$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: sjCMuNMOQKkyonzQARRlH6z12h6d0abT0Cxds7qCEb4= Subject key identifier: 02:B7:CD:2A:46:A3:9A:89:9F:3B:20:84:C2:9D:EA:09:D1:C1:01:C2 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2439660A4025C07ECEA5BA1708CD20A2CD5CF3AC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: DB Signing time: Sun 01 Mar 2026 10:50:42 +0000 Manifest this update: Sun 01 Mar 2026 10:45:42 +0000 Manifest next update: Wed 04 Mar 2026 18:41:42 +0000 Files and hashes: 1: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: caZV9G72ZH9SHhTQ7accILIzrwmOABz+B33TDw80Gx0=) 2: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:41:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:39:66:0a:40:25:c0:7e:ce:a5:ba:17:08:cd:20:a2:cd:5c:f3:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Mar 1 10:45:42 2026 GMT Not After : Mar 4 18:41:42 2026 GMT Subject: CN=02B7CD2A46A39A899F3B2084C29DEA09D1C101C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:a8:c0:22:b0:9c:2b:e4:67:41:89:2f:8c: 48:9e:85:52:04:be:bf:9d:5c:c8:91:46:b0:aa:1f: f1:1b:f7:5d:38:44:fd:e1:cb:a4:70:91:31:55:17: 44:96:c4:04:95:49:cc:85:70:d7:14:65:93:a6:4b: 6e:43:93:9c:5c:81:51:86:49:56:df:0f:c2:40:ea: b0:dc:cc:26:7c:1e:85:f5:b4:d9:72:73:47:3d:46: 46:fa:1a:65:f5:39:91:6f:3b:6d:1e:c6:68:3b:05: a4:ea:3a:a0:9c:86:ad:03:96:46:3c:f9:39:ba:91: 41:4e:85:0a:e6:f6:5a:1c:9a:a7:22:c0:58:36:d6: 8c:aa:0d:d5:1b:67:c8:d5:d9:22:ec:61:cd:2f:8d: 73:95:f6:9f:8a:cb:98:ac:7c:7d:be:c1:6c:40:15: b7:76:e5:66:c2:80:ae:0d:25:34:c2:4c:a4:a8:dd: 32:f4:f6:9d:e5:15:e1:72:66:fa:d5:c6:98:65:ad: c2:8a:22:34:2c:03:29:2f:90:56:ed:57:e2:ae:29: b4:fc:94:fe:4a:b7:f8:b6:7c:24:61:a1:a3:f3:4b: 12:ef:f6:c1:37:8f:f8:6b:16:2c:bf:67:30:ba:79: e0:b8:c0:ab:e9:b1:3d:09:4c:91:c5:d1:d1:aa:07: 88:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:B7:CD:2A:46:A3:9A:89:9F:3B:20:84:C2:9D:EA:09:D1:C1:01:C2 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:9b:fe:af:a3:62:ae:fa:b1:ad:3e:9e:15:96:2d:78:3f:29: b7:3a:dc:58:ae:dc:ea:0c:23:5a:ba:38:d7:82:26:52:51:6e: b3:5e:3e:d6:33:92:b3:fd:56:a3:07:cd:e5:66:1b:8e:aa:c2: 3d:2c:09:fd:12:b3:d9:b7:19:34:7c:15:c8:dd:6f:c7:03:e2: 01:80:9d:7e:0c:c9:5e:19:bb:97:19:7b:e6:fa:da:d8:92:5a: 2e:a5:05:d4:80:2f:17:ca:da:89:30:fb:1d:2f:bd:85:87:67: 03:e5:a0:e9:ba:0e:16:6f:08:65:19:53:04:53:9a:5f:6c:16: a3:08:d3:55:c8:50:8f:e5:2a:76:86:11:c7:ad:aa:0c:0e:d0: 42:98:3e:5c:e5:35:0b:6e:68:93:aa:8f:d7:31:ca:2e:fa:2b: 4b:b2:db:d3:03:9b:06:79:6e:c4:94:a2:9b:e1:b8:0d:ec:77: 12:e3:0c:7d:fa:c4:72:57:56:fe:ad:e6:32:d8:6d:c6:42:92: 3b:f1:f3:50:ea:08:aa:fa:df:3a:9d:df:e1:3a:c6:1d:84:ff: 65:15:5a:f4:50:a1:10:bd:5d:3d:43:fb:a7:d4:3b:5d:58:f3: 2f:23:75:90:00:29:77:0a:bd:00:f3:6c:57:a7:70:6c:ac:11: 11:91:11:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJDlmCkAlwH7OpboXCM0gos1c86wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNjAzMDExMDQ1NDJaFw0yNjAzMDQxODQxNDJaMDMxMTAvBgNV BAMTKDAyQjdDRDJBNDZBMzlBODk5RjNCMjA4NEMyOURFQTA5RDFDMTAxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQqjAIrCcK+RnQYkvjEiehVIE vr+dXMiRRrCqH/Eb9104RP3hy6RwkTFVF0SWxASVScyFcNcUZZOmS25Dk5xcgVGG SVbfD8JA6rDczCZ8HoX1tNlyc0c9Rkb6GmX1OZFvO20exmg7BaTqOqCchq0DlkY8 +Tm6kUFOhQrm9locmqciwFg21oyqDdUbZ8jV2SLsYc0vjXOV9p+Ky5isfH2+wWxA Fbd25WbCgK4NJTTCTKSo3TL09p3lFeFyZvrVxphlrcKKIjQsAykvkFbtV+KuKbT8 lP5Kt/i2fCRhoaPzSxLv9sE3j/hrFiy/ZzC6eeC4wKvpsT0JTJHF0dGqB4gzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUArfNKkajmomfOyCEwp3qCdHBAcIwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJqb/q+jYq76sa0+nhWWLXg/Kbc63Fiu3OoM I1q6ONeCJlJRbrNePtYzkrP9VqMHzeVmG46qwj0sCf0Ss9m3GTR8Fcjdb8cD4gGA nX4MyV4Zu5cZe+b62tiSWi6lBdSALxfK2okw+x0vvYWHZwPloOm6DhZvCGUZUwRT ml9sFqMI01XIUI/lKnaGEcetqgwO0EKYPlzlNQtuaJOqj9cxyi76K0uy29MDmwZ5 bsSUopvhuA3sdxLjDH36xHJXVv6t5jLYbcZCkjvx81DqCKr63zqd3+E6xh2E/2UV WvRQoRC9XT1D+6fUO11Y8y8jdZAAKXcKvQDzbFencGysERGREY4= -----END CERTIFICATE-----Generated at Mon Mar 2 09:39:46 2026 by rpki-client