
$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json)
Hash identifier: m7U53gjzrnBDLyY33kuGsEX5BIHs5wKz5fYhXhkuFAc=
Subject key identifier: 68:45:BE:04:28:B0:74:38:24:8E:33:4D:E2:AD:16:9A:0D:D0:25:80
Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Certificate serial: 325861AD3DB147E932B64DD74FBF06665903C59E
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
Manifest number: A6
Signing time: Thu 03 Sep 2026 03:52:36 +0000
Manifest this update: Thu 03 Sep 2026 03:47:36 +0000
Manifest next update: Fri 04 Sep 2026 06:39:36 +0000
Files and hashes: 1: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: ff/R46oZyhT6IFVCfqJW525Nxu7xRHcZVGx0SQ8SEm4=)
2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Thu 03 Sep 2026 21:53:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:58:61:ad:3d:b1:47:e9:32:b6:4d:d7:4f:bf:06:66:59:03:c5:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A
Validity
Not Before: Sep 3 03:47:36 2026 GMT
Not After : Sep 4 06:39:36 2026 GMT
Subject: CN=6845BE0428B07438248E334DE2AD169A0DD02580
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:31:de:79:cf:76:44:ff:5c:d1:f1:24:bc:a1:
94:8a:7e:1b:d1:02:2f:51:3e:de:bc:7a:84:69:ce:
65:30:4d:52:74:75:01:45:58:6b:60:37:aa:4b:8e:
41:97:9d:c1:09:ef:37:a3:cd:ba:41:84:4f:60:95:
b9:e1:d0:ae:fa:75:d1:49:ca:d9:8c:f3:7e:21:0b:
5f:e4:1a:ed:5f:20:1b:8a:94:b8:27:27:d5:87:ea:
9b:a3:df:72:76:06:b8:34:a8:7e:4e:38:20:3b:7e:
11:4c:14:dd:e9:6d:e7:15:eb:bc:cb:76:cd:b8:ae:
78:18:17:c0:4a:fd:6b:10:ca:85:ca:07:c0:a4:de:
30:c5:16:e9:a8:85:3a:6e:52:df:33:c4:70:51:60:
1b:fe:ec:6b:53:45:3f:d2:c2:af:8e:3e:c1:64:56:
43:b1:94:ce:3e:28:69:2d:f1:e5:a8:4c:d1:43:8b:
bf:eb:ae:88:a7:8f:cb:ee:93:a4:5e:76:d0:e2:5c:
77:71:73:6d:16:46:6a:98:d4:1f:42:d2:8a:5c:8e:
ba:90:09:e4:58:3f:c6:8a:ff:51:85:fe:6a:0b:51:
59:a5:f9:37:8f:7b:e5:ac:2e:8b:ae:34:15:46:c7:
9e:0d:25:01:77:47:7e:2b:a7:19:3d:02:fa:49:a3:
c0:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:BE:04:28:B0:74:38:24:8E:33:4D:E2:AD:16:9A:0D:D0:25:80
X509v3 Authority Key Identifier:
keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:67:82:ff:6f:36:40:90:71:1c:36:07:37:4e:0d:7a:61:83:
3e:e4:db:ac:c5:25:18:1b:40:c1:c7:51:35:c7:a8:e5:04:91:
2f:6a:58:6a:5d:c4:1d:bc:8b:14:39:86:69:40:57:8a:42:b0:
83:11:4f:6f:d5:89:a7:f7:38:a9:d3:b2:48:80:98:e3:f3:90:
5f:43:7d:92:a5:97:a8:19:49:96:8d:07:fa:b4:da:99:fd:ee:
e7:fa:a1:c1:a5:36:7f:04:79:8c:a6:88:77:40:93:84:98:f1:
7b:5e:90:ef:69:16:a3:fc:94:dd:63:a1:be:55:b7:6b:06:10:
b8:46:2b:07:de:ca:2a:5a:ae:13:b4:d5:f2:15:0f:d5:5a:1e:
ba:73:dc:57:29:a9:5c:00:57:91:2a:b4:c9:f0:14:bf:b6:8b:
d9:68:cb:06:83:4e:5d:d8:2c:85:c4:37:67:1c:c4:d1:75:f1:
95:3c:82:bd:01:bc:88:d7:c2:03:0d:7a:8b:6e:15:71:27:83:
a1:7e:f1:0a:12:c6:f8:72:2b:e7:af:47:80:92:37:51:ec:fe:
1a:1e:f8:3e:1f:9b:f5:5d:82:47:21:38:98:07:21:db:ea:be:
9c:b6:0b:20:45:ac:98:c3:41:c7:30:c5:2d:b4:bb:c8:34:8b:
49:ee:b3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 09:47:25 2026 by rpki-client