$ rpki-client -vvvf rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft File: 72FDA859AF7750A564023AE4F6E8878FC184D64A.mft (raw, json) Hash identifier: +7Uz8Z7BIrZZl3e31y59LNEg5vk9/qvOy5TZteoPZ9U= Subject key identifier: 0B:E8:BB:D3:43:0D:FD:90:15:F5:92:A7:DB:A6:22:C3:23:06:80:C7 Authority key identifier: 72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A Certificate issuer: /CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Certificate serial: 5904048BCFB8076E5F1452BE5B4E1AD4BAF60F87 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft Manifest number: C2 Signing time: Thu 24 Sep 2026 01:47:58 +0000 Manifest this update: Thu 24 Sep 2026 01:42:58 +0000 Manifest next update: Fri 25 Sep 2026 03:06:58 +0000 Files and hashes: 1: 72FDA859AF7750A564023AE4F6E8878FC184D64A.crl (hash: qnt7bAN0bWlmgB+WFtv3EVmogHBitBoskDEe8vd3pN4=) 2: 3130332e3231372e3232342e302f32342d3234203d3e20313531303036.roa (hash: 89BQuo5qF9jY9pkwo8ogiyXzuxdhzpXGGix3yqTiFrw=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Sep 2026 03:06:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:04:04:8b:cf:b8:07:6e:5f:14:52:be:5b:4e:1a:d4:ba:f6:0f:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=72FDA859AF7750A564023AE4F6E8878FC184D64A Validity Not Before: Sep 24 01:42:58 2026 GMT Not After : Sep 25 03:06:58 2026 GMT Subject: CN=0BE8BBD3430DFD9015F592A7DBA622C3230680C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2b:08:2d:6c:19:1e:ed:7b:6c:e3:f8:37:ca: 61:be:88:a8:5f:1a:39:17:ee:85:d6:56:02:10:14: 10:ee:7f:ce:ec:54:a8:e7:4c:ce:49:5a:2a:56:c9: fc:f0:a8:c6:c3:c8:cf:42:7b:5a:8b:bd:81:a7:cf: 5d:3f:82:90:71:7b:9e:e4:4c:c6:15:0c:a8:53:e0: cc:eb:a4:0f:1a:49:03:c0:4c:48:7f:0f:b2:c1:7e: d1:97:65:89:f9:3a:37:cc:fd:59:39:01:3c:f6:25: b5:2b:40:2f:34:aa:6b:b9:c8:2e:8c:1d:32:39:b2: 9d:f2:69:7a:4a:7f:e2:1e:59:8f:3e:49:3e:0a:d1: 6a:0d:5e:f8:f7:7f:5b:cf:35:0f:e2:a3:7c:f9:8a: 3c:30:79:21:b5:fb:33:db:18:cc:59:d8:38:70:ee: e2:4b:08:f3:02:f2:37:91:e6:0d:d4:8f:6e:2a:f5: 71:92:08:ad:d9:cc:a1:50:c2:38:4e:f9:4a:a0:f6: 73:35:b8:a5:0c:c2:c6:fb:b0:0d:e4:b7:08:69:e3: c1:db:c2:46:5a:88:c8:e2:17:c6:10:f9:bb:44:97: 1b:23:eb:37:31:3a:0d:06:05:23:4c:2f:30:31:dd: 23:df:9e:51:47:a4:59:25:e5:08:38:f7:81:2f:61: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:E8:BB:D3:43:0D:FD:90:15:F5:92:A7:DB:A6:22:C3:23:06:80:C7 X509v3 Authority Key Identifier: keyid:72:FD:A8:59:AF:77:50:A5:64:02:3A:E4:F6:E8:87:8F:C1:84:D6:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/72FDA859AF7750A564023AE4F6E8878FC184D64A.