$ rpki-client -vvvf rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft File: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft (raw, json) Hash identifier: csUhSc4oDKpWjmBQlKTLO28F6AwuOLAtRAC9roXK8kw= Subject key identifier: DC:6D:3A:0F:B6:FF:56:B4:08:95:35:C1:48:4F:96:4E:4D:FB:7E:16 Authority key identifier: 72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 Certificate issuer: /CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Certificate serial: 1DDD00DA17C10F93A67CAEEA705B19FDCDF73833 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft Manifest number: B8 Signing time: Wed 16 Sep 2026 17:35:57 +0000 Manifest this update: Wed 16 Sep 2026 17:30:57 +0000 Manifest next update: Thu 17 Sep 2026 19:10:57 +0000 Files and hashes: 1: 72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl (hash: mBP35d2LD8LJu2YCPnBFa74EPwdRvG6YVWAXlgpDePg=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: nCyY949MzU7hnQsLPWC6vzIr7exiuBneA4Uj38f4AKc=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 17 Sep 2026 19:10:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:dd:00:da:17:c1:0f:93:a6:7c:ae:ea:70:5b:19:fd:cd:f7:38:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72C5E24CE24D2982C20DEC5C338E9741FA84A269 Validity Not Before: Sep 16 17:30:57 2026 GMT Not After : Sep 17 19:10:57 2026 GMT Subject: CN=DC6D3A0FB6FF56B4089535C1484F964E4DFB7E16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ad:09:24:18:ac:99:54:53:05:0f:c7:01:24: 6f:ee:c2:54:7d:db:c9:82:17:b3:57:27:e0:c4:a0: c7:a8:bd:20:5b:2c:ff:03:73:b9:9f:ce:99:52:95: 45:cf:94:38:6c:84:de:72:d2:5a:be:d7:91:bd:5a: 51:73:12:b1:12:3e:71:9d:4c:3f:5c:70:34:06:eb: e5:7c:67:da:ac:72:cc:15:8a:71:8a:32:9e:2c:c3: c0:bd:fd:30:f3:3e:de:84:78:2f:b0:05:55:da:05: 11:fe:61:6f:38:18:a8:bb:e7:96:6e:d2:d3:15:4e: d1:b1:d3:2e:42:8d:16:60:f4:06:61:e6:9d:80:9f: 85:b5:1c:45:3e:94:b1:a7:3c:e8:66:4e:43:ec:18: c7:0c:7b:3b:42:60:95:c0:e2:a4:46:c3:cc:2d:14: 1e:23:51:df:a3:21:34:aa:ad:6e:f0:c3:a1:38:4d: 51:2d:74:ef:6e:b4:dc:1c:ad:27:4b:05:92:0d:3d: 1a:62:0c:d1:23:78:ad:8c:8d:53:d9:3c:4b:ff:65: e9:b8:8d:ff:ea:73:f1:b3:b4:23:d9:bc:d4:8a:27: cd:3f:cc:20:30:8e:e7:5c:c3:f0:75:c2:98:62:57: fc:9e:2f:2d:c3:db:35:18:34:98:fd:c2:78:55:07: cb:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:6D:3A:0F:B6:FF:56:B4:08:95:35:C1:48:4F:96:4E:4D:FB:7E:16 X509v3 Authority Key Identifier: keyid:72:C5:E2:4C:E2:4D:29:82:C2:0D:EC:5C:33:8E:97:41:FA:84:A2:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72C5E24CE24D2982C20DEC5C338E9741FA84A269.