$ rpki-client -vvf repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft File: 72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft (raw, json) Hash identifier: nI3FORVUKA9jyg1m1HNvfvOAFh/JGbklj3dGGP5PpiE= Subject key identifier: E3:DA:3C:CB:D8:D9:90:50:69:33:2E:66:1C:E7:25:37:04:EC:2D:A2 Authority key identifier: 72:D6:6E:2B:CD:D4:F1:A7:CB:17:8E:05:0B:4C:A8:A9:DF:E3:1A:AE Certificate issuer: /CN=72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE Certificate serial: 0DAFE52AE1C1D9B680D03BA4DA76D5A92D7311A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft Manifest number: 05 Signing time: Tue 17 Mar 2026 19:21:28 +0000 Manifest this update: Tue 17 Mar 2026 19:16:28 +0000 Manifest next update: Fri 20 Mar 2026 22:12:28 +0000 Files and hashes: 1: 72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl (hash: C8TGhzSUdmawklswTuw1ZBOmyrWmskoiE2asqxLxqNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 22:12:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:af:e5:2a:e1:c1:d9:b6:80:d0:3b:a4:da:76:d5:a9:2d:73:11:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE Validity Not Before: Mar 17 19:16:28 2026 GMT Not After : Mar 20 22:12:28 2026 GMT Subject: CN=E3DA3CCBD8D9905069332E661CE7253704EC2DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:1b:cc:ec:2e:e4:a6:b3:be:e6:50:bb:ef:04: b3:6e:10:ac:32:8e:f4:f2:76:61:56:e2:ba:1e:40: 0d:17:22:d3:70:ef:d8:9e:67:c5:64:6b:20:25:ad: 89:ce:e0:e4:57:e5:11:08:88:27:c7:29:fc:82:7d: ba:1f:fa:87:50:bd:55:03:0a:4b:af:ea:ff:ad:f2: 97:7a:63:a7:a0:cb:e4:06:87:6b:4e:1e:06:d2:08: d2:d2:21:04:0d:5b:33:13:c3:09:12:9e:80:25:fe: 7a:e2:61:1f:4e:39:76:5e:77:34:43:e1:68:39:3d: 8a:32:97:ed:81:3d:da:5e:90:87:04:b4:fa:25:2a: 41:f6:18:4e:39:db:23:14:8f:7e:57:c0:e7:10:94: a7:c6:7d:03:86:df:dc:9a:bd:45:11:01:55:29:bc: 8f:c6:67:d6:6c:38:17:a0:6b:4f:19:9c:20:2f:61: 0d:39:0b:99:7b:b0:d2:50:ea:10:4a:b3:5e:fe:0d: f2:5d:96:42:1c:da:87:68:74:48:fc:87:e2:9b:ae: b1:47:c0:e9:e3:c9:31:f6:05:f1:94:d0:7f:69:32: fe:3c:dc:7a:ec:72:f3:3f:b4:4d:e2:40:93:d1:af: 26:9e:47:d8:88:55:ae:a9:f9:83:46:83:65:3a:7f: 58:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:DA:3C:CB:D8:D9:90:50:69:33:2E:66:1C:E7:25:37:04:EC:2D:A2 X509v3 Authority Key Identifier: keyid:72:D6:6E:2B:CD:D4:F1:A7:CB:17:8E:05:0B:4C:A8:A9:DF:E3:1A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2be29902-e0f4-429a-9a26-439b9bfee489/0/72D66E2BCDD4F1A7CB178E050B4CA8A9DFE31AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:a9:38:17:39:0f:f6:e4:8b:c0:e1:bd:ab:7c:ae:3e:ec:85: a9:d8:ed:0e:ad:6a:32:46:3d:c6:10:44:10:23:5f:e2:f8:85: 57:e4:44:16:81:e6:a5:bb:22:1e:a9:cc:4b:cd:2c:9a:41:9e: 4c:2c:92:b2:c0:bf:c2:97:d1:6f:8c:53:92:c9:6b:54:c8:39: 3b:3a:22:9d:33:c4:cf:e0:a2:38:7f:47:70:c4:d0:57:c7:20: 5a:dc:a9:15:59:82:c3:32:f2:6c:04:0e:49:d9:86:62:a6:68: 2a:92:a3:b9:be:f5:09:00:1b:6d:17:2b:b1:fd:b3:d9:97:c0: 65:34:1f:fa:e3:b7:58:c6:d6:67:1f:bf:74:98:98:3e:16:0e: 60:87:83:bb:89:29:e7:f9:0d:05:c9:4e:03:ff:d8:f2:0b:d7: ac:13:d6:0a:95:4d:4f:47:87:e1:9b:d6:36:b5:2c:e0:ad:df: ed:a4:4d:8e:89:85:1a:ae:88:07:ea:ce:6e:93:c1:73:ff:e6: 88:f4:72:91:15:b1:cb:64:17:05:42:38:6a:49:4c:b0:fb:c6: 1e:3c:24:58:fb:35:2d:d3:6b:20:4c:2d:bd:50:39:3c:1b:c2: 6c:56:a8:85:13:81:f6:19:dc:86:de:14:44:6d:61:93:c9:e5: 81:84:e9:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDa/lKuHB2baA0Duk2nbVqS1zEacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4QTlE RkUzMUFBRTAeFw0yNjAzMTcxOTE2MjhaFw0yNjAzMjAyMjEyMjhaMDMxMTAvBgNV BAMTKEUzREEzQ0NCRDhEOTkwNTA2OTMzMkU2NjFDRTcyNTM3MDRFQzJEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVG8zsLuSms77mULvvBLNuEKwy jvTydmFW4roeQA0XItNw79ieZ8VkayAlrYnO4ORX5REIiCfHKfyCfbof+odQvVUD Ckuv6v+t8pd6Y6egy+QGh2tOHgbSCNLSIQQNWzMTwwkSnoAl/nriYR9OOXZedzRD 4Wg5PYoyl+2BPdpekIcEtPolKkH2GE452yMUj35XwOcQlKfGfQOG39yavUURAVUp vI/GZ9ZsOBega08ZnCAvYQ05C5l7sNJQ6hBKs17+DfJdlkIc2ododEj8h+KbrrFH wOnjyTH2BfGU0H9pMv483HrscvM/tE3iQJPRryaeR9iIVa6p+YNGg2U6f1jRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49o8y9jZkFBpMy5mHOclNwTsLaIwHwYDVR0j BBgwFoAUctZuK83U8afLF44FC0yoqd/jGq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YmUyOTkwMi1lMGY0LTQyOWEtOWEyNi00MzliOWJmZWU0ODkvMC83MkQ2NkUyQkNE RDRGMUE3Q0IxNzhFMDUwQjRDQThBOURGRTMxQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4QTlERkUz MUFBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmJlMjk5MDItZTBmNC00MjlhLTlh MjYtNDM5YjliZmVlNDg5LzAvNzJENjZFMkJDREQ0RjFBN0NCMTc4RTA1MEI0Q0E4 QTlERkUzMUFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKpOBc5D/bki8Dhvat8rj7shanY7Q6tajJG PcYQRBAjX+L4hVfkRBaB5qW7Ih6pzEvNLJpBnkwskrLAv8KX0W+MU5LJa1TIOTs6 Ip0zxM/gojh/R3DE0FfHIFrcqRVZgsMy8mwEDknZhmKmaCqSo7m+9QkAG20XK7H9 s9mXwGU0H/rjt1jG1mcfv3SYmD4WDmCHg7uJKef5DQXJTgP/2PIL16wT1gqVTU9H h+Gb1ja1LOCt3+2kTY6JhRquiAfqzm6TwXP/5oj0cpEVsctkFwVCOGpJTLD7xh48 JFj7NS3TayBMLb1QOTwbwmxWqIUTgfYZ3IbeFERtYZPJ5YGE6TU= -----END CERTIFICATE-----Generated at Thu Mar 19 09:35:57 2026 by rpki-client