$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json) Hash identifier: 43VVnhppYOjOq+sEcY+zeqrSebTGHOHhTGlyfFkIX/Y= Subject key identifier: 63:8A:54:13:0C:95:1E:8D:8B:3C:31:A4:F7:D6:44:4B:10:0B:C7:11 Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F Certificate serial: 28B9C1399734B6628B49886E428D4CEE41778DDF Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 14:17:33 +0000 Manifest this update: Tue 02 Jun 2026 14:12:33 +0000 Manifest next update: Wed 03 Jun 2026 14:55:33 +0000 Files and hashes: 1: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: RvIVl3jU/xVuhkRAlRNgd8SGOlh9Grk/Q3mKFrk1nNM=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 14:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b9:c1:39:97:34:b6:62:8b:49:88:6e:42:8d:4c:ee:41:77:8d:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F Validity Not Before: Jun 2 14:12:33 2026 GMT Not After : Jun 3 14:55:33 2026 GMT Subject: CN=638A54130C951E8D8B3C31A4F7D6444B100BC711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:4a:8d:53:ca:7c:20:41:09:89:4d:da:62:2a: b5:3c:89:37:ae:d5:2c:77:b7:f9:e0:60:e6:68:23: fc:f1:b4:2b:82:d9:5c:02:60:0e:5d:87:0c:b3:49: ca:4a:6b:5e:98:b7:92:6a:4d:42:df:f6:f1:d7:4e: 42:e9:8e:0f:8e:3b:3b:66:66:94:df:af:3f:76:12: dc:90:e9:4f:ab:0a:3e:04:2c:41:03:ad:cd:5b:21: 0a:df:0c:44:68:61:7f:67:5f:cc:1e:21:2c:82:23: 8f:dc:9c:62:06:63:e9:d9:75:77:95:f4:3e:b6:88: 42:f1:5a:6e:19:33:f1:26:72:42:05:22:5b:ad:23: 85:30:1e:78:1c:a0:c3:3a:4a:d3:64:f2:95:8d:d9: 82:a1:1f:d3:49:cb:6f:f8:bb:81:86:48:75:32:c8: 0a:ec:7d:80:c6:bf:80:fb:42:d3:e8:22:99:b7:62: 49:fe:e8:c5:14:16:f1:ef:41:77:ae:c6:9e:fe:52: 47:71:86:fc:b6:b0:50:f2:02:ad:c1:98:a5:05:15: 40:39:ba:ec:0c:cb:a1:4c:bf:24:88:94:fa:47:c7: f8:65:e9:73:81:8a:1a:eb:32:53:72:c5:af:a5:72: 7b:2d:6e:34:d1:d7:4f:e0:50:61:4b:39:1a:b5:f0: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:8A:54:13:0C:95:1E:8D:8B:3C:31:A4:F7:D6:44:4B:10:0B:C7:11 X509v3 Authority Key Identifier: keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:af:15:c5:0c:72:24:03:7a:0e:55:2e:cd:35:ca:9f:cd:33: 94:92:2b:49:19:76:f5:70:cb:84:3d:c9:c5:0c:4c:f2:42:69: 7f:d0:c4:42:32:73:09:ab:a4:fd:a6:5d:db:1b:43:05:e5:02: e9:f7:90:90:3b:6a:14:0e:58:d8:e7:87:a1:28:1c:45:13:b9: dd:81:ff:09:75:36:36:d0:c6:d0:ee:ff:fe:0c:0a:d9:ee:dd: 71:87:d9:41:ab:26:10:3e:61:8d:11:4e:77:15:94:ab:a8:fd: 64:8d:b3:b9:35:42:f3:13:5b:f2:45:4f:32:78:9d:31:04:9e: db:3d:23:92:21:8e:3f:d7:54:84:02:31:45:bd:06:a0:7e:4a: d1:54:d4:07:fb:f5:14:82:48:ed:ba:9b:1d:72:b6:4f:31:6a: 78:be:c7:be:db:70:4b:41:29:f3:e0:59:93:a6:33:42:29:75: 3f:06:0e:b2:75:b4:6a:4a:72:6d:74:15:2a:3b:69:60:2a:92: bd:72:55:88:7f:5e:90:6f:0b:8b:f8:b8:27:f4:4c:42:0c:8f: e0:fa:f9:44:73:cd:9a:54:ba:04:ee:eb:42:b7:aa:1a:4e:36: a1:1d:d2:eb:0a:b2:f2:5e:1b:08:f4:17:ca:dc:a3:43:d7:45: 18:c7:ac:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLnBOZc0tmKLSYhuQo1M7kF3jd8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5QTJG MzM2NzMwRjAeFw0yNjA2MDIxNDEyMzNaFw0yNjA2MDMxNDU1MzNaMDMxMTAvBgNV BAMTKDYzOEE1NDEzMEM5NTFFOEQ4QjNDMzFBNEY3RDY0NDRCMTAwQkM3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSo1TynwgQQmJTdpiKrU8iTeu 1Sx3t/ngYOZoI/zxtCuC2VwCYA5dhwyzScpKa16Yt5JqTULf9vHXTkLpjg+OOztm ZpTfrz92EtyQ6U+rCj4ELEEDrc1bIQrfDERoYX9nX8weISyCI4/cnGIGY+nZdXeV 9D62iELxWm4ZM/EmckIFIlutI4UwHngcoMM6StNk8pWN2YKhH9NJy2/4u4GGSHUy yArsfYDGv4D7QtPoIpm3Ykn+6MUUFvHvQXeuxp7+Ukdxhvy2sFDyAq3BmKUFFUA5 uuwMy6FMvySIlPpHx/hl6XOBihrrMlNyxa+lcnstbjTR10/gUGFLORq18OuPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY4pUEwyVHo2LPDGk99ZESxALxxEwHwYDVR0j BBgwFoAUcrW3rVti3tVQiJsVkJc5ovM2cw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEwMTI5YTgtMjdlOC00MDQ2LTg5ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1 QjYyREVENTUwODg5QjE1OTA5NzM5QTJGMzM2NzMwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI1QjdBRDVCNjJERUQ1NTA4ODlCMTU5MDk3MzlBMkYzMzY3 MzBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5 QTJGMzM2NzMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqvFcUMciQDeg5VLs01yp/NM5SSK0kZdvVw y4Q9ycUMTPJCaX/QxEIycwmrpP2mXdsbQwXlAun3kJA7ahQOWNjnh6EoHEUTud2B /wl1NjbQxtDu//4MCtnu3XGH2UGrJhA+YY0RTncVlKuo/WSNs7k1QvMTW/JFTzJ4 nTEEnts9I5Ihjj/XVIQCMUW9BqB+StFU1Af79RSCSO26mx1ytk8xani+x77bcEtB KfPgWZOmM0IpdT8GDrJ1tGpKcm10FSo7aWAqkr1yVYh/XpBvC4v4uCf0TEIMj+D6 +URzzZpUugTu60K3qhpONqEd0usKsvJeGwj0F8rco0PXRRjHrFg= -----END CERTIFICATE-----Generated at Wed Jun 3 04:23:12 2026 by rpki-client