$ rpki-client -vvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json) Hash identifier: kdoFUKpmELJfPak+IAG6nJZsYwGYGbcCdDGdj+tO24s= Subject key identifier: B9:A2:8B:3A:91:E4:86:66:F3:5C:0F:D1:FD:81:7A:C9:00:6B:6B:DF Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Certificate serial: 2EA917B05C28F4CDDB87250D0CF4D65D3F316DB1 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft Manifest number: 3F Signing time: Thu 18 Jun 2026 14:34:26 +0000 Manifest this update: Thu 18 Jun 2026 14:29:26 +0000 Manifest next update: Fri 19 Jun 2026 15:46:26 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=) 2: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: rwRH7jwsnVfVyRf78oWGAKO+AERLgfvovki5xG0ozfM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 19 Jun 2026 12:15:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:a9:17:b0:5c:28:f4:cd:db:87:25:0d:0c:f4:d6:5d:3f:31:6d:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Validity Not Before: Jun 18 14:29:26 2026 GMT Not After : Jun 19 15:46:26 2026 GMT Subject: CN=B9A28B3A91E48666F35C0FD1FD817AC9006B6BDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e1:d3:01:5b:1c:3a:1b:66:52:66:96:4c:3f: 9e:3d:28:34:8f:17:a6:46:10:02:27:ef:9d:cb:a8: 48:9d:c8:22:78:f8:0f:a4:4c:74:b4:66:b1:09:78: ec:7f:46:c2:ae:3c:2a:cb:30:ff:28:79:f3:71:59: 47:3c:be:82:e3:8f:56:8c:78:f3:1b:d4:44:9c:f4: 56:d3:cd:0c:69:34:a1:79:e2:da:c5:63:80:03:1c: e7:fb:f4:86:60:53:53:86:88:a8:bb:3e:08:f3:bb: 82:c0:07:be:04:c8:1c:51:7e:ad:82:d0:ca:9e:1d: 1c:8b:0c:32:3d:7b:48:08:64:b9:a7:96:10:20:ad: eb:76:5b:d5:6b:1c:f3:fc:01:72:84:26:b6:e2:4e: dc:6c:47:42:fc:ef:91:f7:ab:7d:ce:6b:b0:7b:78: ea:94:dc:39:b6:16:0b:61:29:92:92:9f:08:22:f1: 52:96:82:9c:be:6c:b5:de:ca:ef:9a:ed:4a:7e:c2: 13:62:24:12:80:25:d0:35:a9:c2:bd:7a:45:86:5d: 18:da:6d:f0:ad:78:6c:e1:29:d8:8e:88:15:4a:21: 22:0f:dd:bb:93:9f:11:67:ac:97:69:d0:a7:fc:d7: 71:49:52:fd:4e:0a:24:b3:c2:6e:1a:8d:a6:d9:5d: 4b:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:A2:8B:3A:91:E4:86:66:F3:5C:0F:D1:FD:81:7A:C9:00:6B:6B:DF X509v3 Authority Key Identifier: keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f3:99:0f:13:eb:2e:fb:26:50:db:31:ff:3c:27:ab:f0:df: 16:13:5f:b6:34:15:e8:8a:c8:c9:3a:c5:35:48:14:61:81:37: 38:9e:3e:42:05:4e:82:0d:e2:d8:86:2f:2b:a1:e2:3b:a9:29: bf:06:42:8b:6c:12:a6:a6:44:a3:d6:e5:62:9e:13:8a:d3:81: c8:0b:38:c7:04:86:ad:9f:cf:86:70:ff:b2:b0:4e:cf:51:b5: cb:ba:49:d2:55:df:11:8b:ab:56:33:d4:e7:ba:64:22:e9:f0: 03:95:27:28:a3:5e:fe:a1:05:70:fa:f8:5b:b8:5c:8c:f7:c7: f4:11:75:35:11:38:df:e9:4d:06:ff:7e:75:9c:43:a6:f1:d8: 5d:ae:54:fa:39:06:70:a0:b1:af:72:4e:69:20:09:30:fe:c9: fc:f3:ad:9e:37:b0:1f:a7:28:35:49:f8:be:7d:66:80:99:be: 6c:b0:f9:26:82:df:53:24:ba:39:2c:30:a9:64:01:45:85:c0: 4d:a1:d1:da:0e:a9:3d:06:b4:cd:d7:cd:4f:f8:9b:91:a1:33: c9:f5:27:82:3e:12:b5:de:68:ff:43:fb:af:7f:f7:70:64:49: 31:0f:44:cf:12:2c:21:eb:a4:5e:e0:07:70:33:32:a5:49:16: 64:f6:ea:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULqkXsFwo9M3bhyUNDPTWXT8xbbEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE QzQ3NzY0NDAeFw0yNjA2MTgxNDI5MjZaFw0yNjA2MTkxNTQ2MjZaMDMxMTAvBgNV BAMTKEI5QTI4QjNBOTFFNDg2NjZGMzVDMEZEMUZEODE3QUM5MDA2QjZCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4dMBWxw6G2ZSZpZMP549KDSP F6ZGEAIn753LqEidyCJ4+A+kTHS0ZrEJeOx/RsKuPCrLMP8oefNxWUc8voLjj1aM ePMb1ESc9FbTzQxpNKF54trFY4ADHOf79IZgU1OGiKi7Pgjzu4LAB74EyBxRfq2C 0MqeHRyLDDI9e0gIZLmnlhAgret2W9VrHPP8AXKEJrbiTtxsR0L875H3q33Oa7B7 eOqU3Dm2FgthKZKSnwgi8VKWgpy+bLXeyu+a7Up+whNiJBKAJdA1qcK9ekWGXRja bfCteGzhKdiOiBVKISIP3buTnxFnrJdp0Kf813FJUv1OCiSzwm4ajabZXUsLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuaKLOpHkhmbzXA/R/YF6yQBra98wHwYDVR0j BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3 OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRC MjJEQzQ3NzY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDzmQ8T6y77JlDbMf88J6vw3xYTX7Y0FeiK yMk6xTVIFGGBNziePkIFToIN4tiGLyuh4jupKb8GQotsEqamRKPW5WKeE4rTgcgL OMcEhq2fz4Zw/7KwTs9Rtcu6SdJV3xGLq1Yz1Oe6ZCLp8AOVJyijXv6hBXD6+Fu4 XIz3x/QRdTURON/pTQb/fnWcQ6bx2F2uVPo5BnCgsa9yTmkgCTD+yfzzrZ43sB+n KDVJ+L59ZoCZvmyw+SaC31MkujksMKlkAUWFwE2h0doOqT0GtM3XzU/4m5GhM8n1 J4I+ErXeaP9D+69/93BkSTEPRM8SLCHrpF7gB3AzMqVJFmT26uc= -----END CERTIFICATE-----Generated at Thu Jun 18 21:08:51 2026 by rpki-client