$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: 7jpZAjVWIIwc5zWfWuihS4oKXTYolZU9RmDZapNFxLQ= Subject key identifier: B4:A8:4A:61:AD:A1:53:E1:8B:0D:80:1A:38:9A:83:24:E3:49:B4:54 Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 2375439AF29D60B399946D8593DFC041B08B1A55 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: BA Signing time: Thu 17 Sep 2026 13:09:55 +0000 Manifest this update: Thu 17 Sep 2026 13:04:55 +0000 Manifest next update: Fri 18 Sep 2026 13:55:55 +0000 Files and hashes: 1: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) 2: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: nGsEYC6FKcpO5U5o24PG+u09hR7XLmWgBv86lRwQCkQ=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 4: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 07:46:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:75:43:9a:f2:9d:60:b3:99:94:6d:85:93:df:c0:41:b0:8b:1a:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Sep 17 13:04:55 2026 GMT Not After : Sep 18 13:55:55 2026 GMT Subject: CN=B4A84A61ADA153E18B0D801A389A8324E349B454 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:cb:ad:e9:c6:e0:5d:04:a9:cd:93:74:07:fd: 61:b3:1b:b2:ce:76:c9:f9:b6:cf:89:06:c8:d5:3d: 64:5f:c7:97:62:24:09:db:dd:c9:88:9f:44:da:b7: 50:6a:e7:31:7f:49:9d:06:1b:cd:af:81:17:7e:4d: 1b:47:7b:4d:af:8f:38:ee:35:af:ed:59:67:4d:9c: 40:33:97:fa:a6:fc:29:5b:94:9b:a0:a4:9a:6f:ce: 16:56:4a:91:f9:60:05:a6:0e:31:cd:d7:f4:6a:32: 2b:9e:48:c0:31:9b:e8:d8:02:11:27:56:10:d8:35: 94:81:5d:62:f6:a5:e1:d2:3a:54:59:e7:89:20:3a: ec:ce:12:16:92:86:aa:2e:97:57:a7:ed:d8:a3:21: 53:68:f9:b9:1e:75:b5:4c:1f:38:67:86:cf:2c:f3: 75:1e:cb:c4:19:c5:9e:52:66:ee:e7:d6:35:16:03: 8a:ee:fb:b1:c5:d3:0c:7e:18:36:e5:4a:0e:11:81: e4:2d:69:36:88:cf:e2:72:c4:8d:d5:b0:b8:fb:79: 1b:fb:1a:3a:55:52:bf:ac:2f:c5:fb:bb:2a:53:9b: 6e:8d:55:cd:c7:9b:60:13:aa:f7:1b:3d:5c:54:2d: fd:4a:13:71:3c:2d:69:c8:d6:e6:3b:1e:36:e7:7c: 7a:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A8:4A:61:AD:A1:53:E1:8B:0D:80:1A:38:9A:83:24:E3:49:B4:54 X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:84:9e:31:49:23:cc:3e:4c:5f:52:65:42:2e:b8:fb:ff:d8: 95:ac:a1:37:90:d1:b4:1e:18:af:a9:68:0f:00:42:d2:6e:ab: a4:bf:1e:76:cc:86:f2:4e:c2:9e:b4:07:24:c3:7c:ea:93:10: 60:ea:78:f4:bc:57:cf:dc:70:25:d4:49:0c:10:83:11:1c:fc: 49:b3:3f:56:9f:f9:65:41:62:9f:9c:09:35:fa:9d:11:55:2a: 54:c3:7f:ef:bc:e7:1c:64:e0:89:05:8d:4a:19:da:a1:ec:24: 41:4d:05:0d:bc:60:3e:a1:93:6b:8d:a5:0a:7b:83:12:c4:73: 33:0f:57:e3:a1:97:1f:c9:8f:74:bc:e1:f0:64:eb:b7:9d:ec: 53:49:84:39:03:cc:fc:36:b3:bb:00:72:47:37:cb:8c:2b:9f: df:09:ec:f4:62:18:9d:82:47:6c:c8:a9:3f:9f:a2:4c:68:8d: 3e:51:bd:c3:57:b6:87:22:2c:b6:24:58:25:be:bc:f5:4d:47: 90:33:c5:fb:ad:3b:31:42:d2:a6:bd:87:b1:77:9b:9c:20:b5: 69:07:a4:8f:20:b9:13:1a:d8:b4:a6:cb:3f:20:44:19:28:62: 1f:51:73:9b:ff:03:1e:cd:34:04:1b:50:a0:c5:d2:30:e6:a8: ed:9e:c5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI3VDmvKdYLOZlG2Fk9/AQbCLGlUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA5MTcxMzA0NTVaFw0yNjA5MTgxMzU1NTVaMDMxMTAvBgNV BAMTKEI0QTg0QTYxQURBMTUzRTE4QjBEODAxQTM4OUE4MzI0RTM0OUI0NTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSy63pxuBdBKnNk3QH/WGzG7LO dsn5ts+JBsjVPWRfx5diJAnb3cmIn0Tat1Bq5zF/SZ0GG82vgRd+TRtHe02vjzju Na/tWWdNnEAzl/qm/ClblJugpJpvzhZWSpH5YAWmDjHN1/RqMiueSMAxm+jYAhEn VhDYNZSBXWL2peHSOlRZ54kgOuzOEhaShqoul1en7dijIVNo+bkedbVMHzhnhs8s 83Uey8QZxZ5SZu7n1jUWA4ru+7HF0wx+GDblSg4RgeQtaTaIz+JyxI3VsLj7eRv7 GjpVUr+sL8X7uypTm26NVc3Hm2ATqvcbPVxULf1KE3E8LWnI1uY7HjbnfHrFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKhKYa2hU+GLDYAaOJqDJONJtFQwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKEnjFJI8w+TF9SZUIuuPv/2JWsoTeQ0bQe GK+paA8AQtJuq6S/HnbMhvJOwp60ByTDfOqTEGDqePS8V8/ccCXUSQwQgxEc/Emz P1af+WVBYp+cCTX6nRFVKlTDf++85xxk4IkFjUoZ2qHsJEFNBQ28YD6hk2uNpQp7 gxLEczMPV+Ohlx/Jj3S84fBk67ed7FNJhDkDzPw2s7sAckc3y4wrn98J7PRiGJ2C R2zIqT+fokxojT5RvcNXtociLLYkWCW+vPVNR5AzxfutOzFC0qa9h7F3m5wgtWkH pI8guRMa2LSmyz8gRBkoYh9Rc5v/Ax7NNAQbUKDF0jDmqO2exQ4= -----END CERTIFICATE-----Generated at Thu Sep 17 16:03:42 2026 by rpki-client