$ rpki-client -vvf rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft File: FD3570C783F1F89844667EBEE226942439B2E4B5.mft (raw, json) Hash identifier: ZlEqsqPTTJe4KOPZH+g9dmPB+DutDCgqBzMBfhwWb2M= Subject key identifier: 6C:CC:9D:93:C1:86:1E:C2:20:F9:FC:61:AD:27:B1:38:69:94:35:E2 Authority key identifier: FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 Certificate issuer: /CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Certificate serial: 2C0966861F7CC8F391A1BCDC06A911DB30F05CEF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:32:03 +0000 Manifest this update: Fri 19 Jun 2026 17:27:03 +0000 Manifest next update: Sat 20 Jun 2026 19:58:03 +0000 Files and hashes: 1: FD3570C783F1F89844667EBEE226942439B2E4B5.crl (hash: kUZWdqvX1fdIQJ9paChjGB5ZOV0iiQaRM1YsJ8uOXUk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 19:58:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:09:66:86:1f:7c:c8:f3:91:a1:bc:dc:06:a9:11:db:30:f0:5c:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD3570C783F1F89844667EBEE226942439B2E4B5 Validity Not Before: Jun 19 17:27:03 2026 GMT Not After : Jun 20 19:58:03 2026 GMT Subject: CN=6CCC9D93C1861EC220F9FC61AD27B138699435E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e5:f3:17:fd:68:33:37:a9:ce:02:a0:09:20: 53:6a:de:e7:4a:2f:13:7e:e3:14:a0:9f:0a:66:56: 60:3b:16:a5:d0:c1:1d:6b:e9:34:85:48:87:bc:5f: 27:9d:ee:dd:e9:c0:15:73:35:ab:27:7e:08:b3:48: c9:d1:a5:fc:b8:27:07:0d:94:d5:4b:63:90:99:b3: f2:8f:c6:29:e3:9c:a8:9d:a8:5f:93:2e:90:2e:d9: 69:48:b6:e7:2f:3f:d0:05:dc:7c:f3:de:e6:81:a6: 76:fe:bc:17:1c:65:06:68:fa:0d:f3:fb:5a:f5:c4: 7d:ca:a0:b3:d3:64:8d:e2:80:60:6a:48:bd:81:b9: bb:81:5a:e6:9d:0e:67:a6:81:bb:ca:34:6f:02:f6: 6f:63:69:37:94:5a:15:f0:46:ce:9c:1a:aa:5b:88: 13:3c:7a:f2:b2:c1:b0:ae:37:13:53:ea:8b:8b:8b: 62:08:7f:24:a3:16:ef:6c:c7:a8:1f:92:43:6f:2d: 80:16:57:1c:fe:4e:7c:90:b9:97:be:bf:86:76:be: a6:bf:bf:65:30:b0:ed:d3:a6:ea:85:3f:73:4c:7d: 4c:1d:d0:49:20:19:0f:5b:fd:50:cc:0f:fd:7a:b5: 3d:8f:f0:73:51:e9:61:6d:96:e0:cc:88:e5:cd:4a: 4d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:CC:9D:93:C1:86:1E:C2:20:F9:FC:61:AD:27:B1:38:69:94:35:E2 X509v3 Authority Key Identifier: keyid:FD:35:70:C7:83:F1:F8:98:44:66:7E:BE:E2:26:94:24:39:B2:E4:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD3570C783F1F89844667EBEE226942439B2E4B5.