$ rpki-client -vvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json) Hash identifier: e8eLT940iYus2nLnMhJ/cupwk8syuDg8fcB2C8iDdXc= Subject key identifier: 76:42:28:D1:51:DE:8F:31:76:83:B3:FE:17:93:F9:63:E6:4F:F6:56 Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Certificate serial: 1561E5B42B884C1467D7C357919F2CD8F21421E4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft Manifest number: 3D Signing time: Tue 16 Jun 2026 15:07:31 +0000 Manifest this update: Tue 16 Jun 2026 15:02:31 +0000 Manifest next update: Wed 17 Jun 2026 18:29:31 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=) 2: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: Ayq3a9ie+Run9CrFGQWetAj8ZaS55qo4ww2ePwM1WI4=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 17 Jun 2026 18:29:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:61:e5:b4:2b:88:4c:14:67:d7:c3:57:91:9f:2c:d8:f2:14:21:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Validity Not Before: Jun 16 15:02:31 2026 GMT Not After : Jun 17 18:29:31 2026 GMT Subject: CN=764228D151DE8F317683B3FE1793F963E64FF656 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:83:54:7d:4d:23:bc:26:f6:14:61:a8:89:94: 51:21:90:87:5a:dc:2e:6d:ae:84:bd:78:9e:ae:7d: 5b:93:df:83:b5:d6:23:7e:8d:e9:c3:95:c1:a8:68: c6:11:a1:50:03:d3:2d:38:6f:e4:84:4c:39:e7:ed: 5a:71:96:e1:a3:41:aa:b4:30:e0:65:04:93:5e:58: a0:bc:65:4d:aa:47:95:ed:e3:fd:f3:14:f6:83:d3: 39:a5:29:81:9a:0b:6e:e7:fa:07:fe:63:80:dc:96: 8c:e1:71:90:0f:c2:a1:76:f5:08:a4:b7:cc:39:c6: 07:ef:c1:2f:07:04:ed:67:d7:21:65:01:ed:34:f7: 55:9b:d5:55:3f:0f:96:5d:0b:30:06:7d:33:ca:49: 40:39:2a:82:b6:8f:fe:0c:3c:45:8e:ef:df:c7:9f: b7:f5:31:6d:62:d6:52:62:15:e5:41:3d:2a:bf:19: cf:15:83:a2:e8:13:82:57:b7:03:e2:af:17:4b:7a: d8:63:f7:10:83:22:12:b1:49:e9:32:a0:c5:a2:c9: 75:d8:3f:d7:fe:43:fb:55:82:0e:e7:41:e4:c3:53: eb:73:f8:a6:10:05:55:15:1a:51:aa:99:4e:c8:46: 28:22:8b:83:82:56:b7:4f:b4:25:8e:d6:ff:01:5b: 44:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:42:28:D1:51:DE:8F:31:76:83:B3:FE:17:93:F9:63:E6:4F:F6:56 X509v3 Authority Key Identifier: keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:3e:78:d2:53:86:1e:41:d6:38:fa:21:9f:9b:f8:4f:64:13: 34:02:84:4a:0a:19:1c:4e:41:e0:34:f0:b8:ed:47:38:ba:cf: 32:7f:8e:90:97:ed:eb:90:19:8b:4a:08:34:3a:6c:e8:e7:ea: e4:da:15:75:db:5c:69:93:25:c6:07:be:31:65:26:d8:74:73: 2c:64:58:66:b4:e8:d6:84:71:94:7a:b3:12:0c:a7:35:50:70: 65:12:0a:11:40:f4:e0:2c:49:b7:33:fe:e1:f8:91:1c:eb:a9: e1:d8:5b:d9:6d:9a:92:9e:cc:cd:1b:42:f7:2b:ec:a8:b8:22: b0:c7:8d:ce:fa:be:70:5b:0d:18:55:2b:65:81:e3:09:f0:14: 20:5c:45:17:26:61:3b:48:5c:f9:ba:50:43:a2:d7:28:37:97: bb:42:fe:fd:20:4c:b3:03:13:dc:ca:d8:13:af:3d:a4:61:78: 22:4b:25:81:81:b1:eb:a2:1c:06:95:fc:25:8b:02:48:62:ee: 95:59:93:9e:c8:c2:0d:b8:2d:2b:f0:5d:f6:dc:f9:af:be:e5: 6d:03:97:0b:ac:9a:b0:04:dc:91:74:75:3b:69:ae:3a:24:64: dc:f7:c1:20:27:ad:9d:24:c8:50:b9:55:92:83:16:73:2b:04: a0:e7:c1:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFWHltCuITBRn18NXkZ8s2PIUIeQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3OEZD MTg0RDY0QTAeFw0yNjA2MTYxNTAyMzFaFw0yNjA2MTcxODI5MzFaMDMxMTAvBgNV BAMTKDc2NDIyOEQxNTFERThGMzE3NjgzQjNGRTE3OTNGOTYzRTY0RkY2NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQg1R9TSO8JvYUYaiJlFEhkIda 3C5troS9eJ6ufVuT34O11iN+jenDlcGoaMYRoVAD0y04b+SETDnn7VpxluGjQaq0 MOBlBJNeWKC8ZU2qR5Xt4/3zFPaD0zmlKYGaC27n+gf+Y4DclozhcZAPwqF29Qik t8w5xgfvwS8HBO1n1yFlAe0091Wb1VU/D5ZdCzAGfTPKSUA5KoK2j/4MPEWO79/H n7f1MW1i1lJiFeVBPSq/Gc8Vg6LoE4JXtwPirxdLethj9xCDIhKxSekyoMWiyXXY P9f+Q/tVgg7nQeTDU+tz+KYQBVUVGlGqmU7IRigii4OCVrdPtCWO1v8BW0RVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdkIo0VHejzF2g7P+F5P5Y+ZP9lYwHwYDVR0j BBgwFoAUcv2oWa93UKVkAjrk9uiHj8GE1kowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVjNTUzYjYtOWU1Ny00MGJkLThkOTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlB Rjc3NTBBNTY0MDIzQUU0RjZFODg3OEZDMTg0RDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZEQTg1OUFGNzc1MEE1NjQwMjNBRTRGNkU4ODc4RkMxODRE NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3 OEZDMTg0RDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABg+eNJThh5B1jj6IZ+b+E9kEzQChEoKGRxO QeA08LjtRzi6zzJ/jpCX7euQGYtKCDQ6bOjn6uTaFXXbXGmTJcYHvjFlJth0cyxk WGa06NaEcZR6sxIMpzVQcGUSChFA9OAsSbcz/uH4kRzrqeHYW9ltmpKezM0bQvcr 7Ki4IrDHjc76vnBbDRhVK2WB4wnwFCBcRRcmYTtIXPm6UEOi1yg3l7tC/v0gTLMD E9zK2BOvPaRheCJLJYGBseuiHAaV/CWLAkhi7pVZk57Iwg24LSvwXfbc+a++5W0D lwusmrAE3JF0dTtprjokZNz3wSAnrZ0kyFC5VZKDFnMrBKDnwf8= -----END CERTIFICATE-----Generated at Wed Jun 17 10:01:48 2026 by rpki-client