$ rpki-client -vvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: WofgD048gGUpCTI7Z0f4I88iw2mzGSKTN99hbq/YY3w= Subject key identifier: BC:81:E1:F1:27:27:D9:58:09:E3:07:D4:51:F5:57:0B:1F:89:E7:9E Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 7625BCD559DA5135B3217B029A576E9D88279844 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: 42 Signing time: Sat 20 Jun 2026 01:57:06 +0000 Manifest this update: Sat 20 Jun 2026 01:52:06 +0000 Manifest next update: Sun 21 Jun 2026 02:27:06 +0000 Files and hashes: 1: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) 2: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: T6g0k2lgvowh7C7JJqeme86GSlOPRG41OHOe1do0e64=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 21 Jun 2026 02:27:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:25:bc:d5:59:da:51:35:b3:21:7b:02:9a:57:6e:9d:88:27:98:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: Jun 20 01:52:06 2026 GMT Not After : Jun 21 02:27:06 2026 GMT Subject: CN=BC81E1F12727D95809E307D451F5570B1F89E79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:cb:c6:63:74:dd:ec:5f:e7:ca:a0:ba:db:f8: 84:25:f1:d3:d0:74:1f:d7:e6:0f:bc:4a:13:fc:3d: 17:4f:ce:bf:3d:55:b2:77:a7:8a:da:b8:9a:2c:fa: d0:50:c6:4a:91:e4:43:e9:58:3d:db:18:bf:97:d6: 55:1d:81:ab:80:fa:03:cd:12:cb:a2:88:b9:82:9e: 07:ab:24:96:85:bf:99:be:34:37:aa:0e:11:e0:37: b4:b2:c1:92:c5:fb:a1:db:b1:de:7a:ac:cf:12:92: 44:95:b2:f4:4c:f6:58:00:78:bb:a0:15:8f:c8:c5: 0f:da:85:e7:31:c4:19:0a:7b:ea:b2:4e:07:9e:30: d4:8d:69:13:56:5b:ec:05:14:cf:e9:87:82:c0:75: 07:b5:86:4e:eb:55:f1:2b:8b:9b:43:39:af:3a:99: 86:62:dd:49:0d:d4:44:da:4c:6b:42:71:e2:71:eb: 70:fd:7b:2b:66:b7:1d:93:f9:e6:cf:eb:fa:10:3a: 40:00:dc:92:5e:9e:d8:cc:47:b6:d5:a7:70:5b:79: 8c:50:7f:4c:86:6d:38:38:8b:de:9c:b1:fe:d0:43: 96:3f:1c:07:f1:31:e2:4e:d2:41:0f:6e:ba:13:a1: 2f:7c:e1:71:83:0f:65:ba:66:c0:f6:58:b2:b9:35: ed:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:81:E1:F1:27:27:D9:58:09:E3:07:D4:51:F5:57:0B:1F:89:E7:9E X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:8e:7f:84:30:84:0b:93:d7:b8:2c:f3:87:2d:e7:fe:60:55: dd:2a:10:98:d1:c7:82:3a:ae:d0:1d:b7:b4:48:11:92:a1:c6: 20:52:f1:2c:74:f0:c2:3e:3d:2c:1b:3e:1d:ad:c1:fc:cb:f4: 62:48:6d:f9:0d:a5:27:15:08:8b:cc:c2:da:01:cd:ae:5c:bb: c9:14:c7:84:76:f0:bd:7c:d4:3c:d6:09:f5:b5:2f:09:b9:18: 32:22:15:ba:7d:54:c2:7d:3c:fc:a5:e9:01:d3:5f:71:aa:59: 9f:43:b1:f8:08:d9:e6:dc:df:e4:fd:5f:40:76:c0:41:aa:b1: 4a:95:21:3c:a9:17:b7:e4:73:06:d9:1e:33:77:45:70:a7:e3: 99:a4:a1:c1:97:c6:ff:fe:e7:f1:e7:c3:3c:28:00:70:e7:a7: 91:e2:e9:73:ad:3a:c8:ba:2a:af:e3:b1:98:e7:61:36:9b:f3: 2d:bd:f3:a6:f5:f5:28:ce:94:e7:fc:1d:25:cf:1a:fd:75:26: d4:38:a1:19:06:f8:95:c7:25:01:75:f8:2a:fb:4c:68:f6:6e: 0b:f0:19:86:e1:2c:5b:ab:3c:a5:f9:0c:1a:26:a9:5d:2b:7f: c2:9f:31:6d:e0:ec:17:c5:7b:77:0f:95:34:b3:92:b8:db:80: 60:6f:26:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiW81VnaUTWzIXsCmldunYgnmEQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjA2MjAwMTUyMDZaFw0yNjA2MjEwMjI3MDZaMDMxMTAvBgNV BAMTKEJDODFFMUYxMjcyN0Q5NTgwOUUzMDdENDUxRjU1NzBCMUY4OUU3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgy8ZjdN3sX+fKoLrb+IQl8dPQ dB/X5g+8ShP8PRdPzr89VbJ3p4rauJos+tBQxkqR5EPpWD3bGL+X1lUdgauA+gPN EsuiiLmCngerJJaFv5m+NDeqDhHgN7SywZLF+6Hbsd56rM8SkkSVsvRM9lgAeLug FY/IxQ/ahecxxBkKe+qyTgeeMNSNaRNWW+wFFM/ph4LAdQe1hk7rVfEri5tDOa86 mYZi3UkN1ETaTGtCceJx63D9eytmtx2T+ebP6/oQOkAA3JJentjMR7bVp3BbeYxQ f0yGbTg4i96csf7QQ5Y/HAfxMeJO0kEPbroToS984XGDD2W6ZsD2WLK5Ne2jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvIHh8Scn2VgJ4wfUUfVXCx+J554wHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJKOf4QwhAuT17gs84ct5/5gVd0qEJjRx4I6 rtAdt7RIEZKhxiBS8Sx08MI+PSwbPh2twfzL9GJIbfkNpScVCIvMwtoBza5cu8kU x4R28L181DzWCfW1Lwm5GDIiFbp9VMJ9PPyl6QHTX3GqWZ9DsfgI2ebc3+T9X0B2 wEGqsUqVITypF7fkcwbZHjN3RXCn45mkocGXxv/+5/HnwzwoAHDnp5Hi6XOtOsi6 Kq/jsZjnYTab8y2986b19SjOlOf8HSXPGv11JtQ4oRkG+JXHJQF1+Cr7TGj2bgvw GYbhLFurPKX5DBomqV0rf8KfMW3g7BfFe3cPlTSzkrjbgGBvJio= -----END CERTIFICATE-----Generated at Sat Jun 20 09:19:03 2026 by rpki-client