$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: 7oxc0Rgd6Z8IlL3iIS7ztwIq8zRBPFly0O+8JEWgf3w= Subject key identifier: 48:37:52:5A:2F:C0:34:A1:3B:42:0D:C0:E6:0E:11:39:F9:39:A3:A3 Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 0788C8D5AB2F497D00AA7864BACCF6EB496C9DE2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: 0E Signing time: Tue 12 May 2026 19:51:18 +0000 Manifest this update: Tue 12 May 2026 19:46:18 +0000 Manifest next update: Wed 13 May 2026 22:08:18 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: F5PJ9fu211brXvURbXnmSspyr4Rzy/FKpEvtNWp5Mkw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 09:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:88:c8:d5:ab:2f:49:7d:00:aa:78:64:ba:cc:f6:eb:49:6c:9d:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: May 12 19:46:18 2026 GMT Not After : May 13 22:08:18 2026 GMT Subject: CN=4837525A2FC034A13B420DC0E60E1139F939A3A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:06:98:6a:25:9d:11:2e:ac:b8:61:ee:a3:c5: 87:9c:7f:d5:7f:4b:4f:c3:e4:6c:af:31:e9:59:26: b4:2c:d9:af:75:09:d1:0b:44:43:35:ae:ac:6e:df: a4:fa:6e:10:3d:af:8a:7a:0a:bf:f4:19:86:01:27: 54:d9:cc:03:c0:2d:b1:23:5a:99:95:3d:83:0a:e5: 1a:b3:dd:ee:b3:0e:dd:c9:3a:bf:ab:88:63:5d:2e: 76:f9:47:77:c7:4c:ba:8b:03:ca:48:01:e7:b2:19: bc:47:3b:98:13:8c:44:79:56:bd:6e:c1:44:50:20: 55:97:16:d0:df:33:ed:d8:3b:f7:14:25:8d:5a:a6: df:21:e5:fb:51:b7:59:08:c7:85:e4:63:5b:98:55: f4:ef:bc:3f:82:19:8f:60:ed:6e:39:fc:bf:f1:c0: 08:08:23:8a:42:e2:70:67:43:f5:04:1d:d7:57:bd: c2:d4:ba:43:9d:e4:c6:c6:e8:91:4d:4e:ef:2e:d6: b1:d0:15:b1:4d:1b:cf:ce:16:ca:48:c1:b7:0e:67: 78:e3:13:54:bf:c3:ba:83:ca:d6:4e:f2:34:77:4c: 36:93:23:ae:26:3d:5b:f0:7f:6e:42:a0:e2:55:e7: b0:29:1d:cd:c1:6f:c7:47:23:6a:cb:16:6e:0b:58: 99:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:52:5A:2F:C0:34:A1:3B:42:0D:C0:E6:0E:11:39:F9:39:A3:A3 X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:db:60:5d:40:eb:22:5c:19:d2:c7:2c:71:9d:4a:59:bb:c5: 73:05:6e:12:8c:47:18:2f:d6:9c:5e:b1:2d:ed:f1:37:b5:ad: a3:2d:ae:0d:93:ef:c6:9a:bb:01:c5:ef:dc:b4:4f:9a:d0:e2: 3d:d8:69:1b:f0:95:92:ef:e5:6c:f7:89:7a:e7:0c:ed:a4:ac: c9:0b:d7:21:fa:88:87:79:4d:86:6e:73:76:e5:b1:32:b9:38: 44:5f:92:75:28:54:d5:cf:83:06:e1:12:54:7c:14:07:26:db: f7:63:32:30:72:fa:0c:e1:7b:f7:11:e3:43:2e:02:f7:4a:b1: 78:24:70:f2:3f:3f:57:a2:7d:ea:95:b0:21:da:37:5e:69:35: 13:8f:4f:5a:a9:15:36:23:6a:8a:f4:6f:8a:bc:42:b8:5a:ca: 0c:1c:52:07:a6:ae:68:83:ca:b4:f3:51:41:00:eb:6d:2c:1a: da:ff:b4:4b:32:d2:20:5e:23:95:23:aa:5c:32:bb:a3:2e:bc: 47:ce:6b:97:ea:82:c1:a7:52:4c:80:d2:dc:94:68:c8:f5:98: ab:a8:3b:ae:67:08:80:9f:f5:94:83:b6:85:e1:b3:c7:4f:81: bf:c5:28:bb:5d:d9:e5:1b:13:66:9b:c9:77:a8:bd:03:56:c4: 47:21:47:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB4jI1asvSX0Aqnhkusz260lsneIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA1MTIxOTQ2MThaFw0yNjA1MTMyMjA4MThaMDMxMTAvBgNV BAMTKDQ4Mzc1MjVBMkZDMDM0QTEzQjQyMERDMEU2MEUxMTM5RjkzOUEzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBphqJZ0RLqy4Ye6jxYecf9V/ S0/D5GyvMelZJrQs2a91CdELREM1rqxu36T6bhA9r4p6Cr/0GYYBJ1TZzAPALbEj WpmVPYMK5Rqz3e6zDt3JOr+riGNdLnb5R3fHTLqLA8pIAeeyGbxHO5gTjER5Vr1u wURQIFWXFtDfM+3YO/cUJY1apt8h5ftRt1kIx4XkY1uYVfTvvD+CGY9g7W45/L/x wAgII4pC4nBnQ/UEHddXvcLUukOd5MbG6JFNTu8u1rHQFbFNG8/OFspIwbcOZ3jj E1S/w7qDytZO8jR3TDaTI64mPVvwf25CoOJV57ApHc3Bb8dHI2rLFm4LWJnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDdSWi/ANKE7Qg3A5g4ROfk5o6MwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF/bYF1A6yJcGdLHLHGdSlm7xXMFbhKMRxgv 1pxesS3t8Te1raMtrg2T78aauwHF79y0T5rQ4j3YaRvwlZLv5Wz3iXrnDO2krMkL 1yH6iId5TYZuc3blsTK5OERfknUoVNXPgwbhElR8FAcm2/djMjBy+gzhe/cR40Mu AvdKsXgkcPI/P1eifeqVsCHaN15pNROPT1qpFTYjaor0b4q8QrhaygwcUgemrmiD yrTzUUEA620sGtr/tEsy0iBeI5Ujqlwyu6MuvEfOa5fqgsGnUkyA0tyUaMj1mKuo O65nCICf9ZSDtoXhs8dPgb/FKLtd2eUbE2abyXeovQNWxEchR1M= -----END CERTIFICATE-----Generated at Tue May 12 22:47:13 2026 by rpki-client