$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: FYBLGMVLm7uIbVwiTpJI6TOx8McG8VsXs0smMO6QUzQ= Subject key identifier: B2:DF:E3:F2:62:F3:47:FC:5F:E1:8C:87:EB:EE:8E:2A:DA:26:31:AD Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 2AA8F8EACD23EBA088ED28D2C8821202DBF6A812 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: DD Signing time: Thu 05 Mar 2026 21:00:43 +0000 Manifest this update: Thu 05 Mar 2026 20:55:43 +0000 Manifest next update: Mon 09 Mar 2026 01:14:43 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: L3/cYXn803QFJFyXPh2lMLrDqt7hKYWvxsy5j3sNyK4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 01:14:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a8:f8:ea:cd:23:eb:a0:88:ed:28:d2:c8:82:12:02:db:f6:a8:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Mar 5 20:55:43 2026 GMT Not After : Mar 9 01:14:43 2026 GMT Subject: CN=B2DFE3F262F347FC5FE18C87EBEE8E2ADA2631AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:f1:35:ab:81:a1:55:91:1e:4c:93:0c:24:65: af:06:c5:de:c8:d1:9c:a5:69:ad:0f:48:93:13:63: aa:e0:89:03:e8:e8:96:54:3e:6e:b6:3a:29:4a:f3: 41:bb:45:b9:a0:8f:76:dc:23:02:88:aa:b3:51:a7: ad:27:a1:10:73:5c:b9:28:58:b3:80:7e:19:43:f9: c9:01:92:bf:55:52:33:a8:f4:7d:bd:19:e8:36:c5: 5c:be:52:32:21:4d:6d:93:b1:78:7d:f5:b2:57:5d: 90:55:39:ad:5d:38:9a:35:b1:6c:48:ef:dc:82:d1: dd:dd:ca:50:df:bc:8b:2a:aa:39:82:20:ca:52:1b: 40:35:57:7c:57:fa:fc:88:44:e1:05:00:da:23:30: 26:e0:50:5b:10:ea:0f:10:77:a4:46:fe:ac:5d:8d: af:b2:32:e6:12:9f:ac:61:e0:49:cc:c1:a5:f4:17: 54:7e:3e:51:7b:d7:06:bc:3e:14:4f:87:ae:d5:6d: f2:60:f6:ac:11:49:a0:84:54:d0:35:32:63:aa:1b: 7d:2b:e5:26:65:df:28:53:40:47:fe:02:6c:27:b5: d3:4c:a5:46:25:5d:91:6f:82:94:c8:d4:58:ed:9b: 25:f2:8e:4f:fc:04:c1:07:95:c1:0a:a1:fb:20:8e: 6e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:DF:E3:F2:62:F3:47:FC:5F:E1:8C:87:EB:EE:8E:2A:DA:26:31:AD X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:4c:82:36:05:8a:87:1f:51:08:3f:c8:38:18:3e:42:88:d6: 06:d1:47:74:f0:2b:ce:b5:c0:d2:78:86:ab:5a:b4:55:2f:1f: 55:83:11:2a:05:5f:3f:e2:75:46:70:39:86:2f:1b:39:05:20: 96:5e:a6:c3:29:0d:e0:f4:cc:76:c0:81:fd:67:7d:8a:01:38: 46:0f:0f:6d:84:b8:95:67:68:7f:16:35:30:eb:6c:cf:e2:7a: c9:28:a7:61:c6:7e:59:9d:f3:3d:13:09:02:e9:78:0d:db:ea: ca:f7:39:a6:af:dd:53:e2:df:a5:c5:7a:67:c9:fb:01:a0:9d: dd:8f:f8:8e:39:67:43:38:ea:8c:12:dd:85:8b:92:02:04:8e: ad:8a:18:81:db:f6:f4:6c:58:60:e3:28:be:1b:4a:ae:a1:1f: 69:4e:d1:e6:21:5d:fa:8c:5f:2a:33:58:da:9c:20:c1:9b:e0: ea:ea:d8:7c:cc:4f:74:45:32:7f:7f:fe:72:a8:b5:07:0d:6e: c8:3e:8c:3c:4a:02:a1:00:ce:af:18:3d:f5:ba:4e:14:97:26: f9:3c:6c:d2:6b:69:65:c6:a1:d7:3e:e3:7a:3c:38:e1:25:d7: 2f:6a:44:06:51:bc:8a:1d:3f:66:56:1c:1d:2a:26:49:20:7c: 68:cd:08:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqj46s0j66CI7SjSyIISAtv2qBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNjAzMDUyMDU1NDNaFw0yNjAzMDkwMTE0NDNaMDMxMTAvBgNV BAMTKEIyREZFM0YyNjJGMzQ3RkM1RkUxOEM4N0VCRUU4RTJBREEyNjMxQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC88TWrgaFVkR5MkwwkZa8Gxd7I 0Zylaa0PSJMTY6rgiQPo6JZUPm62OilK80G7Rbmgj3bcIwKIqrNRp60noRBzXLko WLOAfhlD+ckBkr9VUjOo9H29Geg2xVy+UjIhTW2TsXh99bJXXZBVOa1dOJo1sWxI 79yC0d3dylDfvIsqqjmCIMpSG0A1V3xX+vyIROEFANojMCbgUFsQ6g8Qd6RG/qxd ja+yMuYSn6xh4EnMwaX0F1R+PlF71wa8PhRPh67VbfJg9qwRSaCEVNA1MmOqG30r 5SZl3yhTQEf+AmwntdNMpUYlXZFvgpTI1FjtmyXyjk/8BMEHlcEKofsgjm4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUst/j8mLzR/xf4YyH6+6OKtomMa0wHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHxMgjYFiocfUQg/yDgYPkKI1gbRR3TwK861 wNJ4hqtatFUvH1WDESoFXz/idUZwOYYvGzkFIJZepsMpDeD0zHbAgf1nfYoBOEYP D22EuJVnaH8WNTDrbM/ieskop2HGflmd8z0TCQLpeA3b6sr3Oaav3VPi36XFemfJ +wGgnd2P+I45Z0M46owS3YWLkgIEjq2KGIHb9vRsWGDjKL4bSq6hH2lO0eYhXfqM XyozWNqcIMGb4Orq2HzMT3RFMn9//nKotQcNbsg+jDxKAqEAzq8YPfW6ThSXJvk8 bNJraWXGodc+43o8OOEl1y9qRAZRvIodP2ZWHB0qJkkgfGjNCJY= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:58 2026 by rpki-client