$ rpki-client -vvvf rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft File: 72B5B7AD5B62DED550889B15909739A2F336730F.mft (raw, json) Hash identifier: SAvco3LpS5QLpS0grBPV+3PXdSwUaLzLhoaOeCuML5Q= Subject key identifier: 43:B4:D0:99:73:50:CB:B1:65:3F:CE:50:8D:41:EE:C3:14:42:05:62 Authority key identifier: 72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F Certificate issuer: /CN=72B5B7AD5B62DED550889B15909739A2F336730F Certificate serial: 07357F1BD41054259C4F014B66378B389939F96C Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft Manifest number: C3 Signing time: Thu 24 Sep 2026 11:14:31 +0000 Manifest this update: Thu 24 Sep 2026 11:09:31 +0000 Manifest next update: Fri 25 Sep 2026 13:17:31 +0000 Files and hashes: 1: 72B5B7AD5B62DED550889B15909739A2F336730F.crl (hash: wEp6CTPnzYLhpQCO2B78juB8Fe2B5PuIRhW5/s6Ta7s=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: MoFbGw9hVRSVf3DPc/KG0BTNUX5J8EnngaE3zfGzXJk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 10:59:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:35:7f:1b:d4:10:54:25:9c:4f:01:4b:66:37:8b:38:99:39:f9:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72B5B7AD5B62DED550889B15909739A2F336730F Validity Not Before: Sep 24 11:09:31 2026 GMT Not After : Sep 25 13:17:31 2026 GMT Subject: CN=43B4D0997350CBB1653FCE508D41EEC314420562 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b2:5d:15:ad:b6:39:9c:7b:3e:99:ee:b7:2f: a3:33:bc:2a:a1:03:df:cb:08:29:56:e5:54:dd:75: c8:e2:32:e3:fa:0d:62:e2:13:2e:47:62:69:32:d5: 1a:33:c3:a1:f4:ea:0d:14:fd:28:07:32:c7:46:b3: 75:eb:b3:26:7b:63:84:8c:03:db:81:4e:02:ef:f4: 90:da:65:38:59:d7:ea:ef:d4:60:29:b9:43:71:99: d7:99:b9:76:9a:a6:54:ca:80:08:3a:2a:26:d4:60: 37:0e:80:e0:77:08:5a:71:83:05:23:c1:2c:ed:66: d2:2e:1f:9f:bb:1d:fb:b6:b1:13:f8:65:f4:ad:bb: 21:46:16:e2:90:3c:11:7f:fe:c4:2b:1f:b4:db:33: f4:b2:3d:b7:78:8f:60:6f:50:af:ff:b6:a6:b6:f8: ab:75:96:6a:52:37:03:68:a1:6f:6c:7f:48:5f:c4: b1:25:7e:7a:ba:e0:4c:5b:d4:ac:46:97:b2:9c:fa: b9:d3:7c:77:8e:fa:ff:a0:39:76:86:8a:88:ee:04: 72:03:92:6c:46:1d:5f:a3:c5:01:e4:f5:c4:d8:14: 8e:29:4e:68:56:6f:2c:73:9a:04:9e:cd:fd:46:f9: 80:20:08:bb:8c:b1:88:22:08:e4:38:16:d2:c2:42: a6:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B4:D0:99:73:50:CB:B1:65:3F:CE:50:8D:41:EE:C3:14:42:05:62 X509v3 Authority Key Identifier: keyid:72:B5:B7:AD:5B:62:DE:D5:50:88:9B:15:90:97:39:A2:F3:36:73:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72B5B7AD5B62DED550889B15909739A2F336730F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/72B5B7AD5B62DED550889B15909739A2F336730F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:dc:9c:c3:be:e5:96:94:35:60:cf:75:c1:24:4d:eb:ac:93: 