$ rpki-client -vvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json) Hash identifier: 8sGhFm0MXEQteig1CeqtLkS/tInJciVRO5fk9jcGW58= Subject key identifier: 56:21:6D:2D:41:DE:76:3F:D0:8E:17:2F:A1:06:8C:FC:C0:93:FC:B1 Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Certificate serial: 1DB29121B8B43A36F4461A9E452949FA15B28569 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft Manifest number: 41 Signing time: Fri 19 Jun 2026 17:01:19 +0000 Manifest this update: Fri 19 Jun 2026 16:56:19 +0000 Manifest next update: Sat 20 Jun 2026 17:05:19 +0000 Files and hashes: 1: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: 81yGdS/VoKC/Vbv2gp6xxGBbbGeVZwNUcBLuj9+pt0c=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 20 Jun 2026 17:05:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:b2:91:21:b8:b4:3a:36:f4:46:1a:9e:45:29:49:fa:15:b2:85:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Validity Not Before: Jun 19 16:56:19 2026 GMT Not After : Jun 20 17:05:19 2026 GMT Subject: CN=56216D2D41DE763FD08E172FA1068CFCC093FCB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:11:59:61:55:21:98:42:a7:8e:b9:a5:94:35: 4a:ec:46:f6:24:a6:4b:d9:b4:8a:bf:44:ef:63:4f: 68:ae:64:2b:c8:92:55:5d:01:51:26:29:76:03:6f: 60:08:4f:a9:21:9c:f8:25:81:89:15:d8:02:b4:78: 38:53:6a:20:cd:bb:00:d0:60:a8:45:2b:8f:04:12: 09:0f:66:30:f0:e6:68:71:5f:8d:e9:b8:35:b1:81: c8:1b:47:7b:d2:e9:a4:bc:e8:08:7f:ca:72:d5:e2: e5:d8:49:24:8a:a4:b8:3d:99:8d:36:ab:eb:29:cb: c9:87:3f:f8:dd:78:1e:e4:b1:9e:b9:87:8d:64:7a: 43:9e:17:19:a8:fa:c8:27:49:33:a8:88:ac:38:ba: 3f:e3:17:33:0a:56:6b:5a:e2:3b:0c:4e:b5:de:17: a0:43:03:c8:a0:ec:38:b7:a5:01:89:6a:d5:28:eb: 0e:34:53:29:9b:5a:c4:23:7e:e0:3e:f2:5c:6a:07: fb:6d:40:6c:0f:cb:e9:03:a3:1c:0e:72:9b:b0:3e: 0a:a9:4d:4c:d6:9b:c2:14:19:8f:74:97:18:e7:e4: 0c:88:45:8a:79:ef:8d:05:bf:b6:a2:b2:53:09:90: bf:94:68:22:76:b4:c6:45:ca:52:00:42:66:1e:72: 3c:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:21:6D:2D:41:DE:76:3F:D0:8E:17:2F:A1:06:8C:FC:C0:93:FC:B1 X509v3 Authority Key Identifier: keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:95:e8:58:ff:51:62:94:d3:11:87:31:24:f6:71:93:c2:f8: 82:31:fc:98:60:b6:b0:09:2f:51:93:9e:7a:46:af:e9:9a:eb: 75:0c:34:08:31:14:c5:0d:d2:38:f3:30:5c:ae:20:3a:40:51: 3d:c8:84:79:70:0f:a3:4d:6d:42:7c:2e:9c:4d:7d:54:76:ce: 2f:fe:b1:50:a2:39:7a:8d:0d:00:6f:40:0c:40:e8:36:6c:d4: 64:f6:d2:d1:21:b7:b3:61:23:f4:ae:a2:0e:1e:63:70:18:45: a5:69:f3:ba:a0:86:45:03:ee:f1:3a:67:e9:cc:19:74:fa:ce: 68:55:9d:a6:0f:04:22:53:75:d6:9a:d4:18:d2:e8:3a:3f:7c: 09:d3:41:b2:a4:ab:78:c9:4b:81:6e:56:26:cf:8a:4e:34:ff: e2:65:4d:5e:53:1a:97:f2:f0:6e:34:2e:38:03:18:67:05:52: 28:00:b0:af:a6:ef:d5:61:3a:5a:a7:e5:9d:d1:9d:82:1a:84: e7:f6:25:71:6c:5a:c5:7c:a0:b0:a8:da:62:15:72:3a:07:6d: 2b:8b:79:88:72:3f:35:f2:2c:17:8f:57:55:06:68:f7:b2:87: e5:27:c7:b3:cb:f3:23:92:28:89:f7:aa:0c:e1:3b:74:a7:e5: 34:2a:39:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHbKRIbi0Ojb0RhqeRSlJ+hWyhWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3OEZD MTg0RDY0QTAeFw0yNjA2MTkxNjU2MTlaFw0yNjA2MjAxNzA1MTlaMDMxMTAvBgNV BAMTKDU2MjE2RDJENDFERTc2M0ZEMDhFMTcyRkExMDY4Q0ZDQzA5M0ZDQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeEVlhVSGYQqeOuaWUNUrsRvYk pkvZtIq/RO9jT2iuZCvIklVdAVEmKXYDb2AIT6khnPglgYkV2AK0eDhTaiDNuwDQ YKhFK48EEgkPZjDw5mhxX43puDWxgcgbR3vS6aS86Ah/ynLV4uXYSSSKpLg9mY02 q+spy8mHP/jdeB7ksZ65h41kekOeFxmo+sgnSTOoiKw4uj/jFzMKVmta4jsMTrXe F6BDA8ig7Di3pQGJatUo6w40UymbWsQjfuA+8lxqB/ttQGwPy+kDoxwOcpuwPgqp TUzWm8IUGY90lxjn5AyIRYp5740Fv7aislMJkL+UaCJ2tMZFylIAQmYecjxVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUViFtLUHedj/QjhcvoQaM/MCT/LEwHwYDVR0j BBgwFoAUcv2oWa93UKVkAjrk9uiHj8GE1kowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVjNTUzYjYtOWU1Ny00MGJkLThkOTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlB Rjc3NTBBNTY0MDIzQUU0RjZFODg3OEZDMTg0RDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZEQTg1OUFGNzc1MEE1NjQwMjNBRTRGNkU4ODc4RkMxODRE NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3 OEZDMTg0RDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAASV6Fj/UWKU0xGHMST2cZPC+IIx/JhgtrAJ L1GTnnpGr+ma63UMNAgxFMUN0jjzMFyuIDpAUT3IhHlwD6NNbUJ8LpxNfVR2zi/+ sVCiOXqNDQBvQAxA6DZs1GT20tEht7NhI/Suog4eY3AYRaVp87qghkUD7vE6Z+nM GXT6zmhVnaYPBCJTddaa1BjS6Do/fAnTQbKkq3jJS4FuVibPik40/+JlTV5TGpfy 8G40LjgDGGcFUigAsK+m79VhOlqn5Z3RnYIahOf2JXFsWsV8oLCo2mIVcjoHbSuL eYhyPzXyLBePV1UGaPeyh+Unx7PL8yOSKIn3qgzhO3Sn5TQqOfw= -----END CERTIFICATE-----Generated at Sat Jun 20 08:59:04 2026 by rpki-client