
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json)
Hash identifier: gf2dQ7zL3cSkHZcpT/n72o3gBc744+9Insr1cnpuCiU=
Subject key identifier: 81:FA:29:8E:2A:6E:92:C4:74:29:D4:E4:5B:62:A5:1E:21:36:89:AE
Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69
Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269
Certificate serial: 27F4D7D6A430B1360190720D93A4902A1A08F2F3
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
Manifest number: BD
Signing time: Sun 20 Sep 2026 08:53:13 +0000
Manifest this update: Sun 20 Sep 2026 08:48:13 +0000
Manifest next update: Mon 21 Sep 2026 12:10:13 +0000
Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=)
2: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: iIHiGINOl2XxffDzav3P7UqGE3aKb6Xu/va8MUljWO0=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl
rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 21 Sep 2026 12:10:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
27:f4:d7:d6:a4:30:b1:36:01:90:72:0d:93:a4:90:2a:1a:08:f2:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269
Validity
Not Before: Sep 20 08:48:13 2026 GMT
Not After : Sep 21 12:10:13 2026 GMT
Subject: CN=81FA298E2A6E92C47429D4E45B62A51E213689AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:d0:1b:96:30:dc:3c:07:3e:4c:ef:8c:0d:
e2:c7:79:2c:1a:7c:ff:55:36:f0:38:dc:b1:df:41:
34:1c:d2:42:0e:14:75:b3:5f:14:df:f6:9b:10:62:
25:b9:31:52:23:ad:af:2c:f2:31:0a:dc:8a:f8:3d:
08:a9:78:d5:8c:b6:95:b8:3c:07:a4:aa:5e:82:62:
48:74:a3:6e:d1:f9:9e:44:be:55:82:d4:00:76:11:
a6:33:5c:d0:9f:70:89:4d:1b:fd:71:0e:63:24:1b:
2f:73:7d:ab:35:d0:52:eb:8d:fe:5c:58:35:61:09:
0e:5e:2c:e9:37:5c:b9:fa:08:54:06:7f:22:29:5b:
41:36:8b:41:03:43:3e:d1:fc:b6:98:1c:b1:2b:33:
d1:35:af:01:db:6e:1d:88:cf:03:34:b9:40:a8:da:
fc:e4:a2:3d:04:48:6c:1a:93:e7:02:4c:c7:e1:83:
a6:bc:aa:6e:5c:67:8d:66:84:a4:24:f2:47:f4:67:
c3:ea:3a:1d:fb:6c:47:36:37:ce:64:d0:c6:8b:b0:
77:f6:46:e0:01:0e:d3:50:2a:2d:c3:78:1d:d0:de:
41:28:d3:6a:ec:a9:f4:19:8f:c7:d8:ba:d0:9f:7c:
37:b8:ce:95:53:b2:d0:1d:21:6a:0f:ba:a6:e2:9c:
3a:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:29:8E:2A:6E:92:C4:74:29:D4:E4:5B:62:A5:1E:21:36:89:AE
X509v3 Authority Key Identifier:
keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:f7:82:f7:9a:d3:b0:d5:c2:b0:39:ae:db:30:f1:52:2e:4b:
1b:c6:52:d0:75:51:62:42:c6:06:5b:94:c0:72:57:72:b1:20:
78:f3:7c:2b:eb:3c:cd:cf:71:f4:cc:3e:12:59:f4:86:2b:6e:
81:9e:b6:5c:7e:4b:bf:d2:1b:66:a7:66:de:68:8e:a8:93:79:
e3:36:37:a3:37:ad:04:82:27:4b:c2:39:de:46:bf:b0:9b:fc:
be:8d:9b:5e:e6:e7:f8:6a:17:f3:84:ec:b8:19:64:3c:64:a8:
49:f9:0a:56:52:8e:dc:8f:02:ce:42:d7:f0:48:fa:f1:f3:96:
96:99:32:f4:d0:91:d0:fc:ce:2c:35:56:59:6a:84:23:a4:eb:
bd:f1:d0:31:2a:3a:95:11:7f:75:dd:37:b0:1f:61:6b:3c:67:
cb:00:77:31:11:ce:21:4f:8e:75:02:e0:ac:6f:f7:ac:ae:ff:
2a:60:85:f1:0d:11:2a:7c:88:40:5c:7c:10:4d:19:59:b8:2e:
f2:f9:e5:0f:2d:05:65:0a:eb:ab:c6:b6:cf:e5:15:3e:ff:21:
8a:f3:3b:79:28:45:d7:4a:01:ab:ae:1b:85:31:1f:22:f8:91:
57:38:45:ab:54:25:e5:ee:41:28:83:c2:70:89:c0:c2:49:65:
05:8e:9b:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:31:58 2026 by rpki-client