$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: 1B5fEVSSevoI3sb9KUu9jmbxbB1YV7RzzASn1rtVY+E= Subject key identifier: 09:B0:B4:27:F8:06:4D:58:EB:2D:B2:63:07:FA:F6:A1:BB:2A:C9:BD Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 015965EF6ACB2ADF369562C3AA3D96D2428ECA91 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 3A Signing time: Sat 13 Jun 2026 14:11:46 +0000 Manifest this update: Sat 13 Jun 2026 14:06:46 +0000 Manifest next update: Sun 14 Jun 2026 17:14:46 +0000 Files and hashes: 1: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 3: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: qvExbT39Q51EuCTdMjuOgKm0cfeNn/Fo+mIKxL+19nE=) 4: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 14 Jun 2026 15:49:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:59:65:ef:6a:cb:2a:df:36:95:62:c3:aa:3d:96:d2:42:8e:ca:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Jun 13 14:06:46 2026 GMT Not After : Jun 14 17:14:46 2026 GMT Subject: CN=09B0B427F8064D58EB2DB26307FAF6A1BB2AC9BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:34:a3:4b:51:ee:cb:17:99:84:5c:f6:22:2b: 9e:1a:04:41:41:46:e6:01:08:6e:66:e9:f7:e5:3f: ad:e8:78:fc:44:25:12:db:10:5e:c5:2b:b8:1c:8f: d5:14:ec:62:d6:cb:e4:6b:85:61:34:c8:b2:05:c0: e2:00:40:67:dd:bc:99:ed:6c:19:04:d3:e3:38:2c: 85:6f:70:9b:fe:dd:24:4d:27:c4:92:d0:89:fb:15: 39:e9:dc:f0:38:05:8b:9f:ec:85:38:5f:64:fc:d1: 0f:f1:2f:33:d4:84:11:df:8c:c5:d9:f1:dd:1e:08: d6:52:69:1b:ed:3a:28:9a:bd:e2:79:e6:af:8a:9e: 29:4b:82:d7:8b:dd:f8:13:d1:95:e0:32:1e:02:90: 43:43:37:c6:66:cb:cc:0a:ce:51:54:6a:e6:67:e5: 45:12:48:a3:a7:4d:91:e9:9e:77:47:33:b1:2a:1c: cf:7b:c0:0a:5b:68:ba:84:3d:82:fe:d7:22:21:b7: 46:dc:b5:80:fd:82:23:8f:55:8f:a3:96:ed:b1:57: 32:fd:dc:6e:01:3a:b0:7d:8c:62:75:53:66:a9:1c: 72:fb:e0:da:ee:a7:88:b3:25:d6:49:81:74:ca:dd: 24:75:33:31:78:40:e0:f9:7b:03:08:24:1a:3f:3c: 38:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B0:B4:27:F8:06:4D:58:EB:2D:B2:63:07:FA:F6:A1:BB:2A:C9:BD X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:0d:45:ce:a7:50:67:a9:fe:d4:e0:56:a7:cb:7b:a5:00:fa: 2f:2f:e4:ca:42:8c:67:04:a4:c3:6d:de:2e:d7:0e:f5:bd:65: 76:e0:4d:d4:0a:a3:88:b3:55:98:3c:23:3c:fd:37:93:22:e9: e0:f8:cf:49:54:fb:ae:21:f4:00:06:d6:a3:13:94:d5:25:b8: 5a:9d:54:c4:be:81:b1:ed:3c:43:69:2b:c1:8e:15:43:aa:7a: 24:7c:55:2e:da:bd:2a:90:1c:1f:57:1b:4d:50:32:2c:c0:7b: 13:fd:4e:87:0d:e9:26:c1:a0:c1:60:ab:e1:9c:94:45:85:63: 05:e8:2c:5c:86:d3:67:c0:66:e4:ab:26:87:c4:41:6f:c1:23: 27:83:f9:4a:4e:07:7f:d2:b2:5c:ee:82:ee:01:cc:19:9f:52: ed:1c:36:66:05:cb:5d:73:28:38:8a:12:9f:27:e3:f7:8a:bb: f8:96:ad:98:4a:57:10:31:e6:88:93:1c:f9:22:b9:6b:9f:12: 2a:f1:12:41:ec:f5:8c:fb:7c:30:22:42:57:61:18:d8:38:b4: 2b:b7:bc:87:e1:6c:f8:17:cf:a5:65:2c:e8:cd:15:94:0a:bf: 37:eb:e0:79:2c:06:bd:41:9b:08:99:5c:81:cf:5d:c6:70:5b: 1c:cf:75:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAVll72rLKt82lWLDqj2W0kKOypEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA2MTMxNDA2NDZaFw0yNjA2MTQxNzE0NDZaMDMxMTAvBgNV BAMTKDA5QjBCNDI3RjgwNjRENThFQjJEQjI2MzA3RkFGNkExQkIyQUM5QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxNKNLUe7LF5mEXPYiK54aBEFB RuYBCG5m6fflP63oePxEJRLbEF7FK7gcj9UU7GLWy+RrhWE0yLIFwOIAQGfdvJnt bBkE0+M4LIVvcJv+3SRNJ8SS0In7FTnp3PA4BYuf7IU4X2T80Q/xLzPUhBHfjMXZ 8d0eCNZSaRvtOiiaveJ55q+KnilLgteL3fgT0ZXgMh4CkENDN8Zmy8wKzlFUauZn 5UUSSKOnTZHpnndHM7EqHM97wApbaLqEPYL+1yIht0bctYD9giOPVY+jlu2xVzL9 3G4BOrB9jGJ1U2apHHL74Nrup4izJdZJgXTK3SR1MzF4QOD5ewMIJBo/PDjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCbC0J/gGTVjrLbJjB/r2obsqyb0wHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcNRc6nUGep/tTgVqfLe6UA+i8v5MpCjGcE pMNt3i7XDvW9ZXbgTdQKo4izVZg8Izz9N5Mi6eD4z0lU+64h9AAG1qMTlNUluFqd VMS+gbHtPENpK8GOFUOqeiR8VS7avSqQHB9XG01QMizAexP9TocN6SbBoMFgq+Gc lEWFYwXoLFyG02fAZuSrJofEQW/BIyeD+UpOB3/Sslzugu4BzBmfUu0cNmYFy11z KDiKEp8n4/eKu/iWrZhKVxAx5oiTHPkiuWufEirxEkHs9Yz7fDAiQldhGNg4tCu3 vIfhbPgXz6VlLOjNFZQKvzfr4HksBr1BmwiZXIHPXcZwWxzPdUA= -----END CERTIFICATE-----Generated at Sat Jun 13 19:03:28 2026 by rpki-client