$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json) Hash identifier: CZODzweyne7Mx89iBO+brnUEywmoP4LeKAT6lSaOuNc= Subject key identifier: FC:BF:81:3C:6F:14:B0:63:34:6E:23:D9:C1:A4:23:65:78:CB:F5:78 Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F Certificate serial: 0C9C1325BE2BD716768950335C4E753E1971963F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft Manifest number: B9 Signing time: Thu 17 Sep 2026 01:45:45 +0000 Manifest this update: Thu 17 Sep 2026 01:40:45 +0000 Manifest next update: Fri 18 Sep 2026 03:54:45 +0000 Files and hashes: 1: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: xscJREanG/o962QTpkKNo4gYoqi2Lkhz9WJEOipUpd4=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 03:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:9c:13:25:be:2b:d7:16:76:89:50:33:5c:4e:75:3e:19:71:96:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F Validity Not Before: Sep 17 01:40:45 2026 GMT Not After : Sep 18 03:54:45 2026 GMT Subject: CN=FCBF813C6F14B063346E23D9C1A4236578CBF578 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:54:60:68:e0:8c:24:23:85:49:4a:6d:9c:f7: f4:a4:b6:d6:86:1e:b4:cd:cc:a8:d9:ab:41:d9:09: 78:10:59:d5:37:99:cb:a9:40:b2:dc:e6:58:e5:9f: fc:72:e1:0b:03:3c:03:15:bd:d4:c6:e2:fc:33:6b: 87:29:1a:f3:0e:07:01:e7:a5:ae:c3:c4:07:5b:d3: 18:62:4c:03:9c:99:4f:0a:8e:52:d0:f7:2d:d2:11: 92:f8:8a:5f:51:4e:9a:f3:f7:3f:b9:96:3d:e7:ca: 3f:23:ac:27:45:06:51:9f:83:71:f9:9f:6d:b3:fd: 13:24:66:ab:37:01:b4:9e:13:1b:c9:74:2f:91:c1: 86:91:7b:19:02:ac:27:03:2e:3f:51:d9:93:89:8c: 8c:ed:b6:06:ed:bc:00:53:20:1f:82:a7:37:60:25: c2:c8:fb:9d:00:2d:48:0e:05:69:3c:8d:3e:24:44: 9e:48:9a:2e:1f:57:60:7e:1b:c6:4b:98:8f:cf:bd: 95:b3:cc:83:77:b8:af:47:1c:a9:d1:f4:be:a8:7f: c5:29:23:d9:80:c5:56:d9:dc:2b:93:75:c9:73:9f: ce:8c:3f:68:b4:59:64:38:9f:9c:ac:28:48:e5:aa: 76:fb:02:fe:4f:ca:7d:76:48:ed:ed:46:47:d4:9e: 96:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:BF:81:3C:6F:14:B0:63:34:6E:23:D9:C1:A4:23:65:78:CB:F5:78 X509v3 Authority Key Identifier: keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:01:24:86:17:29:00:c3:39:46:b4:0f:88:1c:dd:cb:97:49: a3:24:1a:0f:68:82:f0:ea:b5:7b:a0:51:68:d2:e8:cd:97:cc: 8b:82:6d:d5:cf:dd:f0:a9:f9:00:56:fc:41:e1:40:22:39:a3: ca:13:88:9a:b5:c7:52:de:e2:7f:1e:b7:ba:64:84:a9:ec:12: ea:6c:a5:bd:d2:44:aa:00:19:3d:77:85:f5:81:e9:2d:dd:dc: 4d:bf:86:15:d7:98:61:c4:b9:f4:04:3e:44:ad:87:5d:58:01: 8a:32:af:08:95:93:36:1b:2f:cd:9b:d5:64:b0:5f:11:6c:1b: aa:d0:2b:e3:c3:2d:9d:d4:47:42:7a:20:7e:90:72:b4:e4:e3: 79:94:a7:4d:0b:3c:fe:49:83:d3:c8:b4:5e:b6:f4:3d:20:a9: 00:e6:02:97:8b:d0:08:76:79:4a:3a:d3:9a:8f:d2:9f:bf:42: 98:e8:19:a4:f4:3c:e3:34:ee:5d:6d:50:4c:d6:ae:25:61:da: 20:46:19:52:79:51:b4:73:f2:ee:d7:6b:9b:c4:e4:6c:76:09: 47:04:95:34:1a:47:19:be:71:72:d9:2e:c2:71:29:75:1d:77: ea:ed:7a:3c:74:5c:1a:de:bb:95:3f:cd:50:77:26:82:c9:66: b2:91:e0:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJwTJb4r1xZ2iVAzXE51Phlxlj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5QTJG MzM2NzMwRjAeFw0yNjA5MTcwMTQwNDVaFw0yNjA5MTgwMzU0NDVaMDMxMTAvBgNV BAMTKEZDQkY4MTNDNkYxNEIwNjMzNDZFMjNEOUMxQTQyMzY1NzhDQkY1NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLVGBo4IwkI4VJSm2c9/SkttaG HrTNzKjZq0HZCXgQWdU3mcupQLLc5ljln/xy4QsDPAMVvdTG4vwza4cpGvMOBwHn pa7DxAdb0xhiTAOcmU8KjlLQ9y3SEZL4il9RTprz9z+5lj3nyj8jrCdFBlGfg3H5 n22z/RMkZqs3AbSeExvJdC+RwYaRexkCrCcDLj9R2ZOJjIzttgbtvABTIB+Cpzdg JcLI+50ALUgOBWk8jT4kRJ5Imi4fV2B+G8ZLmI/PvZWzzIN3uK9HHKnR9L6of8Up I9mAxVbZ3CuTdclzn86MP2i0WWQ4n5ysKEjlqnb7Av5Pyn12SO3tRkfUnpafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/L+BPG8UsGM0biPZwaQjZXjL9XgwHwYDVR0j BBgwFoAUcrW3rVti3tVQiJsVkJc5ovM2cw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEwMTI5YTgtMjdlOC00MDQ2LTg5ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1 QjYyREVENTUwODg5QjE1OTA5NzM5QTJGMzM2NzMwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI1QjdBRDVCNjJERUQ1NTA4ODlCMTU5MDk3MzlBMkYzMzY3 MzBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5 QTJGMzM2NzMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgBJIYXKQDDOUa0D4gc3cuXSaMkGg9ogvDq tXugUWjS6M2XzIuCbdXP3fCp+QBW/EHhQCI5o8oTiJq1x1Le4n8et7pkhKnsEups pb3SRKoAGT13hfWB6S3d3E2/hhXXmGHEufQEPkSth11YAYoyrwiVkzYbL82b1WSw XxFsG6rQK+PDLZ3UR0J6IH6QcrTk43mUp00LPP5Jg9PItF629D0gqQDmApeL0Ah2 eUo605qP0p+/QpjoGaT0POM07l1tUEzWriVh2iBGGVJ5UbRz8u7Xa5vE5Gx2CUcE lTQaRxm+cXLZLsJxKXUdd+rtejx0XBreu5U/zVB3JoLJZrKR4FA= -----END CERTIFICATE-----Generated at Thu Sep 17 13:09:42 2026 by rpki-client