$ rpki-client -vvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: N3Er4AzrdtpJWwn7ZvuF/O20dICwsNZ7xrlSkxI/uKQ= Subject key identifier: A0:EA:07:B2:D3:62:A8:C4:F2:40:C9:FA:AA:D9:30:87:65:81:C2:DC Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 54A525EB58B59F665C2E82DFA58292BB93926E79 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: 3C Signing time: Tue 16 Jun 2026 23:37:42 +0000 Manifest this update: Tue 16 Jun 2026 23:32:42 +0000 Manifest next update: Thu 18 Jun 2026 03:29:42 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: 82pj6yBh7FZlNCCTmFbSlNxTAdd12nkGm7XxugIXKt8=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Jun 2026 03:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a5:25:eb:58:b5:9f:66:5c:2e:82:df:a5:82:92:bb:93:92:6e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Jun 16 23:32:42 2026 GMT Not After : Jun 18 03:29:42 2026 GMT Subject: CN=A0EA07B2D362A8C4F240C9FAAAD930876581C2DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:d9:14:42:68:3a:64:1d:0c:28:35:05:8e:f7: 79:fd:76:f6:92:f8:f2:10:e2:e5:23:eb:92:8d:1f: ec:1f:34:9c:bb:88:55:86:55:23:95:79:62:a1:61: d4:34:b4:de:5a:b8:79:2e:5c:1e:92:bd:07:4c:ca: 56:65:ee:9f:d7:da:a4:79:bd:30:31:96:fd:06:fd: c2:0a:dc:43:0b:6b:e3:9c:44:a3:c2:55:36:9e:4d: d2:a0:1e:9a:a9:b9:7a:f3:72:18:29:1a:ff:49:cb: a0:ee:a1:47:19:63:22:25:c6:e7:34:68:97:2b:37: 92:51:88:fd:cd:24:43:65:a1:a8:f8:64:00:27:ee: 49:95:ad:3f:44:fd:f3:df:ea:61:6e:09:b3:da:cd: b2:59:a0:fd:b2:42:1c:b4:b5:56:bf:65:95:01:a9: 17:75:a6:bb:05:87:93:0a:cb:09:86:f8:04:ee:51: be:37:93:25:03:01:5f:31:f9:1b:54:8d:be:94:58: db:0d:cc:6f:28:71:de:ce:76:d6:18:89:f2:fb:5d: 36:6d:97:71:77:cb:b1:ec:a4:5b:88:37:dc:76:47: 74:98:d1:9a:b0:ef:14:30:95:b1:c7:5f:31:42:e4: b6:dd:9a:25:20:bb:ac:7d:bd:1d:00:73:dc:d6:60: 92:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:EA:07:B2:D3:62:A8:C4:F2:40:C9:FA:AA:D9:30:87:65:81:C2:DC X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:ec:d3:66:cc:2d:78:f0:ae:89:d0:fa:53:08:09:cd:a3:23: 26:06:f4:c9:9d:da:41:92:3e:c1:b2:8e:05:e5:73:71:6a:2e: 8c:60:11:aa:23:0c:0e:31:4e:be:0a:60:e7:bc:3f:aa:c5:af: ec:18:80:0e:81:85:7f:4f:7c:fa:b7:e2:e1:59:e0:bf:a0:6f: 58:fb:e4:cb:5d:b8:8d:0b:25:06:bc:d8:7e:58:fe:c5:80:1a: df:65:cf:ff:8f:21:44:8d:62:83:b1:c5:fc:80:3b:8c:3e:4f: e0:da:88:44:af:26:ac:0e:3f:ce:ea:c9:1f:c7:48:20:1f:cc: a0:14:b1:b6:8e:69:9f:cc:3d:f7:49:20:55:c2:0a:bf:94:a3: c5:30:f9:fc:03:a2:c9:80:3f:63:9b:df:6f:fc:8a:e8:56:b2: 37:09:8f:19:96:34:ef:f3:1b:cf:67:e5:8b:47:b5:d7:d4:d0: 2f:e6:bf:8b:86:95:99:dc:5c:2f:2b:95:e6:ee:ab:86:d2:62: 9f:d5:93:c9:ea:33:fb:16:bd:a1:3f:ee:b1:e5:17:b5:53:cc: c0:59:4f:e1:3b:9d:8b:5e:90:63:a2:d5:2a:7c:2a:12:cc:29: 7f:d7:1e:6f:7e:b5:56:ae:4e:41:c5:26:42:7b:0b:bb:df:1f: 56:d0:c5:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKUl61i1n2ZcLoLfpYKSu5OSbnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA2MTYyMzMyNDJaFw0yNjA2MTgwMzI5NDJaMDMxMTAvBgNV BAMTKEEwRUEwN0IyRDM2MkE4QzRGMjQwQzlGQUFBRDkzMDg3NjU4MUMyREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDc2RRCaDpkHQwoNQWO93n9dvaS +PIQ4uUj65KNH+wfNJy7iFWGVSOVeWKhYdQ0tN5auHkuXB6SvQdMylZl7p/X2qR5 vTAxlv0G/cIK3EMLa+OcRKPCVTaeTdKgHpqpuXrzchgpGv9Jy6DuoUcZYyIlxuc0 aJcrN5JRiP3NJENloaj4ZAAn7kmVrT9E/fPf6mFuCbPazbJZoP2yQhy0tVa/ZZUB qRd1prsFh5MKywmG+ATuUb43kyUDAV8x+RtUjb6UWNsNzG8ocd7OdtYYifL7XTZt l3F3y7HspFuIN9x2R3SY0Zqw7xQwlbHHXzFC5LbdmiUgu6x9vR0Ac9zWYJKxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoOoHstNiqMTyQMn6qtkwh2WBwtwwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIns02bMLXjwronQ+lMICc2jIyYG9Mmd2kGS PsGyjgXlc3FqLoxgEaojDA4xTr4KYOe8P6rFr+wYgA6BhX9PfPq34uFZ4L+gb1j7 5MtduI0LJQa82H5Y/sWAGt9lz/+PIUSNYoOxxfyAO4w+T+DaiESvJqwOP87qyR/H SCAfzKAUsbaOaZ/MPfdJIFXCCr+Uo8Uw+fwDosmAP2Ob32/8iuhWsjcJjxmWNO/z G89n5YtHtdfU0C/mv4uGlZncXC8rlebuq4bSYp/Vk8nqM/sWvaE/7rHlF7VTzMBZ T+E7nYtekGOi1Sp8KhLMKX/XHm9+tVauTkHFJkJ7C7vfH1bQxd4= -----END CERTIFICATE-----Generated at Wed Jun 17 09:19:32 2026 by rpki-client