$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft (raw, json) Hash identifier: mMdGrR8EuLTO64uzCnF9CuCw0EE4lueNOo/VRDo81U8= Subject key identifier: 41:38:78:AD:D4:88:95:B3:A7:0C:1B:98:AA:D4:DB:D6:1E:E8:03:A3 Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Certificate serial: 72740076F4035C0B937FECB309DFF897DFB13C6E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft Manifest number: BC Signing time: Mon 21 Sep 2026 01:23:14 +0000 Manifest this update: Mon 21 Sep 2026 01:18:14 +0000 Manifest next update: Tue 22 Sep 2026 02:18:14 +0000 Files and hashes: 1: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl (hash: iA8rCvQk3BGj63QPHg2qNZZCf5cdgwVr5DyiCj4rYPE=) 2: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=) 3: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=) 4: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: +LMzTIT3HAm9qO4qM7ZOTI2OEw2Fm2hgpEAqo+PYvZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 02:18:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:74:00:76:f4:03:5c:0b:93:7f:ec:b3:09:df:f8:97:df:b1:3c:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Validity Not Before: Sep 21 01:18:14 2026 GMT Not After : Sep 22 02:18:14 2026 GMT Subject: CN=413878ADD48895B3A70C1B98AAD4DBD61EE803A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:9d:91:15:0b:2d:88:6f:c4:67:52:44:81:0e: 24:e9:ec:b7:eb:ed:ca:6d:bd:ed:f7:46:f1:b7:30: 4f:66:b9:c4:be:49:af:b4:fc:8e:6f:bf:f8:6f:30: 3c:6c:e2:69:60:f5:f6:95:c1:ed:0b:5a:fb:4c:cd: 7b:01:1e:6f:29:c5:98:ad:93:e8:cd:fe:d4:18:d2: fc:74:72:fd:00:6e:7e:4f:17:30:f3:08:7d:c3:4f: e7:10:7a:06:ad:86:84:2a:09:d5:15:fc:89:b5:c6: 23:1d:32:a3:0e:47:16:15:d8:a0:b3:5e:09:a5:31: 02:ed:ac:3a:22:66:ec:0b:5f:2d:fb:7a:47:4f:cb: 8a:b2:ee:6e:fb:3b:7d:50:58:16:5b:ee:a8:23:0f: fc:15:76:a3:9b:5f:de:e4:97:66:78:26:88:ac:eb: 32:6f:9e:ab:06:76:f3:4e:88:18:c5:ac:0d:e6:c7: 4c:07:8f:a3:7d:ba:79:fb:5e:c9:18:99:c2:5a:c9: 4b:9e:35:b2:a7:cc:95:93:f4:f3:ce:7f:91:cb:89: e9:c3:48:3d:ee:18:32:03:4e:59:6e:fa:b5:4a:31: d4:a5:b5:cc:4a:c1:13:87:00:ce:2b:f0:e7:8b:96: ae:70:63:bc:23:2d:97:f9:d0:6a:fc:e9:4a:ed:4d: 79:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:38:78:AD:D4:88:95:B3:A7:0C:1B:98:AA:D4:DB:D6:1E:E8:03:A3 X509v3 Authority Key Identifier: keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:87:60:5c:a1:2f:65:cb:4f:61:2a:02:90:70:ff:e7:e3:b1: f5:c3:4d:db:6e:6e:75:ce:68:29:b2:43:e0:ab:c3:4c:b7:d7: 80:69:42:61:78:41:3c:d6:66:39:d9:f4:f1:b2:bd:e6:ee:8a: 43:72:4a:18:4a:69:65:d0:a6:68:39:7f:08:48:4b:29:ef:26: ab:6f:2b:69:78:63:6c:7a:e4:0b:ca:01:ec:27:74:42:d1:c1: e8:d0:06:c3:c6:5e:3e:cb:2b:d2:0b:1d:31:45:ae:c2:a5:e1: 1b:77:37:24:59:c1:16:ed:fe:8e:93:63:42:40:8b:cf:b4:29: 6e:52:69:b8:dd:dd:e0:b4:49:b1:5a:ea:b9:09:09:90:a0:48: 4b:4f:29:ee:f3:8f:11:a9:59:62:7a:1c:73:cb:e1:c8:2e:24: 3d:76:4f:fa:ae:e5:84:44:0b:bf:a9:90:dc:c9:58:7c:78:b2: fd:94:4e:6d:ee:7d:d3:16:2f:ce:a3:d4:75:e0:24:33:41:f9: cf:09:6d:6b:5c:2e:61:63:34:34:2f:8f:0c:db:99:f3:34:3c: f2:59:77:5b:04:ee:da:2a:47:e0:18:49:36:5e:6f:b9:be:bb: e8:02:5a:a5:bb:a5:f1:6e:86:63:89:c1:91:34:1e:bd:42:84: ca:18:b3:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcnQAdvQDXAuTf+yzCd/4l9+xPG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNC RkE5RUYwMzAeFw0yNjA5MjEwMTE4MTRaFw0yNjA5MjIwMjE4MTRaMDMxMTAvBgNV BAMTKDQxMzg3OEFERDQ4ODk1QjNBNzBDMUI5OEFBRDREQkQ2MUVFODAzQTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgnZEVCy2Ib8RnUkSBDiTp7Lfr 7cptve33RvG3ME9mucS+Sa+0/I5vv/hvMDxs4mlg9faVwe0LWvtMzXsBHm8pxZit k+jN/tQY0vx0cv0Abn5PFzDzCH3DT+cQegathoQqCdUV/Im1xiMdMqMORxYV2KCz XgmlMQLtrDoiZuwLXy37ekdPy4qy7m77O31QWBZb7qgjD/wVdqObX97kl2Z4Jois 6zJvnqsGdvNOiBjFrA3mx0wHj6N9unn7XskYmcJayUueNbKnzJWT9PPOf5HLienD SD3uGDIDTllu+rVKMdSltcxKwROHAM4r8OeLlq5wY7wjLZf50Gr86UrtTXkJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQTh4rdSIlbOnDBuYqtTb1h7oA6MwHwYDVR0j BBgwFoAU9199jfpg/It3+Ki1m0T1vL+p7wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzNjc0YTYtMTE0Zi00YmI1LTg1YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERG QTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNCRkE5RUYwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzVGN0Q4REZBNjBGQzhCNzdGOEE4QjU5QjQ0RjVCQ0JGQTlF RjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1 QkNCRkE5RUYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2HYFyhL2XLT2EqApBw/+fjsfXDTdtubnXO aCmyQ+Crw0y314BpQmF4QTzWZjnZ9PGyvebuikNyShhKaWXQpmg5fwhISynvJqtv K2l4Y2x65AvKAewndELRwejQBsPGXj7LK9ILHTFFrsKl4Rt3NyRZwRbt/o6TY0JA i8+0KW5Sabjd3eC0SbFa6rkJCZCgSEtPKe7zjxGpWWJ6HHPL4cguJD12T/qu5YRE C7+pkNzJWHx4sv2UTm3ufdMWL86j1HXgJDNB+c8JbWtcLmFjNDQvjwzbmfM0PPJZ d1sE7toqR+AYSTZeb7m+u+gCWqW7pfFuhmOJwZE0Hr1ChMoYs4Y= -----END CERTIFICATE-----Generated at Mon Sep 21 10:41:00 2026 by rpki-client