$ rpki-client -vvf rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft File: 872E319F800BA2C6B4EF39E67C02FA78A219796F.mft (raw, json) Hash identifier: SkeHnwsgT6BVzySo9bYjj8C3xguHz3Xvy+2rDge1JD0= Subject key identifier: 37:43:F1:6F:1B:C1:9C:B1:1D:D8:15:78:ED:A7:BD:55:A7:BA:30:F4 Authority key identifier: 87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F Certificate issuer: /CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Certificate serial: 25FA3154A11A31527E1FD54A69BC1BC0B44A9F85 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 03:55:43 +0000 Manifest this update: Tue 21 Jul 2026 03:50:43 +0000 Manifest next update: Wed 22 Jul 2026 05:19:43 +0000 Files and hashes: 1: 3130332e3138392e3131362e302f32342d3234203d3e20313439383738.roa (hash: PGq4Tr5WM4VAyh7qw47RLuSMNDSTpWd9mtnYf8tmUA0=) 2: 872E319F800BA2C6B4EF39E67C02FA78A219796F.crl (hash: kJeinXduRWwL0qCAnOCzC2R5Kcf+Q7w2TNgoGAvkCr4=) 3: 3130332e3138392e3131372e302f32342d3234203d3e20313439383738.roa (hash: OvRyOsYLEGBYlmYssyFcgvhpHbvbSdqAPtYyX5hS8EY=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:fa:31:54:a1:1a:31:52:7e:1f:d5:4a:69:bc:1b:c0:b4:4a:9f:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=872E319F800BA2C6B4EF39E67C02FA78A219796F Validity Not Before: Jul 21 03:50:43 2026 GMT Not After : Jul 22 05:19:43 2026 GMT Subject: CN=3743F16F1BC19CB11DD81578EDA7BD55A7BA30F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:a9:bf:6b:2f:ec:2d:36:cb:42:ed:95:f2:fe: d4:77:ea:5d:81:a0:c2:85:9a:55:f4:a3:80:04:d3: db:e6:2a:e0:c9:b3:54:f2:da:86:8a:d6:52:0d:5f: a5:81:30:f2:82:65:0e:55:ae:3f:21:ea:31:a9:7f: 08:0d:be:7c:aa:92:6a:60:09:b3:11:66:c8:5b:18: d6:26:11:7e:4d:c2:96:80:92:a0:15:7d:1a:1e:88: d9:ec:ef:1f:d0:f0:ce:15:bb:b6:87:4e:20:54:8f: 49:42:a2:b2:c6:b8:df:5c:3b:5c:82:a6:2f:45:60: 05:15:84:b4:45:61:7b:67:f3:5e:fd:26:9a:90:67: a4:43:ca:0d:37:0f:b7:97:c2:db:d4:62:21:b9:c9: 39:3a:7c:31:72:4d:03:50:07:9c:88:56:2c:f7:b7: df:4e:f7:b8:89:d7:7a:22:bc:c8:6f:d9:e7:7b:14: 1e:97:56:7d:96:7f:4d:5d:ee:d0:99:52:b0:03:5b: 1e:d8:21:20:2a:dd:a7:69:e3:48:42:20:03:7a:bb: c8:29:4e:ac:2d:71:e7:7d:12:6f:ed:77:a7:62:64: b7:e9:f3:34:55:42:dc:87:28:10:33:d8:36:52:be: c6:d5:b3:98:7b:df:17:10:8f:9f:8e:7b:62:1b:c9: fb:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:43:F1:6F:1B:C1:9C:B1:1D:D8:15:78:ED:A7:BD:55:A7:BA:30:F4 X509v3 Authority Key Identifier: keyid:87:2E:31:9F:80:0B:A2:C6:B4:EF:39:E6:7C:02:FA:78:A2:19:79:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/872E319F800BA2C6B4EF39E67C02FA78A219796F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/7305ab30-5653-42bc-9c3f-aaf567eae701/0/872E319F800BA2C6B4EF39E67C02FA78A219796F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:1f:8c:69:32:fe:ae:ca:fe:cd:1a:4f:e5:ab:b6:bd:b7:c7: