$ rpki-client -vvf rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft File: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft (raw, json) Hash identifier: Ta6py9HKnNj1CPeEqqiFZ5XDGd4ZvU2nqumeQvS+FqQ= Subject key identifier: 88:29:2D:8D:1A:F8:9C:4F:80:C6:81:0B:B0:DD:B8:2A:03:38:04:80 Authority key identifier: FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 Certificate issuer: /CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Certificate serial: 1AD097312690E909EBDECD7CE70B61CB8AA4CE8A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft Manifest number: 40 Signing time: Sat 20 Jun 2026 02:37:59 +0000 Manifest this update: Sat 20 Jun 2026 02:32:59 +0000 Manifest next update: Sun 21 Jun 2026 06:26:59 +0000 Files and hashes: 1: FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl (hash: RmZYsJoMaAtHEpvw7rEcCxmTV47K1AS+RckHhpfDrZg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 06:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:d0:97:31:26:90:e9:09:eb:de:cd:7c:e7:0b:61:cb:8a:a4:ce:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FD828C698446CC2ABE898527D2B7F3E50A2DBDB6 Validity Not Before: Jun 20 02:32:59 2026 GMT Not After : Jun 21 06:26:59 2026 GMT Subject: CN=88292D8D1AF89C4F80C6810BB0DDB82A03380480 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:a7:e4:34:6a:e4:11:fc:ec:45:eb:88:71:33: eb:e3:bb:f1:23:fb:ce:04:43:8e:ea:5d:5e:ff:67: ea:7f:94:ae:8c:02:6a:e4:7e:35:9e:43:d0:18:d9: 60:53:a1:60:e7:41:7b:fa:9e:d0:e0:74:64:e3:8e: 57:1e:32:20:db:76:de:09:7d:83:ba:08:17:f6:08: 82:c2:68:c5:ec:31:19:db:e4:e9:83:2b:21:09:e6: 6f:4d:d4:96:14:c9:de:26:b7:6f:7e:73:d7:7a:26: bc:34:c2:0f:88:c8:ac:9e:c2:23:d4:ab:4b:80:f9: 28:df:1b:84:e1:c2:87:d6:d3:b7:81:4d:01:c8:9e: 03:23:5c:48:98:2f:d2:87:b1:55:82:a0:9c:89:73: e3:10:bc:27:b5:10:9d:c2:86:a4:04:a4:a2:66:64: 19:4e:f6:86:ee:86:b7:f3:48:b0:60:dd:2d:76:05: 85:89:dc:6b:56:9d:49:02:0a:0b:72:85:21:c6:11: 1c:01:27:0c:8a:c2:61:5f:87:59:c4:58:8e:e0:76: 34:11:fb:f1:89:99:81:92:2d:75:b2:60:48:7b:50: af:58:24:b8:05:29:36:ca:c8:18:8f:5e:e8:49:ad: de:68:97:5b:a2:84:ae:f7:fe:c4:7c:52:58:f5:bd: f6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:29:2D:8D:1A:F8:9C:4F:80:C6:81:0B:B0:DD:B8:2A:03:38:04:80 X509v3 Authority Key Identifier: keyid:FD:82:8C:69:84:46:CC:2A:BE:89:85:27:D2:B7:F3:E5:0A:2D:BD:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/e31e693c-2fd7-4f4c-af63-fee69076e0d1/0/FD828C698446CC2ABE898527D2B7F3E50A2DBDB6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:3a:7f:99:b7:6b:b4:d2:91:fb:ae:fc:63:66:06:8b:89:5c: 