$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: K1/PGHtwUPcah4zIRHkG7SKgrfxHYljYPVCKpDj2DTQ= Subject key identifier: 42:7F:5F:DD:AC:56:69:6F:6B:CA:2F:00:10:6A:12:F3:DE:FA:F7:D4 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 3AEDE561DF4C3EB2B93A70516750092EAA38FFC6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 0121 Signing time: Tue 21 Apr 2026 20:42:22 +0000 Manifest this update: Tue 21 Apr 2026 20:37:22 +0000 Manifest next update: Fri 24 Apr 2026 22:41:22 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) 2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: rpYMkPG/txcOzMNNwrosbFLSj8tGT89QLnzHewyzSj0=) 3: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:ed:e5:61:df:4c:3e:b2:b9:3a:70:51:67:50:09:2e:aa:38:ff:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Apr 21 20:37:22 2026 GMT Not After : Apr 24 22:41:22 2026 GMT Subject: CN=427F5FDDAC56696F6BCA2F00106A12F3DEFAF7D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:85:97:5b:d3:26:70:f3:b8:71:ba:d9:fc:84: 6c:cb:c0:45:6c:ab:bf:29:7a:54:c4:3a:cb:99:d1: d4:84:f9:b6:1f:1e:9e:d3:7a:ed:a0:ce:3c:54:aa: 34:e9:57:69:d1:9d:9d:69:27:09:3f:c1:cb:73:f9: aa:86:fb:45:01:c2:cf:91:ae:b8:52:9f:de:18:3e: 82:d8:91:b5:09:a8:9e:6d:a8:d3:87:ce:d7:5a:af: ed:64:5a:0e:bc:d2:5b:87:81:95:97:a2:84:74:2d: 95:7e:74:b5:46:3e:74:89:1f:49:d7:b9:23:3d:9c: 32:de:5c:3f:55:2f:9a:e3:a6:d4:c3:a7:3d:a9:21: 5f:92:c1:39:e3:3c:89:42:5e:5c:35:a3:90:cb:10: a1:1b:e8:a9:44:aa:b2:78:84:c5:ae:2c:6d:ff:01: db:f2:26:5a:63:74:de:93:25:f4:ae:9d:cb:61:82: 98:20:85:e0:1f:50:13:57:48:bd:33:b5:63:19:5e: 0d:cd:57:2f:5f:fd:b6:ff:c4:26:54:7e:6c:21:e9: 67:9b:33:53:66:c8:51:bc:63:9c:74:c6:dc:e9:03: 00:06:ee:5f:94:d6:dc:ce:a3:4f:a7:84:0f:61:de: ef:97:4e:ff:85:ee:0b:d2:f9:ec:2a:b3:6d:36:7e: b0:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:7F:5F:DD:AC:56:69:6F:6B:CA:2F:00:10:6A:12:F3:DE:FA:F7:D4 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:b2:60:24:a0:c3:d8:fa:a2:c5:14:d0:46:01:38:00:e9:e8: ab:cd:81:3a:33:38:86:34:98:71:58:d1:3c:93:91:46:d3:b4: 0c:c6:a4:e6:42:05:4c:95:9e:22:29:e6:d2:70:d1:dd:d9:31: 8a:55:5d:36:90:c5:0e:b7:25:db:1e:05:f4:91:ce:1e:c2:23: dc:5a:d8:2d:05:92:a0:f1:66:ec:1d:61:52:05:ed:f7:eb:04: ee:d2:02:97:73:1f:ad:7d:5a:bd:71:a9:c8:17:8c:75:ec:4a: 13:dd:e3:fd:00:a0:3c:5b:0b:42:4a:d1:11:e8:ea:1b:71:a6: ee:08:3f:01:d8:dd:3a:ad:b9:56:7d:a1:ee:92:77:d0:e6:e3: 20:09:6b:83:eb:7f:2f:d7:78:1b:5b:e9:db:87:e7:2c:03:99: 3d:01:aa:66:eb:eb:51:69:fb:8c:06:bf:ed:e0:8a:92:37:2c: 3e:8b:b7:e7:9b:51:27:ac:24:47:95:19:95:ea:67:43:02:e2: 34:c4:65:fa:01:a5:12:91:3d:03:3c:7e:53:c8:95:e0:cc:b4: 2a:20:bf:1d:06:74:b0:e6:96:6e:3a:32:c7:cf:f4:42:53:b8: 15:2c:84:0f:b2:9b:f0:1e:a1:d0:6f:9c:b2:01:1b:f8:25:6f: e7:63:52:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOu3lYd9MPrK5OnBRZ1AJLqo4/8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNjA0MjEyMDM3MjJaFw0yNjA0MjQyMjQxMjJaMDMxMTAvBgNV BAMTKDQyN0Y1RkREQUM1NjY5NkY2QkNBMkYwMDEwNkExMkYzREVGQUY3RDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbhZdb0yZw87hxutn8hGzLwEVs q78pelTEOsuZ0dSE+bYfHp7Teu2gzjxUqjTpV2nRnZ1pJwk/wctz+aqG+0UBws+R rrhSn94YPoLYkbUJqJ5tqNOHztdar+1kWg680luHgZWXooR0LZV+dLVGPnSJH0nX uSM9nDLeXD9VL5rjptTDpz2pIV+SwTnjPIlCXlw1o5DLEKEb6KlEqrJ4hMWuLG3/ AdvyJlpjdN6TJfSuncthgpggheAfUBNXSL0ztWMZXg3NVy9f/bb/xCZUfmwh6Web M1NmyFG8Y5x0xtzpAwAG7l+U1tzOo0+nhA9h3u+XTv+F7gvS+ewqs202frBRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQn9f3axWaW9ryi8AEGoS897699QwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqyYCSgw9j6osUU0EYBOADp6KvNgTozOIY0 mHFY0TyTkUbTtAzGpOZCBUyVniIp5tJw0d3ZMYpVXTaQxQ63JdseBfSRzh7CI9xa 2C0FkqDxZuwdYVIF7ffrBO7SApdzH619Wr1xqcgXjHXsShPd4/0AoDxbC0JK0RHo 6htxpu4IPwHY3TqtuVZ9oe6Sd9Dm4yAJa4Prfy/XeBtb6duH5ywDmT0Bqmbr61Fp +4wGv+3gipI3LD6Lt+ebUSesJEeVGZXqZ0MC4jTEZfoBpRKRPQM8flPIleDMtCog vx0GdLDmlm46MsfP9EJTuBUshA+ym/AeodBvnLIBG/glb+djUms= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:53 2026 by rpki-client