$ rpki-client -vvvf rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft File: 721B7A4BF48265E289B51932234579B2D9D38CF7.mft (raw, json) Hash identifier: 4NKgv0Ptfc8MxwIqcZA9Z+8sVFsYjQDCF7tHMlTz0lM= Subject key identifier: DF:22:D2:D3:5F:23:54:95:DE:FA:41:8C:A4:32:E2:49:C1:95:E4:70 Authority key identifier: 72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7 Certificate issuer: /CN=721B7A4BF48265E289B51932234579B2D9D38CF7 Certificate serial: 1C6DF63B93FB5820EB2632E857E2CBA595B557F6 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft Manifest number: D5 Signing time: Thu 08 Oct 2026 22:30:33 +0000 Manifest this update: Thu 08 Oct 2026 22:25:33 +0000 Manifest next update: Fri 09 Oct 2026 23:46:33 +0000 Files and hashes: 1: 721B7A4BF48265E289B51932234579B2D9D38CF7.crl (hash: cYU6fPsOTPCxUhT+JYi0DbcJ4KUR8jn8eGehUr5TQs0=) 2: 3130332e35362e37302e302f32342d3234203d3e20313333383235.roa (hash: JLbpK2d50OThZ/uHUQbD7meiPhgU3JckSJnTiY2q/0s=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 Oct 2026 23:46:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:6d:f6:3b:93:fb:58:20:eb:26:32:e8:57:e2:cb:a5:95:b5:57:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=721B7A4BF48265E289B51932234579B2D9D38CF7 Validity Not Before: Oct 8 22:25:33 2026 GMT Not After : Oct 9 23:46:33 2026 GMT Subject: CN=DF22D2D35F235495DEFA418CA432E249C195E470 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:73:ff:ed:f9:d5:44:e5:3b:1a:e6:7d:39: 94:cd:bd:49:e7:9b:14:6c:3f:51:f6:19:ef:03:02: 80:b2:3c:b4:ca:f1:33:24:b5:48:0e:12:dd:7a:66: bd:b2:26:98:b4:38:cb:6c:4e:49:8a:d8:30:bd:2a: fd:f8:c1:02:a4:77:7a:6b:d3:44:66:e8:d8:1d:0d: f7:5f:35:f3:e0:70:93:66:22:f0:9b:8a:2a:2a:0f: 0e:d6:f5:35:f8:92:b1:b2:79:65:04:49:c1:86:b0: 3c:0c:16:a0:c6:e2:ce:7b:c8:88:9d:a1:b7:ac:ba: c9:86:1c:de:7b:25:85:25:ca:0a:cc:de:d4:8e:f0: 67:9c:ba:9a:d3:67:25:98:b7:bc:43:7e:02:af:e9: 67:2e:cb:1c:96:3d:97:f1:da:15:34:fa:d0:40:4c: ef:cd:5b:b3:0b:f7:29:8f:15:91:b0:20:65:90:14: 4c:57:6f:e6:fd:73:03:91:97:79:93:c7:40:f5:b5: 81:f0:78:ab:d1:99:90:36:a9:fb:1d:57:a0:6a:92: 64:8c:9c:82:27:23:a3:68:c3:a5:d8:58:4b:ef:42: 64:5d:42:de:3a:c3:aa:8e:96:d7:06:e9:10:65:ee: 57:5d:a2:bc:a4:25:99:49:4f:f8:18:32:8b:f2:36: d1:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:22:D2:D3:5F:23:54:95:DE:FA:41:8C:A4:32:E2:49:C1:95:E4:70 X509v3 Authority Key Identifier: keyid:72:1B:7A:4B:F4:82:65:E2:89:B5:19:32:23:45:79:B2:D9:D3:8C:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/721B7A4BF48265E289B51932234579B2D9D38CF7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/6187d84e-f1b9-4a13-b773-891914b6b4a4/0/721B7A4BF48265E289B51932234579B2D9D38CF7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:b7:6b:0a:bf:6b:0b:dc:0e:e9:18:d9:2a:a5:09:99:0e:20: