$ rpki-client -vvvf rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft File: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft (raw, json) Hash identifier: 9fdvMbOwjUXEqgNE2Wv/haBts4W5F4JneHKmUTL02rc= Subject key identifier: 74:E3:9B:47:E2:6C:8E:89:0E:20:B1:D5:1F:35:4E:9F:C8:65:E4:DA Authority key identifier: 72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F Certificate issuer: /CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Certificate serial: 77F3E1C6ECA6F1D2073E8A5754C3F37EE228F6E2 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft Manifest number: ED Signing time: Sun 25 Oct 2026 11:30:50 +0000 Manifest this update: Sun 25 Oct 2026 11:25:50 +0000 Manifest next update: Mon 26 Oct 2026 14:16:50 +0000 Files and hashes: 1: 72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl (hash: q96IDngRgq6WRfFwq7+gonL6xMf6nFCdG5/8asD990U=) 2: 3130332e3234342e32332e302f32342d3234203d3e20313531353336.roa (hash: PvyV39mz8mjiMF4MZkFF8Y2y+8ayLbmRxXXvZRdxwsk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 26 Oct 2026 12:34:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:f3:e1:c6:ec:a6:f1:d2:07:3e:8a:57:54:c3:f3:7e:e2:28:f6:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F Validity Not Before: Oct 25 11:25:50 2026 GMT Not After : Oct 26 14:16:50 2026 GMT Subject: CN=74E39B47E26C8E890E20B1D51F354E9FC865E4DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c0:26:db:ed:64:ea:60:ce:e2:f1:cb:6f:fb: 4c:15:5b:ac:8b:5a:9f:7d:d8:95:7e:f9:21:c8:4e: de:51:46:4e:0c:cd:dc:71:83:ec:fc:8d:23:a5:50: 33:a7:b0:26:a9:db:40:78:dd:61:9d:03:16:ce:c2: b2:d1:8f:2a:74:33:b0:32:0e:c0:5c:21:71:67:f5: 15:4e:ce:f8:89:6b:27:96:8c:93:3b:d5:9e:2a:38: 65:0a:ca:d2:d1:65:5e:f7:64:6d:0a:94:be:50:02: f2:fc:0d:ce:4c:b0:50:08:e0:9a:ae:f0:c1:ae:5f: ad:eb:f1:8a:a0:cc:40:a1:f6:1e:44:04:dc:9e:8e: ad:c2:6a:85:4e:71:ea:3b:22:1d:86:05:19:97:63: e6:af:4d:19:25:3c:f4:04:91:90:10:37:ac:ad:5a: d0:dd:80:75:04:b5:4b:ee:69:2d:13:10:8a:a6:2b: f0:86:1a:16:5d:50:32:89:6e:94:17:b6:2e:64:6e: 05:3e:cf:80:77:e4:c0:2e:05:56:a5:bf:79:3f:06: cc:2a:10:4a:ec:77:4c:3d:c1:c1:27:4a:aa:0c:80: f7:d1:11:12:cd:93:72:f1:55:6e:79:87:70:97:d2: 3a:cd:b4:2b:ad:7b:88:9b:6f:f7:97:cb:cc:d5:c3: bf:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E3:9B:47:E2:6C:8E:89:0E:20:B1:D5:1F:35:4E:9F:C8:65:E4:DA X509v3 Authority Key Identifier: keyid:72:FB:F9:6A:21:CE:2D:61:C4:B3:D6:84:6C:7F:E6:A1:D1:7B:B1:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/c0ea5056-0fbc-4032-8680-3fa5441e4d55/0/72FBF96A21CE2D61C4B3D6846C7FE6A1D17BB11F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:3e:49:b6:45:60:d4:de:d7:e9:f9:c0:dd:d1:b2:fd:26:b4: