$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: xC5O1EMUoXyXFd/bXvuauvB4WvO26lcpF7xLJVJzYr0= Subject key identifier: 46:83:9D:2C:2F:3E:DB:1F:1C:98:F0:6D:A8:10:8F:05:EE:C6:F5:27 Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 2F66C84CC6D78B0F5290BC39BD2000142746D719 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 03:12:29 +0000 Manifest this update: Thu 17 Sep 2026 03:07:29 +0000 Manifest next update: Fri 18 Sep 2026 03:55:29 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: ZR7X+yWhYptv3GAwWyGtddlJMHRNh6jsh2getzpCzU8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:66:c8:4c:c6:d7:8b:0f:52:90:bc:39:bd:20:00:14:27:46:d7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: Sep 17 03:07:29 2026 GMT Not After : Sep 18 03:55:29 2026 GMT Subject: CN=46839D2C2F3EDB1F1C98F06DA8108F05EEC6F527 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:9e:56:6a:a8:eb:22:bc:9f:6f:d1:b6:f8: c8:f8:92:22:90:c8:cc:8c:73:62:44:1e:06:cc:eb: 3a:21:85:c2:2a:92:6c:cd:43:61:56:79:30:5c:a7: c3:4e:9e:cf:7e:a5:ee:e0:10:b1:b8:5a:28:f9:c6: a5:c5:41:09:56:f7:77:02:3c:4e:51:b3:2b:f8:e2: 89:8d:6a:23:94:91:b1:e0:da:89:dd:e0:ce:92:ca: 59:d5:34:72:e2:44:c7:4b:da:c6:78:d9:f3:ca:b8: a8:61:d4:69:ae:da:c9:9c:fd:63:26:b6:d1:8d:d7: 2f:ab:7a:57:ca:60:dd:d0:cb:13:9d:59:4e:88:d3: 57:fa:f7:d2:bc:71:75:79:db:14:b3:10:b0:2a:b5: d2:67:83:96:f0:e1:7c:8f:1b:5f:ff:51:82:16:cf: 09:cc:b7:6e:c9:d9:e9:a4:95:91:2c:92:ec:5f:7f: 8c:5d:a3:96:46:40:c6:be:af:0c:32:77:28:7a:d1: b9:d2:ea:81:c5:27:a9:f9:f7:26:5d:79:59:59:2e: ae:28:83:06:4c:19:f9:63:ba:60:bd:07:c7:d6:06: 0f:11:7d:7e:f1:e8:a1:f0:6f:ed:ef:4a:3c:5c:48: 2f:83:15:a6:26:93:45:42:68:53:3f:b3:07:2e:fa: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:83:9D:2C:2F:3E:DB:1F:1C:98:F0:6D:A8:10:8F:05:EE:C6:F5:27 X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:2f:81:9e:ae:ed:44:91:c7:48:d1:43:9c:0a:ef:cc:eb:09: 6b:56:e9:85:56:72:00:1d:be:e4:e7:4c:61:7a:71:3c:bf:30: fe:e8:ff:08:11:bc:98:00:6b:8d:79:45:b5:ab:39:77:5f:d0: d4:be:e4:71:46:16:75:74:2d:64:6a:71:20:f1:51:e7:30:57: d1:0b:78:d4:0e:be:fa:cf:b4:cf:a8:59:3b:cb:a4:75:8e:e0: 8f:76:60:64:ab:db:71:69:4a:c6:d8:4b:20:a7:0a:46:63:50: 75:3f:68:62:3a:14:06:b3:bd:06:e8:d9:53:ea:31:80:b2:37: 8d:08:dc:a6:6b:af:b5:ff:f3:f1:b1:c8:44:f0:89:9e:36:f6: 87:ce:e4:cb:64:82:f1:55:8f:cc:68:7d:56:fc:ac:c0:46:72: 30:2e:eb:1c:69:e2:94:b9:a2:6a:90:1d:f2:95:f5:a0:b7:e7: 81:4b:6c:9f:a5:de:86:c4:9e:5d:3b:45:44:56:1d:0a:ec:73: 89:d9:2d:f3:15:a7:79:2b:d5:7c:ff:f0:c0:52:85:e7:7c:f6: ef:94:79:4d:ed:a9:4b:fa:9f:5d:54:bd:ae:ad:c8:7d:90:38: 07:76:37:35:bb:dc:39:e2:d3:b2:b1:64:a0:8d:36:84:37:db: 4e:7b:85:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2bITMbXiw9SkLw5vSAAFCdG1xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjA5MTcwMzA3MjlaFw0yNjA5MTgwMzU1MjlaMDMxMTAvBgNV BAMTKDQ2ODM5RDJDMkYzRURCMUYxQzk4RjA2REE4MTA4RjA1RUVDNkY1MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMZ5WaqjrIryfb9G2+Mj4kiKQ yMyMc2JEHgbM6zohhcIqkmzNQ2FWeTBcp8NOns9+pe7gELG4Wij5xqXFQQlW93cC PE5Rsyv44omNaiOUkbHg2ond4M6SylnVNHLiRMdL2sZ42fPKuKhh1Gmu2smc/WMm ttGN1y+relfKYN3QyxOdWU6I01f699K8cXV52xSzELAqtdJng5bw4XyPG1//UYIW zwnMt27J2emklZEskuxff4xdo5ZGQMa+rwwydyh60bnS6oHFJ6n59yZdeVlZLq4o gwZMGfljumC9B8fWBg8RfX7x6KHwb+3vSjxcSC+DFaYmk0VCaFM/swcu+rhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURoOdLC8+2x8cmPBtqBCPBe7G9ScwHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgvgZ6u7USRx0jRQ5wK78zrCWtW6YVWcgAd vuTnTGF6cTy/MP7o/wgRvJgAa415RbWrOXdf0NS+5HFGFnV0LWRqcSDxUecwV9EL eNQOvvrPtM+oWTvLpHWO4I92YGSr23FpSsbYSyCnCkZjUHU/aGI6FAazvQbo2VPq MYCyN40I3KZrr7X/8/GxyETwiZ429ofO5MtkgvFVj8xofVb8rMBGcjAu6xxp4pS5 omqQHfKV9aC354FLbJ+l3obEnl07RURWHQrsc4nZLfMVp3kr1Xz/8MBShed89u+U eU3tqUv6n11Uva6tyH2QOAd2NzW73Dni07KxZKCNNoQ32057hVE= -----END CERTIFICATE-----Generated at Thu Sep 17 12:19:00 2026 by rpki-client