$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: ZLz/TJDO5QWuQlo88KXczJrYEXz7+HpE/4FctuvYG4o= Subject key identifier: 6D:38:00:F8:5D:E8:C6:47:98:59:AB:30:C7:B9:FE:27:26:BE:4E:FB Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 648A275EEA524FE9E4C4304E66FF4E80614134FF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: 3E Signing time: Tue 16 Jun 2026 23:27:32 +0000 Manifest this update: Tue 16 Jun 2026 23:22:32 +0000 Manifest next update: Thu 18 Jun 2026 01:39:32 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: izEKL8LUN5Vlu8Hskd/bhFKsay/tuFW/RgfI9RjRNoM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 01:39:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:8a:27:5e:ea:52:4f:e9:e4:c4:30:4e:66:ff:4e:80:61:41:34:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: Jun 16 23:22:32 2026 GMT Not After : Jun 18 01:39:32 2026 GMT Subject: CN=6D3800F85DE8C6479859AB30C7B9FE2726BE4EFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e3:1b:93:9d:60:5b:1c:3e:7c:f4:2e:1d:98: bb:a4:15:02:5c:35:81:7b:c1:cd:e0:87:bc:4b:9f: 24:21:ae:80:fc:9a:14:5f:c6:aa:5b:1a:23:74:4e: a5:c3:cc:c7:81:df:0c:17:f8:2f:5c:8f:7c:ae:90: a8:19:8d:c1:cc:a7:ce:eb:7b:dd:b8:3b:2a:36:54: 1d:c3:c1:e2:64:d1:fb:73:c3:84:62:97:0a:37:16: b3:21:fc:00:da:6b:0e:4a:dc:e8:fa:29:8b:1a:68: 39:1f:29:35:cd:6c:37:08:3b:00:a2:a4:3c:a5:f4: e6:06:84:ca:39:06:24:aa:1b:db:d9:bf:db:a5:68: d6:58:cf:f2:28:38:4f:07:cc:5d:50:62:cc:2b:5f: 14:a6:f1:0a:95:1c:21:e8:d4:17:e0:84:ea:b9:a3: 92:fa:ed:99:e0:b4:d1:66:2f:17:90:fe:b9:16:0b: b0:ee:c2:21:8c:33:9e:e1:2e:d6:ab:11:53:08:45: c3:34:e0:34:d4:d9:b1:ad:68:f8:46:8a:43:8a:1e: 1f:45:29:cc:1c:81:ac:d1:87:61:14:d0:23:56:eb: 8b:91:79:92:f1:d0:97:a8:0b:b4:a3:f9:fb:da:25: 65:51:5d:50:18:b1:88:d7:b1:48:14:36:06:23:1a: 12:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:38:00:F8:5D:E8:C6:47:98:59:AB:30:C7:B9:FE:27:26:BE:4E:FB X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:4d:68:25:8b:e1:76:c4:dc:61:79:1f:41:d0:ef:6c:61:4f: 5c:1a:25:69:89:8c:70:38:10:a9:8e:83:80:a8:2a:01:01:ef: a9:36:ce:72:65:d6:6c:67:f3:fd:bb:a6:7f:4b:a2:c6:79:1e: 9b:93:9b:0e:a8:83:cb:c8:89:6c:e4:af:d0:a8:7d:2d:bb:28: 31:50:48:2c:4e:ab:47:90:a5:bc:93:59:1d:e7:50:fb:2c:70: 10:01:24:11:89:c2:43:16:fe:6d:aa:d6:01:fd:ba:29:c4:71: f9:0a:7d:6b:64:92:b8:c5:72:bd:09:1f:6b:01:64:d5:3f:ed: d5:72:47:ab:6e:0f:62:1c:5a:ba:54:64:57:28:17:81:a6:b2: 95:39:6a:11:86:04:e4:17:b6:62:c5:2f:ce:c3:12:ab:b6:c8: 24:01:b1:ca:84:fe:80:1e:7e:0a:7e:0c:93:f1:34:6c:56:aa: 80:11:92:bc:b9:ca:b1:d4:bc:14:be:74:8d:51:9a:38:46:1f: 2b:52:e7:20:b1:9b:00:71:4f:d6:7c:36:bf:dd:6e:6f:9f:d7: 87:e1:a0:fb:ff:b3:28:1d:f5:0f:03:0b:c0:72:5c:dd:e2:59: 2c:d1:87:81:f3:06:63:f7:0a:b6:a6:fb:ea:f8:3c:85:66:ab: a6:4f:f3:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZIonXupST+nkxDBOZv9OgGFBNP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjA2MTYyMzIyMzJaFw0yNjA2MTgwMTM5MzJaMDMxMTAvBgNV BAMTKDZEMzgwMEY4NURFOEM2NDc5ODU5QUIzMEM3QjlGRTI3MjZCRTRFRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+4xuTnWBbHD589C4dmLukFQJc NYF7wc3gh7xLnyQhroD8mhRfxqpbGiN0TqXDzMeB3wwX+C9cj3yukKgZjcHMp87r e924Oyo2VB3DweJk0ftzw4Rilwo3FrMh/ADaaw5K3Oj6KYsaaDkfKTXNbDcIOwCi pDyl9OYGhMo5BiSqG9vZv9ulaNZYz/IoOE8HzF1QYswrXxSm8QqVHCHo1BfghOq5 o5L67ZngtNFmLxeQ/rkWC7DuwiGMM57hLtarEVMIRcM04DTU2bGtaPhGikOKHh9F KcwcgazRh2EU0CNW64uReZLx0JeoC7Sj+fvaJWVRXVAYsYjXsUgUNgYjGhK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbTgA+F3oxkeYWaswx7n+Jya+TvswHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI9NaCWL4XbE3GF5H0HQ72xhT1waJWmJjHA4 EKmOg4CoKgEB76k2znJl1mxn8/27pn9LosZ5HpuTmw6og8vIiWzkr9CofS27KDFQ SCxOq0eQpbyTWR3nUPsscBABJBGJwkMW/m2q1gH9uinEcfkKfWtkkrjFcr0JH2sB ZNU/7dVyR6tuD2IcWrpUZFcoF4GmspU5ahGGBOQXtmLFL87DEqu2yCQBscqE/oAe fgp+DJPxNGxWqoARkry5yrHUvBS+dI1RmjhGHytS5yCxmwBxT9Z8Nr/dbm+f14fh oPv/sygd9Q8DC8ByXN3iWSzRh4HzBmP3Cram++r4PIVmq6ZP81w= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:19 2026 by rpki-client