$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: dn+tbsbYIlNmRE0uFIBOWLDNA6LKZcl4Y/nZ2EUt4h8= Subject key identifier: D6:69:AF:F3:A4:6E:1C:48:E5:9D:0E:66:D7:0E:4E:29:45:10:FC:51 Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 7BA6A24C070C6B76A5E8E6094A239ED9C1A9E7C1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: 0E Signing time: Tue 12 May 2026 18:13:26 +0000 Manifest this update: Tue 12 May 2026 18:08:26 +0000 Manifest next update: Wed 13 May 2026 18:27:26 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: Y9XfNxOgkKPN7uG5zB49uJffHtatEy2OyVdSXgC7Lss=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a6:a2:4c:07:0c:6b:76:a5:e8:e6:09:4a:23:9e:d9:c1:a9:e7:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: May 12 18:08:26 2026 GMT Not After : May 13 18:27:26 2026 GMT Subject: CN=D669AFF3A46E1C48E59D0E66D70E4E294510FC51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:32:e3:ea:89:96:5e:a8:21:6f:86:1e:e1:f7: b9:98:c8:cd:5f:d8:ae:02:f6:c4:62:d2:07:99:52: f9:9f:f5:a2:bd:52:bf:d0:59:9a:09:e9:50:dd:d4: 0c:71:60:23:62:9a:89:f3:d4:29:da:13:76:2e:4c: e9:c4:19:63:24:e4:83:a1:16:c2:f9:b8:00:d9:2d: 03:da:ee:0f:a9:0c:77:ad:49:f4:17:39:aa:f9:f5: 4e:36:6b:07:07:9a:67:79:28:f4:bd:2e:f3:cc:5f: 64:ca:36:bd:21:98:75:ad:ed:55:81:ed:16:91:c0: f8:c2:c7:b0:5a:44:9b:b4:1a:5f:1c:ac:11:bb:b5: d5:02:1a:91:9d:ca:5b:14:91:b0:55:79:ca:ee:d5: e5:0b:a4:72:e4:f1:60:69:87:56:99:45:b9:e6:15: d3:f7:08:22:4d:70:87:fc:a6:23:ae:9f:ab:30:b6: ce:d6:f7:f9:8d:65:99:86:50:83:1e:7b:0a:88:29: 5c:10:ff:67:84:6e:85:79:ea:13:7e:6f:ae:5d:e4: 0b:eb:54:ea:29:97:d8:8c:27:c5:66:61:9c:85:a5: a6:ad:2b:ce:4b:1a:d2:a5:65:78:0a:b1:63:50:76: d6:f2:30:59:1c:51:2f:49:2c:29:f7:34:01:1a:e2: 94:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:69:AF:F3:A4:6E:1C:48:E5:9D:0E:66:D7:0E:4E:29:45:10:FC:51 X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:a5:94:ee:98:9f:3c:c1:15:a9:e6:3a:81:b1:44:4f:cd:b4: 19:94:ef:3d:30:8b:cf:40:00:66:23:74:02:4a:81:43:07:64: 27:70:84:2c:eb:cc:86:78:b2:b3:22:88:0f:b8:9a:ae:5a:ea: dd:fa:e5:9a:72:60:c5:fa:a8:32:3d:ae:70:3b:61:88:b6:3c: b7:79:46:91:f3:ee:77:f5:6a:d4:b3:48:ca:e9:98:05:c5:96: 4e:97:36:ff:06:16:3a:11:86:02:57:90:12:ca:e5:cc:ff:7c: 21:84:41:f5:86:e3:07:10:19:f7:fe:31:e5:62:44:fe:1b:50: 23:3c:e0:17:14:0f:22:cf:18:79:09:c1:a9:a7:5f:5f:d2:76: c9:ad:a5:49:d6:48:ae:ea:44:91:e6:9b:de:a5:33:3d:1e:fa: 26:bd:00:11:01:0d:05:97:2a:d8:b0:c0:b4:1a:1f:9d:b4:91: 8f:db:2d:f3:ae:65:4a:dd:1e:2a:33:1e:0f:f4:36:9d:ad:11: a8:71:71:ba:fb:72:e1:0c:2d:bb:61:b8:ee:f8:90:0b:6d:7c: f5:bc:e2:29:92:be:6d:24:3b:82:d7:29:10:1c:48:0c:a9:6d: 49:fb:3b:94:f3:f5:59:7c:a9:87:ba:49:de:a9:93:19:a8:40: 28:e4:b7:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe6aiTAcMa3al6OYJSiOe2cGp58EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjA1MTIxODA4MjZaFw0yNjA1MTMxODI3MjZaMDMxMTAvBgNV BAMTKEQ2NjlBRkYzQTQ2RTFDNDhFNTlEMEU2NkQ3MEU0RTI5NDUxMEZDNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbMuPqiZZeqCFvhh7h97mYyM1f 2K4C9sRi0geZUvmf9aK9Ur/QWZoJ6VDd1AxxYCNimonz1CnaE3YuTOnEGWMk5IOh FsL5uADZLQPa7g+pDHetSfQXOar59U42awcHmmd5KPS9LvPMX2TKNr0hmHWt7VWB 7RaRwPjCx7BaRJu0Gl8crBG7tdUCGpGdylsUkbBVecru1eULpHLk8WBph1aZRbnm FdP3CCJNcIf8piOun6swts7W9/mNZZmGUIMeewqIKVwQ/2eEboV56hN+b65d5Avr VOopl9iMJ8VmYZyFpaatK85LGtKlZXgKsWNQdtbyMFkcUS9JLCn3NAEa4pQdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1mmv86RuHEjlnQ5m1w5OKUUQ/FEwHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmllO6YnzzBFanmOoGxRE/NtBmU7z0wi89A AGYjdAJKgUMHZCdwhCzrzIZ4srMiiA+4mq5a6t365ZpyYMX6qDI9rnA7YYi2PLd5 RpHz7nf1atSzSMrpmAXFlk6XNv8GFjoRhgJXkBLK5cz/fCGEQfWG4wcQGff+MeVi RP4bUCM84BcUDyLPGHkJwamnX1/SdsmtpUnWSK7qRJHmm96lMz0e+ia9ABEBDQWX KtiwwLQaH520kY/bLfOuZUrdHiozHg/0Np2tEahxcbr7cuEMLbthuO74kAttfPW8 4imSvm0kO4LXKRAcSAypbUn7O5Tz9Vl8qYe6Sd6pkxmoQCjkty8= -----END CERTIFICATE-----Generated at Tue May 12 23:06:32 2026 by rpki-client