$ rpki-client -vvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: hdte/mEiOaqVt1Ml6Bc952LqUHNwReWKp2s1uM/E9DQ= Subject key identifier: CD:83:EC:DC:E7:87:16:05:77:27:09:CD:64:3D:2A:2E:8B:53:10:2C Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 47641286F0B1C165366865BBBE6EC13CEA33C65E Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: 0F Signing time: Tue 12 May 2026 22:05:15 +0000 Manifest this update: Tue 12 May 2026 22:00:15 +0000 Manifest next update: Thu 14 May 2026 01:11:15 +0000 Files and hashes: 1: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: XPJY7tPDf5Hdtq5uCq7CcgaYqS+jflgs0+ztD6ZuI10=) 2: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 May 2026 01:11:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:64:12:86:f0:b1:c1:65:36:68:65:bb:be:6e:c1:3c:ea:33:c6:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: May 12 22:00:15 2026 GMT Not After : May 14 01:11:15 2026 GMT Subject: CN=CD83ECDCE7871605772709CD643D2A2E8B53102C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:12:9c:3a:dd:49:25:0a:ce:8f:21:19:28:f4: 76:a8:66:76:bf:08:a7:d6:37:60:39:e2:9b:11:ee: fb:56:2f:09:c0:48:cf:66:b6:de:f6:91:36:87:8b: 33:40:40:c8:47:b4:52:45:f6:30:57:15:a6:9b:74: db:1e:04:0a:00:f9:d6:ba:fa:1e:0c:8b:77:18:50: 0a:1d:39:e1:37:e9:2b:dd:19:4e:c5:12:61:77:21: da:e3:01:f8:62:5e:04:91:53:d9:83:88:cf:d2:f2: ba:2a:4f:83:c1:10:47:28:14:b3:fd:ea:62:d8:a3: fa:42:5f:af:b9:ff:65:b2:98:c0:e1:b7:14:f1:a0: de:f2:f4:3b:d7:cf:66:37:7d:1f:99:36:20:49:59: e5:2e:50:d8:a1:b1:2a:b1:c7:a5:b0:65:75:39:c4: e2:ed:58:3a:35:00:8c:df:4f:03:71:27:bf:3d:1d: 5f:3b:2f:56:f6:ca:f5:b4:a9:b7:b9:89:c4:da:bd: 0f:5f:4e:74:77:d8:a9:6b:ef:44:d7:c2:bb:05:b9: ab:26:45:47:8c:96:dd:8c:c3:d3:eb:41:bb:72:ea: df:c9:fe:5a:d6:82:ff:0d:77:48:36:e8:ba:75:1f: 4b:6f:75:c3:18:4a:dc:57:61:b5:c7:67:ae:ec:a9: 61:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:83:EC:DC:E7:87:16:05:77:27:09:CD:64:3D:2A:2E:8B:53:10:2C X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:83:8f:63:9d:db:8a:dc:ed:7d:41:0c:bf:f3:bd:0a:80:48: 08:fa:21:31:96:03:71:d2:24:54:c0:82:58:c6:15:fe:ee:e4: 99:fe:aa:f5:3f:60:ae:3f:2a:63:93:1a:0f:c2:eb:37:99:15: de:d5:06:9a:95:ab:e8:ac:f2:46:93:75:5d:84:58:7e:e4:38: 50:9a:f0:08:58:6a:2c:50:c2:3a:78:6d:09:84:fb:85:64:32: e3:02:71:99:53:04:ba:c1:d3:29:a9:6d:8c:5e:52:87:b0:18: ac:94:93:22:cc:1c:e0:39:ea:37:e7:ce:1a:21:9e:9a:19:0c: c8:77:7f:1c:84:76:4a:0d:5b:3a:45:97:a8:49:75:97:e4:5c: bf:e4:be:0e:bf:0e:89:d9:19:70:fb:c3:67:7e:c2:7e:8c:55: b6:69:f6:ea:ea:b7:a0:a3:ed:79:fe:5d:34:ad:9a:20:64:f9: bd:84:58:9a:bb:f3:59:b5:e3:54:32:7d:40:ae:bb:38:58:ef: 43:a0:46:6e:99:30:0e:e5:48:bb:9c:7b:c0:47:2d:b2:a6:85: b1:28:6d:04:6e:ea:6f:6a:ea:80:1e:d4:2f:13:9f:f0:b2:c8: 0b:55:80:6f:de:6f:55:c0:69:d0:e3:cf:81:ad:56:75:5f:54: 05:37:29:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR2QShvCxwWU2aGW7vm7BPOozxl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA1MTIyMjAwMTVaFw0yNjA1MTQwMTExMTVaMDMxMTAvBgNV BAMTKENEODNFQ0RDRTc4NzE2MDU3NzI3MDlDRDY0M0QyQTJFOEI1MzEwMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXEpw63UklCs6PIRko9HaoZna/ CKfWN2A54psR7vtWLwnASM9mtt72kTaHizNAQMhHtFJF9jBXFaabdNseBAoA+da6 +h4Mi3cYUAodOeE36SvdGU7FEmF3IdrjAfhiXgSRU9mDiM/S8roqT4PBEEcoFLP9 6mLYo/pCX6+5/2WymMDhtxTxoN7y9DvXz2Y3fR+ZNiBJWeUuUNihsSqxx6WwZXU5 xOLtWDo1AIzfTwNxJ789HV87L1b2yvW0qbe5icTavQ9fTnR32Klr70TXwrsFuasm RUeMlt2Mw9PrQbty6t/J/lrWgv8Nd0g26Lp1H0tvdcMYStxXYbXHZ67sqWGVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzYPs3OeHFgV3JwnNZD0qLotTECwwHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAImDj2Od24rc7X1BDL/zvQqASAj6ITGWA3HS JFTAgljGFf7u5Jn+qvU/YK4/KmOTGg/C6zeZFd7VBpqVq+is8kaTdV2EWH7kOFCa 8AhYaixQwjp4bQmE+4VkMuMCcZlTBLrB0ympbYxeUoewGKyUkyLMHOA56jfnzhoh npoZDMh3fxyEdkoNWzpFl6hJdZfkXL/kvg6/DonZGXD7w2d+wn6MVbZp9urqt6Cj 7Xn+XTStmiBk+b2EWJq781m141QyfUCuuzhY70OgRm6ZMA7lSLuce8BHLbKmhbEo bQRu6m9q6oAe1C8Tn/CyyAtVgG/eb1XAadDjz4GtVnVfVAU3KWQ= -----END CERTIFICATE-----Generated at Wed May 13 07:56:36 2026 by rpki-client