$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: vVpI/dxYiB1/siUcuOQDUc2477nIO+ZtBsKcFz0yK0I= Subject key identifier: 3D:49:32:25:8B:55:75:66:0E:CB:F0:8B:DE:C8:2C:A7:6A:E6:17:8A Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 6D8D02ABBA10292506191C97AA0DD125A62E2469 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 70 Signing time: Fri 24 Jul 2026 01:41:16 +0000 Manifest this update: Fri 24 Jul 2026 01:36:16 +0000 Manifest next update: Sat 25 Jul 2026 02:10:16 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 3: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: 4B5l4qC9ZEgPiX+VcCKp8/IKiDVeYcb4T7dPgecxCLc=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Jul 2026 02:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:8d:02:ab:ba:10:29:25:06:19:1c:97:aa:0d:d1:25:a6:2e:24:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Jul 24 01:36:16 2026 GMT Not After : Jul 25 02:10:16 2026 GMT Subject: CN=3D4932258B5575660ECBF08BDEC82CA76AE6178A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:fe:18:5b:72:33:c0:29:8c:03:aa:17:86:8d: 95:18:5b:31:58:d1:59:4d:4a:64:13:46:0a:21:63: 1c:19:5b:76:9a:be:5d:94:20:db:aa:a1:d3:c7:7e: 2c:0f:cd:a7:d9:dc:67:e8:34:8d:09:02:7f:ec:7c: 43:c3:28:34:f5:4a:cc:29:1e:4a:25:cc:5c:02:fb: ff:37:d2:d8:f0:87:6c:6c:cf:47:7e:fd:d6:e7:da: 53:e0:f1:a0:9b:30:9d:bc:57:ad:6e:20:ab:26:fb: 15:83:79:6b:af:1a:92:84:fd:8a:17:94:45:4b:3c: 37:8c:d2:4b:1b:eb:55:89:42:50:bf:d4:f3:11:4c: 58:74:9a:02:be:ea:be:91:36:86:ef:4f:1c:27:c1: f7:2e:52:86:7f:18:83:f7:6c:6a:36:ae:e9:8d:5c: 00:67:a9:77:5e:6d:32:36:a8:e5:7f:35:00:ae:e8: 5d:1c:96:a1:ab:3f:d6:c9:e6:67:7f:ca:8e:c1:4a: b9:8e:d9:22:45:2d:6a:9f:3d:eb:f4:4a:f4:f1:16: 62:06:75:0d:a9:e5:02:ac:04:9f:10:f5:79:0e:01: 28:2d:f4:e7:ac:69:96:cc:e9:cc:1a:e9:f0:e2:d7: 6d:93:aa:0c:6c:4c:57:4c:fa:6c:20:85:07:b9:d2: 4b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:49:32:25:8B:55:75:66:0E:CB:F0:8B:DE:C8:2C:A7:6A:E6:17:8A X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:fc:78:03:9c:5e:2a:1b:31:d2:31:61:28:ec:a7:91:f8:1c: 0d:c4:18:00:4b:45:11:87:f0:53:60:89:0d:cf:63:a7:2e:6d: 17:3d:0a:9f:e8:f8:a3:a9:39:7e:87:c1:68:cc:25:fc:a3:0a: 77:26:ee:b3:7c:1b:9c:ee:94:59:57:85:96:da:4a:36:be:93: 5a:ff:7a:4c:b6:6e:57:d8:a3:0a:f3:b1:b2:e7:7c:c7:cf:6c: 96:24:1d:a5:0e:49:8a:14:11:99:08:bb:32:0e:c0:8c:4e:5f: 9c:7a:19:3c:e8:cc:1d:42:7a:ff:f8:9e:0c:6b:be:83:53:7e: 6f:90:cf:bd:5a:ae:d2:50:10:e6:b3:85:af:17:d1:04:e1:29: 98:34:b3:ba:32:d7:29:e9:35:ec:3a:a0:b0:2a:6f:e3:ae:2a: 97:84:16:6f:18:fb:c5:4c:0f:e6:5a:c7:bb:64:63:22:c3:fc: 4a:f8:09:cf:a2:1a:71:3c:d8:13:b7:ca:05:45:80:06:48:c4: c0:37:33:f0:c3:cd:e7:94:ee:ea:64:51:fc:49:31:83:26:c0: 87:c6:6f:05:2e:01:35:ab:d3:a8:87:b2:59:3a:0b:ea:c4:ab: 49:4f:bf:0e:13:52:cc:86:12:1f:1c:67:a3:46:11:01:1f:79: 7a:d7:9e:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbY0Cq7oQKSUGGRyXqg3RJaYuJGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA3MjQwMTM2MTZaFw0yNjA3MjUwMjEwMTZaMDMxMTAvBgNV BAMTKDNENDkzMjI1OEI1NTc1NjYwRUNCRjA4QkRFQzgyQ0E3NkFFNjE3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDm/hhbcjPAKYwDqheGjZUYWzFY 0VlNSmQTRgohYxwZW3aavl2UINuqodPHfiwPzafZ3GfoNI0JAn/sfEPDKDT1Sswp HkolzFwC+/830tjwh2xsz0d+/dbn2lPg8aCbMJ28V61uIKsm+xWDeWuvGpKE/YoX lEVLPDeM0ksb61WJQlC/1PMRTFh0mgK+6r6RNobvTxwnwfcuUoZ/GIP3bGo2rumN XABnqXdebTI2qOV/NQCu6F0clqGrP9bJ5md/yo7BSrmO2SJFLWqfPev0SvTxFmIG dQ2p5QKsBJ8Q9XkOASgt9OesaZbM6cwa6fDi122TqgxsTFdM+mwghQe50ksBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPUkyJYtVdWYOy/CL3sgsp2rmF4owHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHP8eAOcXiobMdIxYSjsp5H4HA3EGABLRRGH 8FNgiQ3PY6cubRc9Cp/o+KOpOX6HwWjMJfyjCncm7rN8G5zulFlXhZbaSja+k1r/ eky2blfYowrzsbLnfMfPbJYkHaUOSYoUEZkIuzIOwIxOX5x6GTzozB1Cev/4ngxr voNTfm+Qz71artJQEOazha8X0QThKZg0s7oy1ynpNew6oLAqb+OuKpeEFm8Y+8VM D+Zax7tkYyLD/Er4Cc+iGnE82BO3ygVFgAZIxMA3M/DDzeeU7upkUfxJMYMmwIfG bwUuATWr06iHslk6C+rEq0lPvw4TUsyGEh8cZ6NGEQEfeXrXnm8= -----END CERTIFICATE-----Generated at Fri Jul 24 16:19:43 2026 by rpki-client