$ rpki-client -vvf repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft File: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft (raw, json) Hash identifier: aFDVsQV0j6HI6qY+ggR2UyaW9/4J+uQVQJHOGCUKbgs= Subject key identifier: 6A:7B:B6:76:6A:E9:32:B6:9B:DD:66:03:3A:B8:98:7F:08:C4:3D:9B Authority key identifier: 72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 Certificate issuer: /CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Certificate serial: 0AB85A00E1C7CCA097D9C4EEA194AEC60DF902FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft Manifest number: E5 Signing time: Tue 24 Mar 2026 06:00:47 +0000 Manifest this update: Tue 24 Mar 2026 05:55:47 +0000 Manifest next update: Fri 27 Mar 2026 16:52:47 +0000 Files and hashes: 1: 3135372e31352e3131362e302f32332d3234203d3e20313532333732.roa (hash: qS0Y7OvIPpcM2gAdCGVHw4DZGPjirzEO0sHYxu8EXaU=) 2: 72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl (hash: wahImyX21EK7lel5HK6p5m4NBEL0zoXueLmKg/Z/Kj4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:52:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b8:5a:00:e1:c7:cc:a0:97:d9:c4:ee:a1:94:ae:c6:0d:f9:02:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16 Validity Not Before: Mar 24 05:55:47 2026 GMT Not After : Mar 27 16:52:47 2026 GMT Subject: CN=6A7BB6766AE932B69BDD66033AB8987F08C43D9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:71:53:b5:3a:54:35:dd:62:1e:97:fc:cd:8b: 25:75:41:59:a2:9e:4a:d1:fa:8a:2e:c9:4c:ba:7b: 75:91:e0:bc:ff:f8:83:5d:9b:6d:69:6f:cd:35:c4: cf:56:19:c5:88:1d:85:d7:10:8d:d7:d7:45:98:d3: b8:c8:79:41:98:4e:c5:80:a1:d3:3c:72:50:9e:f0: 33:ab:26:e2:05:54:0d:a4:31:1e:20:10:41:f7:01: 89:ad:11:18:ef:36:e4:f7:f9:70:80:16:23:e8:31: b3:8e:6f:51:46:4f:a6:8c:76:91:e6:db:7b:7f:19: 5b:70:f7:87:d6:02:31:10:f7:aa:8e:01:fd:f1:a1: d4:70:a5:7f:d0:47:cf:10:09:c1:65:45:4a:67:d6: 1e:4c:86:6d:b2:c1:1d:45:49:8c:56:19:04:26:ae: f3:80:b4:a7:7e:7f:6c:4d:86:53:17:80:5c:33:73: 16:7a:f9:a7:6a:69:89:1d:a5:95:10:bb:d9:c9:88: 14:f4:a9:1a:f0:55:2a:39:f1:6b:01:f2:3a:34:56: d2:1a:6f:f1:d0:dc:9c:3e:6d:0a:60:7c:b3:f0:20: 02:d1:3a:d5:07:e6:f3:e8:2b:ac:64:7e:68:a8:db: d4:f1:cd:74:73:24:40:78:32:b1:7b:31:a6:90:f3: cc:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:7B:B6:76:6A:E9:32:B6:9B:DD:66:03:3A:B8:98:7F:08:C4:3D:9B X509v3 Authority Key Identifier: keyid:72:D8:DA:FD:48:1B:3F:8F:AC:2B:25:99:C9:E3:EC:ED:FA:3F:4E:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c47f6cf6-dd2b-4823-b264-e2bf4f30abfe/0/72D8DAFD481B3F8FAC2B2599C9E3ECEDFA3F4E16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:8b:84:7a:da:b5:ed:6c:45:b6:51:e6:9f:7c:50:d6:72:e0: 