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/b2ae5e21-08cc-4ca4-b99c-5ff5a0d46490/0/FD3570C783F1F89844667EBEE226942439B2E4B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:43:1f:09:25:ac:7e:a1:53:2c:8f:fa:29:53:f4:c6:7d:27: f7:a5:c9:a1:fc:ca:8b:22:ff:f6:6a:28:11:27:a6:81:b7:1d: 13:38:4e:33:4f:6e:09:4f:41:69:bd:fb:59:ea:a8:b4:50:bd: 9c:68:c2:ed:c6:be:ed:44:54:d5:c2:e2:cf:15:f3:31:1e:a5: bd:da:f9:3a:ca:4e:17:04:73:65:b9:c5:ef:56:12:3e:c6:83: 96:91:41:8a:d2:b3:21:28:82:52:63:2f:7b:f0:bf:07:b8:a0: e0:b1:06:7e:8d:46:3d:97:0c:92:5b:87:a6:ce:24:d4:4f:91: 04:40:75:88:6f:66:bd:de:2e:d3:e1:69:85:bf:28:64:b6:4c: 65:9c:b6:9e:a1:ac:4f:1c:e1:9d:87:5f:ba:99:c4:f3:0d:da: 5f:24:f8:13:a6:ff:d3:a6:df:a1:1b:0b:e6:b1:b2:a7:31:b4: a7:99:b4:5d:e9:66:d9:e5:39:4c:cb:6d:e5:3c:87:5c:d9:f7: ab:bd:01:6a:0c:34:24:74:63:25:1f:c8:82:49:4c:1a:b2:36: 7e:33:ee:6d:74:9f:e3:9a:80:9e:b2:0f:09:68:b9:6e:9b:04: 7f:78:75:2b:0d:33:9d:a3:a5:01:74:71:b9:12:28:f3:89:31: d4:69:a1:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAlmhh98yPORobzcBqkR2zDwXO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQz OUIyRTRCNTAeFw0yNjA2MTkxNzI3MDNaFw0yNjA2MjAxOTU4MDNaMDMxMTAvBgNV BAMTKDZDQ0M5RDkzQzE4NjFFQzIyMEY5RkM2MUFEMjdCMTM4Njk5NDM1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw5fMX/WgzN6nOAqAJIFNq3udK LxN+4xSgnwpmVmA7FqXQwR1r6TSFSIe8Xyed7t3pwBVzNasnfgizSMnRpfy4JwcN lNVLY5CZs/KPxinjnKidqF+TLpAu2WlItucvP9AF3Hzz3uaBpnb+vBccZQZo+g3z +1r1xH3KoLPTZI3igGBqSL2BubuBWuadDmemgbvKNG8C9m9jaTeUWhXwRs6cGqpb iBM8evKywbCuNxNT6ouLi2IIfySjFu9sx6gfkkNvLYAWVxz+TnyQuZe+v4Z2vqa/ v2UwsO3TpuqFP3NMfUwd0EkgGQ9b/VDMD/16tT2P8HNR6WFtluDMiOXNSk0ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbMydk8GGHsIg+fxhrSexOGmUNeIwHwYDVR0j BBgwFoAU/TVwx4Px+JhEZn6+4iaUJDmy5LUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YjJhZTVlMjEtMDhjYy00Y2E0LWI5OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4 M0YxRjg5ODQ0NjY3RUJFRTIyNjk0MjQzOUIyRTRCNS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDM1NzBDNzgzRjFGODk4NDQ2NjdFQkVFMjI2OTQyNDM5QjJF NEI1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYjJhZTVlMjEtMDhjYy00Y2E0LWI5 OWMtNWZmNWEwZDQ2NDkwLzAvRkQzNTcwQzc4M0YxRjg5ODQ0NjY3RUJFRTIyNjk0 MjQzOUIyRTRCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApDHwklrH6hUyyP+ilT9MZ9J/elyaH8yosi //ZqKBEnpoG3HRM4TjNPbglPQWm9+1nqqLRQvZxowu3Gvu1EVNXC4s8V8zEepb3a +TrKThcEc2W5xe9WEj7Gg5aRQYrSsyEoglJjL3vwvwe4oOCxBn6NRj2XDJJbh6bO JNRPkQRAdYhvZr3eLtPhaYW/KGS2TGWctp6hrE8c4Z2HX7qZxPMN2l8k+BOm/9Om 36EbC+axsqcxtKeZtF3pZtnlOUzLbeU8h1zZ96u9AWoMNCR0YyUfyIJJTBqyNn4z 7m10n+OagJ6yDwlouW6bBH94dSsNM52jpQF0cbkSKPOJMdRpoWk= -----END CERTIFICATE-----Generated at Sat Jun 20 09:14:54 2026 by rpki-client