$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: Wzn4Vzw6VgkNyIUEnvhTSico2o5dVDGy0oG/TyuOm4M= Subject key identifier: F6:48:6C:DD:2D:84:07:29:F5:21:D2:BA:4E:27:B1:8E:A5:4F:52:06 Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 223B3A59007A7537A0373CAB744999419118037A Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 40 Signing time: Wed 17 Jun 2026 22:55:22 +0000 Manifest this update: Wed 17 Jun 2026 22:50:22 +0000 Manifest next update: Fri 19 Jun 2026 01:49:22 +0000 Files and hashes: 1: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: TGrbm7pfTZm27ylfTj/VKKwZ1yyuzcN+cuCTs4X2DtY=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 01:49:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3b:3a:59:00:7a:75:37:a0:37:3c:ab:74:49:99:41:91:18:03:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Jun 17 22:50:22 2026 GMT Not After : Jun 19 01:49:22 2026 GMT Subject: CN=F6486CDD2D840729F521D2BA4E27B18EA54F5206 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:9e:bf:8f:b5:04:db:2e:82:a5:f0:e2:ee:ee: f7:cd:48:3e:6f:89:3d:1a:9e:6b:4c:1a:87:28:bf: c6:b9:93:18:ac:ad:f0:c5:bb:ee:7a:45:57:97:91: 15:de:31:1c:99:1c:03:23:a9:8d:82:83:72:4b:91: 4c:90:00:98:1d:4b:65:c8:1b:d4:3c:51:a8:0b:a6: 2d:03:91:2b:1d:ca:ec:64:49:b4:67:74:c4:a8:a8: 22:bc:07:b1:9f:16:fd:a9:36:cd:66:66:37:ef:5e: b4:b5:55:f0:7e:40:2e:af:66:98:c4:33:03:95:e3: dc:54:b9:a6:3f:d3:86:06:ce:50:93:e6:82:55:f8: 24:10:46:63:1b:6c:e6:9e:15:d9:f1:99:43:f3:b7: d5:ab:f0:33:55:21:ee:28:ae:78:42:f1:b1:82:40: 9a:22:23:06:98:14:82:46:94:cb:de:7f:59:7b:de: af:e0:8f:90:e8:b1:22:a7:7f:aa:a0:4d:4a:b7:51: 8c:00:f3:e9:4e:ff:8a:9b:cb:aa:c7:b6:45:24:71: 84:73:26:3e:aa:63:8d:2e:57:aa:d6:7d:4c:1e:81: c6:0b:cd:9b:41:c4:b5:e5:07:2a:33:0c:60:cb:9a: 54:0a:ce:be:11:fb:d3:aa:40:47:99:84:de:71:ff: 51:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:48:6C:DD:2D:84:07:29:F5:21:D2:BA:4E:27:B1:8E:A5:4F:52:06 X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:63:38:a6:fd:91:93:be:81:2f:03:72:bf:db:84:42:8b:3c: 8d:39:ea:fd:9b:2d:21:4d:b0:47:39:68:76:af:44:99:fa:e0: 4e:f3:36:d5:6f:30:30:a2:63:f3:2f:4c:ea:1d:24:16:48:f2: 34:1d:9a:24:ff:8d:3e:bb:e0:43:21:9b:77:a0:4e:ec:c7:a6: 14:2d:88:33:22:ea:df:4e:68:de:61:03:d2:99:fb:4c:ee:3e: ba:d0:b4:3f:b0:2a:aa:43:66:b5:3e:e0:1f:88:40:11:4b:34: 2e:58:df:6f:6e:89:7c:1c:bd:e3:86:1c:b4:8d:d0:aa:ec:b0: 72:b5:97:12:49:6b:df:32:4b:ec:4b:64:17:8f:76:9f:8a:b7: 65:c1:c7:55:81:be:fc:5c:15:b1:e7:96:90:02:09:d2:09:0d: c7:cd:00:98:30:55:30:0b:9a:7f:3c:0d:98:18:f4:e4:9f:6a: 20:ec:0d:9f:89:4c:6b:57:d7:46:fe:21:7f:26:48:ae:06:cb: 84:83:6b:21:e2:ef:04:14:9b:ac:fd:1b:2d:41:c9:b1:63:f1: 76:f3:e0:db:74:69:25:12:3e:7b:a2:3d:0d:95:af:57:bc:3c: ae:b8:93:a2:eb:1c:9a:3d:2a:49:62:0d:b5:00:49:26:16:8c: 1b:f9:0e:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjs6WQB6dTegNzyrdEmZQZEYA3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA2MTcyMjUwMjJaFw0yNjA2MTkwMTQ5MjJaMDMxMTAvBgNV BAMTKEY2NDg2Q0REMkQ4NDA3MjlGNTIxRDJCQTRFMjdCMThFQTU0RjUyMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKnr+PtQTbLoKl8OLu7vfNSD5v iT0anmtMGocov8a5kxisrfDFu+56RVeXkRXeMRyZHAMjqY2Cg3JLkUyQAJgdS2XI G9Q8UagLpi0DkSsdyuxkSbRndMSoqCK8B7GfFv2pNs1mZjfvXrS1VfB+QC6vZpjE MwOV49xUuaY/04YGzlCT5oJV+CQQRmMbbOaeFdnxmUPzt9Wr8DNVIe4ornhC8bGC QJoiIwaYFIJGlMvef1l73q/gj5DosSKnf6qgTUq3UYwA8+lO/4qby6rHtkUkcYRz Jj6qY40uV6rWfUwegcYLzZtBxLXlByozDGDLmlQKzr4R+9OqQEeZhN5x/1FJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9khs3S2EByn1IdK6TiexjqVPUgYwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIljOKb9kZO+gS8Dcr/bhEKLPI056v2bLSFN sEc5aHavRJn64E7zNtVvMDCiY/MvTOodJBZI8jQdmiT/jT674EMhm3egTuzHphQt iDMi6t9OaN5hA9KZ+0zuPrrQtD+wKqpDZrU+4B+IQBFLNC5Y329uiXwcveOGHLSN 0KrssHK1lxJJa98yS+xLZBePdp+Kt2XBx1WBvvxcFbHnlpACCdIJDcfNAJgwVTAL mn88DZgY9OSfaiDsDZ+JTGtX10b+IX8mSK4Gy4SDayHi7wQUm6z9Gy1BybFj8Xbz 4Nt0aSUSPnuiPQ2Vr1e8PK64k6LrHJo9KkliDbUASSYWjBv5Dig= -----END CERTIFICATE-----Generated at Thu Jun 18 17:15:58 2026 by rpki-client