$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: Paac0raoVnXU/ftgBs5pkOQV5GXpFIES4J4anKM8+9k= Subject key identifier: 17:97:4A:0E:F5:9E:5B:4F:C2:AE:93:CE:D9:95:A0:0D:94:AA:1A:A6 Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 5F83B93465DFDF5E61C56080F2D44B790D6B4814 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: BA Signing time: Sun 20 Sep 2026 07:56:54 +0000 Manifest this update: Sun 20 Sep 2026 07:51:54 +0000 Manifest next update: Mon 21 Sep 2026 10:05:54 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: pzWzp+iDY4ovr1be/F7dLD2zexe9Z2I9OCe4MwWAGUQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Sep 2026 10:05:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:83:b9:34:65:df:df:5e:61:c5:60:80:f2:d4:4b:79:0d:6b:48:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Sep 20 07:51:54 2026 GMT Not After : Sep 21 10:05:54 2026 GMT Subject: CN=17974A0EF59E5B4FC2AE93CED995A00D94AA1AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fa:83:a8:85:20:40:6d:42:23:7c:73:06:2e: 00:60:b0:5d:a7:dd:52:e6:45:ad:c2:0e:b1:4d:92: 38:b1:75:f5:1c:0a:bb:06:95:fe:81:79:8c:05:fb: 14:a0:b1:12:18:65:25:46:eb:45:d6:f2:58:d5:0e: 55:e3:57:19:8a:0f:a6:bd:57:da:52:eb:9f:de:9b: 5b:5e:6b:fb:d2:8f:4f:2a:15:b2:95:f3:e9:8d:6b: 3b:e8:bd:41:ea:6d:91:93:7f:e9:a7:8a:fb:97:a8: 76:59:d5:ea:77:36:75:26:54:d7:62:82:03:5c:c9: 67:91:a0:a0:2e:f6:1f:d7:e9:92:df:d9:40:7e:be: 76:e8:a3:66:66:26:28:8e:13:c0:70:84:c0:13:83: 03:4f:a3:98:37:c9:fa:4e:53:26:31:4c:4f:64:03: 5e:20:6d:6f:f6:79:0f:8c:4f:dc:44:17:b5:61:05: eb:eb:1c:3a:af:91:6f:60:5a:08:68:c9:a0:56:7b: 56:4c:66:1c:1c:6b:7a:ac:7d:a7:9f:01:13:52:a4: 82:9e:a0:ca:37:85:b7:02:85:d1:5f:6f:67:b4:b2: 8d:19:bd:dc:04:12:07:58:b5:cd:64:e3:9f:95:78: bb:c6:fc:0a:bf:c1:5a:ae:39:b5:02:4f:f0:8f:29: 03:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:97:4A:0E:F5:9E:5B:4F:C2:AE:93:CE:D9:95:A0:0D:94:AA:1A:A6 X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:4d:f4:c8:2d:96:40:c2:c2:2d:ce:5a:58:00:8f:3e:7f:38: 0d:a3:d7:f1:88:d1:46:cf:97:8b:13:0a:2a:bb:2a:98:aa:90: 73:66:bf:a1:b2:a7:ce:55:2e:22:15:12:e8:47:8f:27:f5:e3: 66:fb:4d:76:06:50:ab:4e:b3:7d:02:97:f9:ee:2e:c8:51:74: 5a:70:cf:9b:6e:78:39:fc:48:96:47:97:0f:4d:8f:09:68:11: f0:d8:1b:79:04:e4:92:12:53:75:3d:ed:f1:d5:28:d2:f2:98: 1f:14:d0:6a:0f:7f:a9:da:13:56:b0:00:24:2c:67:58:e4:ad: 2a:bc:0a:4b:5d:2b:e3:b0:72:fa:3e:eb:3c:5d:13:02:de:60: 23:0b:f5:c7:fb:8c:c7:4e:f3:9f:a1:73:22:cc:ba:46:49:7d: ce:3a:12:35:21:e9:14:96:46:c1:4e:2c:58:5e:0e:cc:70:30: 73:00:fd:ad:61:16:68:d3:3d:e3:cc:1f:6c:f0:60:fc:70:bd: 12:e5:55:2e:7a:b1:75:69:51:e3:c7:cc:74:7d:7d:9f:2d:1b: 30:f9:d8:fe:28:87:fe:a8:6f:65:d1:72:2f:49:09:6a:c6:9e: bc:c7:82:37:32:65:98:bb:b4:0c:62:13:f9:be:05:bc:14:31: 16:c2:51:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4O5NGXf315hxWCA8tRLeQ1rSBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA5MjAwNzUxNTRaFw0yNjA5MjExMDA1NTRaMDMxMTAvBgNV BAMTKDE3OTc0QTBFRjU5RTVCNEZDMkFFOTNDRUQ5OTVBMDBEOTRBQTFBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW+oOohSBAbUIjfHMGLgBgsF2n 3VLmRa3CDrFNkjixdfUcCrsGlf6BeYwF+xSgsRIYZSVG60XW8ljVDlXjVxmKD6a9 V9pS65/em1tea/vSj08qFbKV8+mNazvovUHqbZGTf+mnivuXqHZZ1ep3NnUmVNdi ggNcyWeRoKAu9h/X6ZLf2UB+vnboo2ZmJiiOE8BwhMATgwNPo5g3yfpOUyYxTE9k A14gbW/2eQ+MT9xEF7VhBevrHDqvkW9gWghoyaBWe1ZMZhwca3qsfaefARNSpIKe oMo3hbcChdFfb2e0so0ZvdwEEgdYtc1k45+VeLvG/Aq/wVquObUCT/CPKQMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF5dKDvWeW0/CrpPO2ZWgDZSqGqYwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK1N9MgtlkDCwi3OWlgAjz5/OA2j1/GI0UbP l4sTCiq7KpiqkHNmv6Gyp85VLiIVEuhHjyf142b7TXYGUKtOs30Cl/nuLshRdFpw z5tueDn8SJZHlw9NjwloEfDYG3kE5JISU3U97fHVKNLymB8U0GoPf6naE1awACQs Z1jkrSq8CktdK+Owcvo+6zxdEwLeYCML9cf7jMdO85+hcyLMukZJfc46EjUh6RSW RsFOLFheDsxwMHMA/a1hFmjTPePMH2zwYPxwvRLlVS56sXVpUePHzHR9fZ8tGzD5 2P4oh/6ob2XRci9JCWrGnrzHgjcyZZi7tAxiE/m+BbwUMRbCUWE= -----END CERTIFICATE-----Generated at Mon Sep 21 01:10:09 2026 by rpki-client