$ rpki-client -vvvf rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft File: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft (raw, json) Hash identifier: q0Nehh7mBPL4IbLYabCj+il0VJ1+RhnC7hg/3sHk+YI= Subject key identifier: BE:6D:A6:A8:A7:81:20:51:A3:DA:90:EA:DC:C8:29:57:46:97:08:E4 Authority key identifier: 75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E Certificate issuer: /CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E Certificate serial: 6D20D49C824BDD62B1197916C8D1DC92D8884C85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft Manifest number: BE Signing time: Mon 21 Sep 2026 04:11:46 +0000 Manifest this update: Mon 21 Sep 2026 04:06:46 +0000 Manifest next update: Tue 22 Sep 2026 04:35:46 +0000 Files and hashes: 1: 3130332e3136362e34342e302f32332d3233203d3e20313431393335.roa (hash: WYsfpXuk+twMKamB2Cainkplei1Yhkq2SXWGKBJS4oo=) 2: 3130332e3136362e34342e302f32342d3234203d3e20313431393335.roa (hash: EEEc99vXoE2Npy/NOJRBMrKblV42yAqKIxiksvrcrrs=) 3: 3130332e3136362e34352e302f32342d3234203d3e20313431393335.roa (hash: 71ufcrIpd5/EvIBttOzN/s4e00TuL2D++Ya5GnzoM0s=) 4: 75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl (hash: sAk/1rt02WMxkQMiPUKcl5g9BZjqYi/Eyu9cDPNn9Wg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 04:35:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:20:d4:9c:82:4b:dd:62:b1:19:79:16:c8:d1:dc:92:d8:88:4c:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75991C463FC7961ED305ED989AAA4C0EA2C0B30E Validity Not Before: Sep 21 04:06:46 2026 GMT Not After : Sep 22 04:35:46 2026 GMT Subject: CN=BE6DA6A8A7812051A3DA90EADCC82957469708E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e9:3e:ff:bf:39:21:01:49:7f:0c:35:32:15: fd:f1:f0:ff:0f:2f:cd:87:60:1b:f3:ea:5c:13:41: 4f:30:13:56:8f:c7:07:08:b7:a3:74:de:f8:83:ca: ad:94:33:9a:de:0c:24:84:9d:e4:db:79:ec:6f:07: 9d:11:fc:ee:5e:12:f1:34:3b:af:2d:40:82:3b:6f: 90:4b:ef:f5:3a:f2:e8:5b:31:08:72:27:ca:22:c0: 4b:ec:29:ad:d3:15:6a:59:5a:de:2e:ed:0d:92:f5: 08:cc:d2:f3:19:a1:c5:d9:c7:80:42:33:9d:0e:4c: 2e:01:a9:d7:86:f7:81:2c:d8:ff:7e:d1:b5:34:9b: 79:12:c8:60:a0:66:f9:45:9c:fd:0b:29:63:16:40: ac:a1:ed:19:20:64:63:e3:7e:d3:1c:d9:6a:29:a2: 14:aa:7a:0d:e0:b7:46:a9:42:94:59:44:1d:41:9c: 89:14:cd:78:2f:91:bc:56:b5:aa:5f:5e:e1:31:01: a9:7a:56:cb:da:a8:75:4e:6c:36:89:1d:6d:0f:17: 37:6e:bf:8f:87:67:df:8c:40:07:f0:eb:be:a0:93: 2a:30:b1:1e:8a:04:3c:5b:68:c6:30:2c:46:30:32: 9f:1a:28:0d:9e:54:bb:f7:29:53:23:af:f0:f4:03: ca:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:6D:A6:A8:A7:81:20:51:A3:DA:90:EA:DC:C8:29:57:46:97:08:E4 X509v3 Authority Key Identifier: