$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json) Hash identifier: ZRVAwZSKW3w8FMEnW8JD1AX09VJkX8aEzeQzhyl6KxY= Subject key identifier: 3F:BE:99:55:F1:22:D5:E1:BF:78:AD:E8:FA:76:B9:1F:AC:31:EB:78 Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Certificate serial: 7A31AEEBC6D50B1E77C8E3A27AAC25F575B3C6A2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft Manifest number: BE Signing time: Mon 21 Sep 2026 00:22:00 +0000 Manifest this update: Mon 21 Sep 2026 00:17:00 +0000 Manifest next update: Tue 22 Sep 2026 01:28:00 +0000 Files and hashes: 1: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=) 2: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: wkg5WfupoLja+eSRMzOcRWdX/zJWpjSOn38DFHZdKPY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Sep 2026 01:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:31:ae:eb:c6:d5:0b:1e:77:c8:e3:a2:7a:ac:25:f5:75:b3:c6:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Validity Not Before: Sep 21 00:17:00 2026 GMT Not After : Sep 22 01:28:00 2026 GMT Subject: CN=3FBE9955F122D5E1BF78ADE8FA76B91FAC31EB78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9c:90:49:b3:62:38:76:72:c8:b1:5e:3d:b3: 57:02:72:e9:f0:9d:99:c1:2c:ac:3a:74:f4:11:87: 06:a2:d0:5c:06:7e:17:a5:5a:78:f8:3f:58:48:be: d8:5d:8e:d1:12:6c:0c:a7:4a:ae:be:d2:6b:4e:fb: 99:c9:0b:99:53:53:65:20:ae:55:d4:ed:5c:a9:3c: 84:75:3d:b8:f8:c9:2f:fb:75:27:7b:8c:c2:f9:ed: f8:42:a2:5d:29:b9:9d:87:18:fe:cd:3f:5d:14:13: ca:3b:ba:78:45:02:b9:e3:a8:c3:c8:d4:8e:53:2d: a2:b3:a5:21:f0:6c:a6:e8:c6:69:86:be:58:fa:4f: a9:9a:f5:ff:f8:ca:fc:ef:d6:07:70:85:c0:97:09: 54:36:99:98:69:a2:3b:bd:2a:4a:9b:99:a8:9a:24: bb:c7:1f:6b:5e:85:6f:8c:cb:9a:6d:f3:39:06:57: bf:7c:e5:03:09:d4:d3:5f:0c:ae:50:3f:70:17:a6: fb:e9:e2:a0:3d:4f:b9:ce:5d:f7:84:09:28:5e:f9: 25:10:8a:d3:b1:c4:72:c3:12:07:30:a2:9e:61:30: 3a:33:2d:6a:aa:01:3a:0f:e9:0b:1b:32:e6:27:45: 7b:d2:cd:30:b2:9b:af:b5:30:76:2e:9e:28:1e:13: 1b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:BE:99:55:F1:22:D5:E1:BF:78:AD:E8:FA:76:B9:1F:AC:31:EB:78 X509v3 Authority Key Identifier: keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:90:7e:c1:b7:8b:4c:e8:c8:28:80:b5:78:83:1f:cc:c6:12: af:c5:45:9a:5b:c4:69:d1:1b:9a:13:55:99:26:14:4e:64:ff: f3:81:ae:c5:3e:c8:91:15:76:c9:5c:6f:35:51:fc:a3:94:ed: 85:53:50:26:3a:47:a5:66:cb:b0:46:a9:a5:db:42:b9:4f:38: d9:96:0e:37:3d:97:1a:09:69:a5:24:11:e4:81:8f:d0:52:ee: 48:4f:94:5a:14:6e:93:e5:ff:d9:9d:be:ae:c8:5c:60:25:a5: e1:d6:90:57:57:3a:32:d9:01:bf:01:92:69:05:6d:d5:1d:2b: 91:ca:36:a4:15:6b:35:e5:72:aa:b6:c5:25:b4:37:67:01:a8: b5:c2:b9:30:21:1d:26:29:0c:cb:45:86:72:66:1c:83:fd:3e: 6a:09:51:e4:db:bf:65:0e:20:6c:19:43:4d:f6:1e:cd:7f:a1: 42:52:fd:6b:18:9a:96:ab:6e:86:de:e1:5f:ea:5f:1b:ff:0c: 46:b7:4c:1d:e8:cb:08:4c:ea:f2:13:35:10:2c:f8:8b:84:7a: 02:28:71:95:ab:50:8a:50:41:6f:51:bb:a8:fa:58:2c:ed:8d: 66:46:63:1c:ec:29:fd:1e:c2:0d:aa:99:09:85:52:93:77:2f: 2c:f5:07:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejGu68bVCx53yOOieqwl9XWzxqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3OEZD MTg0RDY0QTAeFw0yNjA5MjEwMDE3MDBaFw0yNjA5MjIwMTI4MDBaMDMxMTAvBgNV BAMTKDNGQkU5OTU1RjEyMkQ1RTFCRjc4QURFOEZBNzZCOTFGQUMzMUVCNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznJBJs2I4dnLIsV49s1cCcunw nZnBLKw6dPQRhwai0FwGfhelWnj4P1hIvthdjtESbAynSq6+0mtO+5nJC5lTU2Ug rlXU7VypPIR1Pbj4yS/7dSd7jML57fhCol0puZ2HGP7NP10UE8o7unhFArnjqMPI 1I5TLaKzpSHwbKboxmmGvlj6T6ma9f/4yvzv1gdwhcCXCVQ2mZhpoju9Kkqbmaia JLvHH2tehW+My5pt8zkGV7985QMJ1NNfDK5QP3AXpvvp4qA9T7nOXfeECShe+SUQ itOxxHLDEgcwop5hMDozLWqqAToP6QsbMuYnRXvSzTCym6+1MHYunigeExv1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUP76ZVfEi1eG/eK3o+na5H6wx63gwHwYDVR0j BBgwFoAUcv2oWa93UKVkAjrk9uiHj8GE1kowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVjNTUzYjYtOWU1Ny00MGJkLThkOTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlB Rjc3NTBBNTY0MDIzQUU0RjZFODg3OEZDMTg0RDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZEQTg1OUFGNzc1MEE1NjQwMjNBRTRGNkU4ODc4RkMxODRE NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3 OEZDMTg0RDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKQfsG3i0zoyCiAtXiDH8zGEq/FRZpbxGnR G5oTVZkmFE5k//OBrsU+yJEVdslcbzVR/KOU7YVTUCY6R6Vmy7BGqaXbQrlPONmW Djc9lxoJaaUkEeSBj9BS7khPlFoUbpPl/9mdvq7IXGAlpeHWkFdXOjLZAb8BkmkF bdUdK5HKNqQVazXlcqq2xSW0N2cBqLXCuTAhHSYpDMtFhnJmHIP9PmoJUeTbv2UO IGwZQ032Hs1/oUJS/WsYmparbobe4V/qXxv/DEa3TB3oywhM6vITNRAs+IuEegIo cZWrUIpQQW9Ru6j6WCztjWZGYxzsKf0ewg2qmQmFUpN3Lyz1B7Q= -----END CERTIFICATE-----Generated at Mon Sep 21 19:23:57 2026 by rpki-client