$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: wsv/0sdHnqVqB+5rIIwcPQZHO1BZWStcsAOU2SirD7s= Subject key identifier: 62:F1:5B:84:79:43:E5:6F:D2:3E:95:D3:E3:47:94:78:B8:68:6F:89 Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 376BEF766D26A7A765B5CEEDFCE19857F40D19E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: 0101 Signing time: Mon 09 Nov 2026 22:49:16 +0000 Manifest this update: Mon 09 Nov 2026 22:44:16 +0000 Manifest next update: Tue 10 Nov 2026 23:58:16 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: tn9scJK7iQ26HsJhKn0kbEw1OcyzwhqdrvhD+oR2Kyk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 23:58:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:6b:ef:76:6d:26:a7:a7:65:b5:ce:ed:fc:e1:98:57:f4:0d:19:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Nov 9 22:44:16 2026 GMT Not After : Nov 10 23:58:16 2026 GMT Subject: CN=62F15B847943E56FD23E95D3E3479478B8686F89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:23:a4:e1:09:1b:c1:39:79:2b:de:f1:6c: 17:60:ef:0e:8d:07:93:96:ab:31:b4:f5:35:fc:d1: 57:b4:5a:8a:4f:c0:16:22:49:0d:c6:55:66:f1:f0: 35:88:8f:6d:88:d4:d0:15:96:66:ff:5d:81:51:89: 50:27:09:72:40:9e:62:a2:46:a0:b4:43:e2:c3:65: 24:d7:33:91:42:89:1c:9e:e7:54:13:67:fe:df:b3: ce:e2:f4:12:e2:1c:43:d2:b2:6f:7c:31:ac:c2:73: b2:b4:f7:ce:24:9a:56:50:4c:17:11:fe:52:fa:0d: e8:96:3e:a8:63:37:87:43:d4:52:9c:fd:2f:e6:5d: d3:dd:5d:5f:1a:c5:e8:0e:db:41:af:62:b2:10:71: 4a:b8:af:c1:ac:a5:a7:5a:d6:80:d1:7e:f9:21:41: aa:30:c5:7d:34:4f:53:ce:b1:96:b5:21:4d:e0:df: cd:02:a5:c9:a9:59:87:2e:83:24:5e:20:bf:5b:42: 20:a5:d1:bc:93:d9:b3:34:c1:d1:8f:7f:83:a5:a1: f8:db:05:25:af:34:22:3d:fc:3f:d0:28:89:8e:94: 0d:9b:9d:43:dd:13:c1:90:3a:f9:cc:69:42:f1:2f: ef:1c:2c:19:60:5e:e8:be:b2:f9:73:fa:d8:1e:5e: 74:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F1:5B:84:79:43:E5:6F:D2:3E:95:D3:E3:47:94:78:B8:68:6F:89 X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:ac:40:83:24:e1:4d:a9:80:dd:60:92:5a:9e:f7:84:8d:15: bb:33:b1:3c:27:c2:8a:ee:b4:bd:e2:4a:91:29:8f:f9:b4:27: 44:3b:9f:63:2a:a7:22:1b:b3:b9:c1:df:2e:a9:18:84:41:b8: 79:95:e1:cc:dc:1b:ad:6f:49:d9:3a:b9:e3:c7:7a:62:d4:ef: 3e:08:74:a3:14:39:7b:d0:b2:17:bc:2c:e7:29:8f:7d:bc:b7: 21:7f:25:cc:4a:de:06:ed:d6:69:4f:39:31:bc:07:39:e5:fc: 98:1b:db:0f:96:fb:6c:db:80:92:14:b7:fe:d1:0a:39:39:96: 99:5a:41:12:41:af:c3:b6:00:8f:66:0d:7f:27:a1:31:b6:29: 0d:c7:48:72:e6:56:0d:96:52:f1:5b:4c:bf:80:d4:01:6c:ea: 00:ee:c3:4b:c7:d5:6c:46:a9:cc:d2:e0:74:ae:c7:e0:62:9e: f1:78:eb:9c:7e:26:7d:91:91:ea:17:72:89:70:94:0c:cc:76: 48:4b:0f:c0:e0:ce:d4:da:a1:8b:d8:79:26:fe:6a:26:2a:67: 7d:c3:25:33:7a:49:12:dc:0b:5f:2c:53:bb:f9:3b:54:2e:2b: 76:83:ac:f7:c1:85:01:d1:9c:41:4a:dc:4a:8b:1c:69:84:9d: 7d:76:6c:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN2vvdm0mp6dltc7t/OGYV/QNGeIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjExMDkyMjQ0MTZaFw0yNjExMTAyMzU4MTZaMDMxMTAvBgNV BAMTKDYyRjE1Qjg0Nzk0M0U1NkZEMjNFOTVEM0UzNDc5NDc4Qjg2ODZGODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIHyOk4QkbwTl5K97xbBdg7w6N B5OWqzG09TX80Ve0WopPwBYiSQ3GVWbx8DWIj22I1NAVlmb/XYFRiVAnCXJAnmKi RqC0Q+LDZSTXM5FCiRye51QTZ/7fs87i9BLiHEPSsm98MazCc7K0984kmlZQTBcR /lL6DeiWPqhjN4dD1FKc/S/mXdPdXV8axegO20GvYrIQcUq4r8Gspada1oDRfvkh QaowxX00T1POsZa1IU3g380CpcmpWYcugyReIL9bQiCl0byT2bM0wdGPf4Olofjb BSWvNCI9/D/QKImOlA2bnUPdE8GQOvnMaULxL+8cLBlgXui+svlz+tgeXnQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYvFbhHlD5W/SPpXT40eUeLhob4kwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2sQIMk4U2pgN1gklqe94SNFbszsTwnworu tL3iSpEpj/m0J0Q7n2MqpyIbs7nB3y6pGIRBuHmV4czcG61vSdk6uePHemLU7z4I dKMUOXvQshe8LOcpj328tyF/JcxK3gbt1mlPOTG8Bznl/Jgb2w+W+2zbgJIUt/7R Cjk5lplaQRJBr8O2AI9mDX8noTG2KQ3HSHLmVg2WUvFbTL+A1AFs6gDuw0vH1WxG qczS4HSux+BinvF465x+Jn2RkeoXcolwlAzMdkhLD8DgztTaoYvYeSb+aiYqZ33D JTN6SRLcC18sU7v5O1QuK3aDrPfBhQHRnEFK3EqLHGmEnX12bKA= -----END CERTIFICATE-----Generated at Tue Nov 10 10:16:05 2026 by rpki-client