
$ rpki-client -vvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json)
Hash identifier: ZvJRs7D2OHnMBEUuQRT1+Wben4PYoFP0Erw7IA6GoBs=
Subject key identifier: B6:74:45:0A:2D:AE:38:B4:47:70:39:F0:4D:22:A4:34:93:9A:B4:24
Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F
Certificate serial: 28736DF14F246B7656190755BE30A3B96A98D2BB
Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
Manifest number: 0F
Signing time: Tue 12 May 2026 23:17:13 +0000
Manifest this update: Tue 12 May 2026 23:12:13 +0000
Manifest next update: Wed 13 May 2026 23:47:13 +0000
Files and hashes: 1: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=)
2: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: FJsy2pFkhJ6QcaZMEs4W2p+RiWeLnWD+3LJEJ1kSF+M=)
Validation: OK
Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl
rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 13 May 2026 23:47:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:73:6d:f1:4f:24:6b:76:56:19:07:55:be:30:a3:b9:6a:98:d2:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F
Validity
Not Before: May 12 23:12:13 2026 GMT
Not After : May 13 23:47:13 2026 GMT
Subject: CN=B674450A2DAE38B4477039F04D22A434939AB424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:7c:43:d7:f9:38:37:00:0e:07:97:6c:04:df:
92:5b:6d:75:a8:e5:3c:95:18:5c:58:1c:5f:f3:1b:
fb:01:83:13:b2:43:79:15:00:92:2a:77:cf:52:0c:
6a:9c:bc:70:e1:fd:a9:1e:2d:db:b0:c2:1f:f7:bf:
fa:37:25:e0:71:95:72:26:1a:3a:51:b9:ea:a2:99:
a7:4d:f2:8e:d8:36:1d:b4:2c:da:ab:dd:51:8c:78:
e1:a7:88:69:cf:0a:1a:7d:f4:b8:37:3c:71:29:e9:
e7:e7:b7:36:d3:18:a7:9f:76:e4:25:58:3d:aa:37:
02:6d:a2:b3:71:71:be:28:de:8a:d8:b0:fc:cb:bb:
b8:de:6e:83:4e:01:68:83:85:1c:3e:10:1e:07:6f:
5b:9d:2a:84:65:b4:79:14:fd:38:31:af:af:af:ea:
28:ba:a4:54:4c:27:83:b8:af:af:38:fe:c8:2b:80:
bd:89:d7:c0:6a:f9:ac:19:ee:58:e9:8f:36:25:2c:
ad:1e:e4:ad:b0:5c:20:be:bd:35:5c:65:31:57:11:
2d:1d:58:75:3a:b6:ab:4c:81:69:73:f6:7c:a4:57:
3c:62:ed:e9:82:8c:76:99:f2:5b:4a:d9:02:a1:8e:
c3:6b:42:19:94:2a:c9:b6:4b:5a:c7:ed:b2:c3:5b:
3c:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:74:45:0A:2D:AE:38:B4:47:70:39:F0:4D:22:A4:34:93:9A:B4:24
X509v3 Authority Key Identifier:
keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:17:d3:6d:61:c3:9e:5e:79:25:db:86:e3:a8:87:67:3b:fc:
cc:0b:c7:0c:55:b5:b0:3f:f0:63:3b:4c:23:1f:49:3b:e4:04:
70:54:d4:7b:76:6b:c0:a0:0f:62:5b:b9:27:bf:22:4b:91:37:
b3:fa:1a:c4:23:3b:a9:a5:0d:94:92:7c:65:29:d7:87:66:ff:
02:64:8b:75:a0:c7:6a:91:c9:51:df:25:74:2d:c9:2d:4c:b2:
42:fa:fe:9b:cb:f9:00:dc:f4:9c:1c:55:e1:8b:41:2a:5a:3c:
8d:26:a2:d7:1d:fc:71:51:a6:62:52:ce:c2:4b:34:a7:a4:5d:
36:a1:57:37:e3:2a:ca:d8:6c:28:88:f6:d8:24:ff:1c:8c:82:
23:d1:72:a3:ec:3e:38:51:22:b3:35:9c:6f:e4:28:72:16:25:
aa:69:ca:28:42:98:02:3c:51:c7:eb:9b:ac:a7:e5:fd:97:2f:
63:c5:76:8d:69:d2:6c:89:36:df:7e:58:d2:c2:7d:02:5c:b3:
eb:d7:de:bd:b4:eb:ee:eb:18:99:93:7b:cf:ec:2c:f2:ff:12:
3b:4e:38:7c:aa:83:ed:f6:bf:3a:a9:05:fb:4f:ee:7c:fb:7d:
cd:ef:7c:8a:b6:ab:11:b9:59:f5:28:00:10:1f:76:61:47:3c:
ae:c0:db:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:53:08 2026 by rpki-client