$ rpki-client -vvvf rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft File: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft (raw, json) Hash identifier: nYjUDk5dxlQVmwRhamJAC/bmhAj3vjhK1+9Us5LFSfQ= Subject key identifier: 2B:06:BF:C9:10:43:2C:62:C7:D0:16:E3:61:C8:93:B6:01:15:20:8C Authority key identifier: B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 Certificate issuer: /CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Certificate serial: 52DCD9C1637AB26B55BEE6F89787CA84C78F308C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 00:44:29 +0000 Manifest this update: Thu 17 Sep 2026 00:39:29 +0000 Manifest next update: Fri 18 Sep 2026 02:19:29 +0000 Files and hashes: 1: 3136302e31392e38362e302f32342d3234203d3e20313431363030.roa (hash: 04gnRp5NdkCVsfCRhM0EkwATPsm78cD7B2V1btMyUtQ=) 2: B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl (hash: ep/K4Ho7uef5/dx7zSD54aX8Rd79z1P6bJAEdvKuLWc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 02:19:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:dc:d9:c1:63:7a:b2:6b:55:be:e6:f8:97:87:ca:84:c7:8f:30:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B75F76DDA35ABFBDBA3203BECB4D08AA52800D28 Validity Not Before: Sep 17 00:39:29 2026 GMT Not After : Sep 18 02:19:29 2026 GMT Subject: CN=2B06BFC910432C62C7D016E361C893B60115208C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:59:ff:69:c4:b0:12:c0:88:e5:44:c8:19:4c: 9f:f7:82:f3:5c:13:6f:ea:d8:bf:da:68:26:2f:54: d0:cb:b5:b6:fe:21:08:42:9a:be:b2:46:cd:f8:4f: e3:31:32:c6:8c:10:8c:04:7f:a2:45:55:01:b9:19: e4:ae:6e:39:07:4f:24:58:fd:db:0d:77:e5:cd:8b: 93:e2:cc:d1:34:b8:96:e9:2b:33:5a:14:81:cb:37: b9:58:eb:34:a3:36:66:b5:6c:35:0e:9d:a4:69:3e: 47:22:98:da:89:0c:ca:62:db:2f:c8:57:97:a4:c5: 6c:b6:6e:4e:90:d6:2e:66:52:26:94:b5:00:54:90: 08:cb:d6:8b:e8:d4:0f:e2:53:81:f9:4b:ca:3e:e7: 33:77:f8:69:0d:18:1e:cf:40:68:b9:dc:99:d4:08: a9:a4:58:a5:8a:26:0a:d3:ae:9f:a0:ab:8c:be:a8: db:bc:69:1b:88:be:7a:32:4a:cc:4c:87:22:a7:32: cb:3c:31:9d:bd:b5:c7:01:93:16:64:45:6a:fe:26: f0:f6:5f:81:f8:df:f8:4c:fe:e4:40:07:ec:c4:ed: 04:e2:1f:71:59:11:41:db:31:d7:24:0d:9a:70:a2: ff:83:30:79:3f:aa:fb:68:0b:bd:46:dd:2f:d0:da: 33:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:06:BF:C9:10:43:2C:62:C7:D0:16:E3:61:C8:93:B6:01:15:20:8C X509v3 Authority Key Identifier: keyid:B7:5F:76:DD:A3:5A:BF:BD:BA:32:03:BE:CB:4D:08:AA:52:80:0D:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/3144d97a-e3fb-4ffc-b7f7-f7b8b6659ac4/0/B75F76DDA35ABFBDBA3203BECB4D08AA52800D28.