$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: qrdmVzrT4CQtPhF65JyIH3q1+p1U/ITUwSL+NxSgCrc= Subject key identifier: AC:00:5B:5E:EE:40:B1:A4:82:54:40:64:E4:3C:51:E3:53:9D:E8:5B Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 1CE97020DB1450B39193EED303563274C276C037 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: 0100 Signing time: Mon 09 Nov 2026 22:28:48 +0000 Manifest this update: Mon 09 Nov 2026 22:23:48 +0000 Manifest next update: Wed 11 Nov 2026 02:02:48 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: 2PBq5EFQZOFZQjNRxBWag61SSPzcOEPZspPG8fXM/OI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 02:02:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:e9:70:20:db:14:50:b3:91:93:ee:d3:03:56:32:74:c2:76:c0:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: Nov 9 22:23:48 2026 GMT Not After : Nov 11 02:02:48 2026 GMT Subject: CN=AC005B5EEE40B1A482544064E43C51E3539DE85B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:be:79:10:5d:03:4e:80:f0:ee:73:1a:e3:8f: ce:3b:48:5e:76:12:69:1b:7c:93:fd:ee:74:5e:49: bb:8f:59:bf:2b:56:50:c0:d8:e0:ee:c4:91:7d:bc: d6:47:ad:7d:51:3e:e2:77:e5:f5:f3:6e:c5:5e:f8: 61:3c:a5:22:30:1a:3e:56:32:43:c5:3f:5a:94:d2: 6b:7b:18:1a:d7:5a:b5:30:0b:1d:89:c1:36:9e:4b: 32:83:5a:1b:1b:50:2c:ca:1b:cc:2e:5e:b1:cf:4f: dc:33:73:41:ef:b7:55:75:f4:2e:9e:3a:ed:08:aa: 10:5e:78:d8:4b:c2:81:75:91:83:07:fd:ec:5a:79: b5:9e:3e:97:85:ee:36:40:ba:ab:48:e1:04:d5:9e: 2b:d6:ba:fe:d1:04:86:af:ad:d8:bf:79:ef:f6:f2: 1e:03:a4:3e:fe:e6:4c:28:1a:5b:3f:a0:30:3a:a3: af:78:fc:35:7a:b2:71:46:b5:a2:fa:7f:af:9f:be: 86:6e:3a:c1:7b:68:90:59:32:24:56:79:a6:34:d9: 29:63:f4:4d:07:d2:85:c9:11:60:6a:56:23:93:17: 20:fb:3a:17:82:88:ab:c6:68:f6:8f:c9:4d:9a:e2: ad:0d:87:c2:70:7d:d1:e3:b9:a0:22:51:d4:ef:b7: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:00:5B:5E:EE:40:B1:A4:82:54:40:64:E4:3C:51:E3:53:9D:E8:5B X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:7f:2d:0b:1f:cf:89:d6:dc:c1:08:50:29:c7:6e:92:03:31: b6:21:a5:f2:87:f4:cb:7c:39:57:65:7f:e1:ef:32:de:f3:eb: 6b:78:1e:b1:e3:c9:e7:ca:55:cb:5d:4b:16:18:b6:29:36:90: 5d:4b:d9:ad:d2:d1:7e:23:44:49:b2:61:83:bc:06:cd:4f:bb: d2:2a:1c:b0:d1:0d:23:39:8f:67:4f:22:30:60:38:21:91:e7: 83:02:0a:78:cd:42:a9:d2:70:09:c6:b6:a2:64:49:4c:ad:e7: 0c:5b:64:48:30:53:5a:8c:6d:84:e5:0f:6a:4c:79:f4:2b:1d: b1:0d:eb:9f:59:80:41:0f:24:0d:df:79:6b:dd:8f:5e:d2:31: 21:41:4d:e8:1c:a3:3e:87:62:49:4f:cd:14:c6:05:0c:96:5e: e1:42:7d:18:d6:89:84:bc:7b:5f:2e:d8:a3:68:8d:0e:49:4b: e7:85:8a:13:e9:f7:f8:12:93:5c:af:3f:41:d6:7a:01:09:37: 1b:1c:ca:23:1d:26:66:74:12:30:d3:bf:68:e9:90:70:64:c8: 4f:39:0e:94:df:e1:f1:aa:cc:d9:84:44:17:8e:ef:8c:04:99: 75:17:fc:eb:f7:d5:65:d0:7c:ae:a6:5b:7b:58:e5:f3:b5:19: 81:74:f0:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHOlwINsUULORk+7TA1YydMJ2wDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjExMDkyMjIzNDhaFw0yNjExMTEwMjAyNDhaMDMxMTAvBgNV BAMTKEFDMDA1QjVFRUU0MEIxQTQ4MjU0NDA2NEU0M0M1MUUzNTM5REU4NUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQvnkQXQNOgPDucxrjj847SF52 EmkbfJP97nReSbuPWb8rVlDA2ODuxJF9vNZHrX1RPuJ35fXzbsVe+GE8pSIwGj5W MkPFP1qU0mt7GBrXWrUwCx2JwTaeSzKDWhsbUCzKG8wuXrHPT9wzc0Hvt1V19C6e Ou0IqhBeeNhLwoF1kYMH/exaebWePpeF7jZAuqtI4QTVnivWuv7RBIavrdi/ee/2 8h4DpD7+5kwoGls/oDA6o694/DV6snFGtaL6f6+fvoZuOsF7aJBZMiRWeaY02Slj 9E0H0oXJEWBqViOTFyD7OheCiKvGaPaPyU2a4q0Nh8JwfdHjuaAiUdTvt/45AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrABbXu5AsaSCVEBk5DxR41Od6FswHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1/LQsfz4nW3MEIUCnHbpIDMbYhpfKH9Mt8 OVdlf+HvMt7z62t4HrHjyefKVctdSxYYtik2kF1L2a3S0X4jREmyYYO8Bs1Pu9Iq HLDRDSM5j2dPIjBgOCGR54MCCnjNQqnScAnGtqJkSUyt5wxbZEgwU1qMbYTlD2pM efQrHbEN659ZgEEPJA3feWvdj17SMSFBTegcoz6HYklPzRTGBQyWXuFCfRjWiYS8 e18u2KNojQ5JS+eFihPp9/gSk1yvP0HWegEJNxscyiMdJmZ0EjDTv2jpkHBkyE85 DpTf4fGqzNmERBeO74wEmXUX/Ov31WXQfK6mW3tY5fO1GYF08GI= -----END CERTIFICATE-----Generated at Tue Nov 10 12:02:11 2026 by rpki-client