$ rpki-client -vvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: DgtthV1nzE8db+u7XFXAqHRpJVebFqP1CPlVTkdxu2g= Subject key identifier: 76:39:EA:77:DC:BF:A1:16:09:18:83:17:9B:2D:B2:B1:35:1C:30:87 Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 19BA003770673D6E23B433A803F83F4F630C4425 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: 0D Signing time: Tue 12 May 2026 04:08:50 +0000 Manifest this update: Tue 12 May 2026 04:03:50 +0000 Manifest next update: Wed 13 May 2026 07:25:50 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: dQIfqPCHdVc9AzRAhyngimNc2cVoFs0Vpo5T7cawKTY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:25:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:ba:00:37:70:67:3d:6e:23:b4:33:a8:03:f8:3f:4f:63:0c:44:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: May 12 04:03:50 2026 GMT Not After : May 13 07:25:50 2026 GMT Subject: CN=7639EA77DCBFA116091883179B2DB2B1351C3087 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:26:c9:8e:23:70:53:6f:6c:80:f0:50:f2:32: 69:fd:cd:2a:a6:d8:bc:8a:6e:69:70:29:89:56:ac: e6:dd:e2:bc:99:22:fe:ee:a5:1d:9f:5a:ac:94:7a: 08:f2:eb:c1:7b:94:42:bd:66:b7:49:f0:92:08:f8: 14:d8:8a:f8:64:42:34:ff:26:a1:8f:c8:0b:e5:ca: 02:ad:bd:ea:a1:85:94:c0:9c:3a:e1:56:cc:b4:c0: 37:da:f0:27:cf:b7:59:cf:3e:2d:fc:0d:bb:92:a2: c3:1e:0c:d9:d8:c3:9c:fc:5e:28:7c:35:ea:99:fa: f6:eb:56:f3:53:1b:63:6d:3c:2c:58:b2:94:5f:61: ec:44:45:61:27:7a:25:6b:90:fb:1f:ca:cf:5d:a3: bf:06:49:7f:36:9f:f6:f5:a4:d4:d7:42:bd:ee:d1: ff:a3:4f:c8:99:9f:d9:d3:7f:40:1f:9a:f5:4e:d1: f1:37:ea:d0:c8:e6:72:8c:e9:da:b2:ad:10:17:fd: 80:10:39:fd:c7:5e:23:62:56:dc:2a:fd:1f:06:04: e4:00:2c:41:46:e4:9a:ee:3c:89:a8:5e:b9:10:c6: 01:34:7f:2f:fb:58:8a:0f:1d:e0:45:7d:28:71:27: f8:b7:fc:19:7c:cc:39:1d:68:fd:ce:1d:3b:0e:06: eb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:39:EA:77:DC:BF:A1:16:09:18:83:17:9B:2D:B2:B1:35:1C:30:87 X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:18:d3:a8:fa:23:56:d5:88:4f:d9:d6:0c:91:cd:5b:23:a7: 07:81:8c:80:49:35:f8:b3:36:a4:b5:d5:01:50:93:12:0f:6c: 51:db:b8:8c:71:e8:e6:99:ee:aa:85:a7:a3:68:ce:1e:f2:ac: ea:dd:1a:9c:d0:05:55:12:a4:0e:62:fb:49:bf:59:80:f0:2f: 34:ff:d8:1e:fa:34:7c:5f:1f:96:f2:62:59:b1:23:fb:51:31: 9b:91:e1:96:97:c0:0d:52:7d:c1:68:ef:93:ec:ae:dc:25:fc: 0f:3a:d7:1f:fd:24:27:69:2a:30:c5:a9:af:b5:36:d1:45:9c: ab:e9:75:9e:0c:2f:36:bb:13:00:a6:dc:3a:d8:c1:3d:3b:99: 9c:3b:c4:10:b0:e8:29:66:68:00:ea:6c:85:d0:0a:d9:91:6a: f3:b5:e9:2d:87:0c:f4:65:a3:c6:f9:59:20:d2:71:d2:de:dc: e5:17:6e:d3:e9:d0:63:9a:80:2c:c4:99:67:b3:0d:26:01:69: f5:53:40:b6:08:ae:5b:63:4c:91:6b:d4:92:e8:94:83:2b:65: f6:a4:6a:f2:a3:f6:d7:21:05:6f:50:f3:0f:89:5c:57:68:ce: d5:34:e0:2e:00:fc:9c:12:49:bc:f5:9e:63:c8:b2:7f:9e:4b: 84:05:0f:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGboAN3BnPW4jtDOoA/g/T2MMRCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA1MTIwNDAzNTBaFw0yNjA1MTMwNzI1NTBaMDMxMTAvBgNV BAMTKDc2MzlFQTc3RENCRkExMTYwOTE4ODMxNzlCMkRCMkIxMzUxQzMwODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8JsmOI3BTb2yA8FDyMmn9zSqm 2LyKbmlwKYlWrObd4ryZIv7upR2fWqyUegjy68F7lEK9ZrdJ8JII+BTYivhkQjT/ JqGPyAvlygKtveqhhZTAnDrhVsy0wDfa8CfPt1nPPi38DbuSosMeDNnYw5z8Xih8 NeqZ+vbrVvNTG2NtPCxYspRfYexERWEneiVrkPsfys9do78GSX82n/b1pNTXQr3u 0f+jT8iZn9nTf0AfmvVO0fE36tDI5nKM6dqyrRAX/YAQOf3HXiNiVtwq/R8GBOQA LEFG5JruPImoXrkQxgE0fy/7WIoPHeBFfShxJ/i3/Bl8zDkdaP3OHTsOBuuNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdjnqd9y/oRYJGIMXmy2ysTUcMIcwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkY06j6I1bViE/Z1gyRzVsjpweBjIBJNfiz NqS11QFQkxIPbFHbuIxx6OaZ7qqFp6Nozh7yrOrdGpzQBVUSpA5i+0m/WYDwLzT/ 2B76NHxfH5byYlmxI/tRMZuR4ZaXwA1SfcFo75Psrtwl/A861x/9JCdpKjDFqa+1 NtFFnKvpdZ4MLza7EwCm3DrYwT07mZw7xBCw6ClmaADqbIXQCtmRavO16S2HDPRl o8b5WSDScdLe3OUXbtPp0GOagCzEmWezDSYBafVTQLYIrltjTJFr1JLolIMrZfak avKj9tchBW9Q8w+JXFdoztU04C4A/JwSSbz1nmPIsn+eS4QFD9Q= -----END CERTIFICATE-----Generated at Tue May 12 22:39:57 2026 by rpki-client