$ rpki-client -vvvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: 3xs9DC4D3izqtNLG2XYQ2ZpxKLWljFyEHUX4v8tz/mI= Subject key identifier: FC:02:05:12:D0:C7:91:15:F8:93:55:AF:14:7F:27:57:4F:63:A4:D5 Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 2E753F386E093BDCA195C73EFA409EF42A8195A4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:30:24 +0000 Manifest this update: Thu 17 Sep 2026 01:25:24 +0000 Manifest next update: Fri 18 Sep 2026 02:59:24 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: USd5D9EM0Uv6vix081jqZgg6QYSh5d5grLGITigpiZU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:59:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:75:3f:38:6e:09:3b:dc:a1:95:c7:3e:fa:40:9e:f4:2a:81:95:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Sep 17 01:25:24 2026 GMT Not After : Sep 18 02:59:24 2026 GMT Subject: CN=FC020512D0C79115F89355AF147F27574F63A4D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:20:ef:b9:0c:f2:e2:fd:4c:5b:2f:63:aa:78: bd:c5:29:64:6b:d2:a4:31:f7:5e:31:73:aa:a2:f3: e9:fe:08:6f:36:f1:1a:9d:f3:fc:3d:67:5e:ce:a5: 5f:80:17:bd:82:88:9b:71:cd:88:16:1c:dd:b0:12: e0:f0:d5:28:cc:f6:4c:20:c8:80:42:06:d1:df:df: bd:3b:bc:cb:00:dd:ec:fb:41:a9:a0:85:29:3f:72: 40:06:35:a3:6d:7e:3d:e8:db:38:43:74:70:a2:15: 6e:92:8c:e2:f1:2e:34:c0:ed:b8:d8:8b:22:90:3b: a7:70:f3:4b:55:5f:70:f8:3f:6d:40:6a:98:bb:b7: 0c:95:21:f6:e7:4c:08:b6:b0:e5:f5:58:6c:c3:4f: fa:12:d2:10:56:50:82:41:b3:d8:d4:ac:5a:b5:f4: dc:c5:a2:35:9a:8a:ea:74:ae:ae:d6:54:8a:cc:99: c9:fe:67:d6:9a:79:09:37:79:82:43:a9:03:25:70: 44:27:9c:9a:39:5f:dd:f4:af:b4:6f:60:ce:6d:68: fe:b1:8b:d6:85:45:66:fb:3a:54:71:6a:02:e6:66: e1:1e:c8:e0:ad:ab:fb:7c:03:28:7f:5a:6b:19:02: 1e:e1:13:a5:33:e1:2d:9c:64:aa:30:55:13:e6:48: d4:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:02:05:12:D0:C7:91:15:F8:93:55:AF:14:7F:27:57:4F:63:A4:D5 X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:cf:00:ee:1a:4e:cb:f4:25:1c:96:bc:de:fc:7f:3f:23:ff: 4a:82:92:42:8c:93:75:3e:62:ab:1d:4b:96:86:35:13:61:9a: 54:35:b3:f1:3c:8e:41:5b:b1:0e:a0:6e:4b:d2:d6:ad:1c:7d: d0:31:2f:df:08:9c:d3:c6:52:a5:f7:8e:c3:00:67:7b:9f:8b: c5:d5:47:dd:48:95:ed:25:f5:c7:82:a8:2f:e3:c1:00:73:ce: 78:5c:3b:f5:2a:f2:15:e8:41:92:05:5b:f0:d8:04:06:9a:64: ee:c5:2a:d9:bb:5b:61:ee:06:6a:ad:3b:11:e5:3b:2a:5c:4d: c4:ff:a5:c5:8e:de:fe:8d:64:69:e4:13:79:cd:28:68:e0:91: ee:d0:cb:fb:3b:c9:73:67:19:e4:5c:e9:8f:11:cb:05:4a:bc: 3a:67:0a:36:18:e0:e2:af:dd:45:1a:cd:b3:2b:e0:ba:0b:d5: 27:24:b3:22:3b:5b:ce:bc:ee:f2:6e:93:98:a8:cc:27:dc:2c: 64:4a:9a:b1:39:7d:05:47:96:f8:0f:26:99:97:86:ae:80:79: 96:a8:41:87:83:32:30:8d:f9:0a:c4:82:1f:22:89:5c:87:2f: b2:bd:c9:a8:83:56:d0:e9:db:66:bf:87:a3:fe:d7:a7:4c:0e: c4:2d:88:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULnU/OG4JO9yhlcc++kCe9CqBlaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA5MTcwMTI1MjRaFw0yNjA5MTgwMjU5MjRaMDMxMTAvBgNV BAMTKEZDMDIwNTEyRDBDNzkxMTVGODkzNTVBRjE0N0YyNzU3NEY2M0E0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIO+5DPLi/UxbL2OqeL3FKWRr 0qQx914xc6qi8+n+CG828Rqd8/w9Z17OpV+AF72CiJtxzYgWHN2wEuDw1SjM9kwg yIBCBtHf3707vMsA3ez7QamghSk/ckAGNaNtfj3o2zhDdHCiFW6SjOLxLjTA7bjY iyKQO6dw80tVX3D4P21Aapi7twyVIfbnTAi2sOX1WGzDT/oS0hBWUIJBs9jUrFq1 9NzFojWaiup0rq7WVIrMmcn+Z9aaeQk3eYJDqQMlcEQnnJo5X930r7RvYM5taP6x i9aFRWb7OlRxagLmZuEeyOCtq/t8Ayh/WmsZAh7hE6Uz4S2cZKowVRPmSNQhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/AIFEtDHkRX4k1WvFH8nV09jpNUwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3PAO4aTsv0JRyWvN78fz8j/0qCkkKMk3U+ YqsdS5aGNRNhmlQ1s/E8jkFbsQ6gbkvS1q0cfdAxL98InNPGUqX3jsMAZ3ufi8XV R91Ile0l9ceCqC/jwQBzznhcO/Uq8hXoQZIFW/DYBAaaZO7FKtm7W2HuBmqtOxHl OypcTcT/pcWO3v6NZGnkE3nNKGjgke7Qy/s7yXNnGeRc6Y8RywVKvDpnCjYY4OKv 3UUazbMr4LoL1ScksyI7W8687vJuk5iozCfcLGRKmrE5fQVHlvgPJpmXhq6AeZao QYeDMjCN+QrEgh8iiVyHL7K9yaiDVtDp22a/h6P+16dMDsQtiGI= -----END CERTIFICATE-----Generated at Thu Sep 17 09:15:42 2026 by rpki-client