89:45:56:dd:d2:f5:d4:95:99:76:b5:59:20:75:3b:03:17:cd: bb:cf:e2:d2:48:68:84:09:64:44:b5:39:56:f1:f6:70:56:43: 00:a0:9e:b3:28:8d:ce:5e:b3:6f:e5:34:8b:84:0c:a1:a9:5d: 14:37:f5:d4:b8:37:27:4f:ea:01:da:df:e9:8d:46:00:6f:f0: 7c:6f:ce:00:aa:86:74:34:81:1e:0a:5c:2a:64:9f:37:1d:ac: a8:4f:fc:1c:5a:4b:04:fe:cb:07:fb:2c:c2:c5:4c:cc:ed:80: 3a:ca:fa:12:ff:d1:ca:79:47:75:72:ef:2b:89:92:ab:b4:9f: fe:df:fd:aa:37:8f:6d:90:1b:c6:74:20:df:ad:d8:35:57:dd: b1:38:08:1c:93:d9:18:bf:04:11:72:0e:2c:1c:04:b2:aa:99: cc:93:c4:90:3f:be:22:09:71:4b:46:64:06:75:d0:ee:8b:83: fd:06:26:80:b5:fa:9d:9a:09:5e:22:2c:05:39:b9:4f:65:31: 7a:5f:5c:6e:1d:f8:3a:58:64:ae:a8:78:f9:f4:e4:9d:2f:e7: e4:da:f7:09:9f:a8:87:d8:8d:02:85:ad:5a:54:fb:0c:f4:fa: ad:56:a6:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGtCXMSaQ6Qnr3s185wthy4qkzoowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUw QTJEQkRCNjAeFw0yNjA2MjAwMjMyNTlaFw0yNjA2MjEwNjI2NTlaMDMxMTAvBgNV BAMTKDg4MjkyRDhEMUFGODlDNEY4MEM2ODEwQkIwRERCODJBMDMzODA0ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjp+Q0auQR/OxF64hxM+vju/Ej +84EQ47qXV7/Z+p/lK6MAmrkfjWeQ9AY2WBToWDnQXv6ntDgdGTjjlceMiDbdt4J fYO6CBf2CILCaMXsMRnb5OmDKyEJ5m9N1JYUyd4mt29+c9d6Jrw0wg+IyKyewiPU q0uA+SjfG4ThwofW07eBTQHIngMjXEiYL9KHsVWCoJyJc+MQvCe1EJ3ChqQEpKJm ZBlO9obuhrfzSLBg3S12BYWJ3GtWnUkCCgtyhSHGERwBJwyKwmFfh1nEWI7gdjQR +/GJmYGSLXWyYEh7UK9YJLgFKTbKyBiPXuhJrd5ol1uihK73/sR8Ulj1vfb5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiCktjRr4nE+AxoELsN24KgM4BIAwHwYDVR0j BBgwFoAU/YKMaYRGzCq+iYUn0rfz5QotvbYwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZTMxZTY5M2MtMmZkNy00ZjRjLWFmNjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4 NDQ2Q0MyQUJFODk4NTI3RDJCN0YzRTUwQTJEQkRCNi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GRDgyOEM2OTg0NDZDQzJBQkU4OTg1MjdEMkI3RjNFNTBBMkRC REI2LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZTMxZTY5M2MtMmZkNy00ZjRjLWFm NjMtZmVlNjkwNzZlMGQxLzAvRkQ4MjhDNjk4NDQ2Q0MyQUJFODk4NTI3RDJCN0Yz RTUwQTJEQkRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABA6f5m3a7TSkfuu/GNmBouJXIlFVt3S9dSV mXa1WSB1OwMXzbvP4tJIaIQJZES1OVbx9nBWQwCgnrMojc5es2/lNIuEDKGpXRQ3 9dS4NydP6gHa3+mNRgBv8HxvzgCqhnQ0gR4KXCpknzcdrKhP/BxaSwT+ywf7LMLF TMztgDrK+hL/0cp5R3Vy7yuJkqu0n/7f/ao3j22QG8Z0IN+t2DVX3bE4CByT2Ri/ BBFyDiwcBLKqmcyTxJA/viIJcUtGZAZ10O6Lg/0GJoC1+p2aCV4iLAU5uU9lMXpf XG4d+DpYZK6oePn05J0v5+Ta9wmfqIfYjQKFrVpU+wz0+q1WpsU= -----END CERTIFICATE-----Generated at Sat Jun 20 08:56:29 2026 by rpki-client