$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft File: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft (raw, json) Hash identifier: 6cLZR1k6QkdGXrgOyRyiKVvptvgJbtGPt9KiMiXCKfY= Subject key identifier: 34:5C:B1:0C:B9:65:8E:CF:77:62:A9:69:8C:3C:29:B8:48:DC:A0:DB Authority key identifier: 4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F Certificate issuer: /CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Certificate serial: 5C7B93988ED691685919B8D96D6A1D0E67765119 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 02:48:08 +0000 Manifest this update: Sat 20 Jun 2026 02:43:08 +0000 Manifest next update: Sun 21 Jun 2026 06:44:08 +0000 Files and hashes: 1: 4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl (hash: 6xhLEz5xwtXDBqmv/veUo1S/OZb3pzxzpUs9FKgsnFY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:44:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:7b:93:98:8e:d6:91:68:59:19:b8:d9:6d:6a:1d:0e:67:76:51:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F Validity Not Before: Jun 20 02:43:08 2026 GMT Not After : Jun 21 06:44:08 2026 GMT Subject: CN=345CB10CB9658ECF7762A9698C3C29B848DCA0DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:01:38:ec:b3:93:5b:25:74:5a:e6:e6:b4:34: f0:fa:a9:f5:c2:95:63:66:9e:ac:08:a9:76:0d:c1: 9c:7c:b5:3b:88:58:86:8b:cd:d7:09:8b:f8:81:bf: 5d:7d:92:5d:30:71:83:e1:24:71:91:43:89:71:dd: 06:d2:68:16:f5:6d:95:27:de:10:1b:5f:4f:e3:d0: d5:3e:86:ee:c8:46:e7:39:4a:46:16:77:53:29:5b: 30:22:ce:76:3d:5a:1c:6d:a7:72:e1:11:3f:2f:f9: 2e:76:87:21:b3:fe:a4:06:da:9e:13:df:bc:71:45: c0:6f:d1:f4:5e:00:1f:f0:cc:d7:52:d3:b9:18:ca: 2d:5a:d8:77:74:d2:6a:25:99:59:3d:0b:03:d8:56: 23:bc:11:76:46:db:80:19:6d:d2:fb:44:67:7a:c2: e9:d8:0c:77:74:30:eb:f6:5e:62:db:0e:53:e0:98: 58:cf:a5:14:7e:33:43:24:a7:f9:bf:86:9d:40:c3: 9a:6e:d4:f5:ed:88:f3:38:f1:35:f2:68:8e:1f:b3: d6:9c:96:a4:45:5b:29:da:eb:e1:7b:2c:0d:95:8c: 68:bc:1b:2a:83:98:cb:9f:d1:1c:c4:b1:c0:04:86: d6:2f:f7:84:5b:7a:9a:6a:97:ab:6a:48:37:a4:89: 6d:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:5C:B1:0C:B9:65:8E:CF:77:62:A9:69:8C:3C:29:B8:48:DC:A0:DB X509v3 Authority Key Identifier: keyid:4A:DC:E7:75:7D:9D:0C:0B:91:23:C3:91:A7:EC:05:90:8F:F2:7C:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d3ec84e-60ef-44d4-9f43-85b6f96b26cf/0/4ADCE7757D9D0C0B9123C391A7EC05908FF27C8F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:3f:4a:d9:e0:1b:1a:25:d3:79:7a:b2:fe:15:4a:d6:f5:16: 