f0:08:8f:61:49:bc:57:ac:3c:0c:4a:f9:ed:f7:83:24:96:b9: 9d:57:ec:f7:28:62:6a:0a:f4:c9:43:c5:fd:31:50:6e:9e:69: aa:22:86:33:ef:f7:e8:80:17:fd:0c:c9:08:ec:65:ab:eb:cd: bf:8c:f0:ca:3d:03:5e:12:00:fa:ce:fd:4c:4b:f2:46:3f:6d: 24:cb:5d:9a:0f:87:e6:ba:96:03:b5:c1:7f:82:b4:11:d2:09: d1:64:4a:05:38:fb:8a:d8:e6:12:27:b1:0a:d1:f4:7c:f1:a6: c5:61:9a:4d:bb:cc:df:5f:5d:5c:2c:50:44:77:2d:2d:53:14: e0:87:12:c8:4f:9b:9c:3f:8f:cc:cc:cc:8d:f0:54:5a:24:ca: cd:42:32:ac:f1:e0:21:b4:c8:fd:0b:03:63:e0:b1:c4:a0:f5: 6a:f3:4a:36:7f:fc:81:6f:b3:bd:f2:c1:47:6a:67:b7:93:b9: 75:3f:ed:e7:9e:2b:16:2d:51:f9:f0:54:c1:08:72:43:5e:73: b8:43:6f:dc:fc:56:16:9a:fa:47:d7:6b:7d:0a:1b:14:ba:1c: 5c:12:2e:44:53:ed:9d:e8:80:36:d4:d8:57:1e:e3:27:8f:3e: 16:3b:41:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd/Phxuym8dIHPopXVMPzfuIo9uIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFE MTdCQjExRjAeFw0yNjEwMjUxMTI1NTBaFw0yNjEwMjYxNDE2NTBaMDMxMTAvBgNV BAMTKDc0RTM5QjQ3RTI2QzhFODkwRTIwQjFENTFGMzU0RTlGQzg2NUU0REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwCbb7WTqYM7i8ctv+0wVW6yL Wp992JV++SHITt5RRk4Mzdxxg+z8jSOlUDOnsCap20B43WGdAxbOwrLRjyp0M7Ay DsBcIXFn9RVOzviJayeWjJM71Z4qOGUKytLRZV73ZG0KlL5QAvL8Dc5MsFAI4Jqu 8MGuX63r8YqgzECh9h5EBNyejq3CaoVOceo7Ih2GBRmXY+avTRklPPQEkZAQN6yt WtDdgHUEtUvuaS0TEIqmK/CGGhZdUDKJbpQXti5kbgU+z4B35MAuBValv3k/Bswq EErsd0w9wcEnSqoMgPfRERLNk3LxVW55h3CX0jrNtCute4ibb/eXy8zVw78rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOObR+JsjokOILHVHzVOn8hl5NowHwYDVR0j BBgwFoAUcvv5aiHOLWHEs9aEbH/modF7sR8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YzBlYTUwNTYtMGZiYy00MDMyLTg2ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEy MUNFMkQ2MUM0QjNENjg0NkM3RkU2QTFEMTdCQjExRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZCRjk2QTIxQ0UyRDYxQzRCM0Q2ODQ2QzdGRTZBMUQxN0JC MTFGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYzBlYTUwNTYtMGZiYy00MDMyLTg2 ODAtM2ZhNTQ0MWU0ZDU1LzAvNzJGQkY5NkEyMUNFMkQ2MUM0QjNENjg0NkM3RkU2 QTFEMTdCQjExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMs+SbZFYNTe1+n5wN3Rsv0mtPAIj2FJvFes PAxK+e33gySWuZ1X7PcoYmoK9MlDxf0xUG6eaaoihjPv9+iAF/0MyQjsZavrzb+M 8Mo9A14SAPrO/UxL8kY/bSTLXZoPh+a6lgO1wX+CtBHSCdFkSgU4+4rY5hInsQrR 9HzxpsVhmk27zN9fXVwsUER3LS1TFOCHEshPm5w/j8zMzI3wVFokys1CMqzx4CG0 yP0LA2PgscSg9WrzSjZ//IFvs73ywUdqZ7eTuXU/7eeeKxYtUfnwVMEIckNec7hD b9z8Vhaa+kfXa30KGxS6HFwSLkRT7Z3ogDbU2Fce4yePPhY7QZg= -----END CERTIFICATE-----Generated at Sun Oct 25 19:49:11 2026 by rpki-client