$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: UGSSWbwbaE5BNVm7JiXQDm57g0A+vXjYXh3Jmfp7nOE= Subject key identifier: 35:67:0A:06:5F:99:05:B2:E7:6D:6C:60:74:87:9F:29:5A:22:87:DB Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 4AF0031120243F4B73066206E6CDB2DE5D345D4C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 76 Signing time: Tue 28 Jul 2026 09:59:16 +0000 Manifest this update: Tue 28 Jul 2026 09:54:16 +0000 Manifest next update: Wed 29 Jul 2026 12:01:16 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 3: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: XQCpUQyIz0c1J90N4lEQtzF0Z19nVJBDAk/hcNhcgt0=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Jul 2026 09:55:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:f0:03:11:20:24:3f:4b:73:06:62:06:e6:cd:b2:de:5d:34:5d:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Jul 28 09:54:16 2026 GMT Not After : Jul 29 12:01:16 2026 GMT Subject: CN=35670A065F9905B2E76D6C6074879F295A2287DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:1c:31:9b:70:60:56:35:51:50:04:6c:4e:4c: 66:3e:19:0b:a5:44:b4:34:63:37:ce:23:29:20:57: e6:2a:01:ef:cc:90:b0:f5:21:04:e2:42:e4:06:e8: a3:a3:72:85:76:3c:0d:5c:75:eb:30:fe:c9:3c:a1: 78:7a:2e:96:42:00:ef:e5:0c:01:4c:33:b1:3c:ca: 3e:3b:af:42:d1:c3:ca:da:65:25:f1:0f:eb:66:a5: 33:5b:89:bb:61:76:cd:b8:79:92:89:c0:7c:09:35: b5:73:83:d6:f0:4c:6d:d2:65:be:aa:ce:6b:86:43: d5:68:9a:12:4c:45:1b:f6:ab:2d:65:cc:6d:60:a0: 21:50:74:c9:c3:59:02:4c:3b:9a:a0:3b:68:b5:fe: ea:d9:a7:d3:52:5c:e5:35:43:50:13:d6:a3:b1:6b: 54:66:41:f4:d4:da:1c:ec:15:02:13:f5:be:5a:d0: a7:44:e4:af:30:1b:97:29:ef:5b:9c:29:83:46:51: f1:1a:64:37:91:57:da:9c:d3:43:0c:3d:63:e8:05: a0:7f:54:cb:59:12:5c:55:df:16:90:9f:77:b0:8c: de:4a:f6:b5:52:f1:4e:1f:4b:f9:c5:ab:f2:8a:0f: bc:c0:32:36:7a:38:80:38:8b:39:d2:07:cb:1f:76: 55:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:67:0A:06:5F:99:05:B2:E7:6D:6C:60:74:87:9F:29:5A:22:87:DB X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d2:75:96:e7:8f:93:3f:40:18:83:38:d5:ab:91:33:55:fe: 5e:01:b6:d2:67:ab:44:e5:f5:a2:fa:6c:68:50:f9:34:cc:cf: ec:a9:39:ad:1c:58:99:4e:72:f1:a7:e1:6a:8d:c4:88:4d:07: 84:c7:34:eb:07:f9:16:b3:74:0f:35:6d:7b:6d:c0:5f:2f:6c: 86:13:08:7d:2a:97:5d:e6:2b:49:50:de:a1:ef:53:61:be:5a: 72:67:e2:b9:fb:39:21:5b:d1:82:cb:ec:9c:e7:d6:85:3e:49: 3e:01:6f:f8:78:dc:61:bb:b5:16:fd:57:17:12:0f:70:56:b1: cc:22:8b:30:f6:ea:58:bf:69:8d:c0:56:38:55:3f:55:dc:6b: e1:d2:de:eb:e5:71:b5:e8:29:74:5c:00:19:ec:56:a3:f1:5f: b1:e3:1b:7c:90:f7:2a:3d:7f:40:09:94:98:54:bb:db:6c:67: bc:5d:51:09:45:a0:bc:55:f4:b2:44:e0:6f:60:f6:ea:86:cb: 7e:7d:b8:15:27:0e:e2:93:61:89:40:a2:67:a6:ac:b8:78:29: eb:ec:55:67:69:45:a8:66:01:51:89:00:61:0d:79:82:23:03: 94:15:2c:ec:85:ea:a8:56:3b:65:b8:6e:e5:bd:a0:19:60:f8: dc:24:94:9e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSvADESAkP0tzBmIG5s2y3l00XUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA3MjgwOTU0MTZaFw0yNjA3MjkxMjAxMTZaMDMxMTAvBgNV BAMTKDM1NjcwQTA2NUY5OTA1QjJFNzZENkM2MDc0ODc5RjI5NUEyMjg3REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8HDGbcGBWNVFQBGxOTGY+GQul RLQ0YzfOIykgV+YqAe/MkLD1IQTiQuQG6KOjcoV2PA1cdesw/sk8oXh6LpZCAO/l DAFMM7E8yj47r0LRw8raZSXxD+tmpTNbibthds24eZKJwHwJNbVzg9bwTG3SZb6q zmuGQ9VomhJMRRv2qy1lzG1goCFQdMnDWQJMO5qgO2i1/urZp9NSXOU1Q1AT1qOx a1RmQfTU2hzsFQIT9b5a0KdE5K8wG5cp71ucKYNGUfEaZDeRV9qc00MMPWPoBaB/ VMtZElxV3xaQn3ewjN5K9rVS8U4fS/nFq/KKD7zAMjZ6OIA4iznSB8sfdlUJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNWcKBl+ZBbLnbWxgdIefKVoih9swHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7SdZbnj5M/QBiDONWrkTNV/l4BttJnq0Tl 9aL6bGhQ+TTMz+ypOa0cWJlOcvGn4WqNxIhNB4THNOsH+RazdA81bXttwF8vbIYT CH0ql13mK0lQ3qHvU2G+WnJn4rn7OSFb0YLL7Jzn1oU+ST4Bb/h43GG7tRb9VxcS D3BWscwiizD26li/aY3AVjhVP1Xca+HS3uvlcbXoKXRcABnsVqPxX7HjG3yQ9yo9 f0AJlJhUu9tsZ7xdUQlFoLxV9LJE4G9g9uqGy359uBUnDuKTYYlAomemrLh4Kevs VWdpRahmAVGJAGENeYIjA5QVLOyF6qhWO2W4buW9oBlg+NwklJ4= -----END CERTIFICATE-----Generated at Tue Jul 28 23:45:42 2026 by rpki-client