMT Not After : Jul 24 19:40:56 2026 GMT Subject: CN=AFD44B902046054CA9D1AF8B1EEC0B5E5CEBEDB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:86:66:0a:32:b8:49:fe:95:5b:96:71:7b:35: df:9c:51:e2:c4:43:74:66:f3:8b:7e:00:0f:40:c9: 53:7e:38:4e:e9:2b:fe:7f:75:51:46:b6:e8:81:f0: 80:d3:fe:88:37:33:57:09:06:8d:3f:b6:7e:48:ef: a1:c6:86:0c:37:65:a6:47:89:9c:6a:2c:4c:4e:a8: c9:ba:9f:8d:bd:00:70:c2:25:3f:ff:5b:39:1a:28: 43:65:f9:eb:f6:7b:8f:2f:fe:e3:da:62:d4:27:92: dd:68:fa:7c:70:ce:c2:d7:ab:2e:09:41:3a:33:9d: 49:4d:d5:b3:26:60:96:44:85:1d:af:19:08:6d:9c: 94:ce:4f:b4:81:de:8e:9e:a0:8b:c4:a5:f5:47:13: 66:5a:e1:29:05:f2:8d:88:e9:47:40:e1:f9:c0:85: a1:6a:85:01:80:8c:b2:47:c8:a6:75:e0:57:da:bf: 67:85:bc:7a:5f:6e:43:91:73:2b:88:64:b3:76:53: 37:8d:23:5e:a7:75:1e:50:a5:d6:93:08:bc:2b:f6: 61:9f:08:ac:d9:80:96:86:86:16:db:68:42:f9:7e: eb:15:65:52:af:46:e4:f8:c0:3e:03:8c:91:d0:13: d2:51:a9:b0:74:31:5f:a1:eb:fe:28:a0:04:d5:73: b0:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:D4:4B:90:20:46:05:4C:A9:D1:AF:8B:1E:EC:0B:5E:5C:EB:ED:B9 X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:43:a3:08:06:19:23:8a:33:f2:07:1e:cf:06:d3:5d:1e:4e: d5:51:81:6b:3c:27:c1:b4:b5:3b:d4:85:63:61:5a:6c:68:24: 06:77:5e:e4:ad:84:cf:e7:47:c1:84:77:22:9f:58:06:1e:82: 23:ac:e9:29:15:ef:1c:39:e1:b9:11:7d:1f:24:bd:aa:8f:2c: 48:18:f2:d2:48:6d:04:25:8d:08:96:91:aa:da:52:92:b1:06: 12:6f:7b:ea:32:9b:57:72:b2:8b:51:da:6c:67:f8:9c:71:f8: aa:37:1b:79:4c:4a:d6:8d:95:ec:2b:ce:77:63:71:7d:3a:f9: 60:36:de:e4:e9:0a:b9:b8:05:1b:c6:36:90:81:c3:be:1e:77: c4:3d:72:2c:99:b1:96:63:4c:98:5a:e9:2e:f7:ba:32:65:ff: 55:cf:05:ad:00:aa:72:8a:0a:4f:c3:7b:20:c0:be:0e:2f:43: 2d:af:41:3c:b8:37:5a:a8:11:cd:82:ad:fd:e6:2c:69:48:af: 07:cd:bb:5f:69:89:c4:d3:27:a7:7f:1f:b0:92:06:56:cf:1e: 90:a4:37:0d:34:8e:76:2f:2c:cc:35:7c:bf:c2:e1:6b:b2:69: 87:64:82:25:a3:e8:a4:27:67:0f:b4:14:f9:ee:e3:bf:73:c8: 2f:ef:fd:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbpcU9+r2zU6bSaMmfnAj1Euevr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA3MjMxNzAwNTZaFw0yNjA3MjQxOTQwNTZaMDMxMTAvBgNV BAMTKEFGRDQ0QjkwMjA0NjA1NENBOUQxQUY4QjFFRUMwQjVFNUNFQkVEQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzhmYKMrhJ/pVblnF7Nd+cUeLE Q3Rm84t+AA9AyVN+OE7pK/5/dVFGtuiB8IDT/og3M1cJBo0/tn5I76HGhgw3ZaZH iZxqLExOqMm6n429AHDCJT//WzkaKENl+ev2e48v/uPaYtQnkt1o+nxwzsLXqy4J QToznUlN1bMmYJZEhR2vGQhtnJTOT7SB3o6eoIvEpfVHE2Za4SkF8o2I6UdA4fnA haFqhQGAjLJHyKZ14Ffav2eFvHpfbkORcyuIZLN2UzeNI16ndR5QpdaTCLwr9mGf CKzZgJaGhhbbaEL5fusVZVKvRuT4wD4DjJHQE9JRqbB0MV+h6/4ooATVc7CFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr9RLkCBGBUyp0a+LHuwLXlzr7bkwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFBDowgGGSOKM/IHHs8G010eTtVRgWs8J8G0 tTvUhWNhWmxoJAZ3XuSthM/nR8GEdyKfWAYegiOs6SkV7xw54bkRfR8kvaqPLEgY 8tJIbQQljQiWkaraUpKxBhJve+oym1dysotR2mxn+Jxx+Ko3G3lMStaNlewrzndj cX06+WA23uTpCrm4BRvGNpCBw74ed8Q9ciyZsZZjTJha6S73ujJl/1XPBa0AqnKK Ck/DeyDAvg4vQy2vQTy4N1qoEc2Crf3mLGlIrwfNu19picTTJ6d/H7CSBlbPHpCk Nw00jnYvLMw1fL/C4WuyaYdkgiWj6KQnZw+0FPnu479zyC/v/Qk= -----END CERTIFICATE-----Generated at Fri Jul 24 07:50:42 2026 by rpki-client