$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: NaL/JIVRyVkIXuCzD8v/P7bTB9XvH9/oL/tf4QaEbnU= Subject key identifier: A6:F8:01:51:B3:26:45:32:15:B1:20:C7:73:09:9C:4A:3C:2B:71:16 Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 55E3BAB2563DA80D0E7792A5EA10549709A95E02 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: 2A Signing time: Wed 03 Jun 2026 01:01:00 +0000 Manifest this update: Wed 03 Jun 2026 00:56:00 +0000 Manifest next update: Thu 04 Jun 2026 01:24:00 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) 2: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: stu5cLhFFOORDOkAe6lM+xXc0bIyJr8/x+lK8e+51Zo=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:e3:ba:b2:56:3d:a8:0d:0e:77:92:a5:ea:10:54:97:09:a9:5e:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: Jun 3 00:56:00 2026 GMT Not After : Jun 4 01:24:00 2026 GMT Subject: CN=A6F80151B326453215B120C773099C4A3C2B7116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:68:a8:05:9b:14:ed:67:cc:d9:71:75:36:34: e3:9f:69:b8:61:35:a9:99:1e:2c:ab:7d:e9:19:a2: 2d:04:a0:a1:52:6e:0c:8c:32:b6:40:27:f5:c8:c4: 14:bb:22:fe:20:84:61:b9:43:88:5f:3b:b8:b8:05: 5f:75:73:8c:5b:f4:4e:b0:10:86:8c:1e:57:0c:87: 21:43:84:6d:fe:44:5e:d3:ea:54:53:48:bc:50:ba: 41:51:dc:57:b5:0b:51:fa:6c:fb:ad:25:6f:80:39: 44:14:d0:63:ac:2e:fa:ad:e5:4d:70:22:0c:05:9e: 27:67:17:29:88:cd:d5:44:8e:92:d6:e5:1a:c7:b8: de:41:62:98:ce:bc:82:29:7b:e6:07:b2:85:66:80: 22:33:e5:4a:b5:f4:b9:55:cf:ed:51:e7:4c:d0:9d: a6:6f:d0:73:ca:58:cb:c1:ee:2a:e4:64:14:fc:49: e3:e6:eb:2f:36:f1:f8:ec:26:33:85:6a:ac:15:c2: bc:cb:5f:c7:52:50:e8:9b:18:0f:bc:36:d3:2a:df: 65:dc:f0:3c:93:48:af:c4:ee:e9:b4:2a:07:b2:32: 67:c6:b9:28:d5:86:ec:56:8a:06:05:74:94:c4:52: 4a:0d:6d:e7:01:a4:1f:fd:00:b5:35:e5:ab:ce:8a: 79:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:F8:01:51:B3:26:45:32:15:B1:20:C7:73:09:9C:4A:3C:2B:71:16 X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:2e:74:64:6f:bc:1e:09:a0:bb:e0:9a:64:06:7e:5b:da:76: e4:cd:4c:d6:27:b6:b3:e6:41:f3:bf:0d:0c:1b:29:e7:02:5a: c3:30:5e:77:67:61:56:63:d3:a4:95:6d:ba:b9:d1:00:c4:ae: 48:cf:ad:0e:b4:0f:e7:c4:03:14:80:c3:18:9c:0a:b0:fc:93: 06:9e:86:77:7d:e2:23:a6:c6:21:5e:3b:18:fb:93:71:7f:99: 51:04:5a:d0:b4:7f:af:fd:b6:16:59:c9:d7:37:b7:97:13:c3: 25:d9:b0:ff:0a:cd:61:55:f4:c1:06:50:6e:c6:2b:b1:77:94: a4:25:e3:bd:de:e7:af:d2:95:86:26:c1:6c:12:ce:04:91:67: 93:8e:1b:7c:ce:09:84:59:9a:c1:4f:54:a8:c6:7f:ae:d3:85: 6c:4f:15:d7:a3:c3:e9:02:fd:b0:99:9c:7b:80:98:90:a8:2a: f7:81:22:d0:ef:4a:d5:c7:b9:33:8c:e7:27:f5:76:f8:6b:66: a5:6c:05:6f:de:b6:88:11:85:e4:96:a0:a6:e5:dd:6e:45:14: 09:60:78:4f:ab:a7:da:b4:0a:2d:1f:ea:ac:3b:70:16:4d:92: fc:76:46:eb:76:e9:bf:75:c0:48:72:93:93:f9:19:1e:c6:c4: 7d:a4:92:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVeO6slY9qA0Od5Kl6hBUlwmpXgIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjA2MDMwMDU2MDBaFw0yNjA2MDQwMTI0MDBaMDMxMTAvBgNV BAMTKEE2RjgwMTUxQjMyNjQ1MzIxNUIxMjBDNzczMDk5QzRBM0MyQjcxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbaKgFmxTtZ8zZcXU2NOOfabhh NamZHiyrfekZoi0EoKFSbgyMMrZAJ/XIxBS7Iv4ghGG5Q4hfO7i4BV91c4xb9E6w EIaMHlcMhyFDhG3+RF7T6lRTSLxQukFR3Fe1C1H6bPutJW+AOUQU0GOsLvqt5U1w IgwFnidnFymIzdVEjpLW5RrHuN5BYpjOvIIpe+YHsoVmgCIz5Uq19LlVz+1R50zQ naZv0HPKWMvB7irkZBT8SePm6y828fjsJjOFaqwVwrzLX8dSUOibGA+8NtMq32Xc 8DyTSK/E7um0KgeyMmfGuSjVhuxWigYFdJTEUkoNbecBpB/9ALU15avOinlpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpvgBUbMmRTIVsSDHcwmcSjwrcRYwHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4udGRvvB4JoLvgmmQGflvaduTNTNYntrPm QfO/DQwbKecCWsMwXndnYVZj06SVbbq50QDErkjPrQ60D+fEAxSAwxicCrD8kwae hnd94iOmxiFeOxj7k3F/mVEEWtC0f6/9thZZydc3t5cTwyXZsP8KzWFV9MEGUG7G K7F3lKQl473e56/SlYYmwWwSzgSRZ5OOG3zOCYRZmsFPVKjGf67ThWxPFdejw+kC /bCZnHuAmJCoKveBItDvStXHuTOM5yf1dvhrZqVsBW/etogRheSWoKbl3W5FFAlg eE+rp9q0Ci0f6qw7cBZNkvx2Rut26b91wEhyk5P5GR7GxH2kkuI= -----END CERTIFICATE-----Generated at Wed Jun 3 03:57:07 2026 by rpki-client