$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: a9lpHA4J2nwMXvLR5fIIoErC0f2u3aDw2tdD+QGxVWs= Subject key identifier: A1:87:ED:5E:EF:83:0E:85:0A:85:1B:2C:38:2B:10:C9:39:84:52:C1 Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 287E70792F6EEB7B63E6711BC376A1D54D2B307F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: C1 Signing time: Fri 25 Sep 2026 12:15:45 +0000 Manifest this update: Fri 25 Sep 2026 12:10:45 +0000 Manifest next update: Sat 26 Sep 2026 16:14:45 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: A5fJfr5YOJ3zZtLF3nT4lbhO6A1yBeCKSv3cHe1p8VY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Sep 2026 16:14:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:7e:70:79:2f:6e:eb:7b:63:e6:71:1b:c3:76:a1:d5:4d:2b:30:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Sep 25 12:10:45 2026 GMT Not After : Sep 26 16:14:45 2026 GMT Subject: CN=A187ED5EEF830E850A851B2C382B10C9398452C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:17:ea:ee:52:68:41:14:3c:01:5b:d7:1f:1b: aa:2c:ae:d4:56:cf:ca:0c:d6:3e:d1:47:d9:3c:ed: aa:68:e7:4a:46:33:19:04:c9:bb:18:14:25:9f:57: c1:52:ab:24:92:50:73:67:9f:b2:4b:06:9f:82:23: b6:9b:6a:39:e3:5c:92:37:27:5d:c0:f6:00:a5:1f: 7c:0f:a7:aa:77:1d:57:b8:28:65:b9:8b:fe:18:fe: 52:cb:84:a7:7f:2b:3a:01:ae:da:af:20:ac:0c:61: 95:d1:08:3e:2e:61:32:a1:45:0c:16:2d:3a:22:f8: 32:bb:c1:de:bd:d1:d4:5f:e5:d8:ab:26:54:da:a0: b1:e8:dc:8c:a1:c0:c5:fd:ea:70:f8:07:f5:98:d5: 84:2b:44:54:da:68:6e:bc:08:e3:8a:1d:13:b8:26: b6:22:ca:3c:ba:bf:d0:44:09:29:43:98:4b:25:50: a8:38:ed:10:9c:2a:71:e3:0d:e6:c0:32:4c:1f:91: 41:2a:7d:ac:55:7c:ba:80:71:05:d2:a5:4a:69:bf: b2:6e:af:de:e4:36:be:d5:00:d1:59:f4:ed:6b:69: 7d:3a:85:7a:0f:03:fd:69:45:29:ff:f6:e6:4e:72: c3:7d:ce:5a:a3:2b:fe:5d:b2:8f:e8:16:2c:0b:f9: 5f:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:87:ED:5E:EF:83:0E:85:0A:85:1B:2C:38:2B:10:C9:39:84:52:C1 X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:26:f7:ce:fe:09:f4:35:71:c0:da:c9:c1:88:5b:f2:ad:c2: 32:00:37:57:a4:58:7e:94:b9:c9:e0:67:ff:7f:e5:95:cb:e1: ef:c4:9d:de:93:b2:5f:a5:b7:c2:57:92:b6:36:82:8f:0c:05: 0f:90:94:b1:84:a2:82:e8:61:57:2c:cc:43:85:3c:e9:2f:bb: 14:32:43:97:b9:61:39:b0:6a:d1:14:40:8d:e0:d5:b6:ff:f5: b1:2c:d5:a3:18:dc:cd:47:1d:34:8c:ce:e8:4a:f7:d4:55:ac: 11:e0:fb:ac:35:73:e9:b2:60:1c:f2:aa:a3:3f:07:0b:67:ab: f7:9c:ba:11:49:24:43:09:bb:fa:25:c3:18:0c:15:55:34:7e: bf:62:7a:5c:70:7d:84:17:35:db:59:31:e3:3c:66:75:da:28: 55:60:ca:d3:26:cf:c1:c2:3b:57:dd:57:a8:f7:f6:ac:d8:a9: a3:d3:a5:ee:95:3d:dc:02:ac:ab:43:e7:2c:88:ac:db:1f:e2: 4f:82:e8:f2:03:ae:29:64:a2:e0:31:3a:d5:74:12:c0:02:fe: 4e:03:b5:b5:97:d7:b3:3a:5e:0e:01:32:0e:35:8a:11:35:a0: 49:33:dd:9c:0a:eb:03:d8:e5:a4:52:42:c3:63:9e:ee:92:57: e0:61:b0:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKH5weS9u63tj5nEbw3ah1U0rMH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA5MjUxMjEwNDVaFw0yNjA5MjYxNjE0NDVaMDMxMTAvBgNV BAMTKEExODdFRDVFRUY4MzBFODUwQTg1MUIyQzM4MkIxMEM5Mzk4NDUyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvF+ruUmhBFDwBW9cfG6osrtRW z8oM1j7RR9k87apo50pGMxkEybsYFCWfV8FSqySSUHNnn7JLBp+CI7abajnjXJI3 J13A9gClH3wPp6p3HVe4KGW5i/4Y/lLLhKd/KzoBrtqvIKwMYZXRCD4uYTKhRQwW LToi+DK7wd690dRf5dirJlTaoLHo3IyhwMX96nD4B/WY1YQrRFTaaG68COOKHRO4 JrYiyjy6v9BECSlDmEslUKg47RCcKnHjDebAMkwfkUEqfaxVfLqAcQXSpUppv7Ju r97kNr7VANFZ9O1raX06hXoPA/1pRSn/9uZOcsN9zlqjK/5dso/oFiwL+V9pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoYftXu+DDoUKhRssOCsQyTmEUsEwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE0m987+CfQ1ccDaycGIW/KtwjIAN1ekWH6U ucngZ/9/5ZXL4e/End6Tsl+lt8JXkrY2go8MBQ+QlLGEooLoYVcszEOFPOkvuxQy Q5e5YTmwatEUQI3g1bb/9bEs1aMY3M1HHTSMzuhK99RVrBHg+6w1c+myYBzyqqM/ Bwtnq/ecuhFJJEMJu/olwxgMFVU0fr9ielxwfYQXNdtZMeM8ZnXaKFVgytMmz8HC O1fdV6j39qzYqaPTpe6VPdwCrKtD5yyIrNsf4k+C6PIDrilkouAxOtV0EsAC/k4D tbWX17M6Xg4BMg41ihE1oEkz3ZwK6wPY5aRSQsNjnu6SV+BhsCw= -----END CERTIFICATE-----Generated at Fri Sep 25 23:37:56 2026 by rpki-client