$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: Wfa66gzCQIk90zXz+4+8ayzAmuBMR2HJQ3BOSz5KeSM= Subject key identifier: 71:90:5D:57:F3:AC:94:FE:E7:A7:40:5C:81:C1:5C:8C:B2:BA:30:57 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 550469AD8F21299C1C85474B76969B885C871439 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 011F Signing time: Fri 17 Apr 2026 07:32:18 +0000 Manifest this update: Fri 17 Apr 2026 07:27:18 +0000 Manifest next update: Mon 20 Apr 2026 17:14:18 +0000 Files and hashes: 1: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: fugi8v+XwVcHKHLA7DMr2biFWt1JaM4bhVD+7H4xYzk=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) 3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 17:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:04:69:ad:8f:21:29:9c:1c:85:47:4b:76:96:9b:88:5c:87:14:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Apr 17 07:27:18 2026 GMT Not After : Apr 20 17:14:18 2026 GMT Subject: CN=71905D57F3AC94FEE7A7405C81C15C8CB2BA3057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:b1:89:b3:9b:87:4e:94:b9:c2:fe:88:2f:49: 55:76:bf:c2:2c:48:9d:04:d9:0a:68:f6:ae:3e:e5: b6:ad:08:dd:7e:b6:9d:5e:a6:2d:10:02:b6:d5:c5: 70:8d:5e:52:7b:5b:f7:15:ba:3b:dc:08:af:d2:a7: f8:66:a3:a2:21:08:c8:16:66:74:cc:d8:5a:ac:cc: 3e:7c:be:fe:6b:5b:59:ee:35:75:1c:e9:9e:3c:08: 9b:6b:d8:29:09:59:58:48:63:96:dc:45:a0:8d:4a: 80:30:d7:dd:cb:69:33:78:ea:b1:60:fb:1a:c8:74: f7:e1:f7:43:c3:0f:60:6e:17:11:a5:48:38:b9:1b: 03:72:fd:b3:7d:09:66:20:c5:23:cc:bb:98:b6:b9: 69:55:cb:59:02:f6:dc:99:97:e6:e6:43:f5:7c:ce: 7e:63:3f:25:25:30:42:ec:90:cb:e4:9e:18:aa:5d: d9:99:d9:7f:67:6d:ce:88:e6:d7:e7:1c:ca:ce:58: 87:8a:db:36:18:85:60:7d:77:e2:1f:2d:81:52:ac: c6:95:5d:3d:29:7a:b2:c8:a1:18:df:fb:86:41:7f: 40:ea:05:db:57:b5:51:84:30:6e:19:ad:f6:1d:86: 1a:af:47:d3:6d:a4:11:0c:de:14:d7:32:27:ba:cb: 94:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:90:5D:57:F3:AC:94:FE:E7:A7:40:5C:81:C1:5C:8C:B2:BA:30:57 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:b9:bb:5d:3d:02:64:55:cd:89:0b:af:48:fd:f9:c5:c4:4b: 33:83:8d:7b:ac:92:f5:e2:9c:53:85:6e:fa:a7:51:c4:00:31: 67:84:a6:5d:80:36:ec:4e:8c:c6:77:4b:18:9a:ec:79:15:bc: 2b:b4:fa:c4:7c:2e:19:be:30:0b:58:0e:a5:4c:19:69:9d:51: 9c:87:02:53:a2:57:e4:34:d7:ce:2f:5e:93:d5:50:25:53:e0: 79:b6:7c:42:09:4d:52:19:1c:3d:02:ae:2e:6e:96:b2:95:42: 23:38:e3:64:dd:38:ad:de:91:0e:22:0b:dc:ca:6d:e3:8f:09: 8b:87:60:5f:31:a7:32:3b:93:48:b0:ea:a8:73:cb:12:57:7b: 3b:20:77:82:2e:7e:bd:63:51:cb:ac:6d:39:8b:40:ed:cd:b0: 0a:4d:b7:01:bf:2e:af:ef:0c:2b:ff:4f:ee:d6:8b:9a:22:34: c8:4f:e2:81:e2:95:02:8b:23:c5:c5:6c:bb:1e:68:d7:06:19: 63:c5:2a:2f:de:5e:e0:fb:5d:b2:5a:8c:ea:ea:82:21:ce:01: 20:61:df:90:05:70:49:06:b5:5c:c5:78:b1:49:a0:c8:b9:92: 84:a1:1b:36:11:dc:ac:6c:ae:be:a8:4a:77:59:37:7d:3e:20: 57:f0:5f:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQRprY8hKZwchUdLdpabiFyHFDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNjA0MTcwNzI3MThaFw0yNjA0MjAxNzE0MThaMDMxMTAvBgNV BAMTKDcxOTA1RDU3RjNBQzk0RkVFN0E3NDA1QzgxQzE1QzhDQjJCQTMwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDsYmzm4dOlLnC/ogvSVV2v8Is SJ0E2Qpo9q4+5batCN1+tp1epi0QArbVxXCNXlJ7W/cVujvcCK/Sp/hmo6IhCMgW ZnTM2FqszD58vv5rW1nuNXUc6Z48CJtr2CkJWVhIY5bcRaCNSoAw193LaTN46rFg +xrIdPfh90PDD2BuFxGlSDi5GwNy/bN9CWYgxSPMu5i2uWlVy1kC9tyZl+bmQ/V8 zn5jPyUlMELskMvknhiqXdmZ2X9nbc6I5tfnHMrOWIeK2zYYhWB9d+IfLYFSrMaV XT0perLIoRjf+4ZBf0DqBdtXtVGEMG4ZrfYdhhqvR9NtpBEM3hTXMie6y5TfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcZBdV/OslP7np0BcgcFcjLK6MFcwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKm5u109AmRVzYkLr0j9+cXESzODjXuskvXi nFOFbvqnUcQAMWeEpl2ANuxOjMZ3Sxia7HkVvCu0+sR8Lhm+MAtYDqVMGWmdUZyH AlOiV+Q0184vXpPVUCVT4Hm2fEIJTVIZHD0Cri5ulrKVQiM442TdOK3ekQ4iC9zK beOPCYuHYF8xpzI7k0iw6qhzyxJXezsgd4Iufr1jUcusbTmLQO3NsApNtwG/Lq/v DCv/T+7Wi5oiNMhP4oHilQKLI8XFbLseaNcGGWPFKi/eXuD7XbJajOrqgiHOASBh 35AFcEkGtVzFeLFJoMi5koShGzYR3Kxsrr6oSndZN30+IFfwX0c= -----END CERTIFICATE-----Generated at Fri Apr 17 19:27:29 2026 by rpki-client