$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft File: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft (raw, json) Hash identifier: WChN7E1paYb/mhsCo39/sDwgXIrwKY9xBVpUc4lCyx8= Subject key identifier: 92:1A:4D:26:5D:C6:A0:41:1E:68:D6:1B:F9:93:BC:73:A8:26:48:32 Authority key identifier: 72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE Certificate issuer: /CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Certificate serial: 4FE45076365FF20F6369F77B56E517F764E18203 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft Manifest number: B9 Signing time: Fri 18 Sep 2026 00:23:41 +0000 Manifest this update: Fri 18 Sep 2026 00:18:41 +0000 Manifest next update: Sat 19 Sep 2026 03:38:41 +0000 Files and hashes: 1: 72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl (hash: 7Vt1Zd3dfkZkaa/hrJH+nHREEj8jsegbnvKCkSmr8bE=) 2: 3130332e372e3130372e302f32342d3234203d3e20313531353939.roa (hash: Uq0zjp96KTXKbxSis8DhaT+OdD/bH8ZzigpO4G+X8Xo=) 3: 3130332e372e3130362e302f32342d3234203d3e20313531353939.roa (hash: q7SyYWgacRS5rzIzN3lkEYg9DVcMVi1C+rpPj5LCLHE=) 4: 3130332e372e3130362e302f32332d3233203d3e20313531353939.roa (hash: jakvC7z6ih8TLDBjPGwBe82NoGvM+4jFqZRksuR7CGI=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Sep 2026 03:38:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:e4:50:76:36:5f:f2:0f:63:69:f7:7b:56:e5:17:f7:64:e1:82:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE Validity Not Before: Sep 18 00:18:41 2026 GMT Not After : Sep 19 03:38:41 2026 GMT Subject: CN=921A4D265DC6A0411E68D61BF993BC73A8264832 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:26:8e:a0:02:70:49:74:47:ad:14:0e:be:cd: 1e:13:5f:e3:2d:7f:36:78:3c:c9:c5:29:b0:a7:09: 95:c6:30:91:c3:0a:25:92:ab:61:ec:87:01:2d:86: 00:17:fc:81:7c:5c:cf:7a:31:e2:9f:ef:ef:27:0a: 88:a3:fc:26:95:7b:70:7d:af:a9:b1:a5:f4:22:e1: e6:9e:99:ad:e2:21:4e:45:2c:d1:01:19:93:8b:4d: 91:32:74:ea:99:da:8f:a9:e7:f3:1e:81:c9:90:97: 01:03:24:3a:6f:03:16:61:88:26:7f:96:37:a3:85: 47:8d:24:5f:f9:71:c7:84:c3:d3:ee:3b:5e:ff:6e: dd:5f:a1:98:bc:64:ea:75:35:6f:8c:b3:f8:75:14: 6b:9b:db:58:a5:93:d2:04:be:f9:16:6c:80:05:14: 34:9e:87:c8:bb:82:84:c5:81:f9:fa:b9:dd:cf:b1: 1e:34:b7:44:95:4c:8e:a3:27:31:14:06:0e:f3:07: 7f:2f:ce:08:40:86:d4:37:0b:8b:5e:af:4b:54:7a: 82:bd:c5:7b:88:02:e8:36:69:53:59:64:c4:ea:e8: 09:2d:81:c0:9b:a4:2d:33:2b:cd:66:67:1e:b9:c6: 8d:7b:0c:22:eb:7a:11:80:c1:25:47:98:b2:47:0e: b1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1A:4D:26:5D:C6:A0:41:1E:68:D6:1B:F9:93:BC:73:A8:26:48:32 X509v3 Authority Key Identifier: