$ rpki-client -vvvf rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft File: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft (raw, json) Hash identifier: /X28J9yk8GvbElhcDMbFvhDpYnhPJgxSPSJBqnOwhVU= Subject key identifier: 9A:25:54:25:2B:0B:26:40:6A:52:5A:32:6F:46:99:7F:D2:76:64:71 Authority key identifier: D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A Certificate issuer: /CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A Certificate serial: 3327E37961010414AFB8B419A1A550AEBF921071 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft Manifest number: F0 Signing time: Wed 28 Oct 2026 08:51:13 +0000 Manifest this update: Wed 28 Oct 2026 08:46:13 +0000 Manifest next update: Thu 29 Oct 2026 11:08:13 +0000 Files and hashes: 1: D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl (hash: YuXS4PDhmoYxxhBO4zcJ7Of/50AqL3Eiee+zynnmgt4=) 2: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: 1bpFIvgYDWuL7Cg2M0uTafrSxAsJRzJnUZ4W6gSO7ZY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 29 Oct 2026 07:02:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:27:e3:79:61:01:04:14:af:b8:b4:19:a1:a5:50:ae:bf:92:10:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A Validity Not Before: Oct 28 08:46:13 2026 GMT Not After : Oct 29 11:08:13 2026 GMT Subject: CN=9A2554252B0B26406A525A326F46997FD2766471 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:56:03:f1:50:95:27:fe:59:e8:00:29:a0: d6:17:8c:d5:fa:26:ea:e3:ac:58:50:53:9e:e9:12: a2:23:22:07:13:9f:aa:c8:a9:84:08:2b:35:48:67: 27:1a:0f:99:20:d1:3c:c7:68:a1:fc:60:4c:de:ac: 41:77:4f:3a:05:5d:61:19:aa:60:31:f9:3f:35:56: 2f:f0:09:93:b4:c7:81:7c:c8:c2:d8:0e:c3:b4:27: 6b:fc:67:e7:b3:a5:99:5e:bb:6e:c5:a2:4f:76:13: 68:cc:de:69:2a:15:02:e3:82:0f:15:c8:bb:6d:68: da:fc:b0:40:50:c0:37:9f:d4:b6:be:d6:ab:63:da: 25:5e:12:7c:c7:56:b8:96:26:37:6f:05:dd:09:77: 33:cf:29:aa:bc:09:d9:5a:0b:65:f2:99:7b:3a:79: a1:4a:e4:9e:27:8c:33:46:27:58:55:19:5b:96:3f: bd:df:b2:70:91:9b:1a:a5:21:b6:2f:2a:2b:3b:7f: 72:f1:da:47:39:62:77:9b:0b:83:85:8e:d3:c9:3c: aa:d0:09:93:4d:7f:20:65:c9:ea:0f:c6:40:54:97: 20:d0:0d:fb:46:65:df:47:53:97:83:31:93:8d:9c: ab:2d:d5:fb:31:92:bb:0a:cb:39:ed:94:48:bd:13: e3:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:25:54:25:2B:0B:26:40:6A:52:5A:32:6F:46:99:7F:D2:76:64:71 X509v3 Authority Key Identifier: keyid:D7:5E:1B:F3:C8:E0:7E:27:23:16:BB:A1:43:58:E5:F9:E5:E9:E8:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/D75E1BF3C8E07E272316BBA14358E5F9E5E9E87A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:07:fc:cc:42:f6:70:39:2d:f9:eb:61:eb:b4:9b:31:5b:0b: