$ rpki-client -vvvf rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft File: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft (raw, json) Hash identifier: +KuR2+AjO9xp/UG+kOlyGtPcjfBO4MpqgvH+QwMQu7U= Subject key identifier: 0E:BC:3E:CB:88:D0:DD:F6:ED:E4:E3:C8:1A:E9:BF:E5:E9:DD:C4:62 Authority key identifier: F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 Certificate issuer: /CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Certificate serial: 74742E94D431F33A0BE4D6CCC128B10DF4162522 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft Manifest number: A4 Signing time: Wed 02 Sep 2026 17:29:05 +0000 Manifest this update: Wed 02 Sep 2026 17:24:05 +0000 Manifest next update: Thu 03 Sep 2026 19:16:05 +0000 Files and hashes: 1: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: tBhrmLE+sXzWSMZvu2dss/OhOSLFTgjcN6XgFvCBY50=) 2: F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl (hash: w1BftM1zT7LMjBrctvuA5xUy0AdXPzbMDLKLljno/jE=) 3: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: yMpPQFyRnV2e6YSTMgcG1XsvzjweuetzgCss3TkjuJ0=) 4: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: +LMzTIT3HAm9qO4qM7ZOTI2OEw2Fm2hgpEAqo+PYvZw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 19:16:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:74:2e:94:d4:31:f3:3a:0b:e4:d6:cc:c1:28:b1:0d:f4:16:25:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03 Validity Not Before: Sep 2 17:24:05 2026 GMT Not After : Sep 3 19:16:05 2026 GMT Subject: CN=0EBC3ECB88D0DDF6EDE4E3C81AE9BFE5E9DDC462 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ed:3e:a1:95:00:3f:08:2f:7e:7b:ce:ef:08: 7a:59:c1:8b:6d:b7:53:4a:62:3e:07:53:eb:0d:9e: 89:79:0d:bd:27:5a:6b:aa:6a:2f:fb:8a:ad:39:10: 26:1b:0a:c6:c0:0b:6a:93:27:2e:58:4a:1b:a6:2d: 22:6a:cb:f6:8d:62:31:1a:6e:38:22:74:b3:49:ce: a5:c3:3f:93:fc:3d:5b:b6:08:3c:20:30:80:1c:66: a7:36:1b:0e:8e:4d:80:9f:62:f3:a9:ee:b1:4d:8d: 30:30:c3:66:a3:05:13:a5:f6:c0:38:3d:c2:97:0c: a0:a3:7a:a8:c5:97:42:d1:5c:7c:5c:d1:29:e3:aa: b4:25:b5:20:3d:84:93:4e:5f:dd:34:5a:31:93:34: 01:16:55:e5:8d:b8:85:11:8a:f5:1e:4f:bc:bd:3a: 3d:bc:51:c5:8f:d7:fe:bf:92:22:16:0c:e4:4a:46: 3d:97:e4:5d:71:92:29:97:b0:49:01:ae:f9:09:02: 8c:db:89:e8:b3:ea:c5:19:60:10:85:47:3a:5c:fd: 08:d2:a0:05:21:4d:62:38:8f:fe:e2:29:10:d5:2c: ae:31:b4:41:93:94:1f:d6:32:45:1f:65:80:2b:7b: 8d:19:89:1f:65:66:46:39:0f:6d:69:60:4c:d2:e8: 84:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BC:3E:CB:88:D0:DD:F6:ED:E4:E3:C8:1A:E9:BF:E5:E9:DD:C4:62 X509v3 Authority Key Identifier: keyid:F7:5F:7D:8D:FA:60:FC:8B:77:F8:A8:B5:9B:44:F5:BC:BF:A9:EF:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/F75F7D8DFA60FC8B77F8A8B59B44F5BCBFA9EF03.