
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json)
Hash identifier: +ky26sfvZcAqWsUXlOTDcrdgYKhoZg7cU34czEk9Cvo=
Subject key identifier: 2C:DA:65:AC:8B:03:E5:52:22:C4:ED:C1:58:E5:7F:DF:82:61:FA:14
Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F
Certificate serial: 402706C220440EA7F626DBEF947CC6C2FBB7D966
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
Manifest number: F6
Signing time: Sun 01 Nov 2026 21:09:10 +0000
Manifest this update: Sun 01 Nov 2026 21:04:10 +0000
Manifest next update: Mon 02 Nov 2026 23:13:10 +0000
Files and hashes: 1: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: ObZwq6U0d8Zl+V//CSNYBDuJk98nefR0VC4kHvR5XyY=)
2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Mon 02 Nov 2026 23:13:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:27:06:c2:20:44:0e:a7:f6:26:db:ef:94:7c:c6:c2:fb:b7:d9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F
Validity
Not Before: Nov 1 21:04:10 2026 GMT
Not After : Nov 2 23:13:10 2026 GMT
Subject: CN=2CDA65AC8B03E55222C4EDC158E57FDF8261FA14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8a:8b:1f:f6:0e:a5:fd:0e:3e:7c:b1:99:66:
8d:12:ed:54:5a:eb:91:04:f2:22:8d:ed:33:85:4c:
4e:64:50:48:79:19:3b:33:f8:06:cf:c5:08:d9:1a:
f0:2a:77:79:13:4e:48:a5:8c:7c:65:d6:62:e6:72:
3c:82:33:63:3d:5d:0e:af:b5:e4:a0:60:e5:8f:8e:
20:86:cd:a9:cd:ce:9c:08:dd:c6:09:e3:4c:0d:2f:
a3:7f:0a:b5:38:0f:71:7d:b3:64:a2:db:86:88:db:
5d:a1:49:2d:2f:a4:10:5e:6a:ee:45:14:cb:21:7c:
ff:40:cd:74:fe:97:81:c8:2b:01:43:e1:9c:ca:a2:
92:59:a5:29:3e:bd:67:b0:14:80:c9:91:dd:71:4f:
a0:86:9a:e6:5b:cf:08:9e:1e:6d:d2:52:f5:b3:c5:
e5:6d:d4:70:dd:f0:fb:70:ff:1b:44:ab:f0:79:70:
dd:79:0a:ac:cd:10:70:33:45:9e:1f:d8:b9:4c:1b:
42:d1:28:d0:c7:3f:dc:e9:b5:a7:6b:68:73:11:78:
2e:dc:cc:7e:61:c4:57:ff:02:b0:c2:93:38:23:47:
b8:de:24:02:a2:97:06:5a:8c:89:78:bb:3c:68:01:
4a:cc:57:91:3a:f1:a0:8c:0b:23:d7:b7:62:ed:59:
6c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:DA:65:AC:8B:03:E5:52:22:C4:ED:C1:58:E5:7F:DF:82:61:FA:14
X509v3 Authority Key Identifier:
keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:89:fe:21:ba:a6:02:12:43:58:a8:09:07:d3:31:91:9d:53:
0f:a6:17:61:03:eb:ec:4c:06:f6:d7:b8:89:84:ba:ec:11:c2:
75:65:3d:da:0b:d1:4c:fe:27:a6:3b:95:3d:f3:61:d4:c0:0c:
43:9e:3a:da:28:74:00:cd:ff:ea:8c:b0:4c:cd:ff:7d:69:18:
9c:ef:ed:0a:45:a5:0e:bf:4e:76:4a:56:3c:7b:ee:10:20:ca:
48:56:de:f8:61:c5:67:c8:b4:ce:f1:be:8f:4f:db:f0:d3:07:
ec:8d:bf:8c:dc:93:9e:52:33:dd:b3:b0:64:aa:3e:68:d5:35:
c4:24:38:11:99:21:34:2f:98:79:1e:96:13:a7:34:d2:e0:ad:
b7:b3:8f:2c:53:27:14:39:fe:45:f5:a5:54:a7:e9:9b:8f:24:
f3:73:74:7f:b1:88:b0:e1:0c:47:f7:6d:ba:d1:a9:55:fe:8b:
76:e1:d4:76:85:72:d5:71:80:33:2d:8b:82:c8:f9:1a:fd:da:
f9:5b:ac:47:81:61:23:5c:4b:06:6f:57:ad:fa:00:5e:91:5b:
7a:b1:24:be:98:4c:da:01:a5:31:76:c8:be:f3:52:64:0a:9c:
16:fc:e3:60:a5:4c:1f:cf:d4:24:1b:9e:03:92:1c:5d:fa:d5:
0c:02:b1:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 16:30:50 2026 by rpki-client