$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: MkwkMGfhgUd4jqnitANOGpvCbh15lzTwhLsT+YuYBkw= Subject key identifier: 9A:0A:39:04:53:81:17:33:CC:B4:46:85:78:4E:B9:34:78:5F:0E:E1 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 55C4622C1AC0D670ECE25F4EA9282BCE860E2DA4 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: 3B Signing time: Mon 15 Jun 2026 03:35:49 +0000 Manifest this update: Mon 15 Jun 2026 03:30:49 +0000 Manifest next update: Tue 16 Jun 2026 05:32:49 +0000 Files and hashes: 1: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 2: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) 3: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 4: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: f01pVzF6WzV6p1sFbNE7jcIX0pZiplfmZtoqoIxiHI0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 16 Jun 2026 03:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:c4:62:2c:1a:c0:d6:70:ec:e2:5f:4e:a9:28:2b:ce:86:0e:2d:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Jun 15 03:30:49 2026 GMT Not After : Jun 16 05:32:49 2026 GMT Subject: CN=9A0A390453811733CCB44685784EB934785F0EE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9d:4f:df:4d:4a:6c:9a:d1:30:45:0f:dd:ef: 21:21:40:4f:09:f7:cd:61:af:91:d2:42:09:49:e1: ce:dc:60:7e:d6:0c:7e:da:5c:a4:59:f9:84:81:40: f5:f4:09:3b:d1:79:6c:9e:db:33:55:00:a1:84:1f: 5a:3d:1e:58:f9:ce:d5:ad:50:03:61:8c:c6:94:9c: ea:76:0f:ac:d1:be:1a:e4:cc:01:7c:3d:c6:3f:8e: 3f:62:ab:62:3c:d6:91:c2:d8:ae:0c:8b:b7:1c:55: 82:1a:40:ba:41:c5:c9:db:17:ff:5f:e7:57:0a:51: 32:7d:ef:ec:c5:14:22:32:5f:ea:c6:13:16:c7:9a: 02:44:2a:8a:44:f6:9e:b5:8f:8a:dd:e6:ef:89:bb: 9c:d0:b1:c0:d4:08:1a:eb:03:e5:4d:0a:3b:57:6e: b1:0b:c0:aa:fc:f5:ff:f6:5e:47:ae:af:a9:af:a7: e9:22:91:a8:9e:99:fe:bc:2f:70:1c:5d:c9:22:c0: 5b:17:3e:21:3c:40:c7:57:2f:13:9c:b2:93:6c:d2: 30:f8:c8:af:f6:62:0c:c9:7d:29:a1:2e:df:1e:a4: a1:24:63:f7:07:0d:7e:02:0f:02:89:a1:f4:be:4d: fe:d5:24:04:f7:f5:3e:49:77:84:64:53:3a:28:b2: 46:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:0A:39:04:53:81:17:33:CC:B4:46:85:78:4E:B9:34:78:5F:0E:E1 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:09:6e:d1:47:fe:4b:fb:95:d1:85:51:d9:31:8c:dc:ca:82: fd:20:5e:25:6e:80:32:d2:be:69:89:f7:ab:25:8e:b6:36:61: 9f:b8:7c:32:e2:ea:5e:4a:86:02:3e:7d:7d:ed:65:b3:b7:94: 2d:d3:d7:02:16:52:69:53:5e:b9:27:e3:a1:63:c4:e9:57:f4: 8e:f8:ae:ff:2a:64:94:31:39:0b:37:22:75:f1:6d:3e:ab:eb: c4:89:d4:4c:3a:3c:42:a8:51:3d:88:f3:84:be:c8:db:5b:dd: 2a:07:31:3d:a0:d7:43:d9:60:72:16:4d:20:96:76:b7:bd:1f: 95:a9:5c:1d:b2:75:f5:52:b6:ba:81:fd:e3:3d:63:d5:0a:78: 0c:f1:a6:11:c8:80:c5:e1:1a:8c:df:a6:02:ac:2f:a6:71:a9: 9c:6b:2e:fe:34:96:1c:c2:7f:fc:1f:05:37:87:a8:8f:20:05: 74:8c:d0:45:54:1f:e1:46:dc:72:61:27:b7:70:96:b1:cc:f8: 22:a8:6b:ce:0b:57:ae:6a:90:6b:9a:c8:3b:04:37:d4:0b:3f: aa:1e:c3:cd:9d:d4:30:03:20:33:47:58:5e:29:e2:28:e8:f5: 62:63:10:13:dc:7c:1c:72:b2:d4:0d:fd:df:8c:7c:9d:49:39: 49:52:55:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVcRiLBrA1nDs4l9OqSgrzoYOLaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA2MTUwMzMwNDlaFw0yNjA2MTYwNTMyNDlaMDMxMTAvBgNV BAMTKDlBMEEzOTA0NTM4MTE3MzNDQ0I0NDY4NTc4NEVCOTM0Nzg1RjBFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnU/fTUpsmtEwRQ/d7yEhQE8J 981hr5HSQglJ4c7cYH7WDH7aXKRZ+YSBQPX0CTvReWye2zNVAKGEH1o9Hlj5ztWt UANhjMaUnOp2D6zRvhrkzAF8PcY/jj9iq2I81pHC2K4Mi7ccVYIaQLpBxcnbF/9f 51cKUTJ97+zFFCIyX+rGExbHmgJEKopE9p61j4rd5u+Ju5zQscDUCBrrA+VNCjtX brELwKr89f/2Xkeur6mvp+kikaiemf68L3AcXckiwFsXPiE8QMdXLxOcspNs0jD4 yK/2YgzJfSmhLt8epKEkY/cHDX4CDwKJofS+Tf7VJAT39T5Jd4RkUzooskbjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmgo5BFOBFzPMtEaFeE65NHhfDuEwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEoJbtFH/kv7ldGFUdkxjNzKgv0gXiVugDLS vmmJ96sljrY2YZ+4fDLi6l5KhgI+fX3tZbO3lC3T1wIWUmlTXrkn46FjxOlX9I74 rv8qZJQxOQs3InXxbT6r68SJ1Ew6PEKoUT2I84S+yNtb3SoHMT2g10PZYHIWTSCW dre9H5WpXB2ydfVStrqB/eM9Y9UKeAzxphHIgMXhGozfpgKsL6ZxqZxrLv40lhzC f/wfBTeHqI8gBXSM0EVUH+FG3HJhJ7dwlrHM+CKoa84LV65qkGuayDsEN9QLP6oe w82d1DADIDNHWF4p4ijo9WJjEBPcfBxystQN/d+MfJ1JOUlSVQE= -----END CERTIFICATE-----Generated at Mon Jun 15 14:13:24 2026 by rpki-client