79:23:3d:79:81:7b:cb:33:91:27:ca:68:8f:22:30:74:6f:75: 98:af:5f:79:b6:f7:fd:1c:6b:5a:07:db:f9:47:d7:ea:36:86: 3b:ed:e3:d4:af:e6:5b:f9:ff:4c:ce:4e:40:a5:03:81:ca:0c: 7e:75:53:4c:c3:cb:dc:49:99:0e:7f:8d:95:5b:12:0f:cd:38: 00:6e:ef:77:c1:1d:54:7a:fe:77:9c:a3:7b:f5:99:81:d5:26: db:bf:6a:fc:7c:44:7b:fd:d9:5b:44:c8:fd:c7:ee:62:bb:47: 56:f2:f3:f1:73:67:22:35:8c:4d:e6:05:79:a4:e1:fd:84:d2: 3c:3e:0a:aa:10:75:5b:98:f2:93:43:8b:7e:31:bf:cc:b2:08: 63:4e:c2:c3:30:b3:93:1a:20:a8:b8:c0:e0:de:98:db:cf:46: 4f:5a:95:b5:f4:b3:da:9d:16:60:2b:bb:a2:13:35:db:53:97: fe:be:56:8d:c8:cc:15:4b:c1:a7:27:8f:b7:cf:5c:a7:fb:fe: 45:e7:f6:86:43:4b:7b:92:1f:d1:96:23:02:30:e2:5c:27:20: 81:51:93:d6:74:a5:f6:73:5a:a1:a9:dd:c5:bc:d2:41:1a:54: 7d:df:f2:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrhaAOHHzKCX2cTuoZSuxg35AvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURG QTNGNEUxNjAeFw0yNjAzMjQwNTU1NDdaFw0yNjAzMjcxNjUyNDdaMDMxMTAvBgNV BAMTKDZBN0JCNjc2NkFFOTMyQjY5QkRENjYwMzNBQjg5ODdGMDhDNDNEOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7cVO1OlQ13WIel/zNiyV1QVmi nkrR+oouyUy6e3WR4Lz/+INdm21pb801xM9WGcWIHYXXEI3X10WY07jIeUGYTsWA odM8clCe8DOrJuIFVA2kMR4gEEH3AYmtERjvNuT3+XCAFiPoMbOOb1FGT6aMdpHm 23t/GVtw94fWAjEQ96qOAf3xodRwpX/QR88QCcFlRUpn1h5Mhm2ywR1FSYxWGQQm rvOAtKd+f2xNhlMXgFwzcxZ6+adqaYkdpZUQu9nJiBT0qRrwVSo58WsB8jo0VtIa b/HQ3Jw+bQpgfLPwIALROtUH5vPoK6xkfmio29TxzXRzJEB4MrF7MaaQ88wzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUanu2dmrpMrab3WYDOriYfwjEPZswHwYDVR0j BBgwFoAUctja/UgbP4+sKyWZyePs7fo/ThYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NDdmNmNmNi1kZDJiLTQ4MjMtYjI2NC1lMmJmNGYzMGFiZmUvMC83MkQ4REFGRDQ4 MUIzRjhGQUMyQjI1OTlDOUUzRUNFREZBM0Y0RTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VDRURGQTNG NEUxNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzQ3ZjZjZjYtZGQyYi00ODIzLWIy NjQtZTJiZjRmMzBhYmZlLzAvNzJEOERBRkQ0ODFCM0Y4RkFDMkIyNTk5QzlFM0VD RURGQTNGNEUxNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCLhHrate1sRbZR5p98UNZy4HkjPXmBe8sz kSfKaI8iMHRvdZivX3m29/0ca1oH2/lH1+o2hjvt49Sv5lv5/0zOTkClA4HKDH51 U0zDy9xJmQ5/jZVbEg/NOABu73fBHVR6/neco3v1mYHVJtu/avx8RHv92VtEyP3H 7mK7R1by8/FzZyI1jE3mBXmk4f2E0jw+CqoQdVuY8pNDi34xv8yyCGNOwsMws5Ma IKi4wODemNvPRk9albX0s9qdFmAru6ITNdtTl/6+Vo3IzBVLwacnj7fPXKf7/kXn 9oZDS3uSH9GWIwIw4lwnIIFRk9Z0pfZzWqGp3cW80kEaVH3f8mw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:17:26 2026 by rpki-client