e9:64:66:c8:99:25:cc:05:8d:17:27:7b:3b:4b:f2:84:28:2c: 36:36:85:d0:53:3c:45:80:40:85:62:42:a0:53:af:ac:f9:c5: 39:ae:03:48:86:6f:05:e3:c6:03:11:f9:cd:a1:aa:40:6c:64: 63:c3:b6:08:82:b5:35:55:38:88:3c:86:04:fb:36:46:a5:84: 93:58:04:b7:47:17:51:6b:e7:bf:ec:6b:ef:1e:82:d0:5e:40: 02:a1:3a:aa:84:c0:64:42:b1:6d:c0:c8:4f:51:df:27:bd:e7: 0d:99:0d:7d:98:f9:71:04:22:d6:65:14:9d:d4:61:bf:78:39: ed:ca:74:2c:76:b5:96:e4:89:6a:34:d5:d1:bc:48:16:23:df: b9:e8:f4:ea:c5:ec:3b:bc:06:61:33:39:68:c1:8d:ea:ca:6b: 3c:3a:26:69:2e:05:b0:cc:ce:3c:54:d5:2b:0d:3a:60:2a:fe: e3:bb:5b:2a:cd:05:0a:5d:ca:d7:c7:09:8e:29:a0:12:3d:00: fd:8b:f0:90:64:98:4b:0a:c6:0b:12:42:b2:14:f4:0f:c6:e0: 0c:66:4c:82:f7:70:50:22:4a:b1:07:2b:53:cd:81:b7:0a:eb: ec:e7:7d:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHG32O5P7WCDrJjLoV+LLpZW1V/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIxQjdBNEJGNDgyNjVFMjg5QjUxOTMyMjM0NTc5QjJE OUQzOENGNzAeFw0yNjEwMDgyMjI1MzNaFw0yNjEwMDkyMzQ2MzNaMDMxMTAvBgNV BAMTKERGMjJEMkQzNUYyMzU0OTVERUZBNDE4Q0E0MzJFMjQ5QzE5NUU0NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlXP/7fnVROU7GuZ9OZTNvUnn mxRsP1H2Ge8DAoCyPLTK8TMktUgOEt16Zr2yJpi0OMtsTkmK2DC9Kv34wQKkd3pr 00Rm6NgdDfdfNfPgcJNmIvCbiioqDw7W9TX4krGyeWUEScGGsDwMFqDG4s57yIid obesusmGHN57JYUlygrM3tSO8GecuprTZyWYt7xDfgKv6WcuyxyWPZfx2hU0+tBA TO/NW7ML9ymPFZGwIGWQFExXb+b9cwORl3mTx0D1tYHweKvRmZA2qfsdV6BqkmSM nIInI6Now6XYWEvvQmRdQt46w6qOltcG6RBl7lddorykJZlJT/gYMovyNtHbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3yLS018jVJXe+kGMpDLiScGV5HAwHwYDVR0j BBgwFoAUcht6S/SCZeKJtRkyI0V5stnTjPcwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v NjE4N2Q4NGUtZjFiOS00YTEzLWI3NzMtODkxOTE0YjZiNGE0LzAvNzIxQjdBNEJG NDgyNjVFMjg5QjUxOTMyMjM0NTc5QjJEOUQzOENGNy5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MjFCN0E0QkY0ODI2NUUyODlCNTE5MzIyMzQ1NzlCMkQ5RDM4 Q0Y3LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vNjE4N2Q4NGUtZjFiOS00YTEzLWI3 NzMtODkxOTE0YjZiNGE0LzAvNzIxQjdBNEJGNDgyNjVFMjg5QjUxOTMyMjM0NTc5 QjJEOUQzOENGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGu3awq/awvcDukY2SqlCZkOIOlkZsiZJcwF jRcneztL8oQoLDY2hdBTPEWAQIViQqBTr6z5xTmuA0iGbwXjxgMR+c2hqkBsZGPD tgiCtTVVOIg8hgT7NkalhJNYBLdHF1Fr57/sa+8egtBeQAKhOqqEwGRCsW3AyE9R 3ye95w2ZDX2Y+XEEItZlFJ3UYb94Oe3KdCx2tZbkiWo01dG8SBYj37no9OrF7Du8 BmEzOWjBjerKazw6JmkuBbDMzjxU1SsNOmAq/uO7WyrNBQpdytfHCY4poBI9AP2L 8JBkmEsKxgsSQrIU9A/G4AxmTIL3cFAiSrEHK1PNgbcK6+znfYU= -----END CERTIFICATE-----Generated at Fri Oct 9 04:42:31 2026 by rpki-client