$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: 86JhRxPuFdPxrRiqJq5zNrxqArfHWF9JadD+aobzlPs= Subject key identifier: 72:CD:FF:9A:01:F6:A0:BF:CD:20:4F:7A:00:AF:B4:7D:E2:C8:D7:1C Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 5ADAD739C84E699A0E3F395D7E223A447C278869 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: 3E Signing time: Wed 17 Jun 2026 10:05:11 +0000 Manifest this update: Wed 17 Jun 2026 10:00:11 +0000 Manifest next update: Thu 18 Jun 2026 12:52:11 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: ilhlli3vW6cubVJyxtVbbG9lRiV+76TBw0CXm1JWIn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:da:d7:39:c8:4e:69:9a:0e:3f:39:5d:7e:22:3a:44:7c:27:88:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Jun 17 10:00:11 2026 GMT Not After : Jun 18 12:52:11 2026 GMT Subject: CN=72CDFF9A01F6A0BFCD204F7A00AFB47DE2C8D71C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:75:a7:ed:57:ee:36:72:94:1a:b1:d6:4a:85: 61:52:eb:39:06:1b:67:18:4e:53:b5:8f:d7:58:12: 41:ad:ca:6b:2f:44:7f:2f:bb:35:d3:c4:5d:b8:6e: c9:40:01:a9:41:87:2a:63:b7:92:ab:13:04:83:30: 2b:e0:f2:6b:96:13:4f:37:1b:17:31:c4:da:5c:f0: 4b:10:7d:dd:57:be:bd:a9:45:9a:08:55:fe:62:03: 76:81:13:36:41:3e:9e:46:bb:75:21:b4:c0:45:44: c1:36:ca:b7:5f:3d:c2:d5:b9:21:a4:cf:5b:e7:49: 3b:84:01:2d:56:33:08:9e:8e:8e:a3:80:f2:89:4c: 13:7d:82:1d:7e:49:e0:1e:d7:2c:6a:a2:c7:1d:6a: f8:19:7c:cb:98:ea:3a:9f:78:e8:a1:87:ef:89:18: d4:61:a6:86:d1:55:d6:bd:9d:dd:0d:e0:e4:ca:8e: 96:fa:2d:b6:f3:1e:69:b0:54:07:df:0a:1d:c9:34: 3c:38:aa:49:0b:87:3b:8a:70:32:da:5f:af:e1:93: 3c:5e:eb:c1:af:eb:a0:b0:73:a0:a3:bd:fc:4b:e0: 18:a7:76:04:5b:23:6d:eb:00:9a:b9:02:98:19:2b: 38:38:0a:1d:cd:22:a4:3f:93:01:31:7c:34:93:fe: ec:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:CD:FF:9A:01:F6:A0:BF:CD:20:4F:7A:00:AF:B4:7D:E2:C8:D7:1C X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:64:51:bf:3d:da:80:63:5a:20:6e:c8:94:2b:e1:60:42:be: b0:fc:86:47:03:ea:68:90:a5:22:d4:65:5b:73:dc:21:ce:6a: 92:ad:29:ba:9e:36:8a:c8:06:3d:80:ae:ed:52:db:bd:b1:7f: a5:d1:13:89:27:39:99:1f:8d:04:4b:6f:4b:9e:d7:d6:47:40: 65:dd:d8:89:98:9a:8a:44:3f:45:b1:84:a5:3f:28:77:ae:de: 85:f4:80:b4:20:1d:b6:d7:93:8a:2c:b9:53:e9:19:3d:ca:0f: 11:ad:59:8d:f3:5a:83:35:95:2d:d8:d3:08:2b:40:ae:43:b3: be:af:8f:70:8f:1e:09:11:32:d0:ce:33:69:f2:11:02:e7:c5: 33:3d:6d:af:f1:7f:82:30:1c:43:94:f6:b4:0c:35:23:cc:63: cb:17:3c:b9:d4:5b:e3:30:41:8d:88:42:0c:9e:39:d6:70:74: 2a:36:40:13:70:a6:7c:1a:10:cd:65:e8:51:2f:45:b9:8b:8a: c7:75:b3:ac:50:55:e3:ad:f0:f4:ee:29:06:5b:8d:28:b1:6f: a1:8b:7a:ab:77:b3:8a:d8:6c:01:6d:9f:c1:5b:63:d9:30:57: be:64:31:af:6b:7b:bc:9d:2a:2d:5a:dc:37:ad:e9:34:e1:cb: 65:f5:97:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWtrXOchOaZoOPzldfiI6RHwniGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA2MTcxMDAwMTFaFw0yNjA2MTgxMjUyMTFaMDMxMTAvBgNV BAMTKDcyQ0RGRjlBMDFGNkEwQkZDRDIwNEY3QTAwQUZCNDdERTJDOEQ3MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpdaftV+42cpQasdZKhWFS6zkG G2cYTlO1j9dYEkGtymsvRH8vuzXTxF24bslAAalBhypjt5KrEwSDMCvg8muWE083 GxcxxNpc8EsQfd1Xvr2pRZoIVf5iA3aBEzZBPp5Gu3UhtMBFRME2yrdfPcLVuSGk z1vnSTuEAS1WMwiejo6jgPKJTBN9gh1+SeAe1yxqoscdavgZfMuY6jqfeOihh++J GNRhpobRVda9nd0N4OTKjpb6LbbzHmmwVAffCh3JNDw4qkkLhzuKcDLaX6/hkzxe 68Gv66Cwc6CjvfxL4BindgRbI23rAJq5ApgZKzg4Ch3NIqQ/kwExfDST/ux5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcs3/mgH2oL/NIE96AK+0feLI1xwwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxkUb892oBjWiBuyJQr4WBCvrD8hkcD6miQ pSLUZVtz3CHOapKtKbqeNorIBj2Aru1S272xf6XRE4knOZkfjQRLb0ue19ZHQGXd 2ImYmopEP0WxhKU/KHeu3oX0gLQgHbbXk4osuVPpGT3KDxGtWY3zWoM1lS3Y0wgr QK5Ds76vj3CPHgkRMtDOM2nyEQLnxTM9ba/xf4IwHEOU9rQMNSPMY8sXPLnUW+Mw QY2IQgyeOdZwdCo2QBNwpnwaEM1l6FEvRbmLisd1s6xQVeOt8PTuKQZbjSixb6GL eqt3s4rYbAFtn8FbY9kwV75kMa9re7ydKi1a3Det6TThy2X1l7M= -----END CERTIFICATE-----Generated at Wed Jun 17 12:50:20 2026 by rpki-client