$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: oq2yHxdIWb9jxt5tQWr7PCh8I7JkUYn2C9x6f55dmjI= Subject key identifier: 01:25:D6:0D:66:A3:AF:68:CF:5F:D5:F0:75:3B:A8:85:1F:8A:AF:97 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 16A41907F55CA01FE05B3A33BE7F3B89522228F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: F7 Signing time: Tue 03 Nov 2026 14:20:55 +0000 Manifest this update: Tue 03 Nov 2026 14:15:55 +0000 Manifest next update: Wed 04 Nov 2026 14:25:55 +0000 Files and hashes: 1: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: SrvabF7wbjzakXCyz2zfgtupdTH1Q9IroW7QQqf3zmo=) 2: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Nov 2026 14:25:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a4:19:07:f5:5c:a0:1f:e0:5b:3a:33:be:7f:3b:89:52:22:28:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Nov 3 14:15:55 2026 GMT Not After : Nov 4 14:25:55 2026 GMT Subject: CN=0125D60D66A3AF68CF5FD5F0753BA8851F8AAF97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:15:0f:a8:8f:62:38:8a:96:32:04:4c:37:b0: 58:9e:91:e2:6b:4b:60:5f:95:6b:de:64:20:3a:8f: 3e:97:85:bc:3e:d2:84:46:6a:ce:77:35:bf:c5:a0: 10:43:ca:5d:f3:e0:8a:a6:f3:5b:8b:8b:61:a9:f3: 96:26:b6:79:55:e4:66:0a:74:15:fd:69:3a:99:4e: a4:67:37:32:f8:37:a1:df:60:ea:6e:24:23:c0:63: e8:13:64:38:78:7b:70:bf:84:75:64:17:02:4f:3d: c5:56:3f:07:2d:f4:1d:17:fa:17:6d:e8:e3:c3:88: 77:ec:af:08:90:8a:44:f7:01:5f:e9:ed:6d:d7:2e: f3:d7:1d:ae:be:cd:cf:22:57:4d:11:c1:b1:e8:20: ef:b7:97:bd:a6:fb:98:05:11:ad:58:1c:eb:59:a0: 02:17:a4:8c:ab:54:67:6e:eb:4d:96:4f:58:59:68: 6f:a2:69:aa:66:12:cf:76:69:9a:a1:a4:80:bd:8a: 9b:0f:7c:51:8c:8d:d7:64:ca:91:67:49:54:97:19: b9:b3:59:fa:11:29:ce:58:d6:c9:7e:91:fa:4e:dc: ca:50:1a:d7:81:95:28:7b:0a:3c:43:d7:c9:55:1d: 35:ac:24:73:6b:03:5f:4a:68:0d:18:df:da:48:94: 3f:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:25:D6:0D:66:A3:AF:68:CF:5F:D5:F0:75:3B:A8:85:1F:8A:AF:97 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:5f:df:44:f9:20:35:9f:c3:88:c8:0a:f3:9b:ad:50:bc:6a: 43:2b:fa:b0:eb:7c:12:de:3d:5d:f8:57:f8:37:6f:77:b4:a4: 11:9a:f3:c9:0a:7f:2f:ac:30:7b:30:45:c0:23:d6:85:e8:9a: b6:33:98:2f:5e:46:a7:a1:c2:a6:60:33:ac:00:f7:f2:83:38: 95:08:8e:ce:55:ca:b1:25:b8:83:22:1b:ea:a3:b1:ee:99:dd: 42:2e:99:f2:1c:b6:ad:26:a5:5e:48:26:bc:e2:90:ba:e9:db: 51:58:29:92:2b:35:f4:27:bd:86:99:0e:e6:1f:2d:1f:5e:69: 40:5d:42:41:b9:3c:51:12:66:59:ae:eb:76:60:ad:27:ba:8b: f5:ae:02:c4:17:18:3a:16:6f:a6:79:26:dc:01:df:8f:ff:28: 08:ba:9f:4a:95:67:60:f2:91:c0:4e:ac:ff:aa:05:b7:12:af: 96:8a:9f:6b:4f:9c:e1:37:e6:13:82:2b:41:ba:bf:43:b3:ef: 68:42:87:45:19:93:5a:d0:95:61:a3:ef:d7:8a:86:0e:43:3e: 28:83:6f:e6:69:3b:c6:71:e7:de:99:d3:9c:7d:6b:2a:ea:94: e6:73:25:09:0b:b0:ff:34:be:2c:f1:97:9a:9d:0c:49:ae:54: 88:f4:ac:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqQZB/VcoB/gWzozvn87iVIiKPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjExMDMxNDE1NTVaFw0yNjExMDQxNDI1NTVaMDMxMTAvBgNV BAMTKDAxMjVENjBENjZBM0FGNjhDRjVGRDVGMDc1M0JBODg1MUY4QUFGOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnFQ+oj2I4ipYyBEw3sFiekeJr S2BflWveZCA6jz6Xhbw+0oRGas53Nb/FoBBDyl3z4Iqm81uLi2Gp85YmtnlV5GYK dBX9aTqZTqRnNzL4N6HfYOpuJCPAY+gTZDh4e3C/hHVkFwJPPcVWPwct9B0X+hdt 6OPDiHfsrwiQikT3AV/p7W3XLvPXHa6+zc8iV00RwbHoIO+3l72m+5gFEa1YHOtZ oAIXpIyrVGdu602WT1hZaG+iaapmEs92aZqhpIC9ipsPfFGMjddkypFnSVSXGbmz WfoRKc5Y1sl+kfpO3MpQGteBlSh7CjxD18lVHTWsJHNrA19KaA0Y39pIlD+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUASXWDWajr2jPX9XwdTuohR+Kr5cwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5f30T5IDWfw4jICvObrVC8akMr+rDrfBLe PV34V/g3b3e0pBGa88kKfy+sMHswRcAj1oXomrYzmC9eRqehwqZgM6wA9/KDOJUI js5VyrEluIMiG+qjse6Z3UIumfIctq0mpV5IJrzikLrp21FYKZIrNfQnvYaZDuYf LR9eaUBdQkG5PFESZlmu63ZgrSe6i/WuAsQXGDoWb6Z5JtwB34//KAi6n0qVZ2Dy kcBOrP+qBbcSr5aKn2tPnOE35hOCK0G6v0Oz72hCh0UZk1rQlWGj79eKhg5DPiiD b+ZpO8Zx596Z05x9ayrqlOZzJQkLsP80vizxl5qdDEmuVIj0rLE= -----END CERTIFICATE-----Generated at Wed Nov 4 06:54:48 2026 by rpki-client