$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: EaY/GFOjV+OAoN3AW3qByWa3ZMI5PW1BS3Fee7207Ok= Subject key identifier: A5:9D:7D:64:5F:39:76:33:DC:8F:65:80:11:FE:28:FA:AF:3B:98:4C Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 57CF7C74FCD1B307E0FCD0A864C71D2855499850 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: C0 Signing time: Wed 23 Sep 2026 09:27:48 +0000 Manifest this update: Wed 23 Sep 2026 09:22:48 +0000 Manifest next update: Thu 24 Sep 2026 12:25:48 +0000 Files and hashes: 1: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 2: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: dvSLAx4RakrU5mlhQ7PH/CXvbF9brecbMT1qm0sA4Zw=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Sep 2026 12:25:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:cf:7c:74:fc:d1:b3:07:e0:fc:d0:a8:64:c7:1d:28:55:49:98:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Sep 23 09:22:48 2026 GMT Not After : Sep 24 12:25:48 2026 GMT Subject: CN=A59D7D645F397633DC8F658011FE28FAAF3B984C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:5a:bc:44:74:43:2e:6f:1c:6f:6e:22:b5:b3: 21:21:23:b9:91:d9:bb:1a:9c:b2:c7:7b:63:9c:b1: af:35:14:45:29:23:09:1d:3b:db:f0:6e:23:b5:7d: c9:23:ae:8b:db:56:92:37:14:fe:d2:0f:66:86:98: a5:8d:33:2e:52:98:dd:04:18:15:20:35:f0:c3:71: c8:ff:3c:7e:88:00:ee:c3:30:81:11:36:a3:42:c1: c7:0b:68:8c:e7:81:16:e8:4c:d5:c7:fe:ac:01:65: e9:a8:85:4d:0e:73:89:c4:fb:36:0e:94:cc:c1:f1: 3d:7e:99:f0:b0:4d:30:3b:cb:69:87:c0:e3:1f:e1: ad:18:4f:10:bf:4c:8d:fd:22:56:a2:ed:1c:f8:5e: 89:70:ca:63:79:3b:fd:59:5e:20:a3:40:d8:14:7c: d4:6f:b1:8c:36:c0:fd:0a:8d:2c:06:26:01:0d:94: 6f:91:13:45:bf:be:a8:b0:f3:f4:ca:b0:5f:92:34: 30:2f:f4:00:3a:a0:74:46:7a:3d:48:de:b3:8d:35: b8:eb:db:a0:8d:2c:3d:ba:61:8e:38:1b:db:98:45: 81:d5:59:46:0e:b6:8b:a3:18:5d:c7:d6:2c:ae:7a: 6d:cd:85:57:b9:22:60:8e:72:9e:dc:6c:ee:c9:85: 43:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:9D:7D:64:5F:39:76:33:DC:8F:65:80:11:FE:28:FA:AF:3B:98:4C X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:da:8b:9f:72:89:53:4e:87:02:fe:d6:8d:00:12:85:ee:4f: 90:ab:9f:02:0b:6e:33:34:13:4d:6e:6a:a3:93:6b:af:6c:30: e6:02:9a:fc:d6:ec:b4:fd:26:4e:c5:29:d7:e7:8b:23:ca:1c: 4d:d8:96:19:90:03:a1:5b:ed:e9:48:e5:42:af:fe:3e:fd:ba: 6e:ad:0a:ce:a6:b3:3e:12:3d:04:ed:96:3e:06:df:b6:c8:04: ed:28:b5:b4:38:e5:37:9e:7a:76:d2:0a:72:f8:65:eb:eb:bc: 55:ee:f8:fc:9b:0e:dd:b7:83:7a:49:28:1a:9d:82:0f:60:76: f4:ca:e8:13:78:30:7a:c2:f5:d8:c8:59:0e:c3:fa:64:bb:93: cd:b6:14:de:c4:5b:a0:10:e0:30:ea:53:85:06:59:da:ff:9f: 8f:09:e3:1a:d4:5e:89:a1:f1:74:8d:45:dc:86:71:59:7d:ce: 49:a5:53:c3:72:54:b8:40:32:e4:ee:72:76:a9:48:1a:c7:40: 97:22:f6:4e:12:8f:78:b7:3c:10:aa:02:5b:da:0e:f4:f4:98: 54:04:85:41:8d:8a:7a:db:b5:7c:14:b5:b1:ac:f7:f1:f0:dd: fc:c2:53:be:72:9d:19:71:bf:e1:d5:fe:0c:d4:fc:69:f5:ef: bb:bf:a2:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV898dPzRswfg/NCoZMcdKFVJmFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA5MjMwOTIyNDhaFw0yNjA5MjQxMjI1NDhaMDMxMTAvBgNV BAMTKEE1OUQ3RDY0NUYzOTc2MzNEQzhGNjU4MDExRkUyOEZBQUYzQjk4NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQWrxEdEMubxxvbiK1syEhI7mR 2bsanLLHe2Ocsa81FEUpIwkdO9vwbiO1fckjrovbVpI3FP7SD2aGmKWNMy5SmN0E GBUgNfDDccj/PH6IAO7DMIERNqNCwccLaIzngRboTNXH/qwBZemohU0Oc4nE+zYO lMzB8T1+mfCwTTA7y2mHwOMf4a0YTxC/TI39Ilai7Rz4XolwymN5O/1ZXiCjQNgU fNRvsYw2wP0KjSwGJgENlG+RE0W/vqiw8/TKsF+SNDAv9AA6oHRGej1I3rONNbjr 26CNLD26YY44G9uYRYHVWUYOtoujGF3H1iyuem3NhVe5ImCOcp7cbO7JhUNfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpZ19ZF85djPcj2WAEf4o+q87mEwwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXai59yiVNOhwL+1o0AEoXuT5CrnwILbjM0 E01uaqOTa69sMOYCmvzW7LT9Jk7FKdfniyPKHE3YlhmQA6Fb7elI5UKv/j79um6t Cs6msz4SPQTtlj4G37bIBO0otbQ45TeeenbSCnL4ZevrvFXu+PybDt23g3pJKBqd gg9gdvTK6BN4MHrC9djIWQ7D+mS7k822FN7EW6AQ4DDqU4UGWdr/n48J4xrUXomh 8XSNRdyGcVl9zkmlU8NyVLhAMuTucnapSBrHQJci9k4Sj3i3PBCqAlvaDvT0mFQE hUGNinrbtXwUtbGs9/Hw3fzCU75ynRlxv+HV/gzU/Gn177u/ohw= -----END CERTIFICATE-----Generated at Wed Sep 23 16:15:53 2026 by rpki-client