$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft File: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json) Hash identifier: LIEfk10I98qhAmgG6OM/LeOCpn+xHMbNn3JqpFtmSnk= Subject key identifier: 10:8D:29:BB:60:73:D7:05:0D:3D:F1:35:9B:8A:95:9C:35:6E:1F:54 Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A Certificate issuer: /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A Certificate serial: 7C56057E2803E45432B3DD24A5AF3C152D5343E6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft Manifest number: D9 Signing time: Sun 11 Oct 2026 11:41:52 +0000 Manifest this update: Sun 11 Oct 2026 11:36:52 +0000 Manifest next update: Mon 12 Oct 2026 13:46:52 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=) 2: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: MwHnmu/277e1ZH7yCCieSX0kDuYKug1ujXESpo80nfc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 Oct 2026 13:46:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:56:05:7e:28:03:e4:54:32:b3:dd:24:a5:af:3c:15:2d:53:43:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A Validity Not Before: Oct 11 11:36:52 2026 GMT Not After : Oct 12 13:46:52 2026 GMT Subject: CN=108D29BB6073D7050D3DF1359B8A959C356E1F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:29:5c:6d:89:68:03:0a:f5:d9:ae:cd:ba:22: 32:9e:fe:28:74:a0:1c:4c:90:9d:8b:dd:76:3e:4e: 5d:fd:83:9c:17:a9:bf:ae:d1:ac:83:ba:c6:21:0b: 0a:5c:f1:be:3a:f3:5a:b5:09:7e:5e:85:61:b8:81: 9b:d9:c0:6c:43:21:74:8d:9d:3d:87:3c:f1:56:21: fd:c7:0c:00:db:01:db:97:ce:fd:69:1a:5a:0f:76: 3f:92:6e:dc:ee:6c:3a:60:22:1a:e4:9f:eb:3b:7a: 7d:c4:82:02:8e:02:6f:1d:6f:9b:54:4b:f6:4b:0f: 8f:ed:d2:0a:ac:e2:f8:5a:da:e1:5d:59:f4:1e:ca: 58:cb:3b:f7:1b:4a:6f:74:5d:89:c5:61:7e:e2:53: c4:d9:4e:2e:a5:41:bb:73:17:cf:28:e1:6f:2e:df: d8:a3:ef:f9:66:e0:b3:eb:02:7d:05:c2:be:44:40: d4:8d:ec:5e:3d:02:6e:10:42:48:b7:66:d6:03:2e: ee:35:e7:33:9c:67:d3:e7:99:63:00:e6:a0:40:ea: b8:dc:a1:74:ce:61:23:e2:ac:7a:15:0f:cb:11:61: 8b:a1:88:fb:85:82:ef:86:29:9f:e3:4c:bf:fa:6b: fb:5d:8d:07:8c:d4:55:a0:27:b5:22:b5:14:09:17: 67:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:8D:29:BB:60:73:D7:05:0D:3D:F1:35:9B:8A:95:9C:35:6E:1F:54 X509v3 Authority Key Identifier: keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:57:05:4b:04:c1:a4:30:6f:32:9e:82:f8:85:c0:a5:1d:c2: e2:7d:7f:c0:c4:14:60:99:21:04:01:45:d4:10:50:8d:9a:c4: ef:ca:17:be:e3:71:79:1a:34:52:ad:c2:bf:82:08:97:94:54: 14:f7:d9:75:5b:ab:a4:b6:41:a8:f1:b2:73:e1:9d:62:bc:23: 8d:ec:03:08:55:09:02:5e:40:22:c5:88:95:63:74:e4:65:d3: d6:b5:95:47:3f:3f:5f:7d:e0:ba:69:6f:09:d5:5b:6f:b1:cd: a3:a4:84:59:8d:74:43:8f:28:47:24:64:35:f0:79:5e:97:5c: 6a:5e:e1:bb:cf:59:e0:14:3a:f4:e7:e4:72:f3:03:c4:b8:b7: e1:08:ec:9f:b3:31:ee:bd:f4:6a:f0:18:91:a1:07:94:f3:62: 93:d8:fe:7a:98:37:48:66:a4:33:2f:2d:fe:a7:3c:51:ff:00: 19:04:e0:19:88:9f:70:01:a4:68:42:68:73:1a:2b:c8:f0:a2: bd:74:ab:85:34:5c:17:e5:9f:4c:2d:db:77:a6:f0:35:5f:29: 42:8d:10:e2:93:e8:c2:ad:a7:1e:0d:63:36:32:37:34:3c:96: 1e:ce:ac:24:8f:92:be:e4:ae:1f:b0:2f:16:9c:82:b0:2c:91: 54:47:a1:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFYFfigD5FQys90kpa88FS1TQ+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc1RTFCRjNDOEUwN0UyNzIzMTZCQkExNDM1OEU1RjlF NUU5RTg3QTAeFw0yNjEwMTExMTM2NTJaFw0yNjEwMTIxMzQ2NTJaMDMxMTAvBgNV BAMTKDEwOEQyOUJCNjA3M0Q3MDUwRDNERjEzNTlCOEE5NTlDMzU2RTFGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/KVxtiWgDCvXZrs26IjKe/ih0 oBxMkJ2L3XY+Tl39g5wXqb+u0ayDusYhCwpc8b4681q1CX5ehWG4gZvZwGxDIXSN nT2HPPFWIf3HDADbAduXzv1pGloPdj+SbtzubDpgIhrkn+s7en3EggKOAm8db5tU S/ZLD4/t0gqs4vha2uFdWfQeyljLO/cbSm90XYnFYX7iU8TZTi6lQbtzF88o4W8u 39ij7/lm4LPrAn0Fwr5EQNSN7F49Am4QQki3ZtYDLu415zOcZ9PnmWMA5qBA6rjc oXTOYSPirHoVD8sRYYuhiPuFgu+GKZ/jTL/6a/tdjQeM1FWgJ7UitRQJF2fZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEI0pu2Bz1wUNPfE1m4qVnDVuH1QwHwYDVR0j BBgwFoAU114b88jgficjFruhQ1jl+eXp6HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjliM2JlNjItMzU5Ny00ZmU4LWE3OTUtZmM5YmExMjAyMzQ0LzAvRDc1RTFCRjND OEUwN0UyNzIzMTZCQkExNDM1OEU1RjlFNUU5RTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzVFMUJGM0M4RTA3RTI3MjMxNkJCQTE0MzU4RTVGOUU1RTlF ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvRDc1RTFCRjNDOEUwN0UyNzIzMTZCQkExNDM1OEU1 RjlFNUU5RTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxXBUsEwaQwbzKegviFwKUdwuJ9f8DEFGCZ IQQBRdQQUI2axO/KF77jcXkaNFKtwr+CCJeUVBT32XVbq6S2QajxsnPhnWK8I43s AwhVCQJeQCLFiJVjdORl09a1lUc/P1994LppbwnVW2+xzaOkhFmNdEOPKEckZDXw eV6XXGpe4bvPWeAUOvTn5HLzA8S4t+EI7J+zMe699GrwGJGhB5TzYpPY/nqYN0hm pDMvLf6nPFH/ABkE4BmIn3ABpGhCaHMaK8jwor10q4U0XBfln0wt23em8DVfKUKN EOKT6MKtpx4NYzYyNzQ8lh7OrCSPkr7krh+wLxacgrAskVRHoSw= -----END CERTIFICATE-----Generated at Sun Oct 11 16:44:44 2026 by rpki-client