$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: 1Id9dzhEzF8Yf0UAox07kadI7ZrE/FvnkLEcnQLM9bo= Subject key identifier: 91:62:B0:B8:F0:10:BD:A4:99:D9:8F:69:3B:62:FC:87:62:44:1A:28 Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 3E344829256CD84D9B55737F9CF228369248BD88 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: C0 Signing time: Tue 22 Sep 2026 06:24:26 +0000 Manifest this update: Tue 22 Sep 2026 06:19:26 +0000 Manifest next update: Wed 23 Sep 2026 07:39:26 +0000 Files and hashes: 1: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) 2: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: 8rACA8aQMDa358AyR+51y5imIjqKWCRA+ST/s2WvTBA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 07:39:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:34:48:29:25:6c:d8:4d:9b:55:73:7f:9c:f2:28:36:92:48:bd:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: Sep 22 06:19:26 2026 GMT Not After : Sep 23 07:39:26 2026 GMT Subject: CN=9162B0B8F010BDA499D98F693B62FC8762441A28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:cd:f5:4a:0d:83:1f:35:db:66:d2:39:b2:07: b9:01:2b:a2:9d:7a:d0:c1:56:30:06:f9:ea:df:12: 78:b2:bc:05:1d:29:a1:65:c4:0d:db:1c:fc:a9:ed: f0:a7:81:8e:bf:90:2b:db:23:dd:93:45:c7:0f:c8: c6:3c:64:27:b5:6f:7b:e2:d1:12:e5:50:19:8a:95: c8:18:1e:f1:cb:f6:f1:be:24:c1:77:e3:cc:3c:30: 02:c5:8c:55:e8:53:c5:fb:65:2a:36:c6:d2:63:0b: 99:60:ac:b0:73:8e:3d:b9:22:a1:21:7b:c0:28:f7: 11:10:83:07:8e:70:d0:4c:c1:6f:43:f4:6f:3c:89: 6b:1b:12:1e:3b:90:de:65:6c:cb:93:b3:43:95:f4: d5:5e:d5:36:d6:ae:67:83:bc:35:bb:22:a2:51:5a: bd:14:ee:ab:0b:59:ea:8a:2a:12:ed:8a:e3:e4:1f: b4:43:09:39:f5:0f:67:3e:8b:5f:a7:85:dc:66:ac: 45:a6:c3:2d:ac:3c:51:64:b8:8e:26:b4:8a:8e:3f: af:bd:6b:66:2d:8f:69:df:61:0a:38:8c:0c:ed:cb: 1a:9d:0e:20:3d:79:f0:4a:0c:c4:b9:91:7b:88:1d: 87:1e:20:b2:64:ba:64:84:39:82:c6:0b:ce:22:b3: 57:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:62:B0:B8:F0:10:BD:A4:99:D9:8F:69:3B:62:FC:87:62:44:1A:28 X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:cb:71:fe:36:ed:9d:8b:c5:e7:96:b0:63:ee:5b:ab:ec:c2: 8d:88:59:1a:d2:b7:d5:f3:a8:27:d6:8b:ed:93:8a:38:af:d5: 09:2b:b7:fd:bd:28:b9:37:fb:12:8f:eb:31:06:5e:1a:07:9a: 79:7c:ec:54:a7:88:0c:5f:1c:cc:ef:b0:a1:b0:2e:9c:1c:3a: ee:7f:3a:90:39:ec:48:47:ff:50:76:1b:34:b0:72:99:26:06: 8b:cb:96:d5:51:f4:d9:52:4e:b4:31:ff:4e:9f:73:a3:7f:fc: 4d:16:5b:c0:b1:49:2f:a2:de:b3:ce:fb:00:0c:d2:d0:d2:7a: 65:b3:5b:ba:3d:c6:39:76:e2:cf:28:86:e4:9f:1e:ad:4d:4a: 53:ea:e8:67:62:bd:bc:0a:f7:f6:ff:f6:3c:2d:83:4d:f2:9a: 3a:27:be:17:ce:f0:2a:c3:8e:44:68:07:d0:1a:6f:60:b8:39: ee:75:c8:9a:b4:57:bc:88:fa:4a:77:d6:d3:e1:b8:40:f7:57: 54:da:65:5e:d5:06:63:ca:9b:9c:b2:1e:8a:64:47:5c:25:f5: 3e:76:16:7d:d9:e3:b2:b7:ae:6e:53:b7:6f:0b:f6:99:7c:44: 44:d8:e3:d1:e6:d6:af:e7:54:ab:97:c6:38:1b:4b:39:6e:53: b9:ca:2c:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPjRIKSVs2E2bVXN/nPIoNpJIvYgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjA5MjIwNjE5MjZaFw0yNjA5MjMwNzM5MjZaMDMxMTAvBgNV BAMTKDkxNjJCMEI4RjAxMEJEQTQ5OUQ5OEY2OTNCNjJGQzg3NjI0NDFBMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjzfVKDYMfNdtm0jmyB7kBK6Kd etDBVjAG+erfEniyvAUdKaFlxA3bHPyp7fCngY6/kCvbI92TRccPyMY8ZCe1b3vi 0RLlUBmKlcgYHvHL9vG+JMF348w8MALFjFXoU8X7ZSo2xtJjC5lgrLBzjj25IqEh e8Ao9xEQgweOcNBMwW9D9G88iWsbEh47kN5lbMuTs0OV9NVe1TbWrmeDvDW7IqJR Wr0U7qsLWeqKKhLtiuPkH7RDCTn1D2c+i1+nhdxmrEWmwy2sPFFkuI4mtIqOP6+9 a2Ytj2nfYQo4jAztyxqdDiA9efBKDMS5kXuIHYceILJkumSEOYLGC84is1edAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkWKwuPAQvaSZ2Y9pO2L8h2JEGigwHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPLcf427Z2LxeeWsGPuW6vswo2IWRrSt9Xz qCfWi+2Tijiv1Qkrt/29KLk3+xKP6zEGXhoHmnl87FSniAxfHMzvsKGwLpwcOu5/ OpA57EhH/1B2GzSwcpkmBovLltVR9NlSTrQx/06fc6N//E0WW8CxSS+i3rPO+wAM 0tDSemWzW7o9xjl24s8ohuSfHq1NSlPq6GdivbwK9/b/9jwtg03ymjonvhfO8CrD jkRoB9Aab2C4Oe51yJq0V7yI+kp31tPhuED3V1TaZV7VBmPKm5yyHopkR1wl9T52 Fn3Z47K3rm5Tt28L9pl8RETY49Hm1q/nVKuXxjgbSzluU7nKLMI= -----END CERTIFICATE-----Generated at Tue Sep 22 17:04:10 2026 by rpki-client