$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: vr7NBwOGAz/NJL2Pc2mn12WAZXZnEKokbeT9UbcL0Rs= Subject key identifier: 91:6F:3C:40:3A:D3:0B:29:CB:92:A8:C6:24:01:96:86:78:F0:84:87 Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 4936D7E25CB939711396FCCBFB28A3C7E65D61F7 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: BE Signing time: Mon 21 Sep 2026 09:33:23 +0000 Manifest this update: Mon 21 Sep 2026 09:28:23 +0000 Manifest next update: Tue 22 Sep 2026 12:57:23 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) 2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: 4bHLSi0/2Njke9nKPEhm0GflK4mFH7k5Q4+vevyLqpY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 05:55:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:36:d7:e2:5c:b9:39:71:13:96:fc:cb:fb:28:a3:c7:e6:5d:61:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: Sep 21 09:28:23 2026 GMT Not After : Sep 22 12:57:23 2026 GMT Subject: CN=916F3C403AD30B29CB92A8C62401968678F08487 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fb:92:fa:fb:3a:da:f8:2f:04:88:5b:cc:29: ad:14:82:be:80:37:cc:a6:c0:bd:24:b8:b0:a5:f4: 1e:a5:9a:b3:d1:7a:e3:cb:b7:ec:9c:45:51:41:0b: 27:8f:b3:21:f3:4c:7e:17:fe:25:3a:b6:64:92:83: 47:c6:da:0d:c3:af:44:f4:fe:b3:e8:96:d6:2c:e4: de:28:cc:2c:9c:bf:cc:0f:95:87:ad:b1:84:08:9c: ad:bd:0d:0b:28:30:ed:ed:e3:fd:4f:f8:c7:7b:0f: fa:ba:67:f7:b0:85:67:d7:b6:3a:81:52:30:75:ac: 71:ea:29:0b:c1:b4:90:ad:b1:aa:6f:a5:31:7a:9e: ed:ca:48:fb:ee:7b:37:e8:39:45:34:7f:e5:8e:79: 55:63:20:61:a9:35:dd:61:6b:80:15:38:3a:73:82: 11:de:2e:de:4c:e8:13:20:89:66:40:c9:5f:bc:d2: 03:44:aa:86:a7:0c:5f:26:e1:ba:b4:16:01:56:61: cb:fc:56:e6:4b:a1:c5:79:1a:e8:7f:90:c3:05:37: 6f:97:ec:27:5c:2e:1a:d1:06:b5:a0:85:27:30:e5: df:6b:33:6f:9b:c2:6f:24:b2:e6:14:a7:d9:c0:ed: 68:35:25:03:3a:9f:aa:5f:39:be:f9:ed:cd:01:14: ee:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:6F:3C:40:3A:D3:0B:29:CB:92:A8:C6:24:01:96:86:78:F0:84:87 X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:48:ee:0c:c9:71:1d:dc:3c:09:a8:6f:89:94:b3:52:19:70: c5:0e:6b:b3:0f:3b:82:e0:98:11:4b:b7:24:18:b5:50:c4:9f: ff:0c:ac:31:c6:6f:38:fd:b7:3f:18:64:f5:9c:3a:6d:f2:35: 30:ac:4c:74:31:c5:c9:ec:a2:8a:22:e1:b3:7d:af:01:55:75: be:5e:aa:9d:d7:34:a4:4c:8e:f5:c3:c4:b8:65:84:a7:4c:93: 70:e5:9c:6e:23:eb:e2:63:9d:c3:54:07:7d:88:93:ea:1d:19: 64:8c:90:ce:9f:62:f9:30:84:18:0d:32:96:3a:c0:ca:6c:13: 46:47:1c:36:7d:fa:cc:38:1e:47:2a:f9:b0:58:b9:e5:fe:5a: 94:4e:a6:b1:4e:d7:ef:28:c3:c1:62:f3:13:57:84:b5:8f:bf: 7f:88:2f:83:4e:29:19:21:75:39:3e:4b:01:d9:23:14:82:79: 39:33:19:b7:70:80:63:27:ed:54:0a:8a:64:19:12:d4:11:38: 33:20:3b:d9:9f:eb:c7:cb:47:bb:91:06:15:5b:bc:4c:94:9c: 12:58:2c:58:e5:2f:03:95:10:af:49:28:71:01:14:f8:10:59: 73:b7:31:e7:7e:a1:bc:86:aa:bb:2a:7a:3d:a2:3c:ef:eb:e4: e1:a9:5c:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSTbX4ly5OXETlvzL+yijx+ZdYfcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjA5MjEwOTI4MjNaFw0yNjA5MjIxMjU3MjNaMDMxMTAvBgNV BAMTKDkxNkYzQzQwM0FEMzBCMjlDQjkyQThDNjI0MDE5Njg2NzhGMDg0ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu+5L6+zra+C8EiFvMKa0Ugr6A N8ymwL0kuLCl9B6lmrPReuPLt+ycRVFBCyePsyHzTH4X/iU6tmSSg0fG2g3Dr0T0 /rPoltYs5N4ozCycv8wPlYetsYQInK29DQsoMO3t4/1P+Md7D/q6Z/ewhWfXtjqB UjB1rHHqKQvBtJCtsapvpTF6nu3KSPvuezfoOUU0f+WOeVVjIGGpNd1ha4AVODpz ghHeLt5M6BMgiWZAyV+80gNEqoanDF8m4bq0FgFWYcv8VuZLocV5Guh/kMMFN2+X 7CdcLhrRBrWghScw5d9rM2+bwm8ksuYUp9nA7Wg1JQM6n6pfOb757c0BFO4fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkW88QDrTCynLkqjGJAGWhnjwhIcwHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNI7gzJcR3cPAmob4mUs1IZcMUOa7MPO4Lg mBFLtyQYtVDEn/8MrDHGbzj9tz8YZPWcOm3yNTCsTHQxxcnsoooi4bN9rwFVdb5e qp3XNKRMjvXDxLhlhKdMk3DlnG4j6+JjncNUB32Ik+odGWSMkM6fYvkwhBgNMpY6 wMpsE0ZHHDZ9+sw4Hkcq+bBYueX+WpROprFO1+8ow8Fi8xNXhLWPv3+IL4NOKRkh dTk+SwHZIxSCeTkzGbdwgGMn7VQKimQZEtQRODMgO9mf68fLR7uRBhVbvEyUnBJY LFjlLwOVEK9JKHEBFPgQWXO3Med+obyGqrsqej2iPO/r5OGpXBg= -----END CERTIFICATE-----Generated at Mon Sep 21 16:28:10 2026 by rpki-client