$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: l/sbfnDjmNAr8MiGfp0Ysz0o/W/G6vmlD9Iq2XWce4w= Subject key identifier: F2:DD:E8:62:76:D5:8E:F1:CE:F0:C8:4C:7F:AC:71:F2:DD:FC:77:50 Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 15ED5E4FDE2290215717D0621EBF63534B5AA18D Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: F8 Signing time: Tue 03 Nov 2026 09:40:12 +0000 Manifest this update: Tue 03 Nov 2026 09:35:12 +0000 Manifest next update: Wed 04 Nov 2026 10:51:12 +0000 Files and hashes: 1: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 3: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: jVkA6Q8HvwnYztoPcf+zuxCgRmRCDuIWlu99VpVfYPE=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 10:51:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:ed:5e:4f:de:22:90:21:57:17:d0:62:1e:bf:63:53:4b:5a:a1:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Nov 3 09:35:12 2026 GMT Not After : Nov 4 10:51:12 2026 GMT Subject: CN=F2DDE86276D58EF1CEF0C84C7FAC71F2DDFC7750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:6f:2c:03:88:dd:9d:79:3a:fc:88:60:b5:4c: 9b:2f:15:08:eb:1c:72:9d:67:29:f5:4c:17:00:1f: 2e:58:f6:2c:88:81:93:73:bc:46:b1:99:b0:cb:5f: c8:46:1d:9d:28:ec:6b:20:6b:5c:8d:61:7a:34:27: e3:23:06:ea:cf:44:aa:f9:db:eb:fd:16:77:2e:79: 2c:5e:83:ac:7f:f0:60:94:38:02:28:80:7b:bb:7b: 94:71:c7:c5:97:94:22:6c:c8:8e:73:5a:eb:8c:3a: bb:0a:75:62:5f:9e:37:93:fc:8a:42:a0:af:f7:98: 7a:51:05:74:d1:a8:65:9a:10:1f:5d:4e:60:d6:9f: 5e:e8:9b:8b:79:37:b5:a1:86:07:a4:e7:75:d0:7d: d2:cc:b9:50:9a:22:4b:ce:41:d0:81:0e:55:51:bd: 47:dd:ed:45:95:ef:0c:7f:28:ef:c7:f7:bb:86:30: 38:07:b4:da:b9:b6:28:16:8e:a1:ef:65:f0:26:2b: a4:bd:a5:28:e8:1c:07:5a:27:25:1c:8d:9d:3f:e6: 4e:e7:48:1e:e3:8e:1e:70:15:63:f0:c2:3c:a9:eb: 6c:f0:89:29:13:85:b1:2e:68:9b:b9:6a:48:cf:08: aa:72:3f:56:02:de:01:d0:4e:62:24:f0:77:7f:02: f0:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:DD:E8:62:76:D5:8E:F1:CE:F0:C8:4C:7F:AC:71:F2:DD:FC:77:50 X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:d6:5d:33:19:3e:49:ea:2f:83:e2:5c:52:e4:18:59:d9:04: d2:ee:3e:28:1e:6d:60:d9:fa:02:77:2b:a8:85:12:f1:d1:42: 79:ee:1c:4c:da:8e:20:f0:3f:7b:12:aa:be:24:e1:36:62:5e: de:6e:f2:b7:6c:52:5f:44:fa:61:5d:7e:d3:7e:6e:62:9a:2e: 66:6f:f6:67:b7:f0:34:7e:ee:68:af:a1:e5:9f:20:38:64:dc: 3e:7c:ce:8a:5c:da:0b:66:25:7d:18:47:f6:4f:50:16:7b:c5: d8:77:87:f4:ef:a7:a9:97:4b:cc:af:06:1d:35:d6:7b:25:72: 55:b3:2d:cb:0e:c9:52:6b:11:bd:6d:a7:03:e8:85:53:03:29: c9:8b:14:cf:dc:35:0f:fe:5b:d2:8a:ac:14:35:1e:96:aa:47: 58:99:16:6d:41:74:0f:5e:73:fb:da:2a:2f:63:f7:7a:7a:8a: b3:52:5b:41:ca:9a:44:e2:dc:e1:53:e3:66:ae:1f:89:b5:d0: dd:bd:27:97:ea:6a:a7:a9:05:09:d8:87:5a:ad:77:b3:ea:35: 3b:b3:f0:bb:e3:3f:4b:c3:bd:d5:22:6a:34:c1:fe:2d:c3:2b: e5:c6:44:29:91:97:2a:6e:00:6e:f4:a7:21:a5:13:01:e4:b6: c6:c9:99:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFe1eT94ikCFXF9BiHr9jU0taoY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjExMDMwOTM1MTJaFw0yNjExMDQxMDUxMTJaMDMxMTAvBgNV BAMTKEYyRERFODYyNzZENThFRjFDRUYwQzg0QzdGQUM3MUYyRERGQzc3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXbywDiN2deTr8iGC1TJsvFQjr HHKdZyn1TBcAHy5Y9iyIgZNzvEaxmbDLX8hGHZ0o7Gsga1yNYXo0J+MjBurPRKr5 2+v9FncueSxeg6x/8GCUOAIogHu7e5Rxx8WXlCJsyI5zWuuMOrsKdWJfnjeT/IpC oK/3mHpRBXTRqGWaEB9dTmDWn17om4t5N7Whhgek53XQfdLMuVCaIkvOQdCBDlVR vUfd7UWV7wx/KO/H97uGMDgHtNq5tigWjqHvZfAmK6S9pSjoHAdaJyUcjZ0/5k7n SB7jjh5wFWPwwjyp62zwiSkThbEuaJu5akjPCKpyP1YC3gHQTmIk8Hd/AvBHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8t3oYnbVjvHO8MhMf6xx8t38d1AwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADXWXTMZPknqL4PiXFLkGFnZBNLuPigebWDZ +gJ3K6iFEvHRQnnuHEzajiDwP3sSqr4k4TZiXt5u8rdsUl9E+mFdftN+bmKaLmZv 9me38DR+7mivoeWfIDhk3D58zopc2gtmJX0YR/ZPUBZ7xdh3h/Tvp6mXS8yvBh01 1nslclWzLcsOyVJrEb1tpwPohVMDKcmLFM/cNQ/+W9KKrBQ1HpaqR1iZFm1BdA9e c/vaKi9j93p6irNSW0HKmkTi3OFT42auH4m10N29J5fqaqepBQnYh1qtd7PqNTuz 8LvjP0vDvdUiajTB/i3DK+XGRCmRlypuAG70pyGlEwHktsbJmdo= -----END CERTIFICATE-----Generated at Tue Nov 3 19:44:32 2026 by rpki-client