bd:1d:2d:c8:7c:e7:13:69:a0:9c:ac:b5:f6:33:41:26:ab:20: a9:89:f9:7a:ef:75:28:d7:9c:25:e8:5d:95:c7:2d:de:4f:db: 32:a7:b4:87:36:ca:14:9a:f1:6f:89:08:47:29:dc:47:70:de: 1f:d6:5b:54:50:54:c5:71:cb:94:62:5b:fb:7e:c5:ca:28:73: 16:35:ce:19:d7:f9:c1:ee:75:c5:cf:f3:a2:a2:be:3b:89:f5: 8b:b3:a4:b2:f2:17:4d:9a:1f:c7:24:0e:17:c2:f3:7e:f4:0a: 02:25:6d:bc:b1:b7:10:25:64:90:6b:e8:a4:0b:c0:cc:5c:32: 4f:25:6b:e2:0d:1c:a1:4f:56:97:58:71:14:a2:59:67:0d:0a: af:30:d5:00:a1:cc:33:2f:b9:28:82:40:4e:45:e9:4f:02:8c: b3:1d:e4:06:42:46:17:77:db:45:9a:1a:f8:bd:a1:83:53:80: 9f:92:e6:4f:77:aa:08:25:ec:24:24:37:6b:30:56:69:23:92: fc:4e:ad:02:fa:ec:60:c5:05:da:b4:4a:e2:59:1d:a7:68:5e: 99:52:17:19:7f:9f:2b:ed:6f:18:85:5a:9f:d2:84:f7:7a:c5: a0:be:ff:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMyfjeWEBBBSvuLQZoaVQrr+SEHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc1RTFCRjNDOEUwN0UyNzIzMTZCQkExNDM1OEU1RjlF NUU5RTg3QTAeFw0yNjEwMjgwODQ2MTNaFw0yNjEwMjkxMTA4MTNaMDMxMTAvBgNV BAMTKDlBMjU1NDI1MkIwQjI2NDA2QTUyNUEzMjZGNDY5OTdGRDI3NjY0NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT1YD8VCVJ/5Z6AApoNYXjNX6 JurjrFhQU57pEqIjIgcTn6rIqYQIKzVIZycaD5kg0TzHaKH8YEzerEF3TzoFXWEZ qmAx+T81Vi/wCZO0x4F8yMLYDsO0J2v8Z+ezpZleu27Fok92E2jM3mkqFQLjgg8V yLttaNr8sEBQwDef1La+1qtj2iVeEnzHVriWJjdvBd0JdzPPKaq8CdlaC2XymXs6 eaFK5J4njDNGJ1hVGVuWP73fsnCRmxqlIbYvKis7f3Lx2kc5YnebC4OFjtPJPKrQ CZNNfyBlyeoPxkBUlyDQDftGZd9HU5eDMZONnKst1fsxkrsKyzntlEi9E+MzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmiVUJSsLJkBqUloyb0aZf9J2ZHEwHwYDVR0j BBgwFoAU114b88jgficjFruhQ1jl+eXp6HowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MjliM2JlNjItMzU5Ny00ZmU4LWE3OTUtZmM5YmExMjAyMzQ0LzAvRDc1RTFCRjND OEUwN0UyNzIzMTZCQkExNDM1OEU1RjlFNUU5RTg3QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9ENzVFMUJGM0M4RTA3RTI3MjMxNkJCQTE0MzU4RTVGOUU1RTlF ODdBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvRDc1RTFCRjNDOEUwN0UyNzIzMTZCQkExNDM1OEU1 RjlFNUU5RTg3QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFAH/MxC9nA5LfnrYeu0mzFbC70dLch85xNp oJystfYzQSarIKmJ+XrvdSjXnCXoXZXHLd5P2zKntIc2yhSa8W+JCEcp3Edw3h/W W1RQVMVxy5RiW/t+xcoocxY1zhnX+cHudcXP86KivjuJ9YuzpLLyF02aH8ckDhfC 8370CgIlbbyxtxAlZJBr6KQLwMxcMk8la+INHKFPVpdYcRSiWWcNCq8w1QChzDMv uSiCQE5F6U8CjLMd5AZCRhd320WaGvi9oYNTgJ+S5k93qggl7CQkN2swVmkjkvxO rQL67GDFBdq0SuJZHadoXplSFxl/nyvtbxiFWp/ShPd6xaC+/10= -----END CERTIFICATE-----Generated at Wed Oct 28 14:48:32 2026 by rpki-client