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:3c:71:ee:b6:f1:4d:15:a1:28:ee:24:5b:a0:98:c5:a4:55: 4e:9e:c5:c5:8a:87:2c:d4:d8:00:3e:ba:1c:17:59:f4:b6:ff: ab:ef:91:54:3f:f1:39:40:f7:83:f8:ec:c1:31:24:13:7b:43: 29:3c:29:40:d0:1d:24:3c:50:3f:20:17:9f:6c:2b:33:d7:2b: 10:0d:d2:f0:ff:48:27:fd:0d:b6:72:a7:d3:c9:31:c1:22:43: 7f:32:13:35:35:aa:72:67:c6:a3:2b:1b:08:14:6c:36:fc:4c: 83:c5:19:7a:37:4b:06:c0:2b:34:28:7c:4f:1d:3c:05:58:26: e9:62:ba:ee:b1:39:d4:6e:4c:32:64:e0:cb:ad:2a:b7:ea:04: d3:b7:8d:35:80:60:0b:b8:cd:51:1b:d7:d3:b4:fb:6e:c2:6b: 04:f0:72:24:5f:62:59:1f:36:07:b9:59:d1:e2:3e:e5:f3:89: 58:5a:8a:0b:f1:ea:60:40:e7:7e:03:20:17:fd:a2:20:0a:54: 5f:18:1a:9f:65:21:57:1c:60:fe:49:d3:80:38:57:93:b0:e3: 01:e0:41:b5:17:11:08:0c:77:e4:a5:32:67:a0:76:12:fe:bf: 72:d1:d4:b1:d5:11:4d:2b:61:61:bc:2d:7d:b2:f2:4f:8e:07: 1d:1a:3c:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUtzZwWN6smtVvub4l4fKhMePMIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1 MjgwMEQyODAeFw0yNjA5MTcwMDM5MjlaFw0yNjA5MTgwMjE5MjlaMDMxMTAvBgNV BAMTKDJCMDZCRkM5MTA0MzJDNjJDN0QwMTZFMzYxQzg5M0I2MDExNTIwOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrWf9pxLASwIjlRMgZTJ/3gvNc E2/q2L/aaCYvVNDLtbb+IQhCmr6yRs34T+MxMsaMEIwEf6JFVQG5GeSubjkHTyRY /dsNd+XNi5PizNE0uJbpKzNaFIHLN7lY6zSjNma1bDUOnaRpPkcimNqJDMpi2y/I V5ekxWy2bk6Q1i5mUiaUtQBUkAjL1ovo1A/iU4H5S8o+5zN3+GkNGB7PQGi53JnU CKmkWKWKJgrTrp+gq4y+qNu8aRuIvnoySsxMhyKnMss8MZ29tccBkxZkRWr+JvD2 X4H43/hM/uRAB+zE7QTiH3FZEUHbMdckDZpwov+DMHk/qvtoC71G3S/Q2jOvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKwa/yRBDLGLH0BbjYciTtgEVIIwwHwYDVR0j BBgwFoAUt1923aNav726MgO+y00IqlKADSgwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MzE0NGQ5N2EtZTNmYi00ZmZjLWI3ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERB MzVBQkZCREJBMzIwM0JFQ0I0RDA4QUE1MjgwMEQyOC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC9CNzVGNzZEREEzNUFCRkJEQkEzMjAzQkVDQjREMDhBQTUyODAw RDI4LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMzE0NGQ5N2EtZTNmYi00ZmZjLWI3 ZjctZjdiOGI2NjU5YWM0LzAvQjc1Rjc2RERBMzVBQkZCREJBMzIwM0JFQ0I0RDA4 QUE1MjgwMEQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKg8ce628U0VoSjuJFugmMWkVU6excWKhyzU 2AA+uhwXWfS2/6vvkVQ/8TlA94P47MExJBN7Qyk8KUDQHSQ8UD8gF59sKzPXKxAN 0vD/SCf9DbZyp9PJMcEiQ38yEzU1qnJnxqMrGwgUbDb8TIPFGXo3SwbAKzQofE8d PAVYJuliuu6xOdRuTDJk4MutKrfqBNO3jTWAYAu4zVEb19O0+27CawTwciRfYlkf Nge5WdHiPuXziVhaigvx6mBA534DIBf9oiAKVF8YGp9lIVccYP5J04A4V5Ow4wHg QbUXEQgMd+SlMmegdhL+v3LR1LHVEU0rYWG8LX2y8k+OBx0aPEE= -----END CERTIFICATE-----Generated at Thu Sep 17 10:02:16 2026 by rpki-client