$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: OH/YY39TAdlVlEozhCQCy3/SlmZMNkzHpLWgqV4JQYc= Subject key identifier: C5:BE:A2:B5:03:F8:61:6B:A6:B9:44:0B:E2:9C:10:9A:FA:A4:7D:12 Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 3BACF0FC169D2836210F6B491F74B90E8F6072FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: F1 Signing time: Mon 20 Apr 2026 15:00:46 +0000 Manifest this update: Mon 20 Apr 2026 14:55:46 +0000 Manifest next update: Thu 23 Apr 2026 22:10:46 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: SYVs6LfObY7Q2WpYr80yOjhYSA7iIlC1V/38e/8Sims=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 22:10:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:ac:f0:fc:16:9d:28:36:21:0f:6b:49:1f:74:b9:0e:8f:60:72:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Apr 20 14:55:46 2026 GMT Not After : Apr 23 22:10:46 2026 GMT Subject: CN=C5BEA2B503F8616BA6B9440BE29C109AFAA47D12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:53:22:c7:0f:0c:58:c6:6c:0f:b9:e7:b3:6f: a4:c8:1d:b7:ad:47:34:55:b0:f0:37:6d:a5:29:b5: 57:45:c4:4e:24:c8:f5:de:87:26:7d:f6:36:7d:85: b1:99:91:d7:1c:77:7c:3a:53:c3:67:ba:ef:55:48: 71:06:8e:52:28:3b:e9:53:fd:0b:ad:83:b3:f8:80: 05:2b:67:20:05:f7:99:76:e7:44:9a:60:35:a7:54: 1a:c4:ce:d3:a7:e7:c2:0d:81:bd:ce:0e:35:11:bc: 1f:39:e1:88:ed:65:ce:3a:a8:b7:cb:59:3f:54:4a: 20:4f:48:ac:1e:d8:ce:80:f9:02:14:ed:a8:81:5f: af:eb:55:5f:f7:37:cf:b0:c6:b9:b2:de:79:a0:3d: cb:cb:b4:4a:3b:c0:ba:c3:ac:69:59:5d:86:8f:11: 00:01:f8:06:04:06:62:c5:1f:01:ab:b3:23:95:d9: 40:fb:d6:c6:f1:51:90:1b:3a:d3:be:a0:f7:17:12: a1:cc:48:8d:3d:1d:36:62:59:b7:06:cd:40:c5:74: cc:cf:ad:0a:16:d7:03:d5:f0:d5:4a:74:d8:7f:a9: a1:86:fa:30:f4:15:0b:51:f5:ea:97:f9:0b:a2:3e: 78:6c:1b:85:da:54:51:5d:e6:52:5b:cb:f0:66:98: 0a:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:BE:A2:B5:03:F8:61:6B:A6:B9:44:0B:E2:9C:10:9A:FA:A4:7D:12 X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:40:c8:9b:6b:f3:3b:23:52:3a:f4:a3:e8:a4:7f:17:fb:8b: 88:8a:99:d2:eb:2f:e7:f2:c7:b1:e3:c4:b7:30:78:df:e6:e9: 78:16:ff:9a:2d:8f:3e:58:af:25:2e:50:5c:61:c8:61:31:ca: c7:cf:c3:2f:c9:c9:a6:e8:be:26:e0:b1:84:b2:8b:20:a9:b5: 2b:b8:2c:9c:e9:1d:50:f8:bc:46:dc:a8:82:25:11:9a:47:ee: 61:f0:6f:e1:75:10:fe:ce:6e:f4:45:3b:35:1a:1d:07:7d:05: 55:be:bd:46:f3:f3:2c:95:e1:4c:3d:0e:db:d9:56:6f:f1:6f: 1b:a0:d9:7e:f4:7d:ab:34:82:c8:1e:8a:84:7b:07:e2:f6:44: 7c:8b:31:9d:7c:84:7f:a4:b7:ae:51:49:08:23:09:87:51:76: 5f:e0:23:2e:1b:0c:39:93:00:dc:10:32:a7:8e:a7:25:80:91: 86:5a:2c:7e:61:2a:2f:2e:3e:b6:6a:38:28:8f:3a:9a:62:fe: d1:72:c8:43:3a:22:9f:83:2a:36:f4:f3:a3:6f:11:df:93:26: ad:ce:f3:d7:e2:fa:a3:55:23:94:65:11:91:cc:8c:4d:3a:94: d4:90:ca:ee:99:21:3d:29:f0:87:bf:29:54:19:7e:e4:73:eb: c6:1d:21:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO6zw/BadKDYhD2tJH3S5Do9gcv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNjA0MjAxNDU1NDZaFw0yNjA0MjMyMjEwNDZaMDMxMTAvBgNV BAMTKEM1QkVBMkI1MDNGODYxNkJBNkI5NDQwQkUyOUMxMDlBRkFBNDdEMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbUyLHDwxYxmwPueezb6TIHbet RzRVsPA3baUptVdFxE4kyPXehyZ99jZ9hbGZkdccd3w6U8Nnuu9VSHEGjlIoO+lT /Qutg7P4gAUrZyAF95l250SaYDWnVBrEztOn58INgb3ODjURvB854YjtZc46qLfL WT9USiBPSKwe2M6A+QIU7aiBX6/rVV/3N8+wxrmy3nmgPcvLtEo7wLrDrGlZXYaP EQAB+AYEBmLFHwGrsyOV2UD71sbxUZAbOtO+oPcXEqHMSI09HTZiWbcGzUDFdMzP rQoW1wPV8NVKdNh/qaGG+jD0FQtR9eqX+QuiPnhsG4XaVFFd5lJby/BmmAqtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxb6itQP4YWumuUQL4pwQmvqkfRIwHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVAyJtr8zsjUjr0o+ikfxf7i4iKmdLrL+fy x7HjxLcweN/m6XgW/5otjz5YryUuUFxhyGExysfPwy/JyabovibgsYSyiyCptSu4 LJzpHVD4vEbcqIIlEZpH7mHwb+F1EP7ObvRFOzUaHQd9BVW+vUbz8yyV4Uw9DtvZ Vm/xbxug2X70fas0gsgeioR7B+L2RHyLMZ18hH+kt65RSQgjCYdRdl/gIy4bDDmT ANwQMqeOpyWAkYZaLH5hKi8uPrZqOCiPOppi/tFyyEM6Ip+DKjb086NvEd+TJq3O 89fi+qNVI5RlEZHMjE06lNSQyu6ZIT0p8Ie/KVQZfuRz68YdIdU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:52:05 2026 by rpki-client