$ rpki-client -vvvf rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft File: 72B17A79879EF6757A1AF958307849AC03D91209.mft (raw, json) Hash identifier: YyhcOOTpXbIfVtjtmFDtOKsykmUbhmCsCmryr0InCm0= Subject key identifier: 80:3C:B2:E9:23:A8:4B:04:A1:89:06:68:56:8E:23:0C:40:1D:D8:5F Authority key identifier: 72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 Certificate issuer: /CN=72B17A79879EF6757A1AF958307849AC03D91209 Certificate serial: 54673B61DF33AD62095E9533263B6CD42D0F6C3F Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft Manifest number: C6 Signing time: Sat 26 Sep 2026 07:59:41 +0000 Manifest this update: Sat 26 Sep 2026 07:54:41 +0000 Manifest next update: Sun 27 Sep 2026 10:07:41 +0000 Files and hashes: 1: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 0ItKo7pfjpZI0s8bxO3lP1RQyHIW5V6nxU1oQqBDP+k=) 2: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: DV5xP9KKXw2JGIOZkVu4l07kGEcfMEeFUMZOJEEBLc0=) 3: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: BMGU1TeDy3t68eWZIXBo45El4fFtS3/+kJQ2U/OLtRg=) 4: 72B17A79879EF6757A1AF958307849AC03D91209.crl (hash: PNARTxuJ8f5P9rfhuVxqBiX2N3tw73gSbIUB2Ldnnqg=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/0/7DF4349534441AF11A65DDD3588F74DC59C2D362.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ffQ0lTREGvEaZd3TWI903FnC02I.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Sep 2026 10:03:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:67:3b:61:df:33:ad:62:09:5e:95:33:26:3b:6c:d4:2d:0f:6c:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B17A79879EF6757A1AF958307849AC03D91209 Validity Not Before: Sep 26 07:54:41 2026 GMT Not After : Sep 27 10:07:41 2026 GMT Subject: CN=803CB2E923A84B04A1890668568E230C401DD85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:13:c7:20:f3:c3:61:a8:96:f9:c9:54:a3:94: 26:93:9b:3f:a3:ec:30:1d:b9:a5:e2:37:b5:5b:34: d1:b9:c7:2f:02:b8:87:c1:a7:ef:dd:9e:f1:23:85: ff:39:d6:1b:fc:a9:82:e5:ab:e2:71:19:5a:f8:b4: 8e:e7:e0:c7:0a:61:31:3c:33:83:88:48:9d:bb:66: 26:67:e3:45:84:ca:72:08:65:67:37:60:d2:df:64: f1:1c:26:22:a8:fa:3a:50:59:c9:e8:a5:bd:a2:58: 28:c7:d9:94:37:24:ab:90:7c:bf:6f:ee:73:e1:f1: 83:35:f6:bd:73:60:1e:22:bc:16:a1:24:94:b5:5f: aa:d3:9c:fd:17:52:31:04:ae:62:ee:6a:57:70:89: 70:6b:4e:0a:35:49:4f:60:52:d8:e6:7d:ec:77:b5: 2f:6f:39:8e:13:d8:89:32:0c:a0:46:77:12:cd:e0: 2f:04:e1:5d:00:2b:b5:25:47:e9:75:65:64:fe:82: e6:ed:0a:99:a4:20:ba:8d:d3:15:4a:13:c5:21:63: 5c:bc:f4:c4:d3:15:02:0b:3a:7e:3f:49:87:99:ec: 7c:28:89:62:10:cc:39:6f:18:80:4d:58:62:dd:07: c9:7f:4f:4c:fb:ca:c5:34:1e:06:25:29:ea:49:1b: f0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:3C:B2:E9:23:A8:4B:04:A1:89:06:68:56:8E:23:0C:40:1D:D8:5F X509v3 Authority Key Identifier: keyid:72:B1:7A:79:87:9E:F6:75:7A:1A:F9:58:30:78:49:AC:03:D9:12:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/0/72B17A79879EF6757A1AF958307849AC03D91209.