$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: uUsd1d4LraziTGoJuOAyw7FvDukqFsK9GmeLqcMqUXQ= Subject key identifier: F2:B9:BE:9C:B7:7F:A4:6A:BC:B0:B7:F6:23:95:F8:09:BF:13:01:68 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2658B521BFC2F132BF52B5D32F87B8620F6FCA27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: EF Signing time: Thu 16 Apr 2026 02:10:44 +0000 Manifest this update: Thu 16 Apr 2026 02:05:44 +0000 Manifest next update: Sun 19 Apr 2026 04:40:44 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: 05ycbRBRovKLyG3y21dFoHxVhyOMtw9iAb2mJ1mnnQ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 04:40:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:58:b5:21:bf:c2:f1:32:bf:52:b5:d3:2f:87:b8:62:0f:6f:ca:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Apr 16 02:05:44 2026 GMT Not After : Apr 19 04:40:44 2026 GMT Subject: CN=F2B9BE9CB77FA46ABCB0B7F62395F809BF130168 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:25:4d:b5:4b:60:25:d5:39:1c:19:d2:47:44: 95:49:9a:c4:33:fb:9b:0d:fc:5d:bb:cb:e9:11:05: df:2d:57:80:30:df:e8:7b:8d:c6:97:2c:00:32:ac: be:09:5e:37:19:b4:fa:d4:e3:87:d2:cf:7f:c7:6e: df:30:ad:6a:7b:b3:7a:d2:8d:d9:a7:b1:81:6f:5e: e0:cc:b3:c2:0e:91:72:33:52:20:1e:a1:3f:52:71: dd:7f:83:e8:33:7f:dd:06:1a:1e:df:bc:c0:92:c3: e2:f8:dd:05:82:9f:93:fd:bb:ca:bc:98:a8:99:55: af:73:60:19:68:67:b7:df:32:33:c0:2c:2b:33:fe: df:94:9b:0c:38:58:68:21:9d:fb:77:89:5c:bb:81: cb:72:5d:16:41:d4:b5:a8:a5:df:a8:8e:10:f6:d6: 17:71:74:b5:4e:5e:96:60:57:dc:e7:4c:2b:20:a9: 76:76:00:99:dc:6b:e0:d4:33:28:85:85:29:e9:9c: a1:1f:92:4a:5c:7a:0c:a7:62:ae:08:c9:63:d5:fb: b9:32:eb:bd:67:47:83:55:bd:ab:0f:0f:39:6c:ed: 0b:ba:93:95:54:ad:0c:64:a1:3e:f2:bc:11:87:60: 2a:fc:9a:b7:d9:38:bb:e0:19:cf:88:c3:01:59:a1: c5:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:B9:BE:9C:B7:7F:A4:6A:BC:B0:B7:F6:23:95:F8:09:BF:13:01:68 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:f0:28:f3:68:97:a7:a1:ed:5d:9f:c9:eb:6f:9d:d1:15:f1: 0e:fe:47:4b:c4:50:11:da:29:c5:1c:33:a7:a6:05:a0:52:14: 70:d3:99:37:f9:46:bf:8e:b4:36:0d:24:28:3d:6a:c1:64:d7: c1:42:5d:d7:20:24:7d:68:66:ba:10:36:2c:a4:11:60:2e:08: 33:b3:e9:74:6f:c4:95:c4:d3:20:ca:ee:57:31:c0:41:54:3d: 8c:c4:91:46:6e:df:e9:ff:30:f7:97:94:af:43:7c:7d:bf:e8: 89:99:cd:cc:df:08:9b:e2:40:00:a7:07:aa:ca:ee:10:be:3c: c0:1f:de:14:2b:c5:1d:92:53:e9:cf:5a:7e:11:1b:6c:f9:d3: 59:57:b4:10:75:10:5b:f2:19:d3:65:be:28:c3:21:6f:1e:0a: eb:1e:32:64:2e:3b:47:30:0c:66:e9:7c:7e:93:29:89:ce:e1: ab:3c:f4:ef:85:76:79:30:51:04:f1:61:cc:df:6b:25:60:23: a1:e0:10:fd:8e:cd:49:db:aa:b6:17:d0:eb:9c:d9:35:21:88: e3:15:5e:e7:a9:9a:ea:93:83:97:53:56:3d:0e:52:d1:1b:77: a3:06:06:e9:d1:2a:c9:49:e0:f3:df:f3:a7:99:51:cc:bd:8e: ac:13:29:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJli1Ib/C8TK/UrXTL4e4Yg9vyicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNjA0MTYwMjA1NDRaFw0yNjA0MTkwNDQwNDRaMDMxMTAvBgNV BAMTKEYyQjlCRTlDQjc3RkE0NkFCQ0IwQjdGNjIzOTVGODA5QkYxMzAxNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZJU21S2Al1TkcGdJHRJVJmsQz +5sN/F27y+kRBd8tV4Aw3+h7jcaXLAAyrL4JXjcZtPrU44fSz3/Hbt8wrWp7s3rS jdmnsYFvXuDMs8IOkXIzUiAeoT9Scd1/g+gzf90GGh7fvMCSw+L43QWCn5P9u8q8 mKiZVa9zYBloZ7ffMjPALCsz/t+Umww4WGghnft3iVy7gctyXRZB1LWopd+ojhD2 1hdxdLVOXpZgV9znTCsgqXZ2AJnca+DUMyiFhSnpnKEfkkpcegynYq4IyWPV+7ky 671nR4NVvasPDzls7Qu6k5VUrQxkoT7yvBGHYCr8mrfZOLvgGc+IwwFZocVRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8rm+nLd/pGq8sLf2I5X4Cb8TAWgwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJrwKPNol6eh7V2fyetvndEV8Q7+R0vEUBHa KcUcM6emBaBSFHDTmTf5Rr+OtDYNJCg9asFk18FCXdcgJH1oZroQNiykEWAuCDOz 6XRvxJXE0yDK7lcxwEFUPYzEkUZu3+n/MPeXlK9DfH2/6ImZzczfCJviQACnB6rK 7hC+PMAf3hQrxR2SU+nPWn4RG2z501lXtBB1EFvyGdNlvijDIW8eCuseMmQuO0cw DGbpfH6TKYnO4as89O+FdnkwUQTxYczfayVgI6HgEP2OzUnbqrYX0Ouc2TUhiOMV XuepmuqTg5dTVj0OUtEbd6MGBunRKslJ4PPf86eZUcy9jqwTKXI= -----END CERTIFICATE-----Generated at Fri Apr 17 18:53:53 2026 by rpki-client