keyid:75:99:1C:46:3F:C7:96:1E:D3:05:ED:98:9A:AA:4C:0E:A2:C0:B3:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/349dc5eb-3260-428a-a6c0-dc0f636b3307/0/75991C463FC7961ED305ED989AAA4C0EA2C0B30E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:3a:2c:b5:98:96:9c:aa:1a:2b:a1:ed:ff:7c:cf:11:2a:dc: d2:e9:31:a5:5f:bd:65:d0:47:88:ce:87:19:3c:a7:9a:88:0d: d4:e1:db:bf:52:af:e4:8e:66:ed:90:c8:e2:c2:19:00:bf:04: f5:6c:16:54:f5:81:94:5c:53:ac:1e:c6:03:b0:d9:c3:73:3e: 7d:04:d6:fc:f6:da:d4:4d:3b:de:eb:bd:d8:3f:23:e3:17:f1: a6:53:d9:76:73:fe:f4:04:35:fc:1b:b7:02:9e:56:5e:f4:78: ca:32:f7:c3:e0:80:42:16:a2:41:6e:3b:51:d1:2b:2e:32:20: 7e:cc:db:e7:41:a8:b3:1f:77:ac:1a:75:01:cd:85:15:4a:dc: 4d:cd:8a:2c:3b:de:5d:ea:92:76:76:28:e6:5f:a8:dd:57:af: 4d:2a:b0:db:e3:e7:8c:2c:69:a5:cb:99:f9:4e:df:ad:4b:b9: 37:ef:2f:32:4d:5b:54:94:80:5f:53:cb:64:d4:10:81:a1:01: 36:63:c0:b1:12:49:eb:d6:3c:2c:37:1a:bb:bb:eb:0b:11:59: 0e:7c:e1:3f:97:8f:26:05:cd:2e:c5:7f:f6:50:f4:55:eb:dc: 36:03:2f:5e:fd:9d:30:b3:7d:0c:70:e6:86:0d:01:06:ac:e0: 2a:46:75:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbSDUnIJL3WKxGXkWyNHcktiITIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVB MkMwQjMwRTAeFw0yNjA5MjEwNDA2NDZaFw0yNjA5MjIwNDM1NDZaMDMxMTAvBgNV BAMTKEJFNkRBNkE4QTc4MTIwNTFBM0RBOTBFQURDQzgyOTU3NDY5NzA4RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf6T7/vzkhAUl/DDUyFf3x8P8P L82HYBvz6lwTQU8wE1aPxwcIt6N03viDyq2UM5reDCSEneTbeexvB50R/O5eEvE0 O68tQII7b5BL7/U68uhbMQhyJ8oiwEvsKa3TFWpZWt4u7Q2S9QjM0vMZocXZx4BC M50OTC4BqdeG94Es2P9+0bU0m3kSyGCgZvlFnP0LKWMWQKyh7RkgZGPjftMc2Wop ohSqeg3gt0apQpRZRB1BnIkUzXgvkbxWtapfXuExAal6VsvaqHVObDaJHW0PFzdu v4+HZ9+MQAfw676gkyowsR6KBDxbaMYwLEYwMp8aKA2eVLv3KVMjr/D0A8p/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvm2mqKeBIFGj2pDq3MgpV0aXCOQwHwYDVR0j BBgwFoAUdZkcRj/Hlh7TBe2YmqpMDqLAsw4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzQ5ZGM1ZWItMzI2MC00MjhhLWE2YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYz RkM3OTYxRUQzMDVFRDk4OUFBQTRDMEVBMkMwQjMwRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NTk5MUM0NjNGQzc5NjFFRDMwNUVEOTg5QUFBNEMwRUEyQzBC MzBFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzQ5ZGM1ZWItMzI2MC00MjhhLWE2 YzAtZGMwZjYzNmIzMzA3LzAvNzU5OTFDNDYzRkM3OTYxRUQzMDVFRDk4OUFBQTRD MEVBMkMwQjMwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGg6LLWYlpyqGiuh7f98zxEq3NLpMaVfvWXQ R4jOhxk8p5qIDdTh279Sr+SOZu2QyOLCGQC/BPVsFlT1gZRcU6wexgOw2cNzPn0E 1vz22tRNO97rvdg/I+MX8aZT2XZz/vQENfwbtwKeVl70eMoy98PggEIWokFuO1HR Ky4yIH7M2+dBqLMfd6wadQHNhRVK3E3Niiw73l3qknZ2KOZfqN1Xr00qsNvj54ws aaXLmflO361LuTfvLzJNW1SUgF9Ty2TUEIGhATZjwLESSevWPCw3Gru76wsRWQ58 4T+XjyYFzS7Ff/ZQ9FXr3DYDL179nTCzfQxw5oYNAQas4CpGdSQ= -----END CERTIFICATE-----Generated at Mon Sep 21 19:54:43 2026 by rpki-client