28:05:f4:70:98:3c:13:25:b4:8f:d1:d1:c7:2c:62:fc:2e:5c: dd:1d:a9:c7:d1:d8:9b:6b:5b:6e:13:64:04:f9:7d:2f:70:5f: bd:a4:e6:df:6c:5b:5c:53:ef:a7:fb:9a:20:4f:b3:c0:31:43: cf:92:c8:42:6f:3f:7e:3e:b4:f8:fa:b9:37:3f:8d:35:12:8e: 46:b0:bd:b1:f2:36:c6:21:08:37:91:3c:71:0f:4e:dd:a0:ba: cf:f2:dd:05:31:71:85:7d:e3:57:37:57:09:3e:fb:a6:2c:29: e7:5f:1a:21:e8:20:4a:4a:e2:db:ce:4a:bd:d6:ad:18:56:a0: 91:7e:1f:10:63:b1:43:d9:f9:4a:fc:1a:36:26:69:f8:fa:9e: 15:5b:f8:8e:69:14:72:ef:ca:2a:58:45:39:ff:4c:7f:29:70: b0:bf:fd:79:9a:75:e4:dc:08:0f:7e:a2:bc:d4:55:c3:b0:20: dd:9c:74:20:9a:88:65:a9:ec:e0:14:6c:ff:dd:c4:01:37:54: e6:f7:53:e9:5b:57:5b:67:c4:b7:ba:b6:8b:e2:41:02:37:43: 48:6a:87:4e:e5:4f:85:c2:0a:38:d3:4d:7e:4c:b7:07:f1:54: 6e:40:bd:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXHuTmI7WkWhZGbjZbWodDmd2URkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4 RkYyN0M4RjAeFw0yNjA2MjAwMjQzMDhaFw0yNjA2MjEwNjQ0MDhaMDMxMTAvBgNV BAMTKDM0NUNCMTBDQjk2NThFQ0Y3NzYyQTk2OThDM0MyOUI4NDhEQ0EwREIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjATjss5NbJXRa5ua0NPD6qfXC lWNmnqwIqXYNwZx8tTuIWIaLzdcJi/iBv119kl0wcYPhJHGRQ4lx3QbSaBb1bZUn 3hAbX0/j0NU+hu7IRuc5SkYWd1MpWzAiznY9Whxtp3LhET8v+S52hyGz/qQG2p4T 37xxRcBv0fReAB/wzNdS07kYyi1a2Hd00molmVk9CwPYViO8EXZG24AZbdL7RGd6 wunYDHd0MOv2XmLbDlPgmFjPpRR+M0Mkp/m/hp1Aw5pu1PXtiPM48TXyaI4fs9ac lqRFWyna6+F7LA2VjGi8GyqDmMuf0RzEscAEhtYv94Rbeppql6tqSDekiW1FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNFyxDLlljs93YqlpjDwpuEjcoNswHwYDVR0j BBgwFoAUStzndX2dDAuRI8ORp+wFkI/yfI8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQzZWM4NGUtNjBlZi00NGQ0LTlmNDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3 RDlEMEMwQjkxMjNDMzkxQTdFQzA1OTA4RkYyN0M4Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS80QURDRTc3NTdEOUQwQzBCOTEyM0MzOTFBN0VDMDU5MDhGRjI3 QzhGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQzZWM4NGUtNjBlZi00NGQ0LTlm NDMtODViNmY5NmIyNmNmLzAvNEFEQ0U3NzU3RDlEMEMwQjkxMjNDMzkxQTdFQzA1 OTA4RkYyN0M4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIA/StngGxol03l6sv4VStb1FigF9HCYPBMl tI/R0ccsYvwuXN0dqcfR2JtrW24TZAT5fS9wX72k5t9sW1xT76f7miBPs8AxQ8+S yEJvP34+tPj6uTc/jTUSjkawvbHyNsYhCDeRPHEPTt2gus/y3QUxcYV941c3Vwk+ +6YsKedfGiHoIEpK4tvOSr3WrRhWoJF+HxBjsUPZ+Ur8GjYmafj6nhVb+I5pFHLv yipYRTn/TH8pcLC//XmadeTcCA9+orzUVcOwIN2cdCCaiGWp7OAUbP/dxAE3VOb3 U+lbV1tnxLe6toviQQI3Q0hqh07lT4XCCjjTTX5MtwfxVG5AvSU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:37:33 2026 by rpki-client