$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: oddIV0LuhvdpWna0aWJ6auf7bk4sJK+KUPB6Y2XAz0Q= Subject key identifier: B1:48:B2:84:EA:22:A6:7D:94:A9:D1:06:4A:DD:79:50:D8:1A:78:9C Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 04A860DD7AD2691BD9453252F2CBD99E1B4EE67F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: 0105 Signing time: Sat 14 Nov 2026 14:32:35 +0000 Manifest this update: Sat 14 Nov 2026 14:27:35 +0000 Manifest next update: Sun 15 Nov 2026 17:25:35 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) 2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: 8S8IZBaswzoS+NqC6uhtklue4NuDxVQtDPyJGiXfJcU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Nov 2026 17:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:a8:60:dd:7a:d2:69:1b:d9:45:32:52:f2:cb:d9:9e:1b:4e:e6:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: Nov 14 14:27:35 2026 GMT Not After : Nov 15 17:25:35 2026 GMT Subject: CN=B148B284EA22A67D94A9D1064ADD7950D81A789C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:05:5a:13:09:c1:e5:8c:bb:77:bf:bf:63:d5: 45:43:cc:c5:f7:52:e7:8f:9b:eb:e8:23:08:e2:a8: 2f:66:39:42:43:03:12:e0:fc:ab:be:4a:1a:e1:a2: 15:4d:04:b2:03:ae:e0:d8:4c:cb:98:a6:17:33:26: ea:08:13:ba:b4:06:e5:a7:4e:c0:50:68:c0:46:75: f8:17:9d:27:73:12:0b:dd:a8:f0:07:d0:f0:61:39: 88:0b:0d:3b:d0:79:1f:d8:d2:5d:94:f5:60:65:03: c8:1f:a6:d3:b2:74:09:ac:64:08:4b:c2:ae:cb:4e: 00:bf:f6:b2:66:c6:90:80:8d:11:e4:d9:14:5f:43: 95:bf:dc:30:55:5a:36:bb:76:26:e5:1b:24:e1:ae: e4:24:7f:27:be:7d:55:ce:25:dd:9c:e4:06:80:f1: d3:75:28:d0:b1:3e:cf:67:e2:3a:5f:82:06:7d:30: d7:8c:f3:97:44:c5:4b:7e:e1:5a:5f:1d:8f:a4:7f: ae:bf:2a:41:95:ff:04:3f:5c:64:03:3e:aa:8e:fd: 52:db:16:30:c3:69:1e:55:4f:b3:f2:03:8b:d8:a2: c4:d1:a5:da:21:e9:27:30:e1:6a:d6:ec:36:63:a8: 14:cf:92:8d:1a:ae:16:b9:84:29:6b:f2:90:c2:32: 97:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:48:B2:84:EA:22:A6:7D:94:A9:D1:06:4A:DD:79:50:D8:1A:78:9C X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ea:13:42:29:dc:d4:c1:48:2c:f0:f7:1e:d4:6b:f3:01:28: b8:91:56:80:b9:36:50:0d:09:49:d8:38:57:3a:2a:5f:ce:02: aa:3f:c7:47:dd:45:51:7e:04:f8:01:b2:c7:e4:0b:55:9d:fc: 73:ec:59:e5:b4:f5:d8:c2:6c:e1:bc:36:11:8b:bf:e9:d8:93: 8b:20:4b:0d:6e:d0:b4:50:d5:53:f7:66:58:92:28:61:07:df: 84:1e:e2:20:56:05:8b:c0:6d:08:97:e1:af:6b:08:52:9f:9d: 71:03:6f:ea:12:51:69:59:b2:53:e3:a0:9c:f8:23:2d:62:7a: 4e:12:be:bb:9e:51:f2:fd:37:39:ff:26:2b:36:7e:99:c1:5a: 3f:b7:6d:cb:a5:71:4a:90:70:a5:65:af:8d:01:e9:d5:47:4e: 4d:18:79:e0:3f:b7:ed:96:37:c7:9a:94:e7:4f:ed:97:19:e0: b1:4b:6b:01:f1:37:87:2d:d6:48:c7:45:ee:83:e2:6c:04:ba: 3e:80:b2:9c:3d:8f:b9:d7:2e:d4:70:7c:a8:2a:21:ae:26:ef: d7:35:f8:d4:46:9a:0c:e6:bd:83:9d:e6:48:dd:b0:a2:89:07: 74:fb:ff:e4:f1:36:e4:0b:38:38:5a:56:54:11:6c:ec:2f:f5: 59:51:34:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKhg3XrSaRvZRTJS8svZnhtO5n8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjExMTQxNDI3MzVaFw0yNjExMTUxNzI1MzVaMDMxMTAvBgNV BAMTKEIxNDhCMjg0RUEyMkE2N0Q5NEE5RDEwNjRBREQ3OTUwRDgxQTc4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBVoTCcHljLt3v79j1UVDzMX3 UuePm+voIwjiqC9mOUJDAxLg/Ku+ShrhohVNBLIDruDYTMuYphczJuoIE7q0BuWn TsBQaMBGdfgXnSdzEgvdqPAH0PBhOYgLDTvQeR/Y0l2U9WBlA8gfptOydAmsZAhL wq7LTgC/9rJmxpCAjRHk2RRfQ5W/3DBVWja7diblGyThruQkfye+fVXOJd2c5AaA 8dN1KNCxPs9n4jpfggZ9MNeM85dExUt+4VpfHY+kf66/KkGV/wQ/XGQDPqqO/VLb FjDDaR5VT7PyA4vYosTRpdoh6Scw4WrW7DZjqBTPko0arha5hClr8pDCMpcJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsUiyhOoipn2UqdEGSt15UNgaeJwwHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPqE0Ip3NTBSCzw9x7Ua/MBKLiRVoC5NlAN CUnYOFc6Kl/OAqo/x0fdRVF+BPgBssfkC1Wd/HPsWeW09djCbOG8NhGLv+nYk4sg Sw1u0LRQ1VP3ZliSKGEH34Qe4iBWBYvAbQiX4a9rCFKfnXEDb+oSUWlZslPjoJz4 Iy1iek4SvrueUfL9Nzn/Jis2fpnBWj+3bculcUqQcKVlr40B6dVHTk0YeeA/t+2W N8ealOdP7ZcZ4LFLawHxN4ct1kjHRe6D4mwEuj6Aspw9j7nXLtRwfKgqIa4m79c1 +NRGmgzmvYOd5kjdsKKJB3T7/+TxNuQLODhaVlQRbOwv9VlRNLY= -----END CERTIFICATE-----Generated at Sat Nov 14 22:26:16 2026 by rpki-client