$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: BTfUvg1f5kleg87OeShlpWloYO0pMKMCn7qUV/gVCrY= Subject key identifier: 8A:0A:CD:52:17:BE:30:7A:DC:95:B3:C8:EC:DC:81:80:41:63:45:DA Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 3A882FBC5B34BBCCAFFBF9808D1A753ED69DC402 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: F5 Signing time: Mon 02 Nov 2026 18:00:20 +0000 Manifest this update: Mon 02 Nov 2026 17:55:20 +0000 Manifest next update: Tue 03 Nov 2026 21:12:20 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) 2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: SGHbIY1PixCQqFtqIw0dfUG6r47NiERpdeCgElI0dMI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Nov 2026 21:12:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:88:2f:bc:5b:34:bb:cc:af:fb:f9:80:8d:1a:75:3e:d6:9d:c4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: Nov 2 17:55:20 2026 GMT Not After : Nov 3 21:12:20 2026 GMT Subject: CN=8A0ACD5217BE307ADC95B3C8ECDC8180416345DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:64:ea:82:2c:1e:83:1a:75:5c:fe:80:a8:9c: 75:fe:83:e3:27:62:e0:07:00:71:3d:eb:1a:6c:74: 64:c4:30:0c:5c:d2:f7:7f:20:53:a8:a9:3e:1e:2e: 23:31:7c:61:e2:02:0f:b7:95:63:eb:15:9b:64:e7: 9b:f1:2b:1b:43:68:5d:48:91:72:27:85:40:a4:25: 41:67:3a:c1:1d:ad:14:15:91:ff:2b:10:36:00:4c: ea:c2:41:1e:53:9e:18:30:9c:3b:8a:10:b8:bb:7d: c8:99:14:67:79:54:48:eb:a8:7e:0c:f3:54:dc:2d: d0:03:4f:d9:d0:b0:b0:b7:e2:36:e9:89:ff:0d:19: 11:d7:ee:39:57:a3:d3:22:a4:43:4e:7d:21:a3:9e: ef:50:4a:67:23:02:8d:49:ac:8c:56:ce:80:9c:7c: e3:58:26:a2:89:fe:b0:c4:53:b5:61:4d:42:59:cd: 11:b6:7f:76:ca:0b:b3:d4:b4:2b:b3:ef:de:14:12: 60:be:0d:5f:72:e0:2b:fc:13:c2:de:a8:4b:89:74: 7e:92:9d:27:8d:84:b8:b1:16:c5:10:31:90:4f:5c: 0d:bd:3e:24:0d:22:9e:c6:14:8b:0f:dc:5f:53:91: c8:48:54:c0:32:42:2b:19:04:d6:c7:97:0f:e9:79: 4f:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0A:CD:52:17:BE:30:7A:DC:95:B3:C8:EC:DC:81:80:41:63:45:DA X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:d4:de:d1:2b:52:5d:25:56:45:7a:c3:56:af:b9:c9:58:9a: 63:b8:ac:9e:7d:97:d7:71:bd:1c:d2:1b:04:03:f8:25:75:ce: 02:86:79:70:c7:7d:2d:7a:bb:cc:1f:1b:3a:e4:23:16:96:3b: 16:53:bc:41:2a:56:eb:84:69:e5:4c:2f:ab:0d:4f:1f:d6:1d: 3d:ec:3a:cc:2e:cc:f2:20:d1:4b:00:5f:5c:3a:cf:1a:c2:2d: f4:63:9c:a1:2b:84:76:31:e9:67:5e:61:ce:44:46:39:68:a9: b9:99:ee:cf:53:a4:c5:9b:52:c7:2a:bf:23:4a:97:68:83:5e: b1:54:a8:64:b2:f8:53:c7:01:24:c8:0d:9b:9c:4e:0a:bc:38: ee:5f:64:9f:92:7b:d2:c4:97:e7:9e:8f:81:93:31:86:5a:e7: cc:d6:6d:e6:b7:95:ad:db:d0:ad:06:ce:39:f2:29:b8:bb:34: 34:64:82:05:4a:7e:b0:ec:7d:dd:f9:fb:19:84:6f:85:93:2e: eb:7c:89:fe:ea:0a:d5:1e:af:24:9f:b0:63:ec:a2:df:a8:fb: 40:63:6b:24:fa:99:cc:4f:43:7a:25:94:57:99:71:95:28:a3: ff:df:41:14:97:64:b0:a3:21:97:6b:52:dc:ed:29:a8:c3:10: cd:08:52:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOogvvFs0u8yv+/mAjRp1PtadxAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjExMDIxNzU1MjBaFw0yNjExMDMyMTEyMjBaMDMxMTAvBgNV BAMTKDhBMEFDRDUyMTdCRTMwN0FEQzk1QjNDOEVDREM4MTgwNDE2MzQ1REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTZOqCLB6DGnVc/oConHX+g+Mn YuAHAHE96xpsdGTEMAxc0vd/IFOoqT4eLiMxfGHiAg+3lWPrFZtk55vxKxtDaF1I kXInhUCkJUFnOsEdrRQVkf8rEDYATOrCQR5TnhgwnDuKELi7fciZFGd5VEjrqH4M 81TcLdADT9nQsLC34jbpif8NGRHX7jlXo9MipENOfSGjnu9QSmcjAo1JrIxWzoCc fONYJqKJ/rDEU7VhTUJZzRG2f3bKC7PUtCuz794UEmC+DV9y4Cv8E8LeqEuJdH6S nSeNhLixFsUQMZBPXA29PiQNIp7GFIsP3F9TkchIVMAyQisZBNbHlw/peU9LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUigrNUhe+MHrclbPI7NyBgEFjRdowHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjU3tErUl0lVkV6w1avuclYmmO4rJ59l9dx vRzSGwQD+CV1zgKGeXDHfS16u8wfGzrkIxaWOxZTvEEqVuuEaeVML6sNTx/WHT3s OswuzPIg0UsAX1w6zxrCLfRjnKErhHYx6WdeYc5ERjloqbmZ7s9TpMWbUscqvyNK l2iDXrFUqGSy+FPHASTIDZucTgq8OO5fZJ+Se9LEl+eej4GTMYZa58zWbea3la3b 0K0GzjnyKbi7NDRkggVKfrDsfd35+xmEb4WTLut8if7qCtUerySfsGPsot+o+0Bj ayT6mcxPQ3ollFeZcZUoo//fQRSXZLCjIZdrUtztKajDEM0IUvc= -----END CERTIFICATE-----Generated at Tue Nov 3 08:40:12 2026 by rpki-client