$ rpki-client -vvf rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft File: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft (raw, json) Hash identifier: pRnolYueN0FCyGe205x91Tzsqkjq27EEl5xT1Hj0vNY= Subject key identifier: D7:FF:B7:9F:87:01:82:A1:C1:6F:90:74:E7:3D:5E:82:66:1C:A4:9C Authority key identifier: 47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 Certificate issuer: /CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Certificate serial: 3DFDD32886082A5EA0DD58C7D720B613E6EACC4B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft Manifest number: 0E Signing time: Tue 12 May 2026 23:01:50 +0000 Manifest this update: Tue 12 May 2026 22:56:50 +0000 Manifest next update: Thu 14 May 2026 02:59:50 +0000 Files and hashes: 1: 4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl (hash: o9VKNol4HelXmBkt+ydpBylILbOjcalyFN15+/lRxUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 02:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:fd:d3:28:86:08:2a:5e:a0:dd:58:c7:d7:20:b6:13:e6:ea:cc:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8 Validity Not Before: May 12 22:56:50 2026 GMT Not After : May 14 02:59:50 2026 GMT Subject: CN=D7FFB79F870182A1C16F9074E73D5E82661CA49C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:95:6e:1f:04:30:bf:af:f6:ff:b7:56:3f:ea: 70:9e:6c:8f:1a:12:16:8d:01:f3:c5:da:43:fd:f0: 5a:ec:de:a8:fc:79:aa:b3:12:40:53:0b:7e:fe:5e: 6e:e6:5e:bf:cb:1b:40:4d:4a:93:99:25:c7:80:28: 40:cb:68:b2:e6:93:ae:ba:4a:62:4e:f2:96:20:d4: d0:2b:0f:05:b5:32:26:6c:9e:5b:86:39:22:27:72: 87:01:84:6c:c7:8f:82:cf:e5:38:07:ee:c8:92:60: 0d:1c:9e:47:fa:cf:cc:36:2d:77:81:18:52:80:08: 6d:12:19:64:2f:f7:30:1e:08:be:78:cc:7a:b0:a1: 48:29:9a:92:92:0a:23:8a:70:10:df:8e:d7:1b:a8: 10:70:a4:87:60:58:81:c3:5e:8a:6e:d3:08:07:be: 28:eb:d2:b2:14:fa:1a:02:0b:4a:42:16:90:87:71: 86:92:c8:93:8d:9a:2b:94:df:68:c7:2c:b1:82:2b: 37:e4:4b:ff:ec:9a:20:66:b8:6c:0b:e1:1d:67:27: 66:fb:90:33:2c:82:1c:57:b4:22:5e:cd:43:19:e7: 84:9d:ae:35:48:cb:18:88:0a:3d:25:ed:23:2c:c2: e2:0e:c3:f6:34:5d:52:fe:7f:64:0d:ce:11:5a:54: f3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:FF:B7:9F:87:01:82:A1:C1:6F:90:74:E7:3D:5E:82:66:1C:A4:9C X509v3 Authority Key Identifier: keyid:47:87:CD:59:1F:6F:7E:DF:A2:AE:EE:86:FB:53:A5:05:DE:B3:08:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c72f3db4-41e2-4028-908b-5097c9b1c1f5/0/4787CD591F6F7EDFA2AEEE86FB53A505DEB308D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:e6:e1:d4:aa:7f:59:05:d8:51:63:cc:a1:1e:1e:e1:38:3e: 