b7:23:3d:cd:7a:4f:b7:d2:7d:b7:6e:15:92:90:e6:83:00:86: 50:d0:67:aa:c8:5c:17:58:fc:b9:38:46:b9:9b:b6:b8:5d:26: 50:c5:9e:6c:58:a9:5b:4b:ba:2f:61:b6:9b:89:5a:28:b4:26: a4:fa:bf:d8:06:a8:7b:14:41:99:8e:0d:eb:53:c6:d1:70:8a: c1:53:c7:77:ee:0f:49:99:16:48:fe:22:16:e5:19:3b:5e:cb: 02:94:6b:78:67:b4:23:80:87:89:54:15:e1:73:78:c8:5c:b6: 46:93:c2:81:77:24:55:60:50:4b:c2:7b:18:f7:33:70:8b:f7: 9d:f8:e1:cc:61:09:64:2c:05:73:77:8f:56:92:c7:7c:d5:59: ca:15:57:98:8c:92:da:01:4e:6b:bc:41:66:71:87:ee:6f:76: 1e:23:fd:61:bc:e1:c4:cb:50:c4:b6:8f:47:11:2d:12:02:68: 1d:8b:be:33:4b:18:bc:68:91:91:a5:6e:5c:eb:f8:b2:d7:5f: 3e:02:d6:6d:16:16:fc:94:63:fa:fe:f3:32:37:2f:ad:d3:76: d5:d1:00:dc:d9:57:27:10:c2:52:8f:6a:4a:e2:39:8d:a1:16: f1:b1:c3:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJfoxVKEaMVJ+H9VKabwbwLRKn4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhB MjE5Nzk2RjAeFw0yNjA3MjEwMzUwNDNaFw0yNjA3MjIwNTE5NDNaMDMxMTAvBgNV BAMTKDM3NDNGMTZGMUJDMTlDQjExREQ4MTU3OEVEQTdCRDU1QTdCQTMwRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpqb9rL+wtNstC7ZXy/tR36l2B oMKFmlX0o4AE09vmKuDJs1Ty2oaK1lINX6WBMPKCZQ5Vrj8h6jGpfwgNvnyqkmpg CbMRZshbGNYmEX5NwpaAkqAVfRoeiNns7x/Q8M4Vu7aHTiBUj0lCorLGuN9cO1yC pi9FYAUVhLRFYXtn8179JpqQZ6RDyg03D7eXwtvUYiG5yTk6fDFyTQNQB5yIViz3 t99O97iJ13oivMhv2ed7FB6XVn2Wf01d7tCZUrADWx7YISAq3adp40hCIAN6u8gp Tqwtced9Em/td6diZLfp8zRVQtyHKBAz2DZSvsbVs5h73xcQj5+Oe2Ibyfs9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN0PxbxvBnLEd2BV47ae9Vae6MPQwHwYDVR0j BBgwFoAUhy4xn4ALosa07znmfAL6eKIZeW8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NzMwNWFiMzAtNTY1My00MmJjLTljM2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4 MDBCQTJDNkI0RUYzOUU2N0MwMkZBNzhBMjE5Nzk2Ri5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS84NzJFMzE5RjgwMEJBMkM2QjRFRjM5RTY3QzAyRkE3OEEyMTk3 OTZGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNzMwNWFiMzAtNTY1My00MmJjLTlj M2YtYWFmNTY3ZWFlNzAxLzAvODcyRTMxOUY4MDBCQTJDNkI0RUYzOUU2N0MwMkZB NzhBMjE5Nzk2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUfjGky/q7K/s0aT+Wrtr23x7cjPc16T7fS fbduFZKQ5oMAhlDQZ6rIXBdY/Lk4RrmbtrhdJlDFnmxYqVtLui9htpuJWii0JqT6 v9gGqHsUQZmODetTxtFwisFTx3fuD0mZFkj+IhblGTteywKUa3hntCOAh4lUFeFz eMhctkaTwoF3JFVgUEvCexj3M3CL95344cxhCWQsBXN3j1aSx3zVWcoVV5iMktoB Tmu8QWZxh+5vdh4j/WG84cTLUMS2j0cRLRICaB2LvjNLGLxokZGlblzr+LLXXz4C 1m0WFvyUY/r+8zI3L63TdtXRANzZVycQwlKPakriOY2hFvGxw/0= -----END CERTIFICATE-----Generated at Tue Jul 21 06:24:09 2026 by rpki-client