$ rpki-client -vvvf rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft File: C75B176F51C97718668FEDA09720687C8DBF14CD.mft (raw, json) Hash identifier: GEGc/8oIo+fbIcx/jF0NqSBtynRAi8djiUpPzXBBrKU= Subject key identifier: D4:F0:40:4E:50:B9:F6:7F:15:4B:06:20:FC:EA:87:39:07:29:C4:88 Authority key identifier: C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD Certificate issuer: /CN=C75B176F51C97718668FEDA09720687C8DBF14CD Certificate serial: 16C35BC4BF1856E5F487E2904C7CE3707AD5261F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft Manifest number: 0106 Signing time: Sun 15 Nov 2026 16:34:50 +0000 Manifest this update: Sun 15 Nov 2026 16:29:50 +0000 Manifest next update: Mon 16 Nov 2026 18:19:50 +0000 Files and hashes: 1: C75B176F51C97718668FEDA09720687C8DBF14CD.crl (hash: CHww/qgBd9zg7et7SxZRx0ra4UY8OPIyWNpv47Fd2j0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 16 Nov 2026 10:45:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:c3:5b:c4:bf:18:56:e5:f4:87:e2:90:4c:7c:e3:70:7a:d5:26:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C75B176F51C97718668FEDA09720687C8DBF14CD Validity Not Before: Nov 15 16:29:50 2026 GMT Not After : Nov 16 18:19:50 2026 GMT Subject: CN=D4F0404E50B9F67F154B0620FCEA87390729C488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9a:76:62:3f:5d:56:02:96:b3:87:a0:76:9e: c5:07:47:49:2a:5c:c8:f5:22:c5:76:9c:fe:19:02: 88:c9:90:3a:da:30:5f:a4:e7:f3:d5:78:cd:46:28: 4e:46:df:ba:37:4b:26:d1:bc:52:3a:80:7a:06:7e: 2a:7c:40:dc:8f:a5:11:c9:cb:22:e0:b0:06:49:bd: 86:c9:f5:46:3c:13:da:89:35:b9:68:f9:ac:33:b1: 78:6a:99:ad:e0:2f:8f:1f:fd:99:20:ab:0c:a3:5d: 65:c1:0c:d5:dd:b4:9f:18:31:59:07:d5:aa:b7:95: 46:5e:26:8c:84:a4:12:4e:23:31:2e:f1:c4:19:04: ad:af:59:ff:aa:c2:5c:e9:04:49:06:62:d2:1e:fc: f9:4d:16:e6:3e:ed:fd:09:fe:54:b3:5e:08:26:af: 77:78:a6:82:72:5d:dc:2e:1b:8f:bc:38:20:88:65: bf:12:37:13:64:0e:6e:ab:c4:b4:66:35:fa:00:81: c8:b3:06:b1:de:b0:6d:66:a1:bd:65:97:a6:bf:f6: 35:7c:65:8f:8e:fc:b2:c0:ae:ca:e8:07:b8:3d:64: 1f:6f:d7:d5:87:37:57:92:fd:a8:53:c9:bb:92:e4: d9:26:ab:10:e3:02:77:90:08:3f:75:08:b4:16:3c: 6b:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:F0:40:4E:50:B9:F6:7F:15:4B:06:20:FC:EA:87:39:07:29:C4:88 X509v3 Authority Key Identifier: keyid:C7:5B:17:6F:51:C9:77:18:66:8F:ED:A0:97:20:68:7C:8D:BF:14:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/C75B176F51C97718668FEDA09720687C8DBF14CD.