$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: ogQJa4KzTZ+NsvUPVfml613/m0xrSzUWhCMZKKE/XCQ= Subject key identifier: 8B:03:E8:2A:40:4A:32:39:F7:65:0A:59:7B:63:4E:8D:88:5A:3D:B8 Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 3B3A8D8EB4C7329E41729D59B5CC62E9D9BEEC0E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: C1 Signing time: Wed 23 Sep 2026 16:51:56 +0000 Manifest this update: Wed 23 Sep 2026 16:46:56 +0000 Manifest next update: Thu 24 Sep 2026 19:59:56 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) 2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: b/2XWVSVyOoJA7F7sE18GCSdMootDT10YApxsJE0cPM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 19:59:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3a:8d:8e:b4:c7:32:9e:41:72:9d:59:b5:cc:62:e9:d9:be:ec:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: Sep 23 16:46:56 2026 GMT Not After : Sep 24 19:59:56 2026 GMT Subject: CN=8B03E82A404A3239F7650A597B634E8D885A3DB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:aa:3b:ef:d1:ca:51:82:de:5d:3e:7f:08:eb: a1:16:3b:a3:c2:d1:ee:d7:9c:73:93:09:0a:b2:32: b4:31:9b:8e:7f:3b:6d:49:ff:cf:08:59:a3:f7:2b: 09:25:b3:b0:3a:88:cb:6e:02:d6:db:56:3e:9d:dd: f9:49:c7:ce:c5:ae:ae:d8:6c:55:66:9e:e9:df:f3: c8:20:06:87:10:e3:8e:05:14:1a:c2:1f:d6:6c:db: 96:51:17:fd:c6:3f:1d:6a:3e:fd:eb:35:49:74:dc: a9:7e:83:95:b8:4b:c5:ae:06:1d:d9:f5:1c:cd:8d: 9c:5a:ff:64:6e:35:f3:75:ef:e8:6d:67:47:2f:85: a7:24:03:00:87:54:c1:30:d4:8d:25:76:4b:bd:06: 7e:19:49:09:70:dd:37:f8:ec:cb:75:a2:34:fd:c5: da:e3:c4:b5:90:ed:a5:06:ab:8d:26:0a:93:63:56: c6:52:1b:33:25:4e:65:66:44:2c:87:b5:d8:75:bd: ae:10:c7:dc:49:8c:61:c5:1a:03:b3:1d:52:11:eb: 00:88:13:fe:45:08:17:cb:d9:9f:36:7d:7e:67:e4: 24:bd:25:1d:3d:06:7e:c8:6f:d2:c3:b6:57:53:19: 4e:58:76:4c:57:ed:37:0f:8d:f8:e5:2c:45:e0:97: 27:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:03:E8:2A:40:4A:32:39:F7:65:0A:59:7B:63:4E:8D:88:5A:3D:B8 X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:29:83:1d:5a:19:fb:da:69:bc:b9:c0:68:a9:7e:41:cf:9e: cd:20:b1:79:bf:d9:26:55:a3:95:58:9b:5f:07:bb:e7:2a:eb: cd:52:31:b3:95:e4:e9:50:6e:b7:22:02:3f:d8:2d:97:eb:8d: 7c:c0:10:61:4c:66:c7:37:b0:56:fa:94:5e:45:17:e3:a5:b6: 7a:5a:8e:70:40:81:ad:fc:f1:b8:d5:b2:69:d9:03:e3:13:ca: be:75:ce:0c:19:57:ab:5b:20:d8:d2:4c:98:f9:d0:f4:a3:9b: 66:a9:58:1f:cc:88:7b:e9:74:0c:92:fb:4a:4d:3d:66:04:27: 1c:8c:11:50:55:f7:9d:2f:ba:c2:6d:16:e2:f6:59:ee:54:3d: d5:24:d3:aa:cb:01:72:db:5d:0a:9a:40:39:bd:03:14:d2:b9: a9:43:83:21:a1:5c:33:02:4b:7e:86:33:a7:bb:f4:2b:67:98: 90:a1:f9:83:0e:94:f8:94:97:6a:83:c0:79:bc:08:e8:cd:bc: cf:64:12:a7:64:ad:5f:c4:8e:ed:0a:c6:cc:48:cd:76:da:82: a7:8c:52:d6:7c:23:a9:e3:1e:aa:10:9b:cd:d5:90:fd:f4:1b: d8:ae:8b:e2:61:f8:e0:61:67:2a:41:0e:52:f9:4c:fc:a1:fd: 8f:7f:89:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzqNjrTHMp5Bcp1Ztcxi6dm+7A4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjA5MjMxNjQ2NTZaFw0yNjA5MjQxOTU5NTZaMDMxMTAvBgNV BAMTKDhCMDNFODJBNDA0QTMyMzlGNzY1MEE1OTdCNjM0RThEODg1QTNEQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVqjvv0cpRgt5dPn8I66EWO6PC 0e7XnHOTCQqyMrQxm45/O21J/88IWaP3Kwkls7A6iMtuAtbbVj6d3flJx87Frq7Y bFVmnunf88ggBocQ444FFBrCH9Zs25ZRF/3GPx1qPv3rNUl03Kl+g5W4S8WuBh3Z 9RzNjZxa/2RuNfN17+htZ0cvhackAwCHVMEw1I0ldku9Bn4ZSQlw3Tf47Mt1ojT9 xdrjxLWQ7aUGq40mCpNjVsZSGzMlTmVmRCyHtdh1va4Qx9xJjGHFGgOzHVIR6wCI E/5FCBfL2Z82fX5n5CS9JR09Bn7Ib9LDtldTGU5YdkxX7TcPjfjlLEXglyebAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwPoKkBKMjn3ZQpZe2NOjYhaPbgwHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUpgx1aGfvaaby5wGipfkHPns0gsXm/2SZV o5VYm18Hu+cq681SMbOV5OlQbrciAj/YLZfrjXzAEGFMZsc3sFb6lF5FF+Oltnpa jnBAga388bjVsmnZA+MTyr51zgwZV6tbINjSTJj50PSjm2apWB/MiHvpdAyS+0pN PWYEJxyMEVBV950vusJtFuL2We5UPdUk06rLAXLbXQqaQDm9AxTSualDgyGhXDMC S36GM6e79CtnmJCh+YMOlPiUl2qDwHm8COjNvM9kEqdkrV/Eju0KxsxIzXbagqeM UtZ8I6njHqoQm83VkP30G9iui+Jh+OBhZypBDlL5TPyh/Y9/iX0= -----END CERTIFICATE-----Generated at Thu Sep 24 04:27:11 2026 by rpki-client