keyid:72:87:1B:42:F8:AB:1D:9C:A1:F6:A1:3D:1E:29:CD:BE:15:1D:11:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ca124e6a-f51b-46d0-8ea3-76b2744558a6/0/72871B42F8AB1D9CA1F6A13D1E29CDBE151D11AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e3:db:b6:b3:39:e6:cb:fc:1f:11:43:e4:55:ef:b9:07:15: aa:1f:05:a7:43:bd:e1:cd:58:b4:12:c4:4a:81:ae:e7:6a:af: 01:95:da:5a:4c:b7:2e:30:a5:a4:ca:39:42:c0:31:44:5d:e5: bf:8e:ec:f7:60:43:7b:9f:6b:df:7d:1d:9a:d0:70:3f:ef:bb: 5d:98:ff:95:f0:bd:79:77:8f:a0:96:dd:96:e8:ac:e7:ca:9a: 86:e7:61:0f:c1:58:b0:09:7a:93:18:87:cb:fe:08:f4:3f:54: d4:ad:69:cc:47:64:3c:92:59:c9:cf:5b:05:e2:c4:c7:12:37: 3d:e7:4c:ad:c1:f4:f8:58:36:dd:df:ea:81:33:79:36:23:3e: 85:57:f9:92:08:32:9b:a5:29:db:4d:4b:fa:e4:87:9c:0a:a7: 94:73:ca:26:94:1a:d6:07:71:6e:27:0e:e7:23:7a:22:33:8e: f6:52:b5:1e:b2:49:b6:b9:70:ee:45:9e:39:3d:f0:25:10:cb: 9b:cd:08:91:48:b5:e3:60:f9:92:e8:67:ea:16:ef:17:bb:9b: 07:b2:a1:96:2d:f2:fb:11:7d:1e:51:85:ff:c3:0d:b7:a5:9c: 7b:fe:c7:3a:d5:38:76:d7:72:b6:18:38:f7:37:8a:0e:7f:c5: ed:24:15:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT+RQdjZf8g9jafd7VuUX92ThggMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUx NTFEMTFBRTAeFw0yNjA5MTgwMDE4NDFaFw0yNjA5MTkwMzM4NDFaMDMxMTAvBgNV BAMTKDkyMUE0RDI2NURDNkEwNDExRTY4RDYxQkY5OTNCQzczQTgyNjQ4MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoJo6gAnBJdEetFA6+zR4TX+Mt fzZ4PMnFKbCnCZXGMJHDCiWSq2HshwEthgAX/IF8XM96MeKf7+8nCoij/CaVe3B9 r6mxpfQi4eaema3iIU5FLNEBGZOLTZEydOqZ2o+p5/MegcmQlwEDJDpvAxZhiCZ/ ljejhUeNJF/5cceEw9PuO17/bt1foZi8ZOp1NW+Ms/h1FGub21ilk9IEvvkWbIAF FDSeh8i7goTFgfn6ud3PsR40t0SVTI6jJzEUBg7zB38vzghAhtQ3C4ter0tUeoK9 xXuIAug2aVNZZMTq6AktgcCbpC0zK81mZx65xo17DCLrehGAwSVHmLJHDrFNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhpNJl3GoEEeaNYb+ZO8c6gmSDIwHwYDVR0j BBgwFoAUcocbQvirHZyh9qE9HinNvhUdEa4wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2ExMjRlNmEtZjUxYi00NmQwLThlYTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJG OEFCMUQ5Q0ExRjZBMTNEMUUyOUNEQkUxNTFEMTFBRS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83Mjg3MUI0MkY4QUIxRDlDQTFGNkExM0QxRTI5Q0RCRTE1MUQx MUFFLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2ExMjRlNmEtZjUxYi00NmQwLThl YTMtNzZiMjc0NDU1OGE2LzAvNzI4NzFCNDJGOEFCMUQ5Q0ExRjZBMTNEMUUyOUNE QkUxNTFEMTFBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITj27azOebL/B8RQ+RV77kHFaofBadDveHN WLQSxEqBrudqrwGV2lpMty4wpaTKOULAMURd5b+O7PdgQ3ufa999HZrQcD/vu12Y /5XwvXl3j6CW3ZborOfKmobnYQ/BWLAJepMYh8v+CPQ/VNStacxHZDySWcnPWwXi xMcSNz3nTK3B9PhYNt3f6oEzeTYjPoVX+ZIIMpulKdtNS/rkh5wKp5RzyiaUGtYH cW4nDucjeiIzjvZStR6ySba5cO5Fnjk98CUQy5vNCJFIteNg+ZLoZ+oW7xe7mwey oZYt8vsRfR5Rhf/DDbelnHv+xzrVOHbXcrYYOPc3ig5/xe0kFUg= -----END CERTIFICATE-----Generated at Fri Sep 18 14:04:40 2026 by rpki-client