$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: gpL6fxvgUPSgTTMbzFOvb/Hx8426oaYBE8hiIPDH36o= Subject key identifier: 1F:B4:2E:8D:74:BB:5C:E0:54:F5:5C:43:E0:82:60:28:42:D6:49:DC Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 5F7EA60335A65914292DB26799AF0BA4001A1BD8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 7D Signing time: Sun 02 Aug 2026 19:00:28 +0000 Manifest this update: Sun 02 Aug 2026 18:55:28 +0000 Manifest next update: Mon 03 Aug 2026 19:30:28 +0000 Files and hashes: 1: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: hLem6/LQycmqyGPwh/UTDhRdVXSLIvGzl+8grUpm8ek=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 03 Aug 2026 17:07:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7e:a6:03:35:a6:59:14:29:2d:b2:67:99:af:0b:a4:00:1a:1b:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Aug 2 18:55:28 2026 GMT Not After : Aug 3 19:30:28 2026 GMT Subject: CN=1FB42E8D74BB5CE054F55C43E082602842D649DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:10:c5:4b:cc:8b:c3:4a:d4:64:b0:ae:68:49: ea:e6:c8:73:e3:45:ca:0b:b2:86:04:ff:c3:3c:f5: e2:2b:18:eb:c5:5a:5f:7b:01:8d:9d:bc:04:b6:04: 77:7d:87:2c:49:04:e5:70:3a:17:d1:f1:07:c2:8c: 10:4b:71:ef:5c:78:cf:14:20:38:10:9e:44:2b:74: f0:a5:7e:67:fc:27:89:36:58:28:b9:6e:0a:ab:20: d6:ca:78:47:67:dc:36:48:72:e9:d9:ef:bf:05:00: 03:4f:bd:69:75:67:19:17:55:53:2b:12:c3:90:76: 50:d5:6a:83:50:c0:f5:25:e7:9a:56:d7:60:2f:9f: 28:4f:91:b8:b2:33:66:3c:31:dd:bf:cd:af:45:96: 8f:90:14:30:4f:ea:e1:1b:c4:d8:59:97:97:3c:a8: c0:1b:2b:ed:5d:fa:a1:8e:77:db:7d:88:66:fe:29: ce:c0:13:16:ff:10:fa:3d:67:d5:20:98:fc:23:39: 9a:59:e3:f2:4c:f7:7e:f9:66:73:1d:ea:08:a1:5c: 78:b6:62:fa:a8:26:00:f8:d9:51:0b:1c:9a:a0:eb: 2d:6a:87:7f:9b:fe:ec:81:3c:e1:8d:ee:39:80:49: a5:45:56:07:26:0d:ef:fb:0f:b9:63:09:33:fa:3a: 2e:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:B4:2E:8D:74:BB:5C:E0:54:F5:5C:43:E0:82:60:28:42:D6:49:DC X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:dc:fe:01:1d:ce:26:1f:f9:ee:4d:08:00:42:b2:0e:6f:61: 13:02:2b:e3:e9:15:34:db:e6:a6:cb:32:f8:a5:d7:6f:b4:85: 33:27:7d:18:d9:9e:59:15:b4:53:5a:c0:16:91:41:02:f8:c0: 14:f9:b5:fa:08:ae:8f:fd:03:9d:54:86:95:88:55:8a:9a:40: 49:43:69:e3:b1:ae:a9:3c:4b:a2:9a:37:5b:a3:96:af:41:47: 37:8f:4f:0f:38:49:1b:77:c4:71:bf:08:3f:50:c5:df:a8:30: 7c:fa:61:1f:68:c1:27:1c:d8:0b:e9:ae:3c:aa:78:45:1a:ab: 38:54:4f:ad:57:9f:ee:2e:c7:fb:2a:1c:29:4f:83:85:8a:7a: 06:ca:08:41:05:65:16:74:e0:f6:31:43:e2:a2:cc:80:de:31: 7f:27:0b:53:ab:90:73:0a:20:6e:65:02:5a:49:b4:f9:b7:49: 13:6a:08:06:4c:ed:6f:ff:b6:bd:16:9f:33:f8:af:4a:bb:71: a2:eb:39:0b:52:30:7f:c4:48:c5:0b:2f:77:36:9e:23:9e:aa: b7:6f:31:eb:fb:a7:e9:b9:e4:a0:7d:f4:30:eb:dd:65:a6:f0: 80:49:e6:6a:a5:af:f2:81:d5:08:af:1d:3d:d2:bf:ba:a6:46: af:7a:b5:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX36mAzWmWRQpLbJnma8LpAAaG9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA4MDIxODU1MjhaFw0yNjA4MDMxOTMwMjhaMDMxMTAvBgNV BAMTKDFGQjQyRThENzRCQjVDRTA1NEY1NUM0M0UwODI2MDI4NDJENjQ5REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEMVLzIvDStRksK5oSermyHPj RcoLsoYE/8M89eIrGOvFWl97AY2dvAS2BHd9hyxJBOVwOhfR8QfCjBBLce9ceM8U IDgQnkQrdPClfmf8J4k2WCi5bgqrINbKeEdn3DZIcunZ778FAANPvWl1ZxkXVVMr EsOQdlDVaoNQwPUl55pW12AvnyhPkbiyM2Y8Md2/za9Flo+QFDBP6uEbxNhZl5c8 qMAbK+1d+qGOd9t9iGb+Kc7AExb/EPo9Z9UgmPwjOZpZ4/JM9375ZnMd6gihXHi2 YvqoJgD42VELHJqg6y1qh3+b/uyBPOGN7jmASaVFVgcmDe/7D7ljCTP6Oi4lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH7QujXS7XOBU9VxD4IJgKELWSdwwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbc/gEdziYf+e5NCABCsg5vYRMCK+PpFTTb 5qbLMvil12+0hTMnfRjZnlkVtFNawBaRQQL4wBT5tfoIro/9A51UhpWIVYqaQElD aeOxrqk8S6KaN1ujlq9BRzePTw84SRt3xHG/CD9Qxd+oMHz6YR9owScc2Avprjyq eEUaqzhUT61Xn+4ux/sqHClPg4WKegbKCEEFZRZ04PYxQ+KizIDeMX8nC1OrkHMK IG5lAlpJtPm3SRNqCAZM7W//tr0WnzP4r0q7caLrOQtSMH/ESMULL3c2niOeqrdv Mev7p+m55KB99DDr3WWm8IBJ5mqlr/KB1QivHT3Sv7qmRq96tZU= -----END CERTIFICATE-----Generated at Sun Aug 2 20:35:51 2026 by rpki-client