10:f5:0f:ec:e4:32:55:77:48:a2:5f:30:26:37:da:45:48:cf: b9:57:71:f1:f3:ac:7a:44:a3:9e:7a:bc:59:ad:c8:f0:a0:93: 79:96:c1:9a:04:94:8c:b4:52:de:14:26:2b:51:1a:57:4a:2d: fd:ce:d2:17:32:1f:5f:18:5a:84:21:9a:bf:97:c0:c8:08:da: 66:45:a8:6c:30:1d:54:ee:90:5f:0c:62:74:98:9b:22:e2:b0: e8:1b:ed:61:26:22:33:b0:f9:94:27:9d:de:c1:62:82:71:64: 3e:a7:ab:30:12:87:c5:8e:92:4a:98:82:92:4a:ec:5b:f0:4c: 7b:41:ef:a8:b3:db:d7:a6:4c:2c:38:7b:4d:17:72:88:e6:60: b9:55:44:e4:fb:be:cc:b1:49:e6:17:73:71:b2:82:68:8a:bd: 81:71:3d:3b:25:ee:cd:ea:42:ad:e9:60:b5:90:5b:d9:51:3d: 8b:fa:84:96:ba:c9:ef:b3:d2:4b:22:93:c0:09:fd:c7:59:8d: 97:c4:63:ec:d2:b1:d7:29:de:82:a2:25:df:65:25:e1:2e:dd: 3e:aa:c3:25:a4:4e:5f:f0:40:0a:17:02:61:21:7a:51:7f:34: a6:05:ff:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPf3TKIYIKl6g3VjH1yC2E+bqzEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1MDVE RUIzMDhEODAeFw0yNjA1MTIyMjU2NTBaFw0yNjA1MTQwMjU5NTBaMDMxMTAvBgNV BAMTKEQ3RkZCNzlGODcwMTgyQTFDMTZGOTA3NEU3M0Q1RTgyNjYxQ0E0OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTlW4fBDC/r/b/t1Y/6nCebI8a EhaNAfPF2kP98Frs3qj8eaqzEkBTC37+Xm7mXr/LG0BNSpOZJceAKEDLaLLmk666 SmJO8pYg1NArDwW1MiZsnluGOSIncocBhGzHj4LP5TgH7siSYA0cnkf6z8w2LXeB GFKACG0SGWQv9zAeCL54zHqwoUgpmpKSCiOKcBDfjtcbqBBwpIdgWIHDXopu0wgH vijr0rIU+hoCC0pCFpCHcYaSyJONmiuU32jHLLGCKzfkS//smiBmuGwL4R1nJ2b7 kDMsghxXtCJezUMZ54SdrjVIyxiICj0l7SMswuIOw/Y0XVL+f2QNzhFaVPMLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1/+3n4cBgqHBb5B05z1egmYcpJwwHwYDVR0j BBgwFoAUR4fNWR9vft+iru6G+1OlBd6zCNgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzcyZjNkYjQtNDFlMi00MDI4LTkwOGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkx RjZGN0VERkEyQUVFRTg2RkI1M0E1MDVERUIzMDhEOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80Nzg3Q0Q1OTFGNkY3RURGQTJBRUVFODZGQjUzQTUwNURFQjMw OEQ4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzcyZjNkYjQtNDFlMi00MDI4LTkw OGItNTA5N2M5YjFjMWY1LzAvNDc4N0NENTkxRjZGN0VERkEyQUVFRTg2RkI1M0E1 MDVERUIzMDhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAArm4dSqf1kF2FFjzKEeHuE4PhD1D+zkMlV3 SKJfMCY32kVIz7lXcfHzrHpEo556vFmtyPCgk3mWwZoElIy0Ut4UJitRGldKLf3O 0hcyH18YWoQhmr+XwMgI2mZFqGwwHVTukF8MYnSYmyLisOgb7WEmIjOw+ZQnnd7B YoJxZD6nqzASh8WOkkqYgpJK7FvwTHtB76iz29emTCw4e00XcojmYLlVROT7vsyx SeYXc3GygmiKvYFxPTsl7s3qQq3pYLWQW9lRPYv6hJa6ye+z0ksik8AJ/cdZjZfE Y+zSsdcp3oKiJd9lJeEu3T6qwyWkTl/wQAoXAmEhelF/NKYF/7M= -----END CERTIFICATE-----Generated at Wed May 13 05:50:26 2026 by rpki-client