$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json) Hash identifier: F9r4pX8Qpc+Ro+jz50tEi3izHGN1Vssu8ZykB3R/4y4= Subject key identifier: 20:21:FF:5E:65:93:3D:3E:49:40:ED:C8:0A:0C:55:C9:66:6B:44:12 Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F Certificate serial: 4E00CCA8A7D2532C272B0045E56B7144F5522A58 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 04:06:38 +0000 Manifest this update: Tue 22 Sep 2026 04:01:38 +0000 Manifest next update: Wed 23 Sep 2026 05:36:38 +0000 Files and hashes: 1: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: /Tnglv1+9uLxWx5JBRtNovU5m6UuvwnuKWeu2wWzp+8=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 05:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:00:cc:a8:a7:d2:53:2c:27:2b:00:45:e5:6b:71:44:f5:52:2a:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F Validity Not Before: Sep 22 04:01:38 2026 GMT Not After : Sep 23 05:36:38 2026 GMT Subject: CN=2021FF5E65933D3E4940EDC80A0C55C9666B4412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b9:d0:0c:41:4b:af:cf:ee:e3:48:b5:f0:00: d5:5d:8e:7c:1f:b3:02:d5:62:58:22:15:6f:64:c7: 96:81:01:98:f8:d6:97:81:46:05:69:df:44:38:b1: 9c:6e:e4:da:67:49:98:60:af:7e:48:e7:10:27:91: 9e:64:30:71:9a:9e:56:29:6a:2b:c6:03:10:db:b0: 12:bd:11:7e:42:21:f5:bf:28:c3:a7:5a:f5:28:c9: fa:ac:82:f4:5d:49:60:27:2c:c4:9a:9d:d1:4b:69: 44:b5:f2:7a:e6:a3:29:d2:4b:19:e4:d1:70:5a:07: a7:dc:2d:54:89:e8:58:a4:b6:2b:7c:0d:5b:f3:51: 2a:1d:66:17:98:32:2b:46:cf:f3:cf:94:2c:b0:6a: 11:fb:db:37:91:9e:95:21:9d:62:eb:05:37:48:76: 91:6e:6d:4f:eb:b7:ee:9a:d0:5b:6e:15:53:d1:82: b0:11:f5:de:f4:6d:c6:c2:1e:75:cb:ab:98:8b:78: fe:b0:7a:b5:f4:4d:33:32:48:60:c6:50:70:12:7d: 24:b0:5d:20:3e:fb:07:50:fd:f6:63:93:48:a0:4f: df:69:ae:a5:e1:d7:a8:c9:3d:01:fd:50:4e:1e:0d: 7d:47:b4:a0:fa:0c:44:f8:77:0f:64:a6:41:c7:16: 90:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:21:FF:5E:65:93:3D:3E:49:40:ED:C8:0A:0C:55:C9:66:6B:44:12 X509v3 Authority Key Identifier: keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b6:7c:e4:4a:33:55:bd:9b:da:e0:6c:1a:ed:31:de:82:4d: 11:66:70:31:2b:63:36:6d:93:93:ee:8a:91:75:7b:3d:a6:60: a8:03:d2:9e:53:4b:c3:0b:ad:3d:8f:3d:1c:c0:86:ce:b0:b1: d2:23:98:76:c1:c2:28:7a:73:ff:e1:dd:79:7c:f7:fd:f1:93: 6d:ec:11:4a:99:85:cf:a1:64:16:01:54:e3:bc:72:3b:00:40: 28:ff:5f:42:e8:85:29:5b:31:9e:25:d3:43:58:c7:c5:06:3f: da:91:c8:7b:1c:0a:90:58:31:bb:3d:48:b1:dd:8d:61:86:f7: cb:77:93:22:bb:30:4b:72:6b:cb:11:4c:5c:59:67:5f:c7:6d: ed:1b:8a:79:2d:1f:44:5a:80:24:4d:47:9f:ed:57:dc:97:d1: 90:f4:25:94:e7:c5:43:94:21:17:12:0b:a7:a1:e4:6d:72:38: 63:13:d8:da:cf:a5:ef:3e:0b:b8:c0:f3:a8:24:c4:e6:e2:42: ae:e6:94:36:3d:a1:45:41:fb:aa:1d:cb:92:cc:1f:6d:ba:aa: d4:c8:b7:1d:ce:55:60:5e:f5:b9:fb:6d:8c:a6:da:15:b7:9d: 83:0f:1c:f5:1b:04:f8:10:92:7b:e5:af:6e:77:ee:54:27:c5: 3e:4c:1b:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgDMqKfSUywnKwBF5WtxRPVSKlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5QTJG MzM2NzMwRjAeFw0yNjA5MjIwNDAxMzhaFw0yNjA5MjMwNTM2MzhaMDMxMTAvBgNV BAMTKDIwMjFGRjVFNjU5MzNEM0U0OTQwRURDODBBMEM1NUM5NjY2QjQ0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6udAMQUuvz+7jSLXwANVdjnwf swLVYlgiFW9kx5aBAZj41peBRgVp30Q4sZxu5NpnSZhgr35I5xAnkZ5kMHGanlYp aivGAxDbsBK9EX5CIfW/KMOnWvUoyfqsgvRdSWAnLMSandFLaUS18nrmoynSSxnk 0XBaB6fcLVSJ6Fiktit8DVvzUSodZheYMitGz/PPlCywahH72zeRnpUhnWLrBTdI dpFubU/rt+6a0FtuFVPRgrAR9d70bcbCHnXLq5iLeP6werX0TTMySGDGUHASfSSw XSA++wdQ/fZjk0igT99prqXh16jJPQH9UE4eDX1HtKD6DET4dw9kpkHHFpDvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUICH/XmWTPT5JQO3ICgxVyWZrRBIwHwYDVR0j BBgwFoAUcrW3rVti3tVQiJsVkJc5ovM2cw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEwMTI5YTgtMjdlOC00MDQ2LTg5ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1 QjYyREVENTUwODg5QjE1OTA5NzM5QTJGMzM2NzMwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI1QjdBRDVCNjJERUQ1NTA4ODlCMTU5MDk3MzlBMkYzMzY3 MzBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5 QTJGMzM2NzMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABy2fORKM1W9m9rgbBrtMd6CTRFmcDErYzZt k5PuipF1ez2mYKgD0p5TS8MLrT2PPRzAhs6wsdIjmHbBwih6c//h3Xl89/3xk23s EUqZhc+hZBYBVOO8cjsAQCj/X0LohSlbMZ4l00NYx8UGP9qRyHscCpBYMbs9SLHd jWGG98t3kyK7MEtya8sRTFxZZ1/Hbe0binktH0RagCRNR5/tV9yX0ZD0JZTnxUOU IRcSC6eh5G1yOGMT2NrPpe8+C7jA86gkxObiQq7mlDY9oUVB+6ody5LMH226qtTI tx3OVWBe9bn7bYym2hW3nYMPHPUbBPgQknvlr2537lQnxT5MG00= -----END CERTIFICATE-----Generated at Tue Sep 22 17:25:55 2026 by rpki-client