
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json)
Hash identifier: 8TkVVBfzJuKDfbM9Cnn3gxrBmqIzmHETxUeVf7j3NPA=
Subject key identifier: 66:BC:76:A0:87:33:89:E3:BC:18:53:D7:BC:BB:36:87:4A:B7:A6:FA
Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Certificate serial: 55C39C39D0257E31276454A8873013FDBB3B95DE
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
Manifest number: BF
Signing time: Tue 22 Sep 2026 11:10:26 +0000
Manifest this update: Tue 22 Sep 2026 11:05:26 +0000
Manifest next update: Wed 23 Sep 2026 14:47:26 +0000
Files and hashes: 1: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: qyiN+5B4ZN6f7wMTn2oBRmY7+jrf/st8F+yTHqmP8+Y=)
2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 23 Sep 2026 14:47:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:c3:9c:39:d0:25:7e:31:27:64:54:a8:87:30:13:fd:bb:3b:95:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644
Validity
Not Before: Sep 22 11:05:26 2026 GMT
Not After : Sep 23 14:47:26 2026 GMT
Subject: CN=66BC76A0873389E3BC1853D7BCBB36874AB7A6FA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:5c:9e:45:86:09:74:c1:02:b7:2f:cf:97:42:
5e:79:fc:25:4b:5e:2a:91:5b:db:25:2c:94:55:ef:
08:34:65:63:bf:8e:95:19:58:fd:67:c6:a8:65:60:
ff:83:ba:08:f9:93:63:27:c3:2e:97:19:92:74:df:
dc:27:b5:cd:89:46:9a:a9:31:94:79:d9:b6:97:78:
5b:29:87:73:4e:17:89:32:22:d9:68:ed:d0:bb:4d:
1c:3c:ad:ab:8c:1d:fa:2b:dc:c8:2c:c7:f8:70:84:
aa:96:0a:4e:bc:2e:cc:5f:6e:c8:90:d0:a6:33:f4:
be:35:23:4a:d5:ae:a7:1f:59:f2:3c:0e:e4:04:83:
45:bf:dc:39:e9:7c:71:9e:60:cb:b2:fd:9a:f5:2c:
41:86:6d:12:1e:20:bf:dc:58:c1:0a:ad:9a:0a:ba:
30:1e:d9:2c:70:5e:c4:26:44:c7:5f:b3:2b:90:57:
a1:0c:52:79:89:b3:d1:58:b2:80:d1:29:af:b6:f9:
48:6e:93:bf:44:28:c5:99:e0:9a:23:13:fb:25:64:
13:43:60:37:65:9a:0a:90:f1:ac:65:1a:97:cf:75:
e7:61:e6:3d:84:c1:35:b5:2b:8e:8e:c4:56:38:73:
4f:cb:b5:8c:77:4d:a1:05:80:36:bf:35:fc:95:da:
a9:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:BC:76:A0:87:33:89:E3:BC:18:53:D7:BC:BB:36:87:4A:B7:A6:FA
X509v3 Authority Key Identifier:
keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:47:ce:ee:35:01:1d:d7:1e:60:ea:f9:8a:ee:35:77:58:9d:
7c:22:79:8b:bd:6f:b2:fd:80:e0:37:45:00:51:80:ff:0d:e1:
cf:a9:85:06:4f:43:bc:67:f9:aa:6a:94:a7:c9:4b:c1:71:28:
6b:da:b4:a2:d2:4d:cd:5f:69:02:0e:d8:e3:fc:d7:8f:15:15:
ad:55:27:65:55:af:cd:44:c7:b0:87:bd:00:fa:a4:cc:ca:f0:
c2:0f:67:ac:61:70:15:26:c9:71:1c:e9:1a:54:95:05:d2:02:
37:a3:29:6d:75:95:e4:65:5f:74:ef:bb:7b:d2:cc:05:7c:27:
e5:c3:7a:f7:a1:7e:14:68:22:ad:35:03:a7:a7:2d:f2:59:f6:
2c:17:9f:7a:55:f1:e7:c7:61:67:bc:bc:e7:61:fe:b2:70:c9:
2c:7e:fe:79:f4:fa:e1:cb:24:d7:ea:c2:eb:bb:d6:90:c8:ad:
a3:8d:30:5c:20:65:a8:3e:ad:0f:f2:48:ad:7d:32:4f:6d:41:
b3:56:b6:f2:3b:6a:d0:63:f9:0d:f7:db:7f:54:45:7a:1d:b9:
33:06:aa:3a:18:0f:4f:e7:7e:e5:6b:84:66:f8:14:38:0e:1b:
58:57:39:ba:e7:fe:3b:37:ad:56:91:34:86:ca:f6:1d:6b:07:
0c:13:14:68
-----BEGIN CERTIFICATE-----
MIIFMjCCBBqgAwIBAgIUVcOcOdAlfjEnZFSohzAT/bs7ld4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE
QzQ3NzY0NDAeFw0yNjA5MjIxMTA1MjZaFw0yNjA5MjMxNDQ3MjZaMDMxMTAvBgNV
BAMTKDY2QkM3NkEwODczMzg5RTNCQzE4NTNEN0JDQkIzNjg3NEFCN0E2RkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcXJ5Fhgl0wQK3L8+XQl55/CVL
XiqRW9slLJRV7wg0ZWO/jpUZWP1nxqhlYP+Dugj5k2Mnwy6XGZJ039wntc2JRpqp
MZR52baXeFsph3NOF4kyItlo7dC7TRw8rauMHfor3Mgsx/hwhKqWCk68LsxfbsiQ
0KYz9L41I0rVrqcfWfI8DuQEg0W/3DnpfHGeYMuy/Zr1LEGGbRIeIL/cWMEKrZoK
ujAe2SxwXsQmRMdfsyuQV6EMUnmJs9FYsoDRKa+2+Uhuk79EKMWZ4JojE/slZBND
YDdlmgqQ8axlGpfPdedh5j2EwTW1K46OxFY4c0/LtYx3TaEFgDa/NfyV2qlzAgMB
AAGjggI8MIICODAdBgNVHQ4EFgQUZrx2oIczieO8GFPXvLs2h0q3pvowHwYDVR0j
BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV
HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v
Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3
OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE
ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl
cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3
NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov
L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi
MjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRC
MjJEQzQ3NzY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF
BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC
BQAwDQYJKoZIhvcNAQELBQADggEBAHZHzu41AR3XHmDq+YruNXdYnXwieYu9b7L9
gOA3RQBRgP8N4c+phQZPQ7xn+apqlKfJS8FxKGvatKLSTc1faQIO2OP8148VFa1V
J2VVr81Ex7CHvQD6pMzK8MIPZ6xhcBUmyXEc6RpUlQXSAjejKW11leRlX3Tvu3vS
zAV8J+XDevehfhRoIq01A6enLfJZ9iwXn3pV8efHYWe8vOdh/rJwySx+/nn0+uHL
JNfqwuu71pDIraONMFwgZag+rQ/ySK19Mk9tQbNWtvI7atBj+Q33239URXoduTMG
qjoYD0/nfuVrhGb4FDgOG1hXObrn/js3rVaRNIbK9h1rBwwTFGg=
-----END CERTIFICATE-----
Generated at Tue Sep 22 20:12:17 2026 by rpki-client