$ rpki-client -vvvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: JRnyiIjJWhuiVY8O129OvJX9RcZKLxZvsfURMtnkcw0= Subject key identifier: 13:19:BC:10:D1:3B:4B:2F:EC:82:0A:48:FA:96:74:78:BE:21:F6:B6 Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 6FBE11E1D7D168B6D725D27AA02329ED447176EF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: FC Signing time: Sun 08 Nov 2026 23:45:07 +0000 Manifest this update: Sun 08 Nov 2026 23:40:07 +0000 Manifest next update: Tue 10 Nov 2026 00:45:07 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: dLMsBTfjfJMNcl1JQuIHwPgRV0qgcWfhI/rpT7QA48E=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Nov 2026 00:45:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:be:11:e1:d7:d1:68:b6:d7:25:d2:7a:a0:23:29:ed:44:71:76:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Nov 8 23:40:07 2026 GMT Not After : Nov 10 00:45:07 2026 GMT Subject: CN=1319BC10D13B4B2FEC820A48FA967478BE21F6B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:43:98:2e:06:96:8d:11:d6:e6:8d:a9:f9:91: 07:d0:b4:a0:c8:0d:86:0b:9f:28:fd:13:45:b7:0c: a9:23:00:04:09:3f:4d:7c:5e:2f:92:f7:5f:92:da: a1:22:8d:c3:eb:8c:fc:45:e7:6b:c7:0a:82:63:df: 7c:43:20:c5:49:ed:7b:2a:f1:52:92:7c:68:1c:17: bf:5d:28:7b:1b:29:1b:13:b5:e3:c6:43:f8:fe:b8: 9f:10:a6:d2:31:4c:18:fe:9f:b9:1a:34:66:86:af: e6:12:33:75:12:a4:0e:c2:4f:17:36:2e:d9:d5:d7: b6:82:ba:b4:3b:8b:1a:56:2c:7a:c8:5e:82:b1:2b: cc:98:91:f0:7d:71:13:af:76:a3:88:5e:b1:2f:32: 3c:89:a1:f8:dc:6c:03:91:43:a3:2d:c4:3f:eb:f6: 18:a2:0f:fc:f2:65:6b:b1:b8:fa:e6:f3:a1:05:2f: ca:01:18:f9:1a:b0:37:cd:1d:63:cf:40:b6:51:0c: 66:bb:d1:4e:2e:18:84:3c:e7:58:e1:3d:d1:7a:d7: b5:5b:01:ff:6f:1c:8f:3a:7b:cc:25:9a:0b:e4:77: b5:de:62:58:7b:dd:82:9e:6d:e3:8d:dc:64:28:1b: e7:45:3d:75:6e:e2:8f:a2:9e:a3:39:03:c3:3f:ab: cc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:19:BC:10:D1:3B:4B:2F:EC:82:0A:48:FA:96:74:78:BE:21:F6:B6 X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:51:8f:53:e5:48:b3:30:bf:80:b6:d1:39:48:84:c8:61:92: 73:a8:80:04:ec:3a:ac:39:79:4f:fe:88:03:b9:f6:11:3e:f8: a3:79:12:0e:93:98:82:90:9d:08:79:27:e4:1a:a4:22:32:f4: d0:b4:a7:9c:5a:41:11:a0:e6:9d:ad:5d:b8:bd:7a:7b:d3:b5: 1a:c3:0c:5b:1a:7b:13:cf:88:3d:27:a9:c7:19:3e:6d:94:0b: bb:bf:cc:45:ac:e3:bf:87:31:12:ee:c9:b5:f3:9c:e4:6b:1a: 58:ce:c3:49:08:82:64:7f:b9:2b:05:5f:65:9c:ea:56:d3:e4: 2b:68:2b:e7:9f:a9:8e:3b:78:d2:ed:69:ca:55:80:97:c3:86: 2b:04:b4:d4:73:52:19:19:8d:23:c9:3a:bd:14:87:0d:2b:6a: 2b:c8:75:bf:a3:1d:39:0d:13:b3:46:53:4b:5d:74:26:c0:cf: 0c:76:17:0c:42:de:ee:d1:8e:b6:19:b9:56:70:f0:45:1c:9b: 40:2f:a8:e2:b8:fb:c3:c5:9b:2a:f6:f5:4b:69:41:9f:98:1c: 1a:3b:98:7b:5f:bb:f9:46:c3:76:e1:1f:04:4a:18:31:16:a1: 9d:70:91:41:bc:16:98:07:dc:81:9a:3c:e1:19:89:64:2e:42: 4d:c2:ae:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb74R4dfRaLbXJdJ6oCMp7URxdu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjExMDgyMzQwMDdaFw0yNjExMTAwMDQ1MDdaMDMxMTAvBgNV BAMTKDEzMTlCQzEwRDEzQjRCMkZFQzgyMEE0OEZBOTY3NDc4QkUyMUY2QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQ5guBpaNEdbmjan5kQfQtKDI DYYLnyj9E0W3DKkjAAQJP018Xi+S91+S2qEijcPrjPxF52vHCoJj33xDIMVJ7Xsq 8VKSfGgcF79dKHsbKRsTtePGQ/j+uJ8QptIxTBj+n7kaNGaGr+YSM3USpA7CTxc2 LtnV17aCurQ7ixpWLHrIXoKxK8yYkfB9cROvdqOIXrEvMjyJofjcbAORQ6MtxD/r 9hiiD/zyZWuxuPrm86EFL8oBGPkasDfNHWPPQLZRDGa70U4uGIQ851jhPdF617Vb Af9vHI86e8wlmgvkd7XeYlh73YKebeON3GQoG+dFPXVu4o+inqM5A8M/q8xjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUExm8ENE7Sy/sggpI+pZ0eL4h9rYwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpRj1PlSLMwv4C20TlIhMhhknOogATsOqw5 eU/+iAO59hE++KN5Eg6TmIKQnQh5J+QapCIy9NC0p5xaQRGg5p2tXbi9envTtRrD DFsaexPPiD0nqccZPm2UC7u/zEWs47+HMRLuybXznORrGljOw0kIgmR/uSsFX2Wc 6lbT5CtoK+efqY47eNLtacpVgJfDhisEtNRzUhkZjSPJOr0Uhw0raivIdb+jHTkN E7NGU0tddCbAzwx2FwxC3u7RjrYZuVZw8EUcm0AvqOK4+8PFmyr29UtpQZ+YHBo7 mHtfu/lGw3bhHwRKGDEWoZ1wkUG8FpgH3IGaPOEZiWQuQk3CrnY= -----END CERTIFICATE-----Generated at Mon Nov 9 17:21:11 2026 by rpki-client