$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: ARDPMKTffoNZhSwmhHSCKMAtQXlDyOKCdcau2vQE9aE= Subject key identifier: 6C:F7:D4:26:06:6F:9D:DB:A0:33:9D:28:D0:32:64:F4:FD:C7:50:44 Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 353F83E8788010E67DF6608BC0CE5B2EBE4CBEE5 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: 0101 Signing time: Tue 10 Nov 2026 21:23:00 +0000 Manifest this update: Tue 10 Nov 2026 21:18:00 +0000 Manifest next update: Wed 11 Nov 2026 21:37:00 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) 2: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: NeTljKhvhtWPQuz1/ibxsMFyh1dZq1G/hCrOQaRl3Qs=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Nov 2026 08:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:3f:83:e8:78:80:10:e6:7d:f6:60:8b:c0:ce:5b:2e:be:4c:be:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: Nov 10 21:18:00 2026 GMT Not After : Nov 11 21:37:00 2026 GMT Subject: CN=6CF7D426066F9DDBA0339D28D03264F4FDC75044 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:4a:b8:52:8e:fc:8d:c1:d7:f1:3e:65:f6:7d: 77:a3:d2:06:b0:21:61:7a:38:0f:63:dc:4b:22:c2: 2c:86:c2:d8:f9:28:6b:1a:cf:04:13:88:b9:98:00: 78:cd:70:eb:10:a3:83:b8:ce:96:9b:ac:5d:ed:f6: b6:f4:83:c2:49:09:b1:1a:ab:71:4d:05:fd:fb:a9: 93:31:b6:15:63:83:d8:52:d3:cf:c6:ac:ce:32:70: 7f:c3:d2:27:2c:ac:9a:8f:4d:2a:cd:09:f4:8d:93: 89:0d:bf:15:5a:69:65:c2:0d:05:0f:65:9c:67:24: ee:00:2f:13:06:c0:96:7f:fe:fa:e8:bd:e6:c7:65: 06:be:3d:66:52:16:2b:11:a2:85:e2:30:41:4e:ef: 0e:1c:52:57:42:50:84:d7:ca:bc:49:67:ec:66:12: 7f:05:9f:37:0c:1f:bf:f3:68:a2:84:90:69:8c:39: d2:3e:f9:c4:38:f5:27:12:1b:de:b6:14:09:da:d1: 2b:30:ab:f6:5e:a2:21:42:b1:e4:5a:91:09:a3:c1: 53:c9:1d:4d:b8:99:77:bc:d5:91:6f:c7:c6:3b:be: 09:2c:8a:53:3c:71:ed:dd:e1:61:d8:02:9f:01:a7: b7:bb:d1:dc:6d:40:19:0e:a5:db:0f:a4:f9:2d:93: 40:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:F7:D4:26:06:6F:9D:DB:A0:33:9D:28:D0:32:64:F4:FD:C7:50:44 X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:c5:a0:50:9e:b1:fb:7b:60:8b:eb:a4:df:e2:9e:54:0e:f8: 3b:c1:21:0f:62:a9:63:f5:70:f2:a7:2f:64:38:d8:1e:11:a2: 90:78:4e:a4:7d:8a:07:7d:38:d1:2d:b4:4d:9f:27:59:bd:d7: ae:da:ca:00:fe:61:35:db:08:31:00:67:82:80:76:37:a5:52: 72:9c:cb:5e:fc:07:2a:48:7e:7c:77:4b:d8:3f:2d:5c:c9:e9: 2b:1e:50:62:dc:73:96:85:23:21:89:06:33:48:96:64:25:29: b7:d3:f5:49:37:45:6b:94:b5:5f:19:ca:4b:01:dc:0e:8c:ee: d8:6a:e3:2c:00:9a:af:bd:62:d2:6f:55:29:39:ae:3b:67:12: a8:39:eb:66:62:82:83:02:6d:11:2c:33:24:bf:c5:cf:3c:85: ab:98:84:a0:35:ff:a1:b3:74:d6:a5:72:3b:6e:a0:45:75:05: 6f:55:de:0f:7a:1f:4c:4b:0a:ff:83:0e:c6:90:0b:20:c2:2d: ff:ae:64:8d:d5:99:61:52:4d:68:c0:06:22:85:a2:ac:ff:3a: 3e:e9:87:97:09:f8:14:f5:0f:05:76:2b:ed:d0:84:d8:10:63: 37:3e:29:f9:2e:f6:5f:e8:f6:fa:3e:9f:b5:91:19:27:7c:d2: 86:94:4f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNT+D6HiAEOZ99mCLwM5bLr5MvuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjExMTAyMTE4MDBaFw0yNjExMTEyMTM3MDBaMDMxMTAvBgNV BAMTKDZDRjdENDI2MDY2RjlEREJBMDMzOUQyOEQwMzI2NEY0RkRDNzUwNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSrhSjvyNwdfxPmX2fXej0gaw IWF6OA9j3EsiwiyGwtj5KGsazwQTiLmYAHjNcOsQo4O4zpabrF3t9rb0g8JJCbEa q3FNBf37qZMxthVjg9hS08/GrM4ycH/D0icsrJqPTSrNCfSNk4kNvxVaaWXCDQUP ZZxnJO4ALxMGwJZ//vrovebHZQa+PWZSFisRooXiMEFO7w4cUldCUITXyrxJZ+xm En8FnzcMH7/zaKKEkGmMOdI++cQ49ScSG962FAna0Sswq/ZeoiFCseRakQmjwVPJ HU24mXe81ZFvx8Y7vgksilM8ce3d4WHYAp8Bp7e70dxtQBkOpdsPpPktk0DdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbPfUJgZvndugM50o0DJk9P3HUEQwHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADPFoFCesft7YIvrpN/inlQO+DvBIQ9iqWP1 cPKnL2Q42B4RopB4TqR9igd9ONEttE2fJ1m9167aygD+YTXbCDEAZ4KAdjelUnKc y178BypIfnx3S9g/LVzJ6SseUGLcc5aFIyGJBjNIlmQlKbfT9Uk3RWuUtV8ZyksB 3A6M7thq4ywAmq+9YtJvVSk5rjtnEqg562ZigoMCbREsMyS/xc88hauYhKA1/6Gz dNalcjtuoEV1BW9V3g96H0xLCv+DDsaQCyDCLf+uZI3VmWFSTWjABiKFoqz/Oj7p h5cJ+BT1DwV2K+3QhNgQYzc+Kfku9l/o9vo+n7WRGSd80oaUT6o= -----END CERTIFICATE-----Generated at Tue Nov 10 23:39:44 2026 by rpki-client