$ rpki-client -vvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: jF+jb1ZqTi9cONr/eu+J385H83feCCgMKy2PK+05eo0= Subject key identifier: AC:5C:88:60:D2:7A:37:DF:D1:49:B0:F3:D3:0B:16:31:46:A9:73:AA Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 0EE4E6B9AA36B7B3DD7232BAB01F3F5C107F94E8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: 6C Signing time: Thu 23 Jul 2026 18:07:13 +0000 Manifest this update: Thu 23 Jul 2026 18:02:13 +0000 Manifest next update: Fri 24 Jul 2026 18:59:13 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: X57v7+jJeOxY5x7PbETpv/z7N+nU9ABnPxygM1F/wJA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Jul 2026 18:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:e4:e6:b9:aa:36:b7:b3:dd:72:32:ba:b0:1f:3f:5c:10:7f:94:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Jul 23 18:02:13 2026 GMT Not After : Jul 24 18:59:13 2026 GMT Subject: CN=AC5C8860D27A37DFD149B0F3D30B163146A973AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:05:6c:dc:0a:05:e5:b2:1f:bc:26:80:59:60: 90:ef:3c:87:3a:0a:d0:b5:0a:f9:cd:6a:1d:b0:e8: be:6b:86:9b:c9:37:fb:e0:ae:b2:08:67:02:7f:54: a3:3e:d6:81:d2:38:0a:e4:7d:f2:e9:d9:0a:95:11: 33:33:9b:4c:5c:59:9b:f6:fa:e1:20:cd:5c:fe:bd: f9:49:f8:e8:ef:dc:2b:76:0f:ad:01:06:9d:70:02: 29:d7:c4:54:77:ef:47:3e:20:a5:75:e3:7c:11:4a: 27:27:de:19:db:f1:53:33:63:a7:19:96:b6:58:2c: fe:c0:8a:63:90:f2:8e:3a:b7:49:b1:06:3e:74:da: 3e:fd:21:3b:30:fd:2f:1c:fd:55:08:24:27:96:2e: 26:72:33:a2:4f:54:5f:7b:e4:cb:3e:52:2d:19:cb: 19:87:12:55:2d:46:8a:a8:b5:15:f4:e1:a4:d5:d4: bb:e9:26:ca:ae:9d:d3:b8:7f:47:6a:e0:9f:b6:0e: 94:31:2b:88:7a:d2:36:bd:49:4b:df:94:be:d4:3e: 52:a5:88:6a:a6:24:ee:f9:6e:71:4b:16:f4:1c:47: 6a:9b:13:61:ea:93:9a:53:db:91:ba:62:87:6c:e4: 09:9d:18:af:7d:e7:b0:9c:95:0f:cf:47:e1:cb:43: 8c:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:5C:88:60:D2:7A:37:DF:D1:49:B0:F3:D3:0B:16:31:46:A9:73:AA X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c7:d2:92:3a:af:df:e2:32:7b:aa:2b:cb:30:14:38:89:4b: 1a:92:16:00:3c:9e:d0:28:8b:6d:9b:c2:e8:01:3d:60:40:76: fb:c4:47:b2:aa:a6:32:28:ce:9c:26:fd:cd:40:d6:fc:79:70: 4d:ed:28:50:7d:7f:84:5f:62:a7:ed:62:cf:15:ba:a3:59:84: d1:a2:13:8a:cc:2d:da:59:1f:37:f3:94:7d:66:66:43:6a:0a: d9:dd:af:ac:5e:02:78:4b:10:43:2b:fb:f1:ce:30:a1:e2:d6: 41:d3:92:a2:d7:78:dc:d9:29:12:86:c5:d9:c8:83:8e:65:52: 12:05:90:79:54:21:b2:d2:58:80:bb:57:2f:07:73:48:bf:75: 86:03:81:d7:b5:cd:d9:07:74:8e:dc:ae:76:34:53:27:e6:52: 09:e3:e2:89:17:9e:da:fb:00:ed:32:e5:60:14:e6:d1:6b:fa: 02:71:3d:94:45:46:50:6b:66:0b:ec:99:9e:7a:90:4e:59:e8: f8:04:d2:a3:b8:78:9c:ef:92:d9:62:92:28:b1:cb:89:6b:07: 4c:bb:89:4d:9c:90:e4:3d:20:6a:90:7b:af:21:84:10:44:73: 76:f0:cd:21:12:dc:8b:9c:86:e3:7b:76:ce:95:bc:3e:99:4f: 0a:79:66:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDuTmuao2t7PdcjK6sB8/XBB/lOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA3MjMxODAyMTNaFw0yNjA3MjQxODU5MTNaMDMxMTAvBgNV BAMTKEFDNUM4ODYwRDI3QTM3REZEMTQ5QjBGM0QzMEIxNjMxNDZBOTczQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwBWzcCgXlsh+8JoBZYJDvPIc6 CtC1CvnNah2w6L5rhpvJN/vgrrIIZwJ/VKM+1oHSOArkffLp2QqVETMzm0xcWZv2 +uEgzVz+vflJ+Ojv3Ct2D60BBp1wAinXxFR370c+IKV143wRSicn3hnb8VMzY6cZ lrZYLP7AimOQ8o46t0mxBj502j79ITsw/S8c/VUIJCeWLiZyM6JPVF975Ms+Ui0Z yxmHElUtRoqotRX04aTV1LvpJsqundO4f0dq4J+2DpQxK4h60ja9SUvflL7UPlKl iGqmJO75bnFLFvQcR2qbE2Hqk5pT25G6Yods5AmdGK9957CclQ/PR+HLQ4xfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFyIYNJ6N9/RSbDz0wsWMUapc6owHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACLH0pI6r9/iMnuqK8swFDiJSxqSFgA8ntAo i22bwugBPWBAdvvER7KqpjIozpwm/c1A1vx5cE3tKFB9f4RfYqftYs8VuqNZhNGi E4rMLdpZHzfzlH1mZkNqCtndr6xeAnhLEEMr+/HOMKHi1kHTkqLXeNzZKRKGxdnI g45lUhIFkHlUIbLSWIC7Vy8Hc0i/dYYDgde1zdkHdI7crnY0UyfmUgnj4okXntr7 AO0y5WAU5tFr+gJxPZRFRlBrZgvsmZ56kE5Z6PgE0qO4eJzvktlikiixy4lrB0y7 iU2ckOQ9IGqQe68hhBBEc3bwzSES3IuchuN7ds6VvD6ZTwp5ZtM= -----END CERTIFICATE-----Generated at Fri Jul 24 01:11:11 2026 by rpki-client