$ rpki-client -vvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: MYOvAgWogdXwOe0FWFh4keatU50FRfT4NjQuh2kAngE= Subject key identifier: DA:56:4E:BB:6C:92:C3:93:47:C5:66:7D:27:DA:6B:78:76:1A:B9:A0 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 7E4B97E07FC4E1344A6FD2726174B963B99B05E3 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: 6B Signing time: Tue 21 Jul 2026 00:05:56 +0000 Manifest this update: Tue 21 Jul 2026 00:00:56 +0000 Manifest next update: Wed 22 Jul 2026 03:12:56 +0000 Files and hashes: 1: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) 2: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 3: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: indabsHqhLUQyFVflTnUb9xG5A146EF/PsLd02PC4+g=) 4: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Jul 2026 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4b:97:e0:7f:c4:e1:34:4a:6f:d2:72:61:74:b9:63:b9:9b:05:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Jul 21 00:00:56 2026 GMT Not After : Jul 22 03:12:56 2026 GMT Subject: CN=DA564EBB6C92C39347C5667D27DA6B78761AB9A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8f:79:91:02:dc:66:a0:c7:7b:3d:de:04:99: 93:1d:1b:e4:4a:54:79:01:ba:42:f6:c0:39:91:2e: fa:79:03:39:21:2a:48:05:36:0e:75:28:a9:6b:99: 6f:a1:86:5b:40:33:3a:12:10:b8:25:7c:87:1b:90: 7e:5e:d0:60:43:02:22:7e:d7:f3:6c:2f:88:6f:70: 76:51:39:47:43:f6:4f:0e:8f:40:ff:37:c7:0e:13: 96:f8:13:ab:f4:de:83:14:8b:4c:8b:5c:72:22:f2: a1:83:b3:f7:26:15:8e:9b:fc:db:f7:d2:b1:7d:49: 32:ff:29:d8:64:a6:28:47:95:7d:dc:a7:25:5a:0c: dd:d8:3b:3d:65:6e:13:5e:18:1a:ac:c9:f3:3d:df: a6:27:86:8d:6a:6a:3d:3a:da:0c:6f:ee:d0:1d:3b: d3:19:80:25:dd:07:8e:54:dd:f0:d6:d4:29:62:cb: df:95:25:91:23:83:24:a4:20:35:97:b3:04:9f:ee: b0:c2:5d:88:b0:61:a6:ca:47:5f:6c:9c:6a:67:6e: 88:7c:f3:f8:07:39:89:e8:22:45:bb:91:e8:cf:04: 95:a1:89:d8:c7:25:98:21:0c:ef:20:63:87:f5:78: 80:78:c3:62:8b:98:f1:f9:2d:29:69:18:e8:7f:4e: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:56:4E:BB:6C:92:C3:93:47:C5:66:7D:27:DA:6B:78:76:1A:B9:A0 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:3b:d3:cc:18:b6:2b:5d:b3:18:74:d7:1c:0c:ff:19:2e:25: ce:94:39:17:4a:09:2e:f7:8e:67:de:fe:49:4f:48:57:6f:87: d7:6a:12:95:2f:15:15:8d:61:42:61:d7:0f:4a:55:b8:8a:09: ec:17:03:4f:87:9a:35:53:a2:d3:21:aa:44:d1:1f:de:1d:c3: 9d:4a:25:42:27:50:5a:95:d6:74:9d:b9:8d:ca:9f:fb:a9:0a: 8b:f7:13:30:0d:3c:8e:82:27:fc:33:fc:39:50:9b:9f:dc:1c: 41:b2:c6:39:05:f0:d3:1a:06:bf:da:ec:ac:0e:45:b5:6c:a0: f4:83:aa:ee:35:75:e9:ef:0e:1e:38:91:dd:5b:ac:1f:34:7e: 5b:a9:c8:b9:a5:f4:c7:f7:bc:5b:dc:7b:78:45:b0:aa:81:79: 56:be:dd:45:98:65:62:d0:d6:d0:bb:ac:ad:2d:07:3f:97:1e: e7:9d:c3:a3:2a:b0:20:cb:6f:4f:04:2a:72:93:04:fc:01:34: c3:7e:82:5d:c3:17:30:d2:79:3d:8b:6b:41:17:a5:03:7b:be: 9c:ce:40:ca:dc:ce:fe:28:82:99:22:9e:93:3a:9c:31:49:65: 40:16:88:ea:aa:32:95:b0:3f:3a:9c:9b:5d:00:19:eb:4d:6b: 95:93:3f:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkuX4H/E4TRKb9JyYXS5Y7mbBeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA3MjEwMDAwNTZaFw0yNjA3MjIwMzEyNTZaMDMxMTAvBgNV BAMTKERBNTY0RUJCNkM5MkMzOTM0N0M1NjY3RDI3REE2Qjc4NzYxQUI5QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoj3mRAtxmoMd7Pd4EmZMdG+RK VHkBukL2wDmRLvp5AzkhKkgFNg51KKlrmW+hhltAMzoSELglfIcbkH5e0GBDAiJ+ 1/NsL4hvcHZROUdD9k8Oj0D/N8cOE5b4E6v03oMUi0yLXHIi8qGDs/cmFY6b/Nv3 0rF9STL/KdhkpihHlX3cpyVaDN3YOz1lbhNeGBqsyfM936Ynho1qaj062gxv7tAd O9MZgCXdB45U3fDW1Cliy9+VJZEjgySkIDWXswSf7rDCXYiwYabKR19snGpnboh8 8/gHOYnoIkW7kejPBJWhidjHJZghDO8gY4f1eIB4w2KLmPH5LSlpGOh/Tgi9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2lZOu2ySw5NHxWZ9J9preHYauaAwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA708wYtitdsxh01xwM/xkuJc6UORdKCS73 jmfe/klPSFdvh9dqEpUvFRWNYUJh1w9KVbiKCewXA0+HmjVTotMhqkTRH94dw51K JUInUFqV1nSduY3Kn/upCov3EzANPI6CJ/wz/DlQm5/cHEGyxjkF8NMaBr/a7KwO RbVsoPSDqu41denvDh44kd1brB80flupyLml9Mf3vFvce3hFsKqBeVa+3UWYZWLQ 1tC7rK0tBz+XHuedw6MqsCDLb08EKnKTBPwBNMN+gl3DFzDSeT2La0EXpQN7vpzO QMrczv4ogpkinpM6nDFJZUAWiOqqMpWwPzqcm10AGetNa5WTP+Q= -----END CERTIFICATE-----Generated at Tue Jul 21 06:55:48 2026 by rpki-client