$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: GzoIcEgNsI8gbSdtta+tBRZDBOCrF93RH0gnqzvsLR4= Subject key identifier: A4:8D:42:A2:E0:5E:E2:D0:EB:8C:69:48:50:63:79:2A:A9:23:11:4C Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 16D6111FF7FB7400B72D59EF887457349DFEF173 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:31:08 +0000 Manifest this update: Fri 24 Jul 2026 01:26:08 +0000 Manifest next update: Sat 25 Jul 2026 01:59:08 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: yBxdwwsSxay/SmoXWlPcxvRFQTCYk20J2wiFGlREXKA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 01:59:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:d6:11:1f:f7:fb:74:00:b7:2d:59:ef:88:74:57:34:9d:fe:f1:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Jul 24 01:26:08 2026 GMT Not After : Jul 25 01:59:08 2026 GMT Subject: CN=A48D42A2E05EE2D0EB8C69485063792AA923114C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:15:25:29:09:b0:d4:ca:d0:c5:6b:a9:8f:83: e8:e3:41:dd:88:3e:7e:87:22:5d:b8:88:81:26:cc: fa:2d:0f:aa:a2:a2:3f:49:9f:6f:27:69:e4:32:8a: 57:98:b3:ef:a3:87:39:52:27:b7:65:1b:7c:14:a2: 4b:e0:28:fd:de:cd:fb:9d:85:aa:1e:b6:13:0a:99: 69:42:d6:88:61:b7:ac:78:1b:16:90:75:a4:56:4b: 34:37:18:70:57:01:e1:34:97:f0:0f:5f:6b:d2:c2: cc:43:46:63:f8:d5:a8:6f:fe:cc:81:01:3c:73:b6: 7a:e7:cf:58:14:6b:6f:94:eb:8a:f2:85:9c:50:c9: 22:6c:b1:69:ff:0c:bc:26:9d:0f:1a:45:66:c8:c0: 49:8d:c6:1b:64:e3:8c:f7:ff:87:6d:7f:82:58:4e: a0:4f:9f:11:0a:56:96:13:11:a4:ae:45:9f:a8:6a: 03:1d:97:5f:a5:b4:40:9f:35:de:cc:3e:9a:60:93: bc:e5:29:28:1e:83:18:d2:e6:cb:99:ba:63:f8:a5: de:d2:ab:0c:7c:1d:ca:33:fc:c6:c9:e7:3d:db:29: 32:0a:1f:ba:f8:37:5d:1c:f8:51:89:27:ac:2c:cd: af:5d:ea:6f:11:ac:b5:7c:fa:28:9e:c3:75:d8:e0: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:8D:42:A2:E0:5E:E2:D0:EB:8C:69:48:50:63:79:2A:A9:23:11:4C X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:ae:2e:fa:20:57:c3:05:48:ad:6f:fb:8e:7e:5b:49:b3:cf: 86:4b:fc:6e:91:58:be:87:3f:af:02:c2:68:b9:7f:c6:48:e4: 22:59:1f:e4:1a:eb:db:b2:b2:26:03:dd:dc:ee:fd:d6:95:0b: 94:f6:70:f2:b0:e5:ba:cd:1c:8a:2e:0b:18:8a:89:23:b3:d6: 31:01:44:51:a1:9b:05:e4:85:8e:e7:35:c9:d7:f9:e4:42:59: da:f2:eb:ed:87:49:52:f2:cd:04:a5:bf:1d:45:0a:ce:22:71: f1:a1:49:82:5f:e6:8b:28:9b:19:80:cd:1c:27:c4:2f:f3:08: c1:0e:e8:1f:c4:9e:b6:6e:02:94:65:20:7d:7a:c8:cf:67:5d: 76:87:f1:fe:67:50:01:33:f7:c3:d8:42:84:65:f2:24:a5:fb: 74:cc:5c:97:75:98:55:48:ae:ea:fa:f0:5b:88:62:3b:a2:57: 29:a1:cf:a4:ae:fe:f0:6c:c4:66:a1:b3:ff:58:1c:9f:fa:53: 1b:c8:a9:45:ba:06:5a:40:9f:27:27:56:d2:93:41:d7:e1:28: cd:c9:1b:8f:25:93:55:0c:e1:18:fa:2d:52:55:3a:a5:af:c3: e8:9d:a1:e6:35:c4:08:7d:1b:01:0d:b9:c4:40:65:e3:80:3e: 8e:74:f9:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFtYRH/f7dAC3LVnviHRXNJ3+8XMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA3MjQwMTI2MDhaFw0yNjA3MjUwMTU5MDhaMDMxMTAvBgNV BAMTKEE0OEQ0MkEyRTA1RUUyRDBFQjhDNjk0ODUwNjM3OTJBQTkyMzExNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FSUpCbDUytDFa6mPg+jjQd2I Pn6HIl24iIEmzPotD6qioj9Jn28naeQyileYs++jhzlSJ7dlG3wUokvgKP3ezfud haoethMKmWlC1ohht6x4GxaQdaRWSzQ3GHBXAeE0l/APX2vSwsxDRmP41ahv/syB ATxztnrnz1gUa2+U64ryhZxQySJssWn/DLwmnQ8aRWbIwEmNxhtk44z3/4dtf4JY TqBPnxEKVpYTEaSuRZ+oagMdl1+ltECfNd7MPppgk7zlKSgegxjS5suZumP4pd7S qwx8Hcoz/MbJ5z3bKTIKH7r4N10c+FGJJ6wsza9d6m8RrLV8+iiew3XY4NgvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpI1CouBe4tDrjGlIUGN5KqkjEUwwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEauLvogV8MFSK1v+45+W0mzz4ZL/G6RWL6H P68Cwmi5f8ZI5CJZH+Qa69uysiYD3dzu/daVC5T2cPKw5brNHIouCxiKiSOz1jEB RFGhmwXkhY7nNcnX+eRCWdry6+2HSVLyzQSlvx1FCs4icfGhSYJf5osomxmAzRwn xC/zCMEO6B/EnrZuApRlIH16yM9nXXaH8f5nUAEz98PYQoRl8iSl+3TMXJd1mFVI rur68FuIYjuiVymhz6Su/vBsxGahs/9YHJ/6UxvIqUW6BlpAnycnVtKTQdfhKM3J G48lk1UM4Rj6LVJVOqWvw+idoeY1xAh9GwENucRAZeOAPo50+Q4= -----END CERTIFICATE-----Generated at Fri Jul 24 03:52:24 2026 by rpki-client