$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: Y1y8K35/KQYataZ0UMnw6s7CiV0RBwaE7fa49aBlkMI= Subject key identifier: 93:6E:35:25:A1:ED:83:4D:BC:45:39:6F:71:67:20:2B:19:BF:7C:49 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 1ED9D9F96A2B9F365D0D57D8893CF1E5C6B4C5A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 010C Signing time: Fri 06 Mar 2026 00:22:18 +0000 Manifest this update: Fri 06 Mar 2026 00:17:18 +0000 Manifest next update: Mon 09 Mar 2026 06:16:18 +0000 Files and hashes: 1: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) 2: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: nfZo5ZFMpgXLYGpZ4EBvkc8upbQKr/q5g0mcStYKR5c=) 3: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 06:16:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:d9:d9:f9:6a:2b:9f:36:5d:0d:57:d8:89:3c:f1:e5:c6:b4:c5:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Mar 6 00:17:18 2026 GMT Not After : Mar 9 06:16:18 2026 GMT Subject: CN=936E3525A1ED834DBC45396F7167202B19BF7C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:b7:00:92:ae:90:45:d7:7b:23:6a:f8:1e:37: 4d:3b:fa:22:a8:4f:6d:0b:5e:18:bd:45:0e:cb:e4: 21:dc:75:b1:13:4c:5f:34:1a:80:74:ed:c9:8a:ce: ef:96:d3:be:8f:29:c0:d4:32:69:a9:93:cc:9c:cc: 8d:cc:2f:1c:6e:70:a7:39:9d:49:30:69:5b:df:fe: 18:74:a7:17:7f:fd:b8:cf:24:73:f1:b2:ba:ff:ab: 19:26:fc:f6:37:df:a7:a6:6c:c0:3b:3f:3b:cb:f5: ea:f8:10:85:e6:bb:98:b4:70:b8:f6:4d:14:be:a6: bc:b2:20:82:05:a7:01:83:f2:04:f2:d2:28:44:5d: 54:f1:54:39:f5:bf:3b:98:96:3e:77:20:c9:0a:1c: 8d:d1:80:a1:29:e9:45:13:7e:07:28:0b:e1:06:ac: dd:22:76:a4:f0:6c:9f:10:48:ed:bf:95:11:f6:d9: 21:9a:9a:19:6e:ca:1a:27:d7:bc:a0:2e:e0:a2:15: ba:28:39:fe:50:86:48:36:a2:7c:a9:3e:0a:e3:3a: d3:9f:ab:8f:6c:83:82:e4:eb:50:1e:d1:eb:67:6c: a8:18:d2:0c:13:fc:34:fb:7d:37:36:f8:42:ea:95: 65:00:cd:48:60:95:cf:ef:94:44:1a:0a:14:c4:02: 0e:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:6E:35:25:A1:ED:83:4D:BC:45:39:6F:71:67:20:2B:19:BF:7C:49 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:a2:f0:83:fc:f8:3a:73:8e:80:8e:64:b4:96:ab:46:90:20: bf:ec:52:18:6f:5b:25:b7:c4:b4:e9:21:0d:3a:fb:9f:9f:d7: a0:30:92:de:24:93:6c:ab:b1:12:ce:5b:20:fb:23:c0:32:2d: 39:0c:32:23:0c:ee:b8:ea:42:c8:ea:c2:b8:5b:a2:c0:79:db: 09:c3:4b:e4:88:e4:53:5b:6d:17:68:f4:8f:30:25:e8:6f:bd: 9d:0b:23:f2:b9:d5:ac:eb:24:a1:38:f0:44:75:f2:59:57:92: d8:7e:f5:d2:7d:64:04:fd:34:b5:db:6f:1d:4a:d1:87:4e:9a: 23:97:71:2a:46:05:2b:fa:dd:b8:83:95:11:ac:34:24:be:0c: 46:5b:b1:57:6c:da:f5:17:55:32:88:26:f1:08:1c:92:8f:25: 72:3f:6c:4d:0a:36:48:55:47:8d:3a:ed:0f:a6:6f:75:e2:dc: 3b:0b:5c:68:d1:57:98:a1:de:51:bf:94:d2:db:96:a7:af:e6: a2:4a:21:a0:a6:19:3a:7d:46:66:ee:fe:cc:38:f1:12:ea:d2: ed:40:1b:4f:6b:0f:dd:bc:8b:cf:93:85:ba:5c:4c:47:33:a7: b2:94:66:6e:d5:59:20:57:51:e5:e0:f9:62:a3:bb:db:08:e1: ce:21:3f:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHtnZ+WornzZdDVfYiTzx5ca0xaEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNjAzMDYwMDE3MThaFw0yNjAzMDkwNjE2MThaMDMxMTAvBgNV BAMTKDkzNkUzNTI1QTFFRDgzNERCQzQ1Mzk2RjcxNjcyMDJCMTlCRjdDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvtwCSrpBF13sjavgeN007+iKo T20LXhi9RQ7L5CHcdbETTF80GoB07cmKzu+W076PKcDUMmmpk8yczI3MLxxucKc5 nUkwaVvf/hh0pxd//bjPJHPxsrr/qxkm/PY336embMA7PzvL9er4EIXmu5i0cLj2 TRS+pryyIIIFpwGD8gTy0ihEXVTxVDn1vzuYlj53IMkKHI3RgKEp6UUTfgcoC+EG rN0idqTwbJ8QSO2/lRH22SGamhluyhon17ygLuCiFbooOf5Qhkg2onypPgrjOtOf q49sg4Lk61Ae0etnbKgY0gwT/DT7fTc2+ELqlWUAzUhglc/vlEQaChTEAg61AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk241JaHtg028RTlvcWcgKxm/fEkwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqi8IP8+DpzjoCOZLSWq0aQIL/sUhhvWyW3 xLTpIQ06+5+f16Awkt4kk2yrsRLOWyD7I8AyLTkMMiMM7rjqQsjqwrhbosB52wnD S+SI5FNbbRdo9I8wJehvvZ0LI/K51azrJKE48ER18llXkth+9dJ9ZAT9NLXbbx1K 0YdOmiOXcSpGBSv63biDlRGsNCS+DEZbsVds2vUXVTKIJvEIHJKPJXI/bE0KNkhV R4067Q+mb3Xi3DsLXGjRV5ih3lG/lNLblqev5qJKIaCmGTp9Rmbu/sw48RLq0u1A G09rD928i8+ThbpcTEczp7KUZm7VWSBXUeXg+WKju9sI4c4hP5U= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:29 2026 by rpki-client