$ rpki-client -vvf repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft File: 72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft (raw, json) Hash identifier: LNQ2gSrtPfWy9KzFx5wHHFJDWSPY29wE7C3mocmWpJo= Subject key identifier: CF:F5:F9:2F:E6:A6:60:B7:9D:AE:B2:F9:40:8A:B9:6C:11:29:46:4D Authority key identifier: 72:D6:6E:2B:CD:D4:F1:A7:CB:17:8E:05:0B:4C:A8:A9:DF:E3:1A:AE Certificate issuer: /CN=72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE Certificate serial: 1060FCE1799C050D637491F8CD9DDF63920CA627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft Manifest number: 12 Signing time: Wed 15 Apr 2026 19:41:33 +0000 Manifest this update: Wed 15 Apr 2026 19:36:33 +0000 Manifest next update: Sat 18 Apr 2026 20:43:33 +0000 Files and hashes: 1: 72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl (hash: HgeXVehKLil72kIf2bNhH6aMXL9RybKG93n8s3ipP7c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 20:43:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:60:fc:e1:79:9c:05:0d:63:74:91:f8:cd:9d:df:63:92:0c:a6:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE Validity Not Before: Apr 15 19:36:33 2026 GMT Not After : Apr 18 20:43:33 2026 GMT Subject: CN=CFF5F92FE6A660B79DAEB2F9408AB96C1129464D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:dd:f1:37:dc:15:5c:df:1d:e8:74:93:36:53: 2b:63:c0:07:f4:3d:32:f0:05:ef:2a:e8:bc:f7:00: 06:3b:e4:ab:7b:e9:02:c2:4d:29:0b:30:11:10:f4: 33:0b:16:69:0c:a9:8d:28:62:b8:86:4d:c9:68:9c: 74:ae:7d:1c:50:0c:3a:65:14:d9:04:bd:9f:41:84: b2:e5:69:2e:02:33:95:06:8c:00:e6:8a:4e:f8:7c: 56:18:47:9e:d8:b4:db:d1:cd:b6:3b:0f:00:9b:33: 21:10:cf:94:9a:f6:b2:30:80:a4:a8:81:b6:9a:ee: a8:6d:bc:cf:3c:90:7e:5e:ff:cd:3b:1a:3a:65:37: f1:b0:03:27:13:24:00:e4:bc:51:da:f5:46:7d:a7: 12:da:0d:fc:ac:1e:fd:49:c7:73:d3:1c:e5:d0:88: 17:8c:1d:23:de:80:f1:1a:d2:b6:0b:07:0a:72:db: c4:2e:9e:57:74:18:e0:de:0d:45:79:bf:16:48:7f: b7:55:a9:e3:66:e1:e6:27:cc:3f:09:de:5e:97:2b: 8e:14:fd:85:1a:e3:e3:08:e9:1f:6b:16:86:bd:05: 0e:9c:94:9e:74:cd:a1:71:10:41:70:cc:31:12:c3: 53:8e:a7:b8:bc:4c:f1:46:6a:c1:1b:b1:07:05:94: 6a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:F5:F9:2F:E6:A6:60:B7:9D:AE:B2:F9:40:8A:B9:6C:11:29:46:4D X509v3 Authority Key Identifier: keyid:72:D6:6E:2B:CD:D4:F1:A7:CB:17:8E:05:0B:4C:A8:A9:DF:E3:1A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:52:2c:b4:74:5c:fe:75:01:dd:87:d4:ec:ef:ef:82:99:41: c9:56:85:f7:36:77:c7:7a:43:b9:7b:fb:31:bd:52:d0:5d:ca: 73:a8:00:88:2a:45:a6:d0:4a:b5:d9:e4:39:ac:96:46:c9:91: b7:72:33:44:4e:c8:40:8b:9d:81:21:5f:6c:14:e3:f4:42:5c: e1:e1:21:29:47:b9:19:4d:b3:17:12:8d:da:d0:f6:86:88:27: b3:c4:59:f6:c2:23:2c:1d:97:0b:47:be:54:eb:85:cd:0a:3b: 07:0e:d4:05:3f:e4:e5:2e:c2:c7:46:3e:a1:29:da:fb:33:8c: 90:c3:a5:cc:b9:2f:63:8c:7d:9f:68:30:a9:6b:39:53:ca:50: d4:c6:ac:6e:60:40:40:01:9d:c6:98:23:1a:57:32:eb:5e:72: 94:93:e1:e4:0b:fe:0b:94:f9:63:23:5c:04:90:4c:ef:8a:a4: ee:d7:6f:66:0b:b7:a9:36:6d:87:ae:6a:c0:89:c1:8e:eb:d6: 90:40:bb:25:3c:da:fc:47:e7:e5:95:34:ac:37:b2:53:ec:64: ac:52:c0:aa:52:87:87:01:88:8d:af:24:86:02:0e:e2:b2:6c: fa:9b:91:3e:76:3d:1e:2c:03:32:02:e5:3c:db:08:8c:94:80: 69:6f:53:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEGD84XmcBQ1jdJH4zZ3fY5IMpicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4QTlE RkUzMUFBRTAeFw0yNjA0MTUxOTM2MzNaFw0yNjA0MTgyMDQzMzNaMDMxMTAvBgNV BAMTKENGRjVGOTJGRTZBNjYwQjc5REFFQjJGOTQwOEFCOTZDMTEyOTQ2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3fE33BVc3x3odJM2UytjwAf0 PTLwBe8q6Lz3AAY75Kt76QLCTSkLMBEQ9DMLFmkMqY0oYriGTclonHSufRxQDDpl FNkEvZ9BhLLlaS4CM5UGjADmik74fFYYR57YtNvRzbY7DwCbMyEQz5Sa9rIwgKSo gbaa7qhtvM88kH5e/807GjplN/GwAycTJADkvFHa9UZ9pxLaDfysHv1Jx3PTHOXQ iBeMHSPegPEa0rYLBwpy28Qunld0GODeDUV5vxZIf7dVqeNm4eYnzD8J3l6XK44U /YUa4+MI6R9rFoa9BQ6clJ50zaFxEEFwzDESw1OOp7i8TPFGasEbsQcFlGoNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz/X5L+amYLedrrL5QIq5bBEpRk0wHwYDVR0j BBgwFoAUctZuK83U8afLF44FC0yoqd/jGq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmUyOTkwMi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMC83MkQ2NkUyQkNE RDRGMUE3Q0IxNzhFMDUwQjRDQThBOURGRTMxQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4QTlERkUz MUFBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4 QTlERkUzMUFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJSLLR0XP51Ad2H1Ozv74KZQclWhfc2d8d6 Q7l7+zG9UtBdynOoAIgqRabQSrXZ5DmslkbJkbdyM0ROyECLnYEhX2wU4/RCXOHh ISlHuRlNsxcSjdrQ9oaIJ7PEWfbCIywdlwtHvlTrhc0KOwcO1AU/5OUuwsdGPqEp 2vszjJDDpcy5L2OMfZ9oMKlrOVPKUNTGrG5gQEABncaYIxpXMutecpST4eQL/guU +WMjXASQTO+KpO7Xb2YLt6k2bYeuasCJwY7r1pBAuyU82vxH5+WVNKw3slPsZKxS wKpSh4cBiI2vJIYCDuKybPqbkT52PR4sAzIC5TzbCIyUgGlvU7U= -----END CERTIFICATE-----Generated at Fri Apr 17 10:18:21 2026 by rpki-client