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/72C5E24CE24D2982C20DEC5C338E9741FA84A269.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:07:5a:63:f4:e0:03:93:57:1c:73:33:a2:7f:19:8e:2d:1e: 09:4f:68:bc:42:3e:84:9f:3d:72:4a:2a:79:54:99:44:e5:c7: ee:15:24:bd:a0:c8:d3:0c:d3:0d:e9:28:fe:8a:96:67:cc:73: af:19:b1:30:14:88:91:87:ed:38:da:a2:91:9a:02:43:08:d7: cd:c6:cc:51:52:10:d5:8d:a7:8e:fa:9f:85:ad:1d:94:5f:07: fa:12:cb:ce:47:ff:bc:bd:28:ca:7c:a7:c1:ef:12:18:01:04: 98:8f:a6:c9:8e:ee:87:45:af:1a:c2:2f:7d:6e:62:10:73:7e: 13:06:50:07:a6:64:5c:6d:cf:e8:a2:00:d7:53:82:2e:a1:3a: 4a:b9:2f:eb:f3:36:24:6c:bd:8f:e5:d7:9b:90:d8:41:08:92: 65:07:2c:7d:ee:25:2d:7b:4f:16:ee:a4:65:cd:25:c3:7c:24: 17:f9:cc:63:d7:07:12:3a:f4:c5:c8:67:a4:8c:c0:22:58:a8: 50:bd:da:2f:e9:e7:fd:4c:e6:1e:1a:73:d3:d8:1d:d7:b8:b9: 92:46:6c:db:c9:49:d6:cf:50:1e:1c:f0:46:a6:dd:ba:ac:3b: e4:ad:46:fb:f9:26:9b:56:3b:24:6e:76:53:66:b7:c7:be:f0: d6:4a:b6:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHd0A2hfBD5OmfK7qcFsZ/c33ODMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3NDFG QTg0QTI2OTAeFw0yNjA5MTYxNzMwNTdaFw0yNjA5MTcxOTEwNTdaMDMxMTAvBgNV BAMTKERDNkQzQTBGQjZGRjU2QjQwODk1MzVDMTQ4NEY5NjRFNERGQjdFMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCirQkkGKyZVFMFD8cBJG/uwlR9 28mCF7NXJ+DEoMeovSBbLP8Dc7mfzplSlUXPlDhshN5y0lq+15G9WlFzErESPnGd TD9ccDQG6+V8Z9qscswVinGKMp4sw8C9/TDzPt6EeC+wBVXaBRH+YW84GKi755Zu 0tMVTtGx0y5CjRZg9AZh5p2An4W1HEU+lLGnPOhmTkPsGMcMeztCYJXA4qRGw8wt FB4jUd+jITSqrW7ww6E4TVEtdO9utNwcrSdLBZINPRpiDNEjeK2MjVPZPEv/Zem4 jf/qc/GztCPZvNSKJ80/zCAwjudcw/B1wphiV/yeLy3D2zUYNJj9wnhVB8vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3G06D7b/VrQIlTXBSE+WTk37fhYwHwYDVR0j BBgwFoAUcsXiTOJNKYLCDexcM46XQfqEomkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENF MjREMjk4MkMyMERFQzVDMzM4RTk3NDFGQTg0QTI2OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkM1RTI0Q0UyNEQyOTgyQzIwREVDNUMzMzhFOTc0MUZBODRB MjY5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvNzJDNUUyNENFMjREMjk4MkMyMERFQzVDMzM4RTk3 NDFGQTg0QTI2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUHWmP04AOTVxxzM6J/GY4tHglPaLxCPoSf PXJKKnlUmUTlx+4VJL2gyNMM0w3pKP6KlmfMc68ZsTAUiJGH7TjaopGaAkMI183G zFFSENWNp476n4WtHZRfB/oSy85H/7y9KMp8p8HvEhgBBJiPpsmO7odFrxrCL31u YhBzfhMGUAemZFxtz+iiANdTgi6hOkq5L+vzNiRsvY/l15uQ2EEIkmUHLH3uJS17 TxbupGXNJcN8JBf5zGPXBxI69MXIZ6SMwCJYqFC92i/p5/1M5h4ac9PYHde4uZJG bNvJSdbPUB4c8Eam3bqsO+StRvv5JptWOyRudlNmt8e+8NZKtjo= -----END CERTIFICATE-----Generated at Thu Sep 17 10:43:51 2026 by rpki-client