$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: ZzwhHKVmsuQkXP/RE1biqxkU3ay5v/veDOq7CYvelwA= Subject key identifier: 82:B0:57:71:D3:C0:2A:41:38:FB:47:3B:15:7B:6C:53:AE:F9:74:50 Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 61B981A67EB2F437587B0FA25A40F80C219D0185 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: C1 Signing time: Thu 24 Sep 2026 01:22:30 +0000 Manifest this update: Thu 24 Sep 2026 01:17:30 +0000 Manifest next update: Fri 25 Sep 2026 01:47:30 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: TokJ9qv1h1AWYwKrQ1ycwrFQxg/dS7wX14MPKWN/+bA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 01:47:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b9:81:a6:7e:b2:f4:37:58:7b:0f:a2:5a:40:f8:0c:21:9d:01:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: Sep 24 01:17:30 2026 GMT Not After : Sep 25 01:47:30 2026 GMT Subject: CN=82B05771D3C02A4138FB473B157B6C53AEF97450 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:3e:3e:00:35:b1:a2:d5:64:c4:a3:00:fc:a4: d1:92:fe:6a:7c:08:d6:e4:63:79:9d:d4:f2:31:5d: 78:c1:1e:c9:82:c7:40:61:dc:51:fc:96:82:88:b0: 20:c5:5b:13:4d:84:f9:d1:13:18:42:9b:2e:97:80: d3:40:82:42:2e:6f:c1:8f:56:6d:c9:b9:56:e9:2a: 7a:4a:b5:51:b9:07:e4:14:18:59:d5:1b:8f:c0:5f: 5e:f4:04:08:3f:b9:bc:71:ce:2e:12:c6:8f:cf:01: 77:b1:3e:8c:0a:0e:47:32:f9:c8:dc:d1:cb:19:1a: 95:ff:c7:f1:00:e7:4a:b0:9b:72:a1:2f:da:57:70: 74:b9:82:da:c7:72:b2:2e:7c:7e:59:7d:dd:08:e1: 74:55:6c:62:a4:f3:61:90:73:ca:fb:e8:f0:7c:3b: b0:a5:9a:00:70:58:f2:85:f5:94:c1:ee:ec:0f:1b: 0b:c7:39:09:f7:6b:23:bd:10:3b:5b:42:d8:18:54: 35:e1:2f:d6:07:91:d7:3f:06:6a:1a:0a:14:a8:8b: 05:11:69:ca:0e:03:4e:6b:41:e3:98:59:c4:5d:98: f1:85:c7:75:bd:ba:0b:df:42:4d:f1:77:7f:07:a6: 86:27:0c:64:f2:45:88:8e:f6:c2:2e:49:01:32:2a: 7f:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:B0:57:71:D3:C0:2A:41:38:FB:47:3B:15:7B:6C:53:AE:F9:74:50 X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:ec:7d:53:34:39:43:f6:d8:9a:7f:81:4b:ff:06:39:ba:33: 0b:aa:9b:a1:37:af:29:78:0c:a6:91:b5:ad:e8:ba:ec:8e:70: 0f:24:0a:c6:79:4a:0f:6b:ff:86:0b:0a:48:cb:b7:3d:75:69: bf:e8:8c:a8:00:78:ea:28:75:44:ce:18:4b:99:dc:f5:70:73: 49:19:e0:dc:17:0f:44:05:10:45:5f:11:b1:13:67:8e:57:7c: 63:61:15:45:64:47:6e:f1:79:28:52:80:25:63:ce:3b:c7:e6: e2:0c:3e:8a:33:c1:48:7e:bc:f0:fe:2c:03:0b:39:48:de:28: 66:a6:9f:da:69:39:81:b7:a9:c4:97:87:ea:c0:61:e3:10:46: f0:a3:b3:2a:0a:c9:91:d8:c8:b3:5a:5b:32:89:46:16:43:d9: da:c9:a0:9d:02:41:59:59:98:d0:25:ad:1f:5e:2b:d9:86:f0: c1:e6:01:91:3e:8a:86:07:e9:e6:d0:35:bd:e7:45:bf:40:47: 8d:be:4e:53:a0:9d:46:56:b9:ea:32:c3:e2:af:af:03:e2:d6: 54:72:13:0e:9e:b7:35:fc:21:5e:30:83:b8:c0:bc:35:ee:3e: ce:53:ff:38:d6:fc:e3:3f:7a:8e:08:d8:40:72:f8:fb:fd:fe: a8:b6:1a:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbmBpn6y9DdYew+iWkD4DCGdAYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA5MjQwMTE3MzBaFw0yNjA5MjUwMTQ3MzBaMDMxMTAvBgNV BAMTKDgyQjA1NzcxRDNDMDJBNDEzOEZCNDczQjE1N0I2QzUzQUVGOTc0NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvPj4ANbGi1WTEowD8pNGS/mp8 CNbkY3md1PIxXXjBHsmCx0Bh3FH8loKIsCDFWxNNhPnRExhCmy6XgNNAgkIub8GP Vm3JuVbpKnpKtVG5B+QUGFnVG4/AX170BAg/ubxxzi4Sxo/PAXexPowKDkcy+cjc 0csZGpX/x/EA50qwm3KhL9pXcHS5gtrHcrIufH5Zfd0I4XRVbGKk82GQc8r76PB8 O7ClmgBwWPKF9ZTB7uwPGwvHOQn3ayO9EDtbQtgYVDXhL9YHkdc/BmoaChSoiwUR acoOA05rQeOYWcRdmPGFx3W9ugvfQk3xd38HpoYnDGTyRYiO9sIuSQEyKn/JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgrBXcdPAKkE4+0c7FXtsU675dFAwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzsfVM0OUP22Jp/gUv/Bjm6Mwuqm6E3ryl4 DKaRta3ouuyOcA8kCsZ5Sg9r/4YLCkjLtz11ab/ojKgAeOoodUTOGEuZ3PVwc0kZ 4NwXD0QFEEVfEbETZ45XfGNhFUVkR27xeShSgCVjzjvH5uIMPoozwUh+vPD+LAML OUjeKGamn9ppOYG3qcSXh+rAYeMQRvCjsyoKyZHYyLNaWzKJRhZD2drJoJ0CQVlZ mNAlrR9eK9mG8MHmAZE+ioYH6ebQNb3nRb9AR42+TlOgnUZWueoyw+KvrwPi1lRy Ew6etzX8IV4wg7jAvDXuPs5T/zjW/OM/eo4I2EBy+Pv9/qi2Glg= -----END CERTIFICATE-----Generated at Thu Sep 24 20:24:07 2026 by rpki-client