$ rpki-client -vvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: L9gHeYuMRp1eCjqIKsxdLYmoZCXaswm2BcPBb8w/7oM= Subject key identifier: 84:80:57:C5:E1:D0:C5:7B:4E:E6:CB:6E:B7:B5:5F:03:0A:7C:84:C2 Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 38973718532E510CD8FAB7BC584B38C2135B3A94 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: 6A Signing time: Mon 20 Jul 2026 20:26:32 +0000 Manifest this update: Mon 20 Jul 2026 20:21:32 +0000 Manifest next update: Tue 21 Jul 2026 23:48:32 +0000 Files and hashes: 1: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: XkjHPX1JSPbbPuz1+XL6PZCoftLSR4MKAk+QlPoZVBQ=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Jul 2026 23:48:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:97:37:18:53:2e:51:0c:d8:fa:b7:bc:58:4b:38:c2:13:5b:3a:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: Jul 20 20:21:32 2026 GMT Not After : Jul 21 23:48:32 2026 GMT Subject: CN=848057C5E1D0C57B4EE6CB6EB7B55F030A7C84C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:ba:77:cc:d5:2b:77:6c:06:26:e6:7c:48:e4: 0d:38:34:d5:74:e6:d1:66:4f:fd:42:72:3f:e4:f4: 8d:2a:2f:79:8a:4b:5b:26:d6:34:5e:70:3c:8e:b3: 0c:50:7a:da:10:6a:f4:57:d7:03:d7:31:4c:ec:a4: c3:93:b0:21:60:bb:d6:08:fc:eb:8a:99:82:2c:c9: 63:e3:0d:c1:0e:4b:2d:53:cd:f1:47:33:7e:fa:e2: fb:65:b2:9d:87:b8:4c:07:9b:71:3b:ce:94:ec:af: dc:6a:f1:fd:37:20:f5:48:23:62:53:9f:41:3b:13: de:63:6a:6e:33:04:9f:c2:a2:0b:6f:60:c7:ed:39: 08:91:fd:fe:92:42:cd:72:f7:3a:7a:a7:ee:de:48: 65:d2:b3:d3:52:b8:a8:3c:82:74:14:6b:e8:34:f5: 22:3c:54:26:d2:74:1b:43:75:b7:ec:70:97:18:e2: 95:b4:8a:af:9c:6d:55:1d:c2:35:1a:0b:72:77:6a: 8c:f2:e0:d8:7f:96:fd:0d:0f:9b:18:7a:a9:a9:06: ae:fe:50:e1:3c:95:0c:ef:3e:6f:e2:69:a4:fc:67: 18:6a:d0:04:f8:23:a4:45:b4:7c:15:aa:e0:40:ed: bb:84:6d:6e:9d:0e:69:6a:cc:bf:4a:77:8d:93:5e: 4b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:80:57:C5:E1:D0:C5:7B:4E:E6:CB:6E:B7:B5:5F:03:0A:7C:84:C2 X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:92:9b:5f:63:b6:22:d1:6d:67:7e:3a:e3:7e:8a:64:f5:82: 16:0a:a0:6f:c1:e6:ce:2c:b8:aa:e9:b9:08:a9:84:cc:8f:11: 69:2e:e4:df:3a:ca:26:8b:a8:ac:42:1c:1f:b4:58:66:35:93: 3c:84:cf:c4:a6:ec:cd:ba:72:7c:3b:25:c8:08:0d:09:c0:98: 1a:d5:14:5a:f3:08:46:0d:6e:ba:b8:69:f5:f5:71:23:8a:41: e6:85:92:fc:23:d7:54:97:9f:4f:ed:26:42:9f:4e:bf:d2:f7: 00:b4:09:37:d7:a6:48:19:81:ff:f2:06:5e:57:02:b2:36:e2: 6f:4a:f2:8b:85:90:75:66:ff:8a:3c:dd:2b:e1:4f:b5:7b:33: dc:c1:3e:5d:38:7c:9a:d0:29:08:a9:18:34:80:57:b9:e0:51: 18:41:e0:fa:81:a2:a3:e3:3e:35:ab:97:13:74:f7:b1:da:0c: 65:b3:82:36:eb:70:9d:c0:1b:10:79:04:86:ad:7c:b7:99:f3: 26:98:3c:3b:bc:a2:95:b9:43:c3:dd:ef:8d:d6:cd:fa:79:ec: 73:3a:1e:ed:d8:aa:2b:0e:0f:69:9c:3f:41:0d:b4:d9:0b:ec: ef:76:e7:11:60:2e:91:01:2b:64:28:e3:42:f9:64:12:b1:e7: 1e:d2:8d:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOJc3GFMuUQzY+re8WEs4whNbOpQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjA3MjAyMDIxMzJaFw0yNjA3MjEyMzQ4MzJaMDMxMTAvBgNV BAMTKDg0ODA1N0M1RTFEMEM1N0I0RUU2Q0I2RUI3QjU1RjAzMEE3Qzg0QzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVunfM1St3bAYm5nxI5A04NNV0 5tFmT/1Ccj/k9I0qL3mKS1sm1jRecDyOswxQetoQavRX1wPXMUzspMOTsCFgu9YI /OuKmYIsyWPjDcEOSy1TzfFHM3764vtlsp2HuEwHm3E7zpTsr9xq8f03IPVII2JT n0E7E95jam4zBJ/CogtvYMftOQiR/f6SQs1y9zp6p+7eSGXSs9NSuKg8gnQUa+g0 9SI8VCbSdBtDdbfscJcY4pW0iq+cbVUdwjUaC3J3aozy4Nh/lv0ND5sYeqmpBq7+ UOE8lQzvPm/iaaT8Zxhq0AT4I6RFtHwVquBA7buEbW6dDmlqzL9Kd42TXku5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhIBXxeHQxXtO5stut7VfAwp8hMIwHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuSm19jtiLRbWd+OuN+imT1ghYKoG/B5s4s uKrpuQiphMyPEWku5N86yiaLqKxCHB+0WGY1kzyEz8Sm7M26cnw7JcgIDQnAmBrV FFrzCEYNbrq4afX1cSOKQeaFkvwj11SXn0/tJkKfTr/S9wC0CTfXpkgZgf/yBl5X ArI24m9K8ouFkHVm/4o83SvhT7V7M9zBPl04fJrQKQipGDSAV7ngURhB4PqBoqPj PjWrlxN097HaDGWzgjbrcJ3AGxB5BIatfLeZ8yaYPDu8opW5Q8Pd743Wzfp57HM6 Hu3YqisOD2mcP0ENtNkL7O925xFgLpEBK2Qo40L5ZBKx5x7SjbU= -----END CERTIFICATE-----Generated at Tue Jul 21 07:25:02 2026 by rpki-client