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/90649ef5-c484-4f41-a054-d6ce39c1f506/0/C75B176F51C97718668FEDA09720687C8DBF14CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:7f:17:da:36:a0:51:c8:f1:86:43:74:2d:7a:63:cb:25:fa: 24:3b:34:57:09:f3:7a:db:56:87:ee:57:27:8c:ec:9d:b1:02: aa:17:78:fe:e8:bb:99:e1:8c:b0:f7:38:50:c9:07:02:f2:76: e8:fe:6e:9d:94:5c:e6:a6:3c:2e:0d:d2:32:62:b7:fb:65:e0: 2f:9c:0e:d3:f3:e7:ee:75:7c:67:21:7a:a7:83:67:ee:ca:af: 14:2f:bf:3f:59:eb:33:23:47:6d:e2:35:00:6e:15:67:36:c5: 38:63:38:d5:6e:09:bb:81:bf:2d:ac:5c:ce:d1:96:fb:6d:9b: 44:d3:5e:e4:ed:6a:b6:a5:a5:35:c2:3d:26:80:22:e6:36:ab: 72:81:5e:14:11:11:a7:3a:97:43:86:98:70:20:76:5b:b5:79: 41:e6:6e:ea:2d:b4:3d:9e:ad:b8:cd:2f:a4:3f:e6:2f:90:0e: 97:df:d9:4e:9a:c7:66:a6:34:44:38:ca:35:0c:54:3d:cd:ec: c6:a9:8d:5d:8c:21:7c:82:5a:1e:7d:f2:bf:1c:f7:31:b2:2a: 96:8d:6e:e0:2e:25:19:ac:ab:1f:b5:72:e7:56:f6:c5:af:ae: 4f:88:4f:53:0e:74:d4:e4:99:dd:cd:50:52:a6:e8:24:aa:0f: 9f:63:fc:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFsNbxL8YVuX0h+KQTHzjcHrVJh8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc1QjE3NkY1MUM5NzcxODY2OEZFREEwOTcyMDY4N0M4 REJGMTRDRDAeFw0yNjExMTUxNjI5NTBaFw0yNjExMTYxODE5NTBaMDMxMTAvBgNV BAMTKEQ0RjA0MDRFNTBCOUY2N0YxNTRCMDYyMEZDRUE4NzM5MDcyOUM0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmnZiP11WApazh6B2nsUHR0kq XMj1IsV2nP4ZAojJkDraMF+k5/PVeM1GKE5G37o3SybRvFI6gHoGfip8QNyPpRHJ yyLgsAZJvYbJ9UY8E9qJNblo+awzsXhqma3gL48f/ZkgqwyjXWXBDNXdtJ8YMVkH 1aq3lUZeJoyEpBJOIzEu8cQZBK2vWf+qwlzpBEkGYtIe/PlNFuY+7f0J/lSzXggm r3d4poJyXdwuG4+8OCCIZb8SNxNkDm6rxLRmNfoAgcizBrHesG1mob1ll6a/9jV8 ZY+O/LLArsroB7g9ZB9v19WHN1eS/ahTybuS5NkmqxDjAneQCD91CLQWPGvfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1PBATlC59n8VSwYg/OqHOQcpxIgwHwYDVR0j BBgwFoAUx1sXb1HJdxhmj+2glyBofI2/FM0wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OTA2NDllZjUtYzQ4NC00ZjQxLWEwNTQtZDZjZTM5YzFmNTA2LzAvQzc1QjE3NkY1 MUM5NzcxODY2OEZFREEwOTcyMDY4N0M4REJGMTRDRC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9DNzVCMTc2RjUxQzk3NzE4NjY4RkVEQTA5NzIwNjg3QzhEQkYx NENELmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOTA2NDllZjUtYzQ4NC00ZjQxLWEw NTQtZDZjZTM5YzFmNTA2LzAvQzc1QjE3NkY1MUM5NzcxODY2OEZFREEwOTcyMDY4 N0M4REJGMTRDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl/F9o2oFHI8YZDdC16Y8sl+iQ7NFcJ83rb VofuVyeM7J2xAqoXeP7ou5nhjLD3OFDJBwLyduj+bp2UXOamPC4N0jJit/tl4C+c DtPz5+51fGcheqeDZ+7KrxQvvz9Z6zMjR23iNQBuFWc2xThjONVuCbuBvy2sXM7R lvttm0TTXuTtaralpTXCPSaAIuY2q3KBXhQREac6l0OGmHAgdlu1eUHmbuottD2e rbjNL6Q/5i+QDpff2U6ax2amNEQ4yjUMVD3N7MapjV2MIXyCWh598r8c9zGyKpaN buAuJRmsqx+1cudW9sWvrk+IT1MOdNTkmd3NUFKm6CSqD59j/Kw= -----END CERTIFICATE-----Generated at Sun Nov 15 20:57:04 2026 by rpki-client