$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: yuLQjIvdX95ebFCrR2fpQEs4x2ECqZRAsFbMvkvO3JY= Subject key identifier: 2C:65:84:5C:F8:A9:7F:6A:7D:15:CB:9A:4E:9D:FA:41:54:A2:77:F3 Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 37EF69E0720EF632E1B452653A1F7104A31AE827 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: CF Signing time: Sat 03 Oct 2026 00:57:02 +0000 Manifest this update: Sat 03 Oct 2026 00:52:02 +0000 Manifest next update: Sun 04 Oct 2026 03:00:02 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 2: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) 3: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: 24iIiTH5lFsH7essrhSdhGQeJ6igyMLZslvC+8hDLrM=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 04 Oct 2026 00:36:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:ef:69:e0:72:0e:f6:32:e1:b4:52:65:3a:1f:71:04:a3:1a:e8:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Oct 3 00:52:02 2026 GMT Not After : Oct 4 03:00:02 2026 GMT Subject: CN=2C65845CF8A97F6A7D15CB9A4E9DFA4154A277F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:0c:fa:a4:a4:f3:ee:23:91:35:da:40:6c:20: 6c:93:a8:36:3a:3d:a5:35:ca:58:30:0f:8d:6e:e4: 37:77:27:79:bf:ff:bb:f9:21:b4:b4:79:7b:64:d3: 1f:36:f6:4f:32:42:eb:9f:42:68:44:79:ae:fd:3b: 4d:8a:91:58:41:8f:b3:64:7e:ac:ad:5a:76:57:bb: 04:3d:95:db:81:54:bc:cc:13:7d:09:04:53:4e:f0: e8:47:c2:a9:52:22:a6:47:94:b6:4e:c2:8e:9c:04: e8:bd:0a:5a:d5:3d:06:bc:00:7f:7f:41:39:1f:00: 72:25:12:63:bb:e8:d7:7c:a3:9b:7b:37:38:0e:90: 8e:5f:c4:b9:97:fb:3e:92:da:c8:bd:60:8f:7b:e1: 28:3a:09:9c:c4:a5:d4:1c:cf:02:36:6d:31:3b:85: 08:25:41:07:e9:91:ff:9a:ca:b1:ce:c4:58:6c:30: f7:82:13:db:a6:dd:c8:37:6d:12:5a:ae:a5:59:8d: 76:2e:ad:3e:57:91:5a:3e:60:0f:81:28:1d:f8:23: 7c:3f:e5:d3:28:5f:09:f2:b2:ef:c5:4a:e1:5b:57: 82:d5:67:e2:3b:2e:d2:85:f4:57:8f:3a:c5:fa:45: ce:74:5f:d5:19:6f:58:88:c3:0d:34:92:5e:a7:ba: 2a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:65:84:5C:F8:A9:7F:6A:7D:15:CB:9A:4E:9D:FA:41:54:A2:77:F3 X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:19:2a:f8:74:2c:1c:39:b2:a7:8c:43:7d:36:9e:af:4b:77: 72:65:9a:10:3c:8f:9b:ac:d9:7c:33:d7:39:68:ea:08:6e:32: dc:26:b6:e0:1c:a2:76:f7:f3:d7:c7:83:ab:69:d4:1b:96:c9: 9e:22:c7:44:d9:78:f7:1a:36:15:16:e8:9c:1e:d3:97:70:e4: 5e:de:4e:b4:ef:e8:32:e9:62:9e:c6:31:81:63:32:d0:2a:91: e5:04:f1:ad:e2:94:80:35:64:c6:bc:47:2e:f9:73:14:6d:a6: 6d:be:38:c2:9d:3b:6a:c2:53:35:6e:12:95:4b:01:18:eb:3b: ad:a6:7d:31:4e:c9:77:d7:87:8c:02:7a:fe:1d:16:62:87:81: 69:25:51:2f:b1:19:81:7f:63:0a:62:cb:45:4a:24:74:f5:cd: d4:0a:80:a5:f3:9c:c7:84:39:b7:92:39:42:e1:6d:72:dc:ca: 00:3b:87:eb:b6:c5:cc:b5:83:d7:35:3f:54:ed:f5:68:7f:32: 67:23:70:8d:7a:ad:23:56:c3:d6:6b:28:7e:5a:47:98:3a:39: 75:e8:fd:00:b1:34:0a:8e:e4:fc:ac:b4:06:9f:48:86:82:06: a9:65:81:d8:e4:30:d1:47:32:7c:d3:85:6a:8a:e0:d8:6f:89: a0:6e:e5:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+9p4HIO9jLhtFJlOh9xBKMa6CcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjEwMDMwMDUyMDJaFw0yNjEwMDQwMzAwMDJaMDMxMTAvBgNV BAMTKDJDNjU4NDVDRjhBOTdGNkE3RDE1Q0I5QTRFOURGQTQxNTRBMjc3RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPDPqkpPPuI5E12kBsIGyTqDY6 PaU1ylgwD41u5Dd3J3m//7v5IbS0eXtk0x829k8yQuufQmhEea79O02KkVhBj7Nk fqytWnZXuwQ9lduBVLzME30JBFNO8OhHwqlSIqZHlLZOwo6cBOi9ClrVPQa8AH9/ QTkfAHIlEmO76Nd8o5t7NzgOkI5fxLmX+z6S2si9YI974Sg6CZzEpdQczwI2bTE7 hQglQQfpkf+ayrHOxFhsMPeCE9um3cg3bRJarqVZjXYurT5XkVo+YA+BKB34I3w/ 5dMoXwnysu/FSuFbV4LVZ+I7LtKF9FePOsX6Rc50X9UZb1iIww00kl6nuipJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULGWEXPipf2p9FcuaTp36QVSid/MwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIZKvh0LBw5sqeMQ302nq9Ld3JlmhA8j5us 2Xwz1zlo6ghuMtwmtuAconb389fHg6tp1BuWyZ4ix0TZePcaNhUW6Jwe05dw5F7e TrTv6DLpYp7GMYFjMtAqkeUE8a3ilIA1ZMa8Ry75cxRtpm2+OMKdO2rCUzVuEpVL ARjrO62mfTFOyXfXh4wCev4dFmKHgWklUS+xGYF/Ywpiy0VKJHT1zdQKgKXznMeE ObeSOULhbXLcygA7h+u2xcy1g9c1P1Tt9Wh/MmcjcI16rSNWw9ZrKH5aR5g6OXXo /QCxNAqO5PystAafSIaCBqllgdjkMNFHMnzThWqK4NhviaBu5Uw= -----END CERTIFICATE-----Generated at Sat Oct 3 13:29:47 2026 by rpki-client