$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: C8l9DNILKHbg00wlXniiMRM02UcR3AG0QvM6bxMBNjY= Subject key identifier: D5:1C:63:6A:72:A7:AC:6F:AF:A0:2B:B6:63:A0:64:05:51:0E:ED:71 Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 02272DDAD11631BF5D7204E935E9655D358BB13E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: C2 Signing time: Wed 23 Sep 2026 20:46:45 +0000 Manifest this update: Wed 23 Sep 2026 20:41:45 +0000 Manifest next update: Thu 24 Sep 2026 20:46:45 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: SxtJ1x9H3taYKjWQ5CqWpRdhuK38ZDnHWUXyfvNIcFo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 20:46:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:27:2d:da:d1:16:31:bf:5d:72:04:e9:35:e9:65:5d:35:8b:b1:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Sep 23 20:41:45 2026 GMT Not After : Sep 24 20:46:45 2026 GMT Subject: CN=D51C636A72A7AC6FAFA02BB663A06405510EED71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:ee:02:c9:e6:39:6b:e0:f9:10:6d:2e:ce:d0: 5b:7d:53:96:90:47:e0:50:b1:a1:78:ff:94:2e:80: 92:7b:94:ef:a0:02:77:9b:8d:4c:2a:09:9a:f0:4d: 54:fd:30:a4:3d:f9:a6:72:98:60:4d:5e:2a:a9:a6: 36:3c:36:84:fc:2b:97:53:53:ba:05:91:6e:23:94: 8a:c2:b3:8e:dc:fe:bc:2d:1a:1c:ec:1b:71:c3:c9: 69:ff:74:de:5f:35:b7:01:ae:e2:a3:14:9d:d2:67: 51:90:09:22:7f:7f:bf:05:6f:b9:74:df:c4:e1:b4: 9d:74:cb:ad:bc:01:6b:93:25:3f:61:6e:da:a4:28: f2:d4:5d:af:10:e7:41:d3:0d:1d:e0:e1:19:42:59: 9a:2f:bd:6d:53:e8:5a:03:f6:60:c3:e6:fb:58:75: a3:e3:ff:94:ac:ec:60:e0:96:d7:84:44:43:f9:ed: fb:9e:4d:32:22:6e:4b:53:76:3d:a2:30:6c:1c:fd: aa:b8:44:f3:c3:15:9f:93:0c:42:9a:07:93:cf:b2: 2c:06:ba:06:f0:02:e2:0e:fd:f7:3f:b7:58:30:9f: df:42:0f:d7:bf:07:8b:82:8a:a7:a7:35:18:8d:ad: 34:0d:d1:f5:87:95:d0:2a:ba:69:2a:fa:ab:f3:b6: a2:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:1C:63:6A:72:A7:AC:6F:AF:A0:2B:B6:63:A0:64:05:51:0E:ED:71 X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:ba:11:fb:74:76:d4:29:f3:3e:b3:eb:0d:e9:d3:cb:ad:18: 8e:81:a9:48:b2:39:58:48:90:a0:6b:1c:27:e2:e8:b6:6b:f5: da:dc:0f:7d:a1:7e:f6:c1:01:e3:bf:23:d7:21:b1:a4:74:83: 6c:f1:0a:51:59:59:68:e5:e3:95:bf:cb:0b:43:3a:72:29:65: 7a:3b:e9:d5:cf:01:8f:cd:2c:92:30:28:c7:c5:df:75:75:af: 6a:70:7d:26:ee:4f:5e:8f:78:48:d5:e0:da:0b:15:d9:fa:10: fb:a8:ef:36:05:10:87:10:f3:aa:46:a9:01:c4:7b:31:b6:6d: 25:88:fb:de:a7:22:ab:d2:61:47:e6:11:7e:13:8c:dc:e8:72: bd:28:d7:37:8b:dd:45:cd:ec:0e:81:69:96:be:04:e6:26:36: 63:44:b3:7d:4c:e5:55:cc:c2:3d:16:7e:c4:b0:f1:30:1e:6b: ec:29:ce:bd:a5:b1:a4:82:b7:59:18:1a:35:87:41:cb:71:71: 6a:4d:67:b2:cc:26:4a:bf:d5:c0:e0:a4:57:4a:c4:bb:a4:7d: 5c:bf:ad:67:24:48:e5:fd:ad:c8:d7:b7:e1:92:cc:06:ae:20: 9f:46:16:96:e3:04:3c:ad:d9:91:9c:65:0c:96:f9:e1:59:56: 8b:5b:02:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAict2tEWMb9dcgTpNellXTWLsT4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA5MjMyMDQxNDVaFw0yNjA5MjQyMDQ2NDVaMDMxMTAvBgNV BAMTKEQ1MUM2MzZBNzJBN0FDNkZBRkEwMkJCNjYzQTA2NDA1NTEwRUVENzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJ7gLJ5jlr4PkQbS7O0Ft9U5aQ R+BQsaF4/5QugJJ7lO+gAnebjUwqCZrwTVT9MKQ9+aZymGBNXiqppjY8NoT8K5dT U7oFkW4jlIrCs47c/rwtGhzsG3HDyWn/dN5fNbcBruKjFJ3SZ1GQCSJ/f78Fb7l0 38ThtJ10y628AWuTJT9hbtqkKPLUXa8Q50HTDR3g4RlCWZovvW1T6FoD9mDD5vtY daPj/5Ss7GDglteEREP57fueTTIibktTdj2iMGwc/aq4RPPDFZ+TDEKaB5PPsiwG ugbwAuIO/fc/t1gwn99CD9e/B4uCiqenNRiNrTQN0fWHldAqumkq+qvztqIjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RxjanKnrG+voCu2Y6BkBVEO7XEwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy6Eft0dtQp8z6z6w3p08utGI6BqUiyOVhI kKBrHCfi6LZr9drcD32hfvbBAeO/I9chsaR0g2zxClFZWWjl45W/ywtDOnIpZXo7 6dXPAY/NLJIwKMfF33V1r2pwfSbuT16PeEjV4NoLFdn6EPuo7zYFEIcQ86pGqQHE ezG2bSWI+96nIqvSYUfmEX4TjNzocr0o1zeL3UXN7A6BaZa+BOYmNmNEs31M5VXM wj0WfsSw8TAea+wpzr2lsaSCt1kYGjWHQctxcWpNZ7LMJkq/1cDgpFdKxLukfVy/ rWckSOX9rcjXt+GSzAauIJ9GFpbjBDyt2ZGcZQyW+eFZVotbAjA= -----END CERTIFICATE-----Generated at Thu Sep 24 08:38:36 2026 by rpki-client