$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: l+qOPgR5WRZzJoXPYgT9DkTFeBOBl4AuGUBYpxHlfJI= Subject key identifier: 85:9A:80:75:E0:81:5D:28:8E:A0:D1:7A:CB:D0:95:E3:37:68:73:AC Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 5BFB937DEA92BEB625327253B987138FAC1B5BAF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: BE Signing time: Sun 20 Sep 2026 20:22:04 +0000 Manifest this update: Sun 20 Sep 2026 20:17:04 +0000 Manifest next update: Tue 22 Sep 2026 00:08:04 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: Lhwq8cYF9+RpLJ3eSqMmqIMwKTKu6UcEK+J5dZXjKA4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 17:28:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:fb:93:7d:ea:92:be:b6:25:32:72:53:b9:87:13:8f:ac:1b:5b:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Sep 20 20:17:04 2026 GMT Not After : Sep 22 00:08:04 2026 GMT Subject: CN=859A8075E0815D288EA0D17ACBD095E3376873AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:71:ae:15:dd:35:3a:92:90:04:2d:e4:17: 75:2d:4e:e7:a1:1c:05:ef:d2:8e:94:f5:dd:49:e5: a8:72:85:27:9b:74:26:a1:5d:50:8c:a5:10:83:86: e2:19:24:43:ef:d7:d5:f5:c3:50:11:71:12:52:42: 3d:c3:34:86:46:e9:43:f4:1e:74:33:f3:b5:ef:d4: 43:ea:f1:35:0f:e9:dc:dd:92:ed:15:43:4e:3d:ad: 20:35:63:bd:c2:2f:d6:20:d6:a1:96:02:e1:f1:71: 66:be:52:9e:2f:90:bd:e3:bb:29:06:2f:4e:ba:3f: 3e:8a:87:a3:c9:f5:b3:a0:a8:49:d3:f8:24:30:87: 6d:f5:5e:1c:2c:e9:f1:52:21:e7:3a:ce:c2:cb:77: 13:1c:dc:fd:da:12:5f:70:3d:4a:04:2e:96:5e:a9: 42:f4:3e:6c:b0:e1:a9:cf:d4:17:3a:15:1d:49:73: ec:2a:02:bf:94:19:84:e9:ef:44:af:eb:d6:79:aa: 25:13:1f:f6:20:a5:fe:a7:ed:55:2e:73:a4:77:fd: f6:5e:3e:24:e5:35:4a:7b:cd:f7:16:ac:83:d9:80: 0c:af:28:72:90:95:7f:9c:2e:30:00:58:e9:a0:a9: ae:27:0e:c2:2c:4f:48:40:8e:8a:2d:1c:e6:6f:ff: 11:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:9A:80:75:E0:81:5D:28:8E:A0:D1:7A:CB:D0:95:E3:37:68:73:AC X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:95:f0:44:09:83:57:37:dd:3e:a1:b5:9a:83:b0:ee:36:9a: 00:6b:e2:0b:5d:38:f2:20:48:db:09:d9:34:2c:ed:69:2e:c8: 05:c4:b0:6c:76:88:ed:b5:7c:f1:f6:98:1b:8c:c9:e5:05:25: 3c:bc:81:ed:4c:54:cc:06:ce:93:3b:6e:1f:9c:da:7b:0f:22: b1:e6:d1:9f:df:34:f0:36:35:02:c1:1c:39:54:dd:c1:aa:a7: 2d:4e:8f:a5:8b:d0:29:53:bd:5b:14:d6:20:63:dd:67:24:2a: c4:e8:c4:b4:82:77:49:a7:b6:e8:91:a2:62:2f:72:e9:4d:60: 09:95:e7:23:41:4d:c8:3c:6d:9b:03:8e:72:58:18:0c:f0:22: e1:56:a2:15:bc:a8:f2:06:e7:bc:69:95:f4:58:d5:3a:fb:3c: 0f:ed:ce:54:c1:68:ca:e0:3a:cc:6a:1f:54:69:68:eb:03:5a: b4:2f:4a:11:47:7c:13:b6:4f:9b:f1:fc:b8:49:5b:66:1a:a1: 97:98:d3:86:66:38:6b:75:89:93:5b:ef:38:93:a8:6d:d9:a2: 3b:d8:71:e2:e1:6c:d2:b5:7e:d9:48:7f:5b:36:24:f2:9c:0e: 90:be:a6:3b:1d:26:5e:1a:ad:ca:50:2d:74:bf:59:60:13:33: 77:ab:b6:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW/uTfeqSvrYlMnJTuYcTj6wbW68wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA5MjAyMDE3MDRaFw0yNjA5MjIwMDA4MDRaMDMxMTAvBgNV BAMTKDg1OUE4MDc1RTA4MTVEMjg4RUEwRDE3QUNCRDA5NUUzMzc2ODczQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSnGuFd01OpKQBC3kF3UtTueh HAXv0o6U9d1J5ahyhSebdCahXVCMpRCDhuIZJEPv19X1w1ARcRJSQj3DNIZG6UP0 HnQz87Xv1EPq8TUP6dzdku0VQ049rSA1Y73CL9Yg1qGWAuHxcWa+Up4vkL3juykG L066Pz6Kh6PJ9bOgqEnT+CQwh231Xhws6fFSIec6zsLLdxMc3P3aEl9wPUoELpZe qUL0Pmyw4anP1Bc6FR1Jc+wqAr+UGYTp70Sv69Z5qiUTH/Ygpf6n7VUuc6R3/fZe PiTlNUp7zfcWrIPZgAyvKHKQlX+cLjAAWOmgqa4nDsIsT0hAjootHOZv/xF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhZqAdeCBXSiOoNF6y9CV4zdoc6wwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH2V8EQJg1c33T6htZqDsO42mgBr4gtdOPIg SNsJ2TQs7WkuyAXEsGx2iO21fPH2mBuMyeUFJTy8ge1MVMwGzpM7bh+c2nsPIrHm 0Z/fNPA2NQLBHDlU3cGqpy1Oj6WL0ClTvVsU1iBj3WckKsToxLSCd0mntuiRomIv culNYAmV5yNBTcg8bZsDjnJYGAzwIuFWohW8qPIG57xplfRY1Tr7PA/tzlTBaMrg OsxqH1RpaOsDWrQvShFHfBO2T5vx/LhJW2YaoZeY04ZmOGt1iZNb7ziTqG3ZojvY ceLhbNK1ftlIf1s2JPKcDpC+pjsdJl4arcpQLXS/WWATM3ertuA= -----END CERTIFICATE-----Generated at Mon Sep 21 03:22:52 2026 by rpki-client