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/bec553b6-9e57-40bd-8d96-a9fdadadd7be/0/72FDA859AF7750A564023AE4F6E8878FC184D64A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:1f:a3:45:de:61:aa:2d:c1:b3:ea:fd:0d:b6:f0:7e:e4:70: 48:df:30:e2:c1:dd:e4:81:62:19:15:80:4d:f2:bc:28:f9:4d: e1:16:37:8d:cf:5c:ce:0f:bd:b4:6c:47:15:e5:44:dc:c8:58: 9a:07:ae:69:15:da:7b:9e:25:11:4c:fd:60:3c:45:88:8f:d7: e9:68:eb:19:a4:2a:87:ec:df:93:7f:30:57:04:23:b4:a0:b1: 5b:21:21:17:ca:46:d0:f5:31:70:1e:b8:79:c4:4d:4a:f4:7c: ff:a4:65:11:b3:e1:69:1d:7a:4c:44:ab:e0:3c:ae:0f:13:c9: 9c:0d:7b:74:82:d0:d1:e2:97:d2:2f:f8:d3:e8:8f:72:3e:c7: 88:28:b9:f7:7a:62:b3:5e:14:10:35:e5:7f:0b:ab:f2:56:66: 2b:f1:42:43:19:c4:3a:fe:6f:de:91:4f:ec:f6:7b:ab:c4:66: d4:6b:5f:4f:af:07:86:31:1d:cd:c2:00:33:11:9a:b9:52:7f: 17:0b:be:af:0e:c8:f8:c3:7f:a3:f7:a6:58:ef:fb:97:d1:27: 70:64:62:dc:e9:04:b2:d6:e6:17:bc:39:16:6c:a7:fb:c6:49: 14:80:59:78:de:47:51:09:14:7b:94:76:df:37:66:34:35:9a: cd:45:a9:65 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWQQEi8+4B25fFFK+W04a1Lr2D4cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3OEZD MTg0RDY0QTAeFw0yNjA5MjQwMTQyNThaFw0yNjA5MjUwMzA2NThaMDMxMTAvBgNV BAMTKDBCRThCQkQzNDMwREZEOTAxNUY1OTJBN0RCQTYyMkMzMjMwNjgwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmKwgtbBke7Xts4/g3ymG+iKhf GjkX7oXWVgIQFBDuf87sVKjnTM5JWipWyfzwqMbDyM9Ce1qLvYGnz10/gpBxe57k TMYVDKhT4MzrpA8aSQPATEh/D7LBftGXZYn5OjfM/Vk5ATz2JbUrQC80qmu5yC6M HTI5sp3yaXpKf+IeWY8+ST4K0WoNXvj3f1vPNQ/io3z5ijwweSG1+zPbGMxZ2Dhw 7uJLCPMC8jeR5g3Uj24q9XGSCK3ZzKFQwjhO+Uqg9nM1uKUMwsb7sA3ktwhp48Hb wkZaiMjiF8YQ+btElxsj6zcxOg0GBSNMLzAx3SPfnlFHpFkl5Qg494EvYVv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC+i700MN/ZAV9ZKn26YiwyMGgMcwHwYDVR0j BBgwFoAUcv2oWa93UKVkAjrk9uiHj8GE1kowDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YmVjNTUzYjYtOWU1Ny00MGJkLThkOTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlB Rjc3NTBBNTY0MDIzQUU0RjZFODg3OEZDMTg0RDY0QS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS83MkZEQTg1OUFGNzc1MEE1NjQwMjNBRTRGNkU4ODc4RkMxODRE NjRBLmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYmVjNTUzYjYtOWU1Ny00MGJkLThk OTYtYTlmZGFkYWRkN2JlLzAvNzJGREE4NTlBRjc3NTBBNTY0MDIzQUU0RjZFODg3 OEZDMTg0RDY0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQfo0XeYaotwbPq/Q228H7kcEjfMOLB3eSB YhkVgE3yvCj5TeEWN43PXM4PvbRsRxXlRNzIWJoHrmkV2nueJRFM/WA8RYiP1+lo 6xmkKofs35N/MFcEI7SgsVshIRfKRtD1MXAeuHnETUr0fP+kZRGz4WkdekxEq+A8 rg8TyZwNe3SC0NHil9Iv+NPoj3I+x4goufd6YrNeFBA15X8Lq/JWZivxQkMZxDr+ b96RT+z2e6vEZtRrX0+vB4YxHc3CADMRmrlSfxcLvq8OyPjDf6P3pljv+5fRJ3Bk YtzpBLLW5he8ORZsp/vGSRSAWXjeR1EJFHuUdt83ZjQ1ms1FqWU= -----END CERTIFICATE-----Generated at Thu Sep 24 18:13:28 2026 by rpki-client