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/72B17A79879EF6757A1AF958307849AC03D91209.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:01:53:01:fa:fa:2a:ab:99:7c:46:59:c7:ec:ed:1d:f2:2c: 55:42:80:61:a9:b5:b1:d8:fe:76:37:ce:64:f9:da:88:04:72: 40:67:09:29:85:1c:a7:fa:a8:62:18:c8:aa:50:07:04:b0:ac: d5:20:71:cd:3e:11:2c:ce:25:b1:c9:bc:c2:d8:e9:f6:0c:1c: f4:e1:83:d6:e1:25:6b:99:5e:46:13:7b:ac:65:10:a4:21:3d: dc:7e:7b:8a:c2:7d:f6:0f:c9:cb:41:8c:57:7e:a7:c6:d3:42: a3:14:d7:af:9d:3f:34:81:a5:b9:93:21:82:81:bf:9f:fd:0a: ce:f5:ea:33:ea:c9:6d:2e:c0:3a:a7:6f:83:44:59:86:48:14: 5d:88:4f:89:9a:b6:74:b1:6b:b0:35:1e:c7:ae:ad:b2:fd:e1: d0:5a:ec:97:cc:b7:c8:aa:88:4b:dc:ff:cb:c6:af:5b:99:3f: 77:eb:d3:41:6e:6f:29:9a:db:19:c0:16:c2:b4:44:8e:9f:87: f1:3e:01:2a:c2:3b:6b:2d:d8:b0:65:47:44:66:18:29:42:88: 50:1c:f4:08:79:6c:90:9d:fc:66:16:11:b4:86:01:af:9b:99: a7:7a:95:f4:09:63:9a:37:1f:10:c6:de:00:ac:3e:de:cc:1b: 77:59:d7:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGc7Yd8zrWIJXpUzJjts1C0PbD8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMw M0Q5MTIwOTAeFw0yNjA5MjYwNzU0NDFaFw0yNjA5MjcxMDA3NDFaMDMxMTAvBgNV BAMTKDgwM0NCMkU5MjNBODRCMDRBMTg5MDY2ODU2OEUyMzBDNDAxREQ4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVE8cg88NhqJb5yVSjlCaTmz+j 7DAduaXiN7VbNNG5xy8CuIfBp+/dnvEjhf851hv8qYLlq+JxGVr4tI7n4McKYTE8 M4OISJ27ZiZn40WEynIIZWc3YNLfZPEcJiKo+jpQWcnopb2iWCjH2ZQ3JKuQfL9v 7nPh8YM19r1zYB4ivBahJJS1X6rTnP0XUjEErmLualdwiXBrTgo1SU9gUtjmfex3 tS9vOY4T2IkyDKBGdxLN4C8E4V0AK7UlR+l1ZWT+gubtCpmkILqN0xVKE8UhY1y8 9MTTFQILOn4/SYeZ7HwoiWIQzDlvGIBNWGLdB8l/T0z7ysU0HgYlKepJG/BNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDyy6SOoSwShiQZoVo4jDEAd2F8wHwYDVR0j BBgwFoAUcrF6eYee9nV6GvlYMHhJrAPZEgkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MmQ2YzliOGMtM2JlNy00YzAyLTk1NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4 NzlFRjY3NTdBMUFGOTU4MzA3ODQ5QUMwM0Q5MTIwOS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMC83MkIxN0E3OTg3OUVGNjc1N0ExQUY5NTgzMDc4NDlBQzAzRDkx MjA5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvNzJCMTdBNzk4NzlFRjY3NTdBMUFGOTU4MzA3ODQ5 QUMwM0Q5MTIwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACIBUwH6+iqrmXxGWcfs7R3yLFVCgGGptbHY /nY3zmT52ogEckBnCSmFHKf6qGIYyKpQBwSwrNUgcc0+ESzOJbHJvMLY6fYMHPTh g9bhJWuZXkYTe6xlEKQhPdx+e4rCffYPyctBjFd+p8bTQqMU16+dPzSBpbmTIYKB v5/9Cs716jPqyW0uwDqnb4NEWYZIFF2IT4matnSxa7A1HseurbL94dBa7JfMt8iq iEvc/8vGr1uZP3fr00Fubyma2xnAFsK0RI6fh/E+ASrCO2st2LBlR0RmGClCiFAc 9Ah5bJCd/GYWEbSGAa+bmad6lfQJY5o3HxDG3gCsPt7MG3dZ11w= -----END CERTIFICATE-----Generated at Sun Sep 27 02:59:10 2026 by rpki-client