03:6c:72:f4:48:b8:c4:ad:42:ab:1c:3b:2f:c5:fe:c7:21:91: 4d:81:c2:0f:55:4f:bf:d8:47:7b:bf:0e:34:99:40:c0:af:3b: aa:ee:3a:94:ef:ad:9e:cb:da:02:c0:87:f3:4d:67:b9:33:94: 34:0e:55:64:d9:71:9b:a9:9d:a4:80:e7:63:76:a4:31:87:89: 58:2f:6a:0b:78:e1:56:e2:f3:23:ef:29:63:e4:2e:20:43:ac: f6:db:c6:c3:eb:38:d2:bb:7a:a0:ed:71:8d:33:b6:f5:14:82: f7:3e:d3:3e:07:23:d5:95:fb:d8:49:dc:8c:1e:69:e2:e9:21: 32:5b:28:da:fb:56:ad:b1:92:f7:db:e7:97:d2:a5:d1:33:31: 4b:40:a1:ad:46:f4:73:7f:83:ef:61:55:d5:07:73:87:ad:6b: 74:45:66:6f:e6:da:f7:33:19:50:ae:90:d5:4a:fc:17:9a:2f: 94:b0:42:73:17:4c:47:25:d3:47:0e:9b:9f:1c:1c:ba:8b:61: 06:c8:f0:77:d7:de:22:92:c4:4d:63:97:a5:cd:56:21:9b:a6: a5:13:0f:0f:15:9b:46:68:c6:0a:d3:7f:b2:b2:32:6d:b3:a0: 98:d4:02:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBzV/G9QQVCWcTwFLZjeLOJk5+WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5QTJG MzM2NzMwRjAeFw0yNjA5MjQxMTA5MzFaFw0yNjA5MjUxMzE3MzFaMDMxMTAvBgNV BAMTKDQzQjREMDk5NzM1MENCQjE2NTNGQ0U1MDhENDFFRUMzMTQ0MjA1NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwsl0VrbY5nHs+me63L6MzvCqh A9/LCClW5VTddcjiMuP6DWLiEy5HYmky1Rozw6H06g0U/SgHMsdGs3XrsyZ7Y4SM A9uBTgLv9JDaZThZ1+rv1GApuUNxmdeZuXaaplTKgAg6KibUYDcOgOB3CFpxgwUj wSztZtIuH5+7Hfu2sRP4ZfStuyFGFuKQPBF//sQrH7TbM/SyPbd4j2BvUK//tqa2 +Kt1lmpSNwNooW9sf0hfxLElfnq64Exb1KxGl7Kc+rnTfHeO+v+gOXaGiojuBHID kmxGHV+jxQHk9cTYFI4pTmhWbyxzmgSezf1G+YAgCLuMsYgiCOQ4FtLCQqZLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQ7TQmXNQy7FlP85QjUHuwxRCBWIwHwYDVR0j BBgwFoAUcrW3rVti3tVQiJsVkJc5ovM2cw8wDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v OWEwMTI5YTgtMjdlOC00MDQ2LTg5ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1 QjYyREVENTUwODg5QjE1OTA5NzM5QTJGMzM2NzMwRi5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkI1QjdBRDVCNjJERUQ1NTA4ODlCMTU5MDk3MzlBMkYzMzY3 MzBGLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvNzJCNUI3QUQ1QjYyREVENTUwODg5QjE1OTA5NzM5 QTJGMzM2NzMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7cnMO+5ZaUNWDPdcEkTeuskwNscvRIuMSt QqscOy/F/schkU2Bwg9VT7/YR3u/DjSZQMCvO6ruOpTvrZ7L2gLAh/NNZ7kzlDQO VWTZcZupnaSA52N2pDGHiVgvagt44Vbi8yPvKWPkLiBDrPbbxsPrONK7eqDtcY0z tvUUgvc+0z4HI9WV+9hJ3IweaeLpITJbKNr7Vq2xkvfb55fSpdEzMUtAoa1G9HN/ g+9hVdUHc4eta3RFZm/m2vczGVCukNVK/BeaL5SwQnMXTEcl00cOm58cHLqLYQbI 8HfX3iKSxE1jl6XNViGbpqUTDw8Vm0ZoxgrTf7KyMm2zoJjUAkU= -----END CERTIFICATE-----Generated at Thu Sep 24 17:46:59 2026 by rpki-client