
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json)
Hash identifier: da/stC/q6Dc4YS2sRvGipgBqC/FqFgfHCtFN0pFV+uM=
Subject key identifier: CB:92:F1:E0:B3:03:E2:F9:3C:C2:8F:19:64:45:DB:81:3D:02:87:78
Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F
Certificate serial: 6C39510C81F5C1948C26A2982E506D29D0E8C559
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
Manifest number: 6B
Signing time: Mon 20 Jul 2026 14:34:43 +0000
Manifest this update: Mon 20 Jul 2026 14:29:43 +0000
Manifest next update: Tue 21 Jul 2026 15:38:43 +0000
Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=)
2: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: ZXcbXsTWDI9gKs+7jtH5vQseLNtFl3KAh3Jm6LPbaRg=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 21 Jul 2026 15:38:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:39:51:0c:81:f5:c1:94:8c:26:a2:98:2e:50:6d:29:d0:e8:c5:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F
Validity
Not Before: Jul 20 14:29:43 2026 GMT
Not After : Jul 21 15:38:43 2026 GMT
Subject: CN=CB92F1E0B303E2F93CC28F196445DB813D028778
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:fb:43:4d:43:a9:1f:9a:9e:4b:e1:42:5b:60:
9e:59:55:25:0f:06:9f:b9:37:90:7c:6c:82:70:ad:
e7:ee:3f:37:8e:9f:d2:a3:fa:c0:87:97:18:a2:7a:
9e:6c:e8:32:38:73:7a:fb:68:b3:84:34:e9:cc:d2:
4e:75:3c:db:47:ab:cb:e2:24:74:b1:17:ae:1c:93:
a9:d5:fa:2e:ea:ac:c6:40:3e:97:fb:ea:3a:d0:a0:
eb:6c:3b:89:84:c7:8b:b6:c0:20:75:78:bd:60:f7:
ab:76:bb:b5:b2:ca:8c:1b:b1:b2:70:e9:fc:8f:f2:
a7:9a:33:ed:f3:51:60:d5:44:91:ee:57:8c:e2:c6:
fc:9b:42:30:ba:62:79:95:53:fe:04:62:7e:ca:1e:
82:64:3a:4c:3c:f5:33:09:bd:af:ac:5e:2d:9a:75:
eb:43:15:19:35:3f:10:09:77:5a:61:07:53:c0:35:
c1:16:51:d8:f4:c9:2d:40:5a:cc:aa:91:de:fc:f8:
2c:f9:e6:26:40:6d:eb:a0:45:73:27:2e:9e:c3:3a:
89:89:fc:75:73:ad:07:1d:7a:c3:78:92:cd:54:b9:
47:41:f0:c3:ed:95:33:56:87:69:c2:17:42:fa:bf:
96:1c:3f:f7:0e:ef:00:82:fd:39:2e:a1:d2:d5:01:
46:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:92:F1:E0:B3:03:E2:F9:3C:C2:8F:19:64:45:DB:81:3D:02:87:78
X509v3 Authority Key Identifier:
keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:56:74:3a:c0:39:f7:df:de:a1:10:27:18:07:22:db:a4:e1:
24:25:0f:db:97:9b:9c:de:e3:1c:93:4b:ba:d7:55:24:ef:2f:
78:96:ca:a5:b4:ef:67:c4:2b:3b:c7:12:bb:27:05:40:c9:40:
10:00:20:11:8b:f3:9a:a0:b4:ff:a5:e7:67:5f:d5:a9:49:c8:
20:6e:30:08:5a:d6:43:d3:77:43:0d:74:f5:b4:d8:f8:b2:72:
49:54:7a:7e:fa:b5:09:d9:f9:e2:66:07:9f:bc:36:6e:1a:b4:
fc:23:24:72:12:ed:c6:2b:7d:8e:c0:5d:b3:88:be:c3:ff:72:
9e:f3:2b:36:b4:b4:50:b6:47:ea:f8:7e:9c:f2:29:80:4f:a3:
97:d3:cb:62:88:34:15:cc:ed:ed:22:50:99:9c:da:44:13:46:
d2:4f:dc:c9:56:94:66:3d:08:8c:1e:41:45:76:0e:f4:38:57:
39:7f:06:80:c0:01:ff:d0:b6:80:48:b5:5e:de:6b:e9:47:37:
6f:69:fc:25:ab:42:d7:2b:e2:12:d2:c8:4e:3d:a6:28:24:c5:
0b:ea:db:94:31:54:b7:34:34:0e:b4:15:9e:1c:fb:94:9c:06:
16:25:0f:c8:8e:3b:6d:31:f1:f8:d2:85:8d:1d:ec:19:83:a6:
11:af:ca:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 05:41:27 2026 by rpki-client