$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft File: 75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft (raw, json) Hash identifier: clOHmKNhkV3fhy448TXbvcGMd51olDxPnsat9j8NTb0= Subject key identifier: 20:DC:A4:3C:D8:A1:AC:0F:AD:4F:36:02:F5:B5:D5:81:A4:0B:5A:F8 Authority key identifier: 75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C Certificate issuer: /CN=75FF16C5740BEF1582FECB48A8BAAFF769D3F20C Certificate serial: 32185ECDE479720F4195C7355E2D39194635B684 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft Manifest number: 0A Signing time: Sat 24 Oct 2026 16:24:38 +0000 Manifest this update: Sat 24 Oct 2026 16:19:38 +0000 Manifest next update: Sun 25 Oct 2026 19:11:38 +0000 Files and hashes: 1: 3130332e38302e39382e302f32332d3234203d3e20313532303832.roa (hash: bENWpFT+QvmvJIMwIu+rG3z07e7WJMDXUe8mUOkm6Is=) 2: 75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.crl (hash: p4z+B2SWGR/SoL/n1laedXDP8xWDYKgqb7NXRxhoA/A=) 3: 3130332e38302e39362e302f32332d3234203d3e203539323733.roa (hash: qNlfohJ3WOBafcQQyCsmPggpebtLDtOqmRqZd6CMuVU=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.crl rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 25 Oct 2026 19:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:18:5e:cd:e4:79:72:0f:41:95:c7:35:5e:2d:39:19:46:35:b6:84 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=75FF16C5740BEF1582FECB48A8BAAFF769D3F20C Validity Not Before: Oct 24 16:19:38 2026 GMT Not After : Oct 25 19:11:38 2026 GMT Subject: CN=20DCA43CD8A1AC0FAD4F3602F5B5D581A40B5AF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:db:e6:1e:82:25:bb:00:c8:c7:fa:b9:d1:4b: 39:bc:bb:5b:c6:11:fa:3e:c1:e3:8a:a1:31:90:ff: ad:b2:cf:d9:e4:b4:d8:9b:e3:6f:41:8e:55:79:7f: 5f:4b:20:fe:83:f8:80:8d:8d:d0:5b:58:c0:9c:65: cd:8e:24:df:93:e4:c0:fd:c1:52:22:bf:22:f5:09: 41:a9:f6:de:7b:d5:df:81:6f:d4:ff:ce:b3:8c:5d: a0:4d:ba:f8:ff:d1:4a:5c:8a:b3:1b:5d:00:f2:5d: 28:0f:1b:64:88:c9:66:79:41:85:67:9b:72:91:2c: a4:8d:2a:f5:4f:62:7b:82:9b:73:7b:20:89:14:2c: 4b:06:f9:c1:a1:4d:55:27:9a:14:a5:bc:01:21:0c: 42:f5:2e:e8:80:68:14:bf:c2:7f:8a:62:4b:e8:6c: 65:90:dc:80:b2:2b:68:6f:6e:2c:88:7e:4b:a7:12: 50:95:71:2f:d0:fd:05:c0:43:8b:6d:5f:29:d0:87: 9e:3d:77:11:0c:73:86:29:be:b3:34:b7:54:0e:b1: fc:9c:45:1f:00:0b:10:6f:a2:13:61:95:a8:07:0b: 3f:21:0c:3c:34:94:32:18:35:53:63:c7:5b:0c:8d: 75:19:89:89:b2:74:f6:9a:96:18:1f:35:52:27:ac: 62:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:DC:A4:3C:D8:A1:AC:0F:AD:4F:36:02:F5:B5:D5:81:A4:0B:5A:F8 X509v3 Authority Key Identifier: keyid:75:FF:16:C5:74:0B:EF:15:82:FE:CB:48:A8:BA:AF:F7:69:D3:F2:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9b82f26f-28d5-4c17-b8e4-c06d21ea7f7b/0/75FF16C5740BEF1582FECB48A8BAAFF769D3F20C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:77:1f:d1:ca:3b:b8:72:a2:73:ae:d1:c3:bd:ac:7d:ac:2c: 6d:bf:72:80:29:9d:36:3e:ab:8a:1c:5c:1d:e3:d9:57:b8:c2: c9:0b:28:63:1d:13:10:28:bc:5f:f4:c7:94:c6:a0:4b:55:dd: 10:b5:e0:e5:d7:48:b7:f0:37:48:e6:74:d1:c2:64:c3:7f:5a: 53:7c:e1:2d:b8:1e:b4:a5:f1:dc:43:7a:4c:8f:9b:23:fa:bb: a5:c5:d8:0e:13:ef:19:83:73:0a:80:b3:2f:fe:32:7a:77:d6: 19:27:49:11:06:95:7d:47:ae:62:89:51:8c:61:e3:a6:78:f7: 18:b8:16:84:3e:09:e4:09:a9:6f:25:60:e5:f7:47:99:b5:97: f4:92:28:2c:ff:fb:98:84:0a:29:29:2c:07:85:d6:83:04:f8: a9:33:c9:15:b4:11:65:8e:cc:ff:0d:0f:81:fc:fe:5a:29:71: 90:8b:26:65:ff:ad:f1:30:c9:4e:76:82:ce:3c:11:d7:45:01: f8:20:bc:79:5d:71:53:f5:e6:38:69:4a:d6:5d:30:81:3c:29: 35:4d:c0:0e:d4:b1:b9:7c:75:2c:83:5c:bd:83:23:50:bd:fc: 4a:19:9c:d3:60:18:1b:35:62:b7:ac:d7:a8:f0:e6:19:e6:41: 31:da:02:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhhezeR5cg9Blcc1Xi05GUY1toQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzVGRjE2QzU3NDBCRUYxNTgyRkVDQjQ4QThCQUFGRjc2 OUQzRjIwQzAeFw0yNjEwMjQxNjE5MzhaFw0yNjEwMjUxOTExMzhaMDMxMTAvBgNV BAMTKDIwRENBNDNDRDhBMUFDMEZBRDRGMzYwMkY1QjVENTgxQTQwQjVBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx2+YegiW7AMjH+rnRSzm8u1vG Efo+weOKoTGQ/62yz9nktNib429BjlV5f19LIP6D+ICNjdBbWMCcZc2OJN+T5MD9 wVIivyL1CUGp9t571d+Bb9T/zrOMXaBNuvj/0UpcirMbXQDyXSgPG2SIyWZ5QYVn m3KRLKSNKvVPYnuCm3N7IIkULEsG+cGhTVUnmhSlvAEhDEL1LuiAaBS/wn+KYkvo bGWQ3ICyK2hvbiyIfkunElCVcS/Q/QXAQ4ttXynQh549dxEMc4YpvrM0t1QOsfyc RR8ACxBvohNhlagHCz8hDDw0lDIYNVNjx1sMjXUZiYmydPaalhgfNVInrGKhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINykPNihrA+tTzYC9bXVgaQLWvgwHwYDVR0j BBgwFoAUdf8WxXQL7xWC/stIqLqv92nT8gwwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWI4MmYyNmYtMjhkNS00YzE3LWI4ZTQtYzA2ZDIxZWE3ZjdiLzAvNzVGRjE2QzU3 NDBCRUYxNTgyRkVDQjQ4QThCQUFGRjc2OUQzRjIwQy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83NUZGMTZDNTc0MEJFRjE1ODJGRUNCNDhBOEJBQUZGNzY5RDNG MjBDLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWI4MmYyNmYtMjhkNS00YzE3LWI4 ZTQtYzA2ZDIxZWE3ZjdiLzAvNzVGRjE2QzU3NDBCRUYxNTgyRkVDQjQ4QThCQUFG Rjc2OUQzRjIwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAZ3H9HKO7hyonOu0cO9rH2sLG2/coApnTY+ q4ocXB3j2Ve4wskLKGMdExAovF/0x5TGoEtV3RC14OXXSLfwN0jmdNHCZMN/WlN8 4S24HrSl8dxDekyPmyP6u6XF2A4T7xmDcwqAsy/+Mnp31hknSREGlX1HrmKJUYxh 46Z49xi4FoQ+CeQJqW8lYOX3R5m1l/SSKCz/+5iECikpLAeF1oME+KkzyRW0EWWO zP8ND4H8/lopcZCLJmX/rfEwyU52gs48EddFAfggvHldcVP15jhpStZdMIE8KTVN wA7Usbl8dSyDXL2DI1C9/EoZnNNgGBs1Yres16jw5hnmQTHaAuk= -----END CERTIFICATE-----Generated at Sun Oct 25 07:53:21 2026 by rpki-client