$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: kBPw1uv65XwC7M0jqNKh3tJBrp7oh2h7olvrU8MGNxk= Subject key identifier: CC:D0:EE:2A:DF:AF:36:2D:C3:69:4C:7B:13:83:18:5D:5C:C2:1A:14 Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 756FF79408A51CD8E9D8EEF3724AD4B450DC9A5B Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: 6F Signing time: Thu 23 Jul 2026 12:20:14 +0000 Manifest this update: Thu 23 Jul 2026 12:15:14 +0000 Manifest next update: Fri 24 Jul 2026 14:37:14 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: 0Y/FjUi4yg94pOu2z4tHBhgw5Zj5IpIGJncNqA04ARw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 14:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:6f:f7:94:08:a5:1c:d8:e9:d8:ee:f3:72:4a:d4:b4:50:dc:9a:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: Jul 23 12:15:14 2026 GMT Not After : Jul 24 14:37:14 2026 GMT Subject: CN=CCD0EE2ADFAF362DC3694C7B1383185D5CC21A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:28:e2:02:be:e3:70:a1:4a:af:fb:7e:bd:b0: d8:4f:2e:4d:a8:f3:90:70:b4:18:a2:3e:6e:6c:16: ef:e1:52:36:91:db:79:ae:42:0b:7d:df:af:39:f6: c5:28:47:d2:b9:f2:c1:41:d5:df:48:f1:78:a9:3f: a8:a8:43:ae:7a:fd:ab:97:db:e2:32:bc:8e:3c:05: a6:a6:3d:94:1e:fe:03:c5:83:63:b4:fb:0b:3f:84: 0a:e8:68:0d:fe:40:21:a9:8c:b2:40:f7:26:6d:3a: fd:05:c0:9e:3d:24:0b:75:2a:c7:c6:e6:7c:8c:17: f4:0a:09:32:91:ba:cb:68:7c:8d:64:02:39:60:fd: de:ce:36:3a:4b:6c:b9:04:88:04:38:76:3a:91:42: 3f:cd:12:df:cb:19:55:6f:3b:53:f2:55:55:05:bc: cd:f7:e7:cc:ad:c6:8e:64:f8:b3:d2:63:bb:e4:bf: cd:8d:04:fc:25:4a:3a:d1:76:31:5c:8d:32:b6:e2: c5:10:b2:cf:dc:78:7c:0c:2c:6a:a8:00:e6:d9:5b: f5:b7:8e:5a:f9:f1:82:0c:99:4a:ed:69:38:d5:a9: 49:65:6b:b4:e7:17:7b:f4:91:b2:e1:4f:b9:c2:2d: f3:60:81:ea:da:f0:67:a4:99:0e:44:e8:0d:a0:2f: f5:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:D0:EE:2A:DF:AF:36:2D:C3:69:4C:7B:13:83:18:5D:5C:C2:1A:14 X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:d1:74:4b:ff:2d:31:e8:fe:52:cd:8a:3f:73:73:cc:6c:7a: 55:5a:bb:45:a4:2b:c0:01:8b:ad:4b:ff:e9:ee:fd:5a:25:67: 5f:03:97:03:6b:a1:ca:3a:d8:d3:60:6a:70:f3:c8:86:f1:ca: 19:78:7c:b5:11:72:6b:e6:c5:55:58:68:3c:ca:c4:5c:84:00: 78:e7:a8:5d:01:1f:69:f7:9a:7d:a8:bb:64:1a:9a:e0:9c:cf: de:79:ba:02:58:be:e1:ec:dd:95:95:62:85:e6:0a:4c:b6:17: 70:a7:ee:3f:3a:74:42:0f:51:58:8e:c0:73:bb:2d:c1:fd:40: 35:03:4d:81:90:ce:d7:f0:8b:b5:e2:7a:70:7a:7a:82:9b:d9: 37:2a:ac:e6:6a:7f:8b:61:f6:2f:f6:b1:b6:2f:9a:30:de:b9: 52:62:08:a1:df:a4:00:14:f7:38:ec:d8:61:9d:50:79:26:7b: 8e:e9:43:83:e4:f3:80:57:1a:ae:9d:5e:0d:bd:f2:e7:13:6a: 0b:63:f3:4a:9a:23:85:e1:4c:be:ee:80:f6:d5:1e:b0:52:93: 9f:2a:0c:e6:4b:54:07:0c:1c:66:af:06:1a:6b:5c:e3:d0:9c: 55:cb:5f:a9:84:99:9e:61:cf:ca:5e:47:92:84:2f:52:08:d1: 58:ca:48:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdW/3lAilHNjp2O7zckrUtFDcmlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjA3MjMxMjE1MTRaFw0yNjA3MjQxNDM3MTRaMDMxMTAvBgNV BAMTKENDRDBFRTJBREZBRjM2MkRDMzY5NEM3QjEzODMxODVENUNDMjFBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKKOICvuNwoUqv+369sNhPLk2o 85BwtBiiPm5sFu/hUjaR23muQgt936859sUoR9K58sFB1d9I8XipP6ioQ656/auX 2+IyvI48BaamPZQe/gPFg2O0+ws/hAroaA3+QCGpjLJA9yZtOv0FwJ49JAt1KsfG 5nyMF/QKCTKRustofI1kAjlg/d7ONjpLbLkEiAQ4djqRQj/NEt/LGVVvO1PyVVUF vM3358ytxo5k+LPSY7vkv82NBPwlSjrRdjFcjTK24sUQss/ceHwMLGqoAObZW/W3 jlr58YIMmUrtaTjVqUlla7TnF3v0kbLhT7nCLfNggera8GekmQ5E6A2gL/XBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzNDuKt+vNi3DaUx7E4MYXVzCGhQwHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvRdEv/LTHo/lLNij9zc8xselVau0WkK8AB i61L/+nu/VolZ18DlwNroco62NNganDzyIbxyhl4fLURcmvmxVVYaDzKxFyEAHjn qF0BH2n3mn2ou2QamuCcz955ugJYvuHs3ZWVYoXmCky2F3Cn7j86dEIPUViOwHO7 LcH9QDUDTYGQztfwi7XienB6eoKb2TcqrOZqf4th9i/2sbYvmjDeuVJiCKHfpAAU 9zjs2GGdUHkme47pQ4Pk84BXGq6dXg298ucTagtj80qaI4XhTL7ugPbVHrBSk58q DOZLVAcMHGavBhprXOPQnFXLX6mEmZ5hz8peR5KEL1II0VjKSLU= -----END CERTIFICATE-----Generated at Fri Jul 24 03:56:35 2026 by rpki-client