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7c:26:fc:a5:49:bc:fd:f2:74:f2:58:e5:1a:4f:03:59:11: a2:cb:88:41:04:5b:8d:ea:76:00:d0:04:02:cc:06:ab:f0:dd: 4e:c1:62:4a:3d:09:40:78:ee:0c:d1:11:0c:b3:78:3f:87:00: 4f:19:36:0c:2d:d5:a1:57:5f:0b:32:bb:ea:47:61:55:2f:a9: 48:9d:19:14:d4:03:9e:2c:30:43:fa:30:b1:82:a9:32:10:9a: b5:f4:d0:22:f6:51:fb:0c:bd:8c:4a:59:59:74:46:93:c7:16: 8c:46:96:76:11:bc:94:94:34:54:03:d4:60:85:96:41:de:9b: ab:33:a4:f0:a3:08:83:01:5c:ca:d0:b8:d8:0e:18:66:ad:a9: cf:8a:22:60:18:68:d0:cd:8b:3e:bf:63:6a:12:3e:c8:df:6b: 38:df:0e:a2:ec:19:fa:9f:95:01:7f:f1:55:11:4a:7e:c1:05: e8:9f:f8:eb:2d:91:77:e5:8a:ea:9b:77:15:81:aa:a8:47:28: 68:6f:1b:3b:e8:8c:50:67:67:b6:9b:5b:82:f1:7f:4b:64:0d: 85:90:45:d5:b4:9d:0a:91:13:a1:9e:09:ba:21:6d:23:d1:c7: 60:c0:3d:c8:64:6e:1e:36:14:cf:c6:16:b9:82:89:c3:8c:f7: ec:f7:78:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHQulNQx8zoL5NbMwSixDfQWJSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNC RkE5RUYwMzAeFw0yNjA5MDIxNzI0MDVaFw0yNjA5MDMxOTE2MDVaMDMxMTAvBgNV BAMTKDBFQkMzRUNCODhEMERERjZFREU0RTNDODFBRTlCRkU1RTlEREM0NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF7T6hlQA/CC9+e87vCHpZwYtt t1NKYj4HU+sNnol5Db0nWmuqai/7iq05ECYbCsbAC2qTJy5YShumLSJqy/aNYjEa bjgidLNJzqXDP5P8PVu2CDwgMIAcZqc2Gw6OTYCfYvOp7rFNjTAww2ajBROl9sA4 PcKXDKCjeqjFl0LRXHxc0SnjqrQltSA9hJNOX900WjGTNAEWVeWNuIURivUeT7y9 Oj28UcWP1/6/kiIWDORKRj2X5F1xkimXsEkBrvkJAozbieiz6sUZYBCFRzpc/QjS oAUhTWI4j/7iKRDVLK4xtEGTlB/WMkUfZYAre40ZiR9lZkY5D21pYEzS6ITfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDrw+y4jQ3fbt5OPIGum/5endxGIwHwYDVR0j BBgwFoAU9199jfpg/It3+Ki1m0T1vL+p7wMwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZDkzNjc0YTYtMTE0Zi00YmI1LTg1YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERG QTYwRkM4Qjc3RjhBOEI1OUI0NEY1QkNCRkE5RUYwMy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9GNzVGN0Q4REZBNjBGQzhCNzdGOEE4QjU5QjQ0RjVCQ0JGQTlF RjAzLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvRjc1RjdEOERGQTYwRkM4Qjc3RjhBOEI1OUI0NEY1 QkNCRkE5RUYwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF8JvylSbz98nTyWOUaTwNZEaLLiEEEW43q dgDQBALMBqvw3U7BYko9CUB47gzREQyzeD+HAE8ZNgwt1aFXXwsyu+pHYVUvqUid GRTUA54sMEP6MLGCqTIQmrX00CL2UfsMvYxKWVl0RpPHFoxGlnYRvJSUNFQD1GCF lkHem6szpPCjCIMBXMrQuNgOGGatqc+KImAYaNDNiz6/Y2oSPsjfazjfDqLsGfqf lQF/8VURSn7BBeif+OstkXfliuqbdxWBqqhHKGhvGzvojFBnZ7abW4Lxf0tkDYWQ RdW0nQqRE6GeCbohbSPRx2DAPchkbh42FM/GFrmCicOM9+z3eMo= -----END CERTIFICATE-----Generated at Thu Sep 3 05:06:29 2026 by rpki-client