$ rpki-client -vvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: HYZJTRQJ7GwLoTB6zQgYZpCjkrNHILNYpF7hCg62/jg= Subject key identifier: 8E:97:B9:DA:0E:BF:2D:78:30:32:47:E8:5F:3C:81:0D:67:7B:68:91 Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 2D8F8DA27E753F0FD99B8A228DDCCB53FAFA2DD2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: 0E Signing time: Tue 12 May 2026 09:15:42 +0000 Manifest this update: Tue 12 May 2026 09:10:42 +0000 Manifest next update: Wed 13 May 2026 10:31:42 +0000 Files and hashes: 1: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: SRZcU3ZtfYCxPPbDCnoEyCVMOgfWgqrBEt9htVzPOic=) 2: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 May 2026 07:47:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8f:8d:a2:7e:75:3f:0f:d9:9b:8a:22:8d:dc:cb:53:fa:fa:2d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: May 12 09:10:42 2026 GMT Not After : May 13 10:31:42 2026 GMT Subject: CN=8E97B9DA0EBF2D78303247E85F3C810D677B6891 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:b4:c6:5d:29:3f:06:63:22:fd:cd:fa:6c:a5: 1b:6e:67:d8:26:de:f1:30:98:bc:28:6d:a4:3f:0e: e4:f2:f0:f7:fa:5f:88:d6:00:71:8a:4e:93:22:3e: 55:30:cc:a5:56:6a:96:a0:13:0b:e7:c5:b9:14:de: 52:9f:d2:5a:9e:c0:14:e6:8b:29:5a:f0:a9:ce:6c: 88:e1:13:21:65:d5:7a:91:ac:f6:e0:15:a0:55:84: 69:5c:aa:a7:62:76:3d:20:a1:c7:b9:b7:cb:ff:78: a7:00:7d:f4:a2:bd:71:8d:d4:25:31:58:37:dd:e5: 36:f3:81:f2:b8:15:97:04:13:2f:35:6e:84:fa:ea: 03:6b:66:30:08:bc:d1:81:1b:7c:cf:4c:69:93:20: a5:d6:79:0c:4f:aa:c2:a2:4d:89:2a:8e:60:d6:b8: 0f:bb:02:1c:11:bb:4b:af:be:28:d4:6e:95:d6:f5: 5f:91:84:f6:7d:ce:c3:64:43:f2:48:fc:28:9f:4b: cf:94:33:a4:69:d1:23:41:74:99:68:00:a3:ac:b1: 96:4b:56:9c:fb:05:97:ed:8d:85:27:70:0d:79:c5: ff:ff:d2:5f:d3:ab:e8:fd:1a:9b:cb:e4:08:27:78: 0b:ff:1b:4b:0b:de:1e:e2:46:f6:e4:42:6f:05:fb: 6e:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:97:B9:DA:0E:BF:2D:78:30:32:47:E8:5F:3C:81:0D:67:7B:68:91 X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a0:63:db:8e:f2:ee:e1:36:16:8d:c2:b6:41:6c:d6:d8:10: 1a:66:58:af:28:69:75:3c:b8:2b:52:20:7b:a5:9c:78:18:2e: cb:ec:15:03:3d:85:40:2f:12:c8:27:7c:1d:80:ab:9c:f5:4d: 66:ad:d1:1b:d7:07:c0:b5:3f:d6:63:66:e6:1d:a6:eb:4b:74: d0:57:59:7d:5a:0f:11:fc:64:35:43:d3:ca:a1:4b:f9:98:df: da:18:9f:f0:e7:f6:9b:66:22:f7:93:33:38:63:1f:b3:dd:da: 70:6a:4c:0b:87:f8:fd:d5:9f:41:28:f8:62:21:8d:af:9b:66: 36:ce:2e:b2:f6:8f:8d:78:45:8e:6b:34:83:02:68:ad:27:c6: a9:99:39:a7:de:d6:85:9a:00:0c:bb:14:18:10:50:ea:66:64: fe:9f:d6:b1:d3:eb:36:bd:70:67:2a:17:6e:93:1a:27:e5:f2: 5c:d5:4a:d5:63:d9:a4:5f:ac:7a:73:0f:04:07:f6:ec:d3:ea: 2c:7e:83:c9:a9:3d:d3:7d:a5:ec:4b:b5:45:22:6c:69:03:ac: 16:b0:b6:4f:7c:68:25:4d:70:da:af:a3:d8:8a:14:3b:90:d7: 38:1b:c7:f0:89:d9:ad:8f:44:45:a0:e3:77:3a:f2:64:f2:89: c2:23:ec:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULY+Non51Pw/Zm4oijdzLU/r6LdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjA1MTIwOTEwNDJaFw0yNjA1MTMxMDMxNDJaMDMxMTAvBgNV BAMTKDhFOTdCOURBMEVCRjJENzgzMDMyNDdFODVGM0M4MTBENjc3QjY4OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCktMZdKT8GYyL9zfpspRtuZ9gm 3vEwmLwobaQ/DuTy8Pf6X4jWAHGKTpMiPlUwzKVWapagEwvnxbkU3lKf0lqewBTm iyla8KnObIjhEyFl1XqRrPbgFaBVhGlcqqdidj0goce5t8v/eKcAffSivXGN1CUx WDfd5TbzgfK4FZcEEy81boT66gNrZjAIvNGBG3zPTGmTIKXWeQxPqsKiTYkqjmDW uA+7AhwRu0uvvijUbpXW9V+RhPZ9zsNkQ/JI/CifS8+UM6Rp0SNBdJloAKOssZZL Vpz7BZftjYUncA15xf//0l/Tq+j9GpvL5AgneAv/G0sL3h7iRvbkQm8F+26PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjpe52g6/LXgwMkfoXzyBDWd7aJEwHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGigY9uO8u7hNhaNwrZBbNbYEBpmWK8oaXU8 uCtSIHulnHgYLsvsFQM9hUAvEsgnfB2Aq5z1TWat0RvXB8C1P9ZjZuYdputLdNBX WX1aDxH8ZDVD08qhS/mY39oYn/Dn9ptmIveTMzhjH7Pd2nBqTAuH+P3Vn0Eo+GIh ja+bZjbOLrL2j414RY5rNIMCaK0nxqmZOafe1oWaAAy7FBgQUOpmZP6f1rHT6za9 cGcqF26TGifl8lzVStVj2aRfrHpzDwQH9uzT6ix+g8mpPdN9pexLtUUibGkDrBaw tk98aCVNcNqvo9iKFDuQ1zgbx/CJ2a2PREWg43c68mTyicIj7PE= -----END CERTIFICATE-----Generated at Tue May 12 22:47:34 2026 by rpki-client