$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: HRobArg+3f8oVdxXxB2Pqq43T3MvK3GFFueK8Viszmw= Subject key identifier: 76:A9:13:10:6D:95:28:12:7F:FF:4A:5B:2D:C7:41:05:2C:44:D4:26 Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 0CF42D54B55C4CC8D8C810A201809E0EFF01E64E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: A7 Signing time: Thu 03 Sep 2026 11:00:41 +0000 Manifest this update: Thu 03 Sep 2026 10:55:41 +0000 Manifest next update: Fri 04 Sep 2026 13:09:41 +0000 Files and hashes: 1: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) 2: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: kAKMn/cNdVBvrp2yksgLeg9BNVW2yA0YQEXPfOPmrmk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Sep 2026 12:22:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:f4:2d:54:b5:5c:4c:c8:d8:c8:10:a2:01:80:9e:0e:ff:01:e6:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: Sep 3 10:55:41 2026 GMT Not After : Sep 4 13:09:41 2026 GMT Subject: CN=76A913106D9528127FFF4A5B2DC741052C44D426 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:21:00:10:81:b5:fb:71:b6:a4:0b:5f:b9:48: 6b:0b:eb:fb:3b:6b:cf:e3:d9:f6:a2:9e:7b:94:74: 6c:24:22:ca:dc:b9:87:01:47:50:31:16:19:ad:2b: 31:6b:df:ca:37:c3:79:74:63:e2:a4:6f:ab:be:48: bb:79:fa:76:42:86:89:42:bb:8f:40:aa:a0:3a:2a: 7f:f2:fd:7d:9a:dd:40:2b:eb:a0:53:50:20:17:67: 8a:7c:08:cc:0e:8e:89:a5:1d:4e:fa:0b:50:87:89: de:63:12:85:4f:03:57:91:07:db:ee:53:24:8f:53: 99:b1:0a:80:cc:b6:8a:7b:24:3e:5b:b8:77:a1:c7: a2:50:a2:f3:8d:ab:40:00:ba:15:8d:64:7a:c4:60: 4e:12:0c:10:86:23:b9:b3:c9:8f:e1:27:54:1f:e6: 83:4c:6d:0c:41:72:a7:61:59:01:2d:ea:66:22:35: bd:59:32:50:f5:46:d2:06:8d:87:09:2c:2b:4f:e2: 7b:3c:e2:31:3e:95:e5:6b:33:fa:be:91:a8:06:e3: 0f:ea:09:c2:42:26:d3:3d:b6:94:31:25:18:9b:67: 54:21:0b:8a:88:38:9b:0f:0b:05:e1:20:d0:f4:3d: 5f:61:8a:7f:91:1c:21:17:a3:7f:6d:bc:73:56:19: d5:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:A9:13:10:6D:95:28:12:7F:FF:4A:5B:2D:C7:41:05:2C:44:D4:26 X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8e:b1:6c:dd:a9:7e:32:c5:2b:5b:8d:92:5e:ad:92:77:3b: d6:3b:1f:f8:22:16:a5:55:4c:54:83:f6:60:f2:c0:3c:73:01: 79:58:37:e2:46:ff:6b:3c:84:51:2d:ce:a6:f6:58:2b:39:e7: 0f:4a:03:d7:71:e9:d2:d0:d9:a6:18:f6:70:95:65:c5:c1:0a: f4:2f:8b:a5:32:7e:f1:1e:c6:41:7c:f5:58:42:f2:41:83:54: b7:88:33:f3:af:55:ac:ff:8a:c6:8d:4b:48:36:72:71:5c:47: e4:ad:2e:0a:fd:a4:fe:ef:cc:40:73:23:2d:cd:6b:63:66:cf: a2:db:ea:ba:fc:82:7b:a4:e3:9a:a3:db:02:ca:94:39:21:94: 33:8d:0d:21:03:4a:d6:9e:1f:0d:6e:44:02:95:d2:58:a4:9b: 1a:d3:48:a1:a5:85:7a:aa:8b:d0:15:cc:12:65:be:88:70:db: 4e:2a:00:6d:dc:f7:fe:22:d2:c2:ec:1b:b8:30:0f:e0:94:47: fa:b6:62:fe:44:80:30:13:d8:80:53:2e:ec:b5:8a:27:db:b2: b4:d1:1b:4e:ad:cb:a5:08:2c:c0:01:0a:0e:a7:a2:92:14:1f: 98:6b:77:7f:b5:e0:20:c5:3b:54:b3:c5:f2:9b:fd:20:d3:93: 23:0f:16:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDPQtVLVcTMjYyBCiAYCeDv8B5k4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjA5MDMxMDU1NDFaFw0yNjA5MDQxMzA5NDFaMDMxMTAvBgNV BAMTKDc2QTkxMzEwNkQ5NTI4MTI3RkZGNEE1QjJEQzc0MTA1MkM0NEQ0MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoIQAQgbX7cbakC1+5SGsL6/s7 a8/j2fainnuUdGwkIsrcuYcBR1AxFhmtKzFr38o3w3l0Y+Kkb6u+SLt5+nZCholC u49AqqA6Kn/y/X2a3UAr66BTUCAXZ4p8CMwOjomlHU76C1CHid5jEoVPA1eRB9vu UySPU5mxCoDMtop7JD5buHehx6JQovONq0AAuhWNZHrEYE4SDBCGI7mzyY/hJ1Qf 5oNMbQxBcqdhWQEt6mYiNb1ZMlD1RtIGjYcJLCtP4ns84jE+leVrM/q+kagG4w/q CcJCJtM9tpQxJRibZ1QhC4qIOJsPCwXhIND0PV9hin+RHCEXo39tvHNWGdULAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdqkTEG2VKBJ//0pbLcdBBSxE1CYwHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmOsWzdqX4yxStbjZJerZJ3O9Y7H/giFqVV TFSD9mDywDxzAXlYN+JG/2s8hFEtzqb2WCs55w9KA9dx6dLQ2aYY9nCVZcXBCvQv i6UyfvEexkF89VhC8kGDVLeIM/OvVaz/isaNS0g2cnFcR+StLgr9pP7vzEBzIy3N a2Nmz6Lb6rr8gnuk45qj2wLKlDkhlDONDSEDStaeHw1uRAKV0likmxrTSKGlhXqq i9AVzBJlvohw204qAG3c9/4i0sLsG7gwD+CUR/q2Yv5EgDAT2IBTLuy1iifbsrTR G06ty6UILMABCg6nopIUH5hrd3+14CDFO1SzxfKb/SDTkyMPFlg= -----END CERTIFICATE-----Generated at Thu Sep 3 19:24:27 2026 by rpki-client