$ rpki-client -vvvf rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft File: 72B692DB78B9A0070ADC5D2760764B22DC477644.mft (raw, json) Hash identifier: +eEXlTzIOtFHVxWrjOWjmlG6349yMnsR/67JhlVMBW4= Subject key identifier: EF:C9:BA:E9:67:56:EB:4D:68:CC:31:BE:54:56:4D:45:E5:8E:32:CC Authority key identifier: 72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 Certificate issuer: /CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Certificate serial: 7E4305955C9E6EE6EDAE76B0FB7FED2CB3CCF279 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft Manifest number: B8 Signing time: Thu 17 Sep 2026 08:03:26 +0000 Manifest this update: Thu 17 Sep 2026 07:58:26 +0000 Manifest next update: Fri 18 Sep 2026 08:34:26 +0000 Files and hashes: 1: 72B692DB78B9A0070ADC5D2760764B22DC477644.crl (hash: pb2rONHy+uxHKrXK8x1ZEGQA/jrc5OflYuSIIoYyiS0=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: I+Fd63f55V3ik8xx1b7rLHKd/go+/DygZiRv3uP0tjM=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 18 Sep 2026 08:34:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:43:05:95:5c:9e:6e:e6:ed:ae:76:b0:fb:7f:ed:2c:b3:cc:f2:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B692DB78B9A0070ADC5D2760764B22DC477644 Validity Not Before: Sep 17 07:58:26 2026 GMT Not After : Sep 18 08:34:26 2026 GMT Subject: CN=EFC9BAE96756EB4D68CC31BE54564D45E58E32CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:86:46:41:64:6c:1b:46:2d:95:13:85:93:6e: 50:ed:81:a0:3a:66:f3:bc:ad:3f:d1:07:b3:7d:9e: 22:4a:1b:ab:f2:66:69:66:e5:21:65:1a:af:7d:fa: 8c:bb:68:b7:8d:69:25:af:5d:f0:37:40:89:c4:c9: 70:8f:9e:94:0c:d5:8d:e5:c1:2c:c0:23:4b:d6:d7: a5:60:cb:5f:39:f8:44:44:fa:7e:79:38:ce:72:cf: 48:0b:62:19:2d:ad:da:fe:bc:f0:e4:d7:bc:b8:a0: f5:71:c6:d7:21:06:ad:a6:32:b1:89:1d:a3:19:8e: 32:14:fc:36:a3:b0:0b:b6:14:95:99:ec:ee:8f:c0: d6:95:fc:d0:35:f5:44:64:de:93:30:be:b6:08:1e: ff:97:0d:21:bc:d9:11:51:65:d9:da:72:3f:6a:c9: 77:7a:0e:fe:ec:47:8f:80:c8:6d:73:15:2f:d4:a5: e8:14:af:9c:7c:24:81:d1:ce:9d:48:be:00:6d:42: 7d:b4:25:bb:dd:8c:54:a1:47:12:35:6c:35:d1:74: 37:bd:c8:90:ee:ba:ab:72:cb:c6:e8:a6:1f:9c:a2: 29:0e:1c:c8:ed:7b:0d:72:62:51:6d:16:40:9f:61: 70:55:a1:10:b1:ec:43:ba:89:b8:2b:85:15:ea:f7: 3f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:C9:BA:E9:67:56:EB:4D:68:CC:31:BE:54:56:4D:45:E5:8E:32:CC X509v3 Authority Key Identifier: keyid:72:B6:92:DB:78:B9:A0:07:0A:DC:5D:27:60:76:4B:22:DC:47:76:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B692DB78B9A0070ADC5D2760764B22DC477644.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/72B692DB78B9A0070ADC5D2760764B22DC477644.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a4:d5:1b:ec:72:01:ce:06:87:5c:35:db:d3:7b:8d:8c:29: 55:08:c5:f0:a1:3a:6d:f0:74:f0:2d:fc:6b:e2:94:dd:c6:98: 43:e7:bb:4f:e4:f7:22:90:6d:28:86:ef:34:78:ca:b5:ec:2b: 5b:47:17:ce:63:51:24:80:4a:ff:c2:79:b5:19:5f:40:df:9b: 3a:25:29:a1:1c:0e:9d:d6:4d:d3:49:db:3e:d7:8a:36:f9:89: f5:9c:61:b3:e0:d6:1d:91:f3:98:de:76:5c:ae:fc:47:e8:ea: b7:70:ff:9d:25:a4:e1:fc:87:f2:14:23:a8:4c:07:b3:d7:e6: 29:26:cc:73:ab:3d:67:66:34:2d:1a:d9:39:00:ab:54:64:4b: 97:b5:6c:bc:99:53:9b:90:1e:32:e9:34:cb:25:01:a8:58:20: e2:84:d8:90:e3:61:45:42:80:b6:83:c5:2a:63:51:91:0d:8e: 40:65:cc:49:7c:7f:62:30:3b:fa:43:d1:37:88:71:3e:0a:c0: 4a:ab:10:27:c9:7f:ab:fe:64:fe:f1:25:4e:e6:32:3e:9f:b0: 71:4a:8f:d5:d9:02:87:b9:a7:67:6e:a2:d1:31:a5:04:02:68: bb:4d:5f:95:eb:71:23:e2:64:49:02:0b:f6:d8:e4:3f:71:5e: 19:4d:ce:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfkMFlVyebubtrnaw+3/tLLPM8nkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJE QzQ3NzY0NDAeFw0yNjA5MTcwNzU4MjZaFw0yNjA5MTgwODM0MjZaMDMxMTAvBgNV BAMTKEVGQzlCQUU5Njc1NkVCNEQ2OENDMzFCRTU0NTY0RDQ1RTU4RTMyQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBhkZBZGwbRi2VE4WTblDtgaA6 ZvO8rT/RB7N9niJKG6vyZmlm5SFlGq99+oy7aLeNaSWvXfA3QInEyXCPnpQM1Y3l wSzAI0vW16Vgy185+ERE+n55OM5yz0gLYhktrdr+vPDk17y4oPVxxtchBq2mMrGJ HaMZjjIU/DajsAu2FJWZ7O6PwNaV/NA19URk3pMwvrYIHv+XDSG82RFRZdnacj9q yXd6Dv7sR4+AyG1zFS/UpegUr5x8JIHRzp1IvgBtQn20JbvdjFShRxI1bDXRdDe9 yJDuuqtyy8boph+coikOHMjtew1yYlFtFkCfYXBVoRCx7EO6ibgrhRXq9z9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU78m66WdW601ozDG+VFZNReWOMswwHwYDVR0j BBgwFoAUcraS23i5oAcK3F0nYHZLItxHdkQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v Y2U3ZDczOGUtMmNjNy00YmQyLWJiMjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3 OEI5QTAwNzBBREM1RDI3NjA3NjRCMjJEQzQ3NzY0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI2OTJEQjc4QjlBMDA3MEFEQzVEMjc2MDc2NEIyMkRDNDc3 NjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvNzJCNjkyREI3OEI5QTAwNzBBREM1RDI3NjA3NjRC MjJEQzQ3NzY0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKk1RvscgHOBodcNdvTe42MKVUIxfChOm3w dPAt/GvilN3GmEPnu0/k9yKQbSiG7zR4yrXsK1tHF85jUSSASv/CebUZX0Dfmzol KaEcDp3WTdNJ2z7Xijb5ifWcYbPg1h2R85jedlyu/Efo6rdw/50lpOH8h/IUI6hM B7PX5ikmzHOrPWdmNC0a2TkAq1RkS5e1bLyZU5uQHjLpNMslAahYIOKE2JDjYUVC gLaDxSpjUZENjkBlzEl8f2IwO/pD0TeIcT4KwEqrECfJf6v+ZP7xJU7mMj6fsHFK j9XZAoe5p2duotExpQQCaLtNX5XrcSPiZEkCC/bY5D9xXhlNziI= -----END CERTIFICATE-----Generated at Thu Sep